Artsurn Co., Ltd. (hereinafter referred to as 'the Company') complies with all laws and regulations related to personal information protection, including the "Personal Information Protection Act" and the "Act on Promotion of Information and Communications Network Utilization and Information Protection."
The Company has established the following privacy policy to protect users' personal information and rights, and to handle users' grievances related to personal information smoothly.
If the privacy policy is revised, it will be announced through website notices (or individual notices).
Article 1. Purpose of Processing Personal Information
The Company processes personal information for the following purposes. Personal information being processed is not used for purposes other than those stated below, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
| Collection Items | Collection Basis | Purpose of Provision |
| Name, Contact Number, Email | Data Subject Consent | Inquiry Reception and Response |
Article 2. Items, Processing, and Retention Period of Personal Information
A. The Company processes the minimum necessary personal information as follows:
| Processing Items | Retention Period |
| Name, Contact Number, Email | 3 Months |
B. However, exceptions apply when it is necessary to preserve the relevant personal information in accordance with related laws as follows:
2) Records of website visits: 3 months (Retention of communication confirmation data under Article 41 of the Protection of Communications Secrets Act)
3) Other cases where individual customer consent has been obtained: Period for which consent was obtained
Notwithstanding the above retention period, if there is a need to continue retention, we will obtain customer consent.
Article 3. Provision of Personal Information to Third Parties
The Company provides personal information to third parties only in cases corresponding to Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the data subject or special provisions of law. When providing personal information to third parties, we will announce it through website notices.
Article 4. Procedures and Methods for Destroying Personal Information
A. The Company destroys relevant personal information without delay when it becomes unnecessary, such as when the retention period expires or the processing purpose is achieved.
B. If personal information must continue to be preserved in accordance with other laws despite the expiration of the retention period agreed upon by the data subject or achievement of the processing purpose, the relevant personal information (or personal information file) will be moved to a separate database (DB) or stored in a different location.
C. The procedures and methods for destroying personal information are as follows:
Article 5. Measures to Ensure Security of Personal Information
The Company takes the following measures to ensure security so that personal information is not lost, stolen, leaked, altered, or damaged when handling data subjects' personal information:
A. Administrative Measures: Establishment and implementation of internal management plans, regular employee training, etc.
B. Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs, etc.
C. Physical Measures: Access control to computer rooms, data storage rooms, etc.
Article 6. Installation and Operation of Automatic Personal Information Collection Devices and Refusal Thereof
(When Not Collecting Cookies)
The Company currently does not operate devices that collect personal information automatically generated when using services, such as cookies. However, if necessary for service provision in the future, automatic collection devices may be installed and operated, in which case data subjects may have the right to choose cookie installation or refuse the storage of all cookies.
(When Collecting Cookies)
The Company uses 'cookies' that store usage information and retrieve it from time to time in order to provide individual services and convenience to data subjects.
A. What are Cookies?
Cookies are very small text files sent to the data subject's browser by servers used to operate websites and are stored on the data subject's computer hard disk. Subsequently, when the data subject visits the website, the website server reads the contents of the cookies stored on the data subject's hard disk to maintain the data subject's environment settings and provide customized services. Cookies do not automatically/actively collect information that identifies individuals, and data subjects can refuse or delete the storage of such cookies at any time.
B. Installation, Operation, and Refusal of Cookies
Data subjects have the right to choose cookie installation and can set cookie permission, blocking, deletion, etc., through web browser option settings.
1. Chrome: Web browser settings > Privacy and security > Clear browsing data
2. Edge: Web browser settings > Cookies and site permissions > Manage and delete cookies and site data
1. Chrome: Mobile browser settings > Privacy and security > Clear browsing data
2. Safari: Mobile device settings > Safari > Advanced > Block all cookies
3. Samsung Internet: Mobile browser settings > Browsing data > Delete browsing data
Article 7. Personal Information Protection Officer
A. The Company designates personal information protection officers and personnel as follows to protect customers' personal information and handle complaints related to personal information.
| Category | Department | Name | Contact |
| Personal Information Protection Officer | Operations | CEO Artsurn |
Email: dioh@artsum.net Phone: +82-10-2313-1002 |
B. You may report all personal information protection-related complaints arising from using the Company's services to the Personal Information Protection Officer. The Company will provide sufficient and prompt responses to data subjects' reports.
Article 8. Request for Access to Personal Information
Data subjects may request access to personal information in accordance with Article 35 of the Personal Information Protection Act to the department below. The Company will work to ensure that data subjects' requests for access to personal information are processed promptly.
Department for Reception and Processing of Personal Information Access Requests
- Department: Operations
- Email: dioh@artsum.net
Article 9. Remedies for Infringement of Data Subject Rights
Data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency Personal Information Infringement Report Center, etc., to seek remedies for personal information infringement. For other reports and consultations regarding personal information infringement, please contact the following organizations.
- Personal Information Dispute Mediation Committee: 1833-6972 (without area code) (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (without area code) (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (without area code) (www.spo.go.kr)
- National Police Agency Cyber Investigation Bureau: 182 (without area code) (ecrm.cyber.go.kr)
Article 10. Changes to Privacy Policy
This policy will be effective from March 1, 2026.