XTRION Privacy Policy
The XTRION Service´s (referred to as “Website,“ “App Service,“ or “Service“) privacy policy explains your available options for using your personal information and how to access and update this information. This policy does not apply to companies or individuals who we do not own or control.
This privacy policy provides information on the collection, processing, and use of personal data when using the XTRION Service. If you provide a third party´s personal data (e.g. family members, colleagues) to the XTRION Service, they must be aware of this privacy policy and you should only share their personal data if they have authorized you to do so.
Automatic Collection of Information
When using the XTRION Service, our servers automatically record information that your browser sends. This information may include your device´s IP address, browser type and version, operating system type and version, language preferences, web pages visited before accessing the XTRION website, information searched by you on the XTRION website´s pages, the date and time of access, and other statistical information.
Collection of Personal Information
You do not have to provide your identifiable personal information to use the XTRION Service. However, in order to use the features of the XTRION Service, you must provide certain personal information (e.g. name and email address).
We intentionally collect and store all information you provide to us when you create an account or fill out online forms to use the XTRION Service. Depending on the circumstances, your email address, name, phone number, address, or other personal information may be included.
You may choose not to provide your personal information to us, but if you do so, you will not be able to use some of the features of the XTRION Service. If you are unsure what information is required, please contact us.
The purpose of collecting personal information
The purpose of collecting personal information by XTRION is as follows. In addition to the common information collected to provide various specialized features in some services, XTRION may also obtain additional personal information with the user´s consent.
- Essential information: Minimum information required to perform the functions of the service
- Optional information: Information collected additionally to provide specialized services (However, even if the user does not agree, there is no restriction on the use of the service.)
| Category |
Collection and Use Purposes |
Mandatory
/Optional |
Collected and Used |
| Identity verification |
Identity verification |
Mandatory |
Name, Birthdate, Gender, Domestic and foreign individuals, Mobile service providers, Phone numbers, CI, DI |
| Verification of legal guardian |
Mandatory |
Name, Birthdate, Gender, Domestic and foreign individuals, Mobile service providers, Phone numbers, CI, DI, Email address |
| Optional |
Information of legal guardians |
| Event |
Prize delivery |
Mandatory |
Name, Phone numbers, Address |
| Imposition of taxes and fees |
Mandatory |
Name, Resident registration number, Address, Bank account numbers, Bank names, Names of depositors |
| Event participation |
Optional |
Email address, Phone numbers, SNS ID |
| Duplicate participation confirmation |
Optional |
AD identifiers, Service usage records, Cookies |
| Marketing |
Service and guidance notifications |
Optional |
Email address, Phone numbers, SNS ID |
| Personalized advertisements |
Optional |
AD identifiers, Service usage records, Cookies |
| Customer support |
Identification and contact |
Mandatory |
Email address, Phone numbers |
| Confirmation of CS content |
Optional |
Name, ID, Nickname, Any other information necessary for CS |
| Inquiries for guardians only |
Mandatory |
Child ID, Name, Email, Password |
| Optional |
Child´s date of birth, Phone numbers |
| Provision of Services |
Personal location information |
Optional |
Inquiry about personal location information |
Transfer of Personal Information Overseas
We may transfer your personal information to third parties overseas for data processing purposes. In such cases, we comply with the contents of this Privacy Policy. The following are the recipients of the transfer:
- Our website service providers
- E-commerce providers, such as payment solution providers that support online
These providers must comply with the same level of protection as us to protect data privacy. If the data protection level in a particular country does not match the level of protection in Switzerland or the EU, we ensure that your personal information is always protected at the same level as the protection in Switzerland or the EU by using standard contracts to enter into agreements.
Data Security
We take responsibility for ensuring security and use appropriate technical and organizational measures to protect stored personal data from manipulation, partial or complete loss, and unauthorized access by third parties. Our security measures are continuously improving with the advancement of technology.
However, all data transmissions over the internet (e.g., email communication) are generally not secure, and we do not assume responsibility for them. Unfortunately, it is impossible to completely eliminate security risks. This information does not apply to third-party websites and links provided on our website, and we do not assume responsibility for them.
Management of Personal Information
We support your ability to access, add, update, and delete specific personal information. However, even if you update or delete certain information, we will keep a copy of the unmodified information in our records. Information that you can view, edit, and delete may change as our website or services change.
Some information may still be retained in our personal records even after you have deleted the information from your account. However, this will only be kept and used for the period necessary to comply with legal obligations, resolve disputes, and enforce contracts.
After you update or delete your personal information, we may use derived or aggregated data that does not identify you personally. When the retention period for personal information expires, that information is immediately deleted. Therefore, after the retention period has expired, you will not be able to exercise rights such as access, deletion, correction, or information transfer.
Use and Processing of Collected Information
All collected information is used to personalize your experience. This includes improving the website, enhancing customer service, and responding to queries and emails. Notification emails such as newsletters, password alerts, and updates are sent to maintain and operate the website and services. Automatically collected information is only used to detect potential misuse cases and collect statistical information on website usage. Such statistical information is aggregated in a way that does not identify specific users.
Except for our website providers, your personal data will not be disclosed to third parties without explicit consent. Disclosures may be made if you have given explicit consent, if required by law, or if necessary to protect our rights under contractual relationships. Data transfers are necessary to provide and maintain the functionality of our website.
There are various legal bases for processing personal information, which are used to protect personal information and you may stop the processing if you do not agree with the privacy policy. The legal bases for personal information processing are as follows:
(1) Consent: You may consent to the privacy policy and withdraw your consent at any time. In some countries, processing personal information without your consent is not allowed.
(2) Contract performance: If personal information processing is necessary for the performance of a contract with you, such processing is legally recognized.
(3) Legal obligation: If personal information processing is necessary to comply with a legal obligation towards you, such processing is legally recognized.
(4) Public interest: If personal information processing is necessary for the public interest, such processing is legally recognized.
(5) Legitimate interest: If personal information processing is necessary for our or a third party´s legitimate interests, such processing is legally recognized.
In certain countries, legal bases such as consent are required for personal information processing, and processing personal information without meeting these legal bases may be illegal.
Use of Personal Location Information
The company may collect and use customers´ location information for providing location-based services. The collected personal location information will not be used for any purposes other than the intended use. Once the purpose of collecting, using, or providing personal location information is achieved, any personal location information except for the records that must be preserved under relevant laws related to the confirmation of the fact of collecting, using, and providing location information will be immediately destroyed. The company´s obligations and customers´ rights related to personal location information are governed by the "Act on the Protection, Use, and Provision of Location Information" and relevant laws.
Transmission and Storage of Information
Your personal information may be transferred to countries other than the country where you reside. Such data transfers are made based on legal grounds, and if such transfers occur, we will comply with the provisions of the personal information protection law in that country. We will take appropriate technical and organizational security measures to protect your personal information. Additionally, the information you have provided to us will not be disclosed to unauthorized third parties without your consent. If your personal information is transferred, we will comply with the provisions of the personal information protection law in that country. In such cases, we will comply with the provisions of the personal information protection law in the country where the transfer occurs.
User Rights
(1) You have the right to withdraw your consent to the processing of your information if you have previously agreed to it.
(2) If personal information processing is being performed for reasons other than legal grounds, you have the right to raise objections to the processing of personal information.
(3) You have the right to confirm whether your information is being processed by us, and to request a copy of the information being processed and disclosure of specific aspects of the processing.
(4) You have the right to verify the accuracy of personal information and to request updates or corrections.
(5) In certain situations, you have the right to restrict the processing of personal information. In this case, we will not process your information for purposes other than storing it.
(6) You have the right to delete your personal information in certain situations.
(7) You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and if technically feasible, to transmit it to other data controllers without hindrance. This provision applies when your information is processed in an automated manner and the processing is based on your consent, contract, or pre-contractual obligation.
Right to Object to Processing
If our processing of your personal information is based on public interest, the exercise of public authority granted to us, or for our legitimate interests, you have the right to object to such processing by providing grounds related to your specific situation. However, if your personal information is processed for direct marketing purposes, you may object to such processing at any time without the need to provide justification. To confirm whether we are processing your personal information for direct marketing purposes, please refer to the relevant section of this document.
How to Exercise Your Rights
All requests related to exercising user rights can be sent to the website operator through the contact information provided in this document. These requests are free of charge, and the website operator will process them as quickly as possible
Disposal of Personal Information
XTRION promptly disposes of personal information when the purpose of collection and use has been achieved or the retention period has expired. The disposal method is determined based on the form of the personal information. For electronically stored data, the information is securely deleted to prevent recovery and reproduction. For records, printouts, and documents, the information is shredded or incinerated for disposal.
① When a member withdraws from the service, the collected information for service provision is retained for a maximum of 30 days to protect against personal information theft and victim protection. The information is completely and permanently deleted in an irretrievable manner.
② For members, personal information of users who have not used the service for one year after joining or for the selected period upon joining is separated and stored or disposed of according to the “Personal Information Validity Period System.“
③ Information collected for events is retained for a maximum of one year, but this may vary depending on the event, and the duration listed on the event development page takes precedence.
④ Email transmission records are disposed of after being retained for three months.
Personal information that must be retained for a certain period of time under applicable laws and regulations is as follows:
| Related Laws |
Collected Information |
Retention Period |
| Act on Protection of Communication Secrets |
Information related to service usage (website visit records) |
3 months |
| Act on Consumer Protection in Electronic Commerce, etc |
Record of consumer complaints or dispute resolution |
3 years |
| Records related to contracts, cancellations of subscription, and other related transactions |
5 years |
| Records related to payment and supply of goods |
5 years |
| National Tax Basic Act |
Accounting books and supporting documents related to all transactions specified in the tax laws |
5 years |
| Income Tax Act |
Information related to tax withholding |
5 years |
Protection of Children´s Personal Information
We do not knowingly collect personal information from children under the age of 13. If you are under 13 years old, please do not submit personal information through our website or services. Parents or legal guardians are encouraged to monitor their children´s internet usage and guide them not to provide personal information to us without permission through our website or services. If you suspect that a child under the age of 13 has provided personal information to us through our website or services, please contact us. In addition, if you are required to give consent to the processing of personal information by your country, you must be at least 18 years old to do so (in some countries, parents or guardians may give consent on behalf of minors).
Newsletter
If you provide your name and email address, XTRION will provide an electronic newsletter. You can follow the unsubscribe instructions included in the newsletter email or contact us to stop receiving the newsletter or marketing emails. However, you will continue to receive necessary transaction emails.
All collected information is never shared with or sold to third parties.
Cookies
XTRION services use "cookies" to help personalize your online experience. Cookies are text files that a web page server stores on your hard drive. Cookies cannot be used to execute programs or deliver viruses to your computer. Cookies are assigned uniquely to you and can only be read by the web server of the domain that issued the cookie.
We may use cookies to collect, store, and track information for statistical purposes to operate our website and services. You can accept or decline cookies. Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. If you decline cookies, you may not be able to experience the full functionality of the website and services.
Please note that we do not share or sell any of the information collected through cookies to third parties.
Do Not Track Signals
Some browsers have a "Do Not Track" feature that allows you to signal that you do not want to be tracked by the websites you visit. Tracking is different from using or collecting information related to a website. Such tracking means collecting personal information when you visit other websites. However, since there is no consistent way for browsers to communicate the Do Not Track signal, we do not interpret or respond to it.
Nevertheless, we provide detailed information throughout this policy and limit the use and collection of your personal information.
Affiliates
We may disclose your information to our affiliates in order to provide you with related or additional products and services. Any information related to you that we provide to our affiliates will be processed by them in accordance with the conditions set forth in this Privacy Policy.
Information Security
We maintain a controlled and secure environment to protect your information from unauthorized access, use, or disclosure on our computer servers. We use reasonable managerial, technical, and physical protection measures to prevent unauthorized access, use, modification, or disclosure while controlling and storing personal information.
However, data transmission through the internet or wireless networks cannot be guaranteed. Therefore, while we make every effort to protect your personal information, you acknowledge that (1) there are security and privacy limitations of the internet beyond our control, (2) the security, integrity, and privacy of all information and data exchanged between you and our website cannot be guaranteed, and (3) such information and data may be viewed or tampered with by third parties during transmission despite our best efforts.
Data Breaches
If we become aware that the security of our website has been compromised as a result of external activity, including but not limited to security attacks or fraud, or if users´ personal information has been disclosed to unrelated third parties, we reserve the right to take reasonably appropriate measures, including but not limited to investigation and reporting, notifying and cooperating with law enforcement authorities.
Furthermore, we will make reasonable efforts to notify affected users if we believe that there is a reasonable risk of harm to the user as a result of the breach or if notice is otherwise required by law. Notification will be made through website notice, email, phone, or mail.
Legal Disclosure
In order to comply with subpoenas or similar legal procedures required or permitted by law, we may disclose all information collected, used or received. Additionally, we may disclose information when it is deemed necessary in good faith for the protection of our rights, the safety of you or others, fraud investigations, or in response to government requests.
Changes and Modifications
We reserve the right to update this privacy policy at our discretion. If there are any significant changes to the way we process personal information, we will notify you. We will update the date of modification at the bottom of this page if there are any changes.
Additionally, we may notify you through the contact information you have provided. The updated version of the privacy policy will take effect immediately upon posting, unless otherwise specified. By continuing to use the website or services after the effective date of the revised privacy policy, you are deemed to have agreed to the changes. However, we will not use your personal data in a way that is different from what was specified when it was collected without your consent.
Contact us
If you require further understanding of this policy or have any questions regarding your personal information and privacy rights, please contact us through the social platform and contact information provided.
| Personal Information Protection Manager and Contact Information |
| Name |
Jung-gyu, Hwang |
| Dept. |
Development |
| Position |
Director |
| email |
[email protected] |
