Privacy Policy

Announcement: August 23, 2024

Effective Date: August 30, 2024

1. Purpose of Personal Information Processing

• Comu (comu.gg, hereinafter "Comu") processes personal information for the following purposes only:
  • User identification, authentication, maintaining and managing customer qualifications related to service provision.
  • Contract fulfillment and billing settlement related to service provision, content delivery, purchase and payment processing, delivery of goods or billing addresses, identity verification for financial transactions, and financial services.
  • Provision of advertising information for new services and events, targeted service delivery and advertisements based on demographic characteristics, confirmation of service effectiveness, tracking access frequency, or statistics on members' service usage.

2. Processing and Retention Period of Personal Information

• Comu processes and retains personal information within the period consented to by the data subject at the time of collection or as specified by law (statutory retention periods prevail over internal policies).
  • Internal retention periods are as follows:
    • Preventing fraudulent transactions: 5 years
    • Marketing and advertising purposes: Until withdrawal
    • Member registration and management: 3 months after withdrawal
  • Specific reasons and retention periods for processing personal information:
    • Records of advertising: Act on Consumer Protection in Electronic Commerce, 6 months
    • Records of contracts or withdrawal of offers: Act on Consumer Protection in Electronic Commerce, 5 years
    • Records of payment and supply of goods/services: Act on Consumer Protection in Electronic Commerce, 5 years
    • Records of consumer complaints or dispute handling: Act on Consumer Protection in Electronic Commerce, 3 years
    • Records of electronic financial transactions: Electronic Financial Transactions Act, 5 years
    • Accounting books and supporting documents related to all transactions: Framework Act on National Taxes, 5 years
    • Login and location records: Protection of Communications Secrets Act, 3 months

3. Rights and Duties of Data Subjects and Legal Representatives, and Methods of Exercising Them

• Data subjects may exercise the following rights regarding personal information protection at any time:
  • Request to access personal information
  • Request correction in case of errors
  • Request deletion
  • Request suspension of processing

4. Items of Personal Information Processed

• Comu processes the following personal information items:
  • Information of service visitors and registrants:
    • Items: Access logs, cookies, IP addresses, name, email, password (encrypted), mobile phone number, and service usage history

5. Destruction of Personal Information

• Comu immediately destroys personal information when its processing purpose is achieved. The destruction procedure, period, and methods are as follows:
  • Destruction procedure:
    • Information entered by users is transferred to a separate database upon achieving its purpose, stored for a certain period based on internal policies and relevant laws, then destroyed. Information transferred to the database is not used for other purposes unless required by law.
  • Destruction period:
    • Personal information is destroyed within a specified period (see "Processing and Retention Period of Personal Information") when retention periods expire, purposes are achieved, services are discontinued, or businesses close.

6. Installation, Operation, and Rejection of Automatic Personal Information Collection Devices

• Comu uses "cookies" to store and retrieve user information for personalized service provision.
• Cookies are small data files sent by servers to users' web browsers and stored on users' hard drives.
  • Purpose of cookies: To analyze visit patterns and service usage to provide optimized information.
  • Installation, operation, and rejection of cookies: Users can refuse cookie storage through browser settings (Tools > Internet Options > Privacy).
  • Refusing cookie storage may hinder personalized service use.
• This service uses Google Analytics, a web analytics tool provided by Google, which utilizes non-identifiable information. Users can refuse Google Analytics through the Google Analytics Opt-out Browser Add-on or cookie settings.

7. Personal Information Protection Officer

• Comu designates a Personal Information Protection Officer responsible for overseeing personal information processing, handling complaints, and providing remedies for damages related to personal information processing:
  • Personal Information Protection Officer
    • Officer: Privacy Protection Manager
    • Contact: [email protected]
• Data subjects may inquire about all personal information protection matters, complaints, and remedies arising from service use. Comu will promptly respond to and handle these inquiries.

8. Changes to the Privacy Policy

• This Privacy Policy applies from the effective date. Any changes due to laws or policies will be notified through notices at least 7 days prior to implementation.

9. Measures for Ensuring the Security of Personal Information

• Comu implements the following technical, managerial, and physical measures to ensure security per Article 29 of the Personal Information Protection Act:

  1. Regular self-audits: Conducted quarterly to secure personal information handling.

  2. Encryption of personal information: Collected personal information is encrypted.

  3. Password encryption: Passwords are encrypted for secure storage and management, accessible only by the user, and changes or deletions are possible only by the individual.