<Grandera> Mushroom has established the following personal information processing policy in order to protect the personal information of information subjects in accordance with Article 30 of the Personal Information Protection Act and to promptly and smoothly handle complaints related thereto. Disclosed.
○ This personal information processing policy is effective from January 1, 2022.
Article 1 (Purpose of processing personal information)
<Grandera>Mushroom processes personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
1. Provision of goods or services
We process personal information for the purpose of providing content.
Article 2 (Processing and retention period of personal information)
① <Grandera> processes and retains personal information within the personal information retention and use period in accordance with the law or within the personal information retention and use period agreed upon when collecting personal information from the information subject.
② The processing and retention period for each personal information is as follows.
1.<Provision of goods or services>
Personal information related to <provision of goods or services> is retained and used for the above purposes from the date of consent to collection and use until <not retained>.
Basis for retention: Personal information is not separately collected.
Related laws: None
Reason for exception:
Article 3 (Items of personal information processed)
① <Grandera> processes the following personal information items.
1< Provision of goods or services >
Required items: None
Optional items: None
Article 4 (Procedures and methods of destruction of personal information)
① <Grandera> destroys the personal information without delay when the personal information becomes unnecessary, such as when the personal information retention period has passed or the purpose of processing has been achieved.
② In cases where personal information must continue to be preserved pursuant to other laws and regulations despite the expiration of the personal information retention period agreed upon by the information subject or the purpose of processing has been achieved, the personal information shall be transferred to a separate database (DB) or storage location changed. Save it differently.
1. Legal basis:
2. Personal information items to be preserved: account information, transaction date
③ The procedures and methods for destroying personal information are as follows.
1. Destruction procedure
<Grandera> selects the personal information for which a reason for destruction has occurred and destroys the personal information with the approval of the personal information protection manager of <Grandera>.
2. Method of destruction
Article 5 (Matters concerning the rights and obligations of information subjects and legal representatives and methods of exercising them)
① The information subject may exercise his/her rights, such as requesting viewing, correction, deletion, or suspension of processing of personal information, at any time to Grandera.
② The exercise of rights under Paragraph 1 may be made to Grandera in writing, e-mail, facsimile (FAX), etc. in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and Grandera shall not delay in this regard. We will take action without it.
③ The exercise of rights under Paragraph 1 may be done through an agent, such as the information subject's legal representative or a person authorized to do so. In this case, the “Notice on Personal Information Processing Methods (No. 2020-7)” attached form No. 11 You must submit a power of attorney according to the following.
④ Requests to view and suspend personal information processing may limit the information subject's rights pursuant to Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.
⑤ Requests for correction and deletion of personal information cannot be requested if the personal information is specified as a collection target in other laws and regulations.
⑥ Grandera confirms whether the person who made the request, such as a request for viewing, a request for correction or deletion, or a request for suspension of processing, is the person or a legitimate agent in accordance with the information subject's rights.
Article 6 (Matters regarding measures to ensure the safety of personal information)
<Grandera> is taking the following measures to ensure the safety of personal information.
1. Conduct regular self-audit
To ensure the stability of personal information handling, we conduct self-audits on a regular basis (quarterly).
Article 7 (Matters related to installation, operation and refusal of devices that automatically collect personal information)
Grandera does not use ‘cookies’ that store and frequently retrieve the information subject’s usage information.
Article 8 (Matters regarding personal information protection manager)
① Grandera is responsible for overall management of personal information processing, and has designated a personal information protection manager as follows to handle complaints and provide relief for damage from information subjects related to personal information processing.
▶ Personal information protection officer
Name: Go Tae-ho
Position:General Manager
Rank: Representative
Contact: 01033264034, godand11@naver.com,
※ You will be connected to the personal information protection department.
▶ Personal information protection department
Department Name: None
Contact person: Go Tae-ho
Contact: 01033264034, ,
② Information subjects may inquire about all personal information protection-related inquiries, complaint handling, damage relief, etc. that arise while using Grandera’s services (or business) to the personal information protection manager and responsible department. Grandera will respond and process inquiries from information subjects without delay.
Article 9 (Designation of domestic agent)
The information subject may contact the domestic agent of <Grandera> designated in accordance with Article 39-11 of the Personal Information Protection Act for tasks such as handling complaints related to personal information. <Grandera> will strive to promptly handle the work of the personal information protection manager, including handling complaints related to personal information of information subjects.
▶ <Grandera> has designated a domestic agent in accordance with Article 39-11 of the Personal Information Protection Act.
- Name of domestic agent: [Agent’s name_enter directly] (In the case of a corporation, the name of the corporation and the name of the representative)
- Address of domestic agent: [Agent address_enter directly] (In case of corporation, location of business office)
- Domestic agent's phone number: [Agent's phone number_enter directly]
- Domestic agent's e-mail address: [Agent's e-mail_enter directly]
Article 10 (Department that receives and processes requests to view personal information)
The information subject may request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the department below.
<Grandera> will endeavor to promptly process the information subject's request to view personal information.
▶ Personal information access request reception and processing department
Department Name: None
Person in charge: Go Tae-ho
Contact: 01033264034, ,
Article 11 (Methods of relief for infringement of rights and interests of information subjects)
In order to receive relief from personal information infringement, the information subject may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Reporting Center, etc. For other personal information infringement reports and consultations, please contact the organizations below.
1. Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Reporting Center: (without area code) 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)
4. National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)
The head of a public institution may respond to requests pursuant to the provisions of Article 35 (view of personal information), Article 36 (correction/deletion of personal information), and Article 37 (suspension of processing of personal information, etc.) of the Personal Information Protection Act. A person whose rights or interests have been infringed due to a disposition or omission may request an administrative trial in accordance with the provisions of the Administrative Appeals Act.
※ For more information about administrative trials, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).
Article 12 (Changes to personal information processing policy)
① This personal information processing policy is effective from October 18, 2023.