個人情報保護方針

① Purpose of using personal information

The Company collects and uses personal information for the following purposes. The collected personal information will not be used for any other purpose than specified, and if the purpose of collection is changed, members will be notified in advance and consent will be asked.

1. Member registration and management of Starnews service: Personal information for the purpose of identification and certification, membership maintenance and management, prevention of fraudulent use of service, notice and notification, claim handling, and record keeping for mediation.
2. Voting Service ProvisionPrivacy Policy

② Collection of personal information

The Company needs to collect the minimum amount of personal information needed to provide the Service. Through the Asia Artist Awards (https://www.asiaartistawards.com) and STARPOLL application, the minimum personal information for service provision is collected during membership registration or the service usage. The Service may obtain the following information to provide service.

1. Collected items: Required values-SNS ID, name, email / optional values-profile image, nickname (name)
2. Information automatically collected: service usage record, visit history, access IP information, access browser information, cookie information
3. Collection method: via registration of the Service

③ Use and Retention of the Personal Information

Retention Period

1. The personal information is retained only for the defined objectives for the certain period for the service use or dispute settlement. In case a member withdraws the membership or consent, his or her personal information will be destroyed without delay. However, certain information is retained in compliance with the relevant law for the period determined by the law.

   In accordance with the company's internal policy: preventing rejoining of delinquent users, preventing fraudulent use, and responding to other complaints

   Retention period: 6 months after withdrawal of membership (until resolution of complaint in case of responding to complaint)

   Retained information: SNS ID, name, email, membership

2. In accordance with the government law without the member's consent: Personal information related to the use of the service (login record)

   Basis for retention: Protection of Communications Secrets Act

   Retention period: 6 months

Compliance with the Personal Information Retention Period Guideline

1. The company's internal policy

   The Company follows the retention period guideline on personal information and takes necessary measures such as destruction to protect the personal information of members who have not used the information and communication service for the specified period of validity to prevent misuse and leakage of personal information.

   The Company shall notify that the member’s personal information will be destroyed 30 days in accordance with the Company’s internal security guideline before the expiration date designated at registration stage.

④ Destruction of the Personal Information

When the purpose of collecting and using personal information is achieved, the private information will be stored for a certain period of time and deleted or destroyed accordingly under the internal protection policy and other relevant laws and regulations (refer to usage and retention period).

However, the information subject to retention under the relevant laws will be destroyed after certain period determined by the law. At this time, personal information that is separately stored and managed will not be used for other purposes unless described by law.

When stored in an electronic file, personal information will be completely deleted using technical methods to prevent recovery and regeneration. When stored in other records, printed matters, and written documents, personal information will be crushed, incinerated and destroyed.

⑤ Providing the Personal Information to the Third Party

The Company only uses the personal information of members within the range as stated in the “Purpose of Use of Personal Information”, and will not use the personal information beyond the range nor disclose to the outside without the prior consent.

However, the following cases are exceptions.

1. Based on provisions of the law or when requested by the investigating agency in accordance with the procedures and methods prescribed by law for investigation purpose
2. When member consent is given in advance

⑥ Right and Duty of Member and How to exercise

As a subject of personal information, members can exercise the following rights

1. Request for correction and deletion of errors in personal information and request for suspension of processing
2. The exercise of rights under 7.1 can be done by the information provide directly by e-mail, etc. in accordance with Appendix 8 of the Enforcement Regulations of the Personal Information Protection Act.
3. If correction or deletion of member's personal information is requested, the personal information will not be used or provided until correction is completed. In case the Company uses or provide incorrect personal information, the Company will correct it without delay.
4. When disclosure or suspension of processing the personal information are requested, the rights of information provider can be limited under Clause 5 of Article 35 and Clause 2 of Article 37 of the Personal Information Protection Act.
5. If the personal information is specified in the law as a collectible item in regard to other Act, it cannot be requested for correction or deletion.
6. when a member requests correction, deletion or suspension of processing process under information subject's rights, the company shall confirm that the person making the request is the person himself or herself.

⑦ Linked website

The Service may provide members with links to other companies' website or sources. In this case, the Service does not have any control over the external website and materials, and therefore cannot be held responsible for or guarantee the usefulness of the services or materials provided therefrom. If a member moves to a page of another website through a link included in the service, the privacy policy of the website is not relevant to the Company, thus the member is advised to review the policy of the visited website.

⑧ Details of the installment, operation, and refusal of automatic collection tools of the personal information

(such as a cookie)

1. The Service uses 'cookies' to save and retrieve the member's information from time to time in order to provide more appropriate and useful services to the member. Cookies are tiny text files that are sent to use’s computer by the server used to operate the website and are stored on hard disk of the member’s computer. Member can choose whether or not to use cookies. However, the company is not responsible for any problems or limitations in the use of the service caused by not using cookies.
2. Setting to reject cookie: Member can choose whether or not to install cookies. Therefore, member can choose to set options in web browser to allow all cookies, or check each time a cookie is saved, or refuse to save all. However, when member choose not to install cookies, using the website may cause inconvenience and result difficulty using some services that require login.
3. How to Setup

   Internet Explorer : Tools menu of the upper part of the web browser > Internet option > privacy > setting

   Google Chrome : Tools menu of the right of the web browser > advanced settings option at the bottom > privacy content settings button > cookie

⑨ Technical / Administrative Protection Measures of Personal Information

The Service takes the following technical and managerial measures to ensure safety so that personal information is not lost, stolen, leaked, tampered with or damaged.

1. Countermeasures against Hacking

   The Service is doing its best to prevent member's personal information from being leaked or damaged by hacking or computer virus. In order to prevent the loss of personal information, the Company backs up the data from time to time, prevents the leakage or damage of members' personal information or data using the latest vaccine program, and securely transmits personal information on the network through encrypted communication. In addition, the Company use intrusion prevention systems to control unauthorized access from the outside and strive to equip all possible technical devices to secure security systematically.

The Service takes the following technical and managerial measures to ensure safety so that personal information is not lost, stolen, leaked, tampered with or damaged.

1. Administrative Measures
2. The Company restricts the access right on personal information to the minimum number of people, and they are:

   Those who perform marketing business directly with customers

   Those who perform personal information management task such as personal information manager and person in charge

   Those who are inevitably having to handle personal information in accordance with other business

⑩ Contact Details of the Person in Charge of Personal Information Protection

The Service is responsible for the handling of personal information and appoints the person in charge of personal information protection as follows to deal with complaints and damages of information subjects related to personal information processing.

1. Chief Privacy Officer

   Name : Taekgyun Shin

   Affiliation and Position : Creative Media Unit / General Manager

   e-mail : privacy@mt.co.kr

2. Personal Information Manager

   Name : Dongmin Baek

   Affiliation and Position : Creative Media Unit / Deputy General Manager

   e-mail : privacy@mt.co.kr

3. When a member reports or consults other personal information infringement, please contact the following organizations.

   Personal Information Infringement Report Center (KISA) (privacy.kisa.or.kr / 118)

   Personal Information Dispute Mediation Committee (KISA) (www.kipico.go.kr / 1833-6972)

   Supreme Prosecutor’s Office Cyber Crimes Investigation Division (www.spo.go.kr / 1301)

   National Police Agency Cyber Crimes Investigation Division (ecm.cyber.go.kr / 182)

⑪ Duty to notify

In case of any additions, deletions, or modifications to the current privacy policy, the Company will notify its members through the "Notice" screen within the Service at least seven days prior to the effective date.