GPEX Inc. (“Company”, “we”, “our”, or “us”) endeavors to protect the personal information that users provide to use the GPEX Clip (“Service”). The Company displays this Privacy Policy where users can check easily within the Service. We would like to notify how the personal information is being processed, and for what purposes.
This Privacy Policy endeavors to include the following important functions:
To stipulate how the Company notifies the users of the details of usage and provision of personal and entrusted information, and the method of destroying it;
To guide users on exercising their legal rights, including the right of self-determination of personal information.
To prevent infringement of personal information, and guide users on how to recover from a possible infringement accident.
1. Purpose of Collection and Use of Personal Information
- The Company processes personal information for the following purposes:
- To manage user information upon signing up for the Service
- To confirm user’s will to sign up, and to agree to an identity verification∙authentication,
- To maintain and manage user’s position,
- To confirm the consent of a legal representative in case of collecting personal information from users of age of under 14, and to verify the identity of the legal representative thereafter,
- To deliver notification and announcement to users, and
- To preserve records for possible conflict mediation
- To resolve inquiries or complaints
- To verify, investigate, and resolve complaints from a user, to identify the user who submitted a complaint, and to confirm the contents of complaint (inquiries)
- To contact users in case of an investigation and notification
- To deliver answers to the user who submitted a complaint
- To develop new services and advertising opportunities
- To provide customized, recommended services and contents based on demographic features
- To develop new services, and to provide diverse services
- To fulfill marketing purposes such as promoting an event or advertising
- To collect statistics based on service usage record, frequency of visit and service use for development of service environment to protect privacy and service improvement
- To provide information in accordance with relevant laws and regulations
- To maintain information and records in accordance with the provisions of laws and regulations
- To provide information when there is a request from an investigation agency in accordance with the procedures and methods stipulated in the laws for the purpose of investigation
- To manage user information upon signing up for the Service
- Personal information is not used other than the purposes specified in the foregoing paragraph. If any of the purposes are changed, necessary measures shall be taken to obtain additional agreement from users.
2. Items of Personal Information Collected, and Terms of Collection and Use
- The company collects the following personal information:
- Items of Personal Information
Third party information about the user from Third-party sources.
- Information collected while user uses the Service
Items of Personal Information Terms of Use
Third party information about the user from Third-party sources.
- The company collects personal information in the following ways.
- Ways to collect personal information
- When user agrees to the collection of personal information and enters relevant information: when signing up for a service, when changing user information, when using the Services, and when user is verifying identity
- During customer service procedure: email, fax, phone, etc.
- When a user participates in online and/or offline events: website, application, written form, email address, phone, fax, applying for gifts, etc.
- When personal information is provided through affiliated services or groups
- Through operation of automatic personal information collection devices
- Grounds for retention: processing and reporting on customer requests and sending operational reports
- Retention period: Until the user requests to withdraw or actually withdraws the agreement on collection and use of personal information. However, the Company shall store the information for 5 years when the user has a reasonably suspicious record of improper usage or attempts of improper usage.
- Ways to collect personal information
3. Provision of Personal Information to a Third Party
- The Company does not provide or disclose personal information to any third party without user’s consent or unless demanded by an agency under applicable laws. The Company processes personal information only within the scope expressed in this Privacy Policy.
- However, the Company provides or discloses the personal information to third parties under the following circumstances:
- When user has given a prior consent
- When it is provided in a form that an individual is not identifiable, and is for the purpose of drawing up statistics, academic research, or market research
- When business acquisition or merger, etc. occurs (However, when transfer of user’s personal information is needed, the Company shall notify users of the fact of transfer and the users can withdraw their agreement on the usage of personal information)
- When the subject of agreement or the legal representative is unable to express agreement, and when such agreement is necessary in order to protect the third parties from threat of life, body, and property.
- Other cases regulated by the laws and regulations
- The Company is planning to provide personal information to third parties in order to provide various services. The Company will notify the users on ‘counterparty of the provision, purpose of provision, items being provided, and retention/usage period of the provided counterparty’, upon obtaining the users’ express and individual agreement.
4. Entrusting the Management of Collected Personal Information
The Company entrusts the following personal information processing tasks for a smooth personal information processing and supervises whether the entrusted parties violate the relevant laws and regulations.
- The Company supervises whether the entrusted parties for managing personal information do not violate the regulations and laws regarding personal information.
- When the entrusted parties or entrusted work is changed, the Company will update such information in this Privacy Policy.
5. Rights of Users and Legal Representatives, and Method of Exercising them
- Users and their legal representatives may exercise any of their own rights. However, the user’s rights can be restricted according to the laws and regulation; the user’s request for the following may be restricted.
- Request to view personal information
- Request to correct personal information
- Request to delete or suspend the processing of personal information (withdrawing the agreement on collection and usage of personal information, terminating the Service Agreement)
- The ways to exercise the rights indicated in the foregoing paragraph are as follows. The Company shall take immediate measure on the user’s request. The user may send mail and/or email to the Company.
- Legal representative or agent of a user may exercise the rights indicated in the foregoing paragraphs. In this case, a power of attorney must be submitted.
- The Company confirms whether the requesting person is the user him or herself or a righteous agent.
- Users may refuse the collection and usage of personal information. However, if the user refuses, the user shall not verify his or her identification.
6. Destruction of Personal Information
- In principle, the company destroys the information without delay after the purpose of collection and use of personal information is achieved. However, the information that has obtained the user’s separate agreement or is obliged to preserve certain information for a certain period, shall be stored separately from other information.
- For users that have not used the service for a period of 1 year, their information shall be stored separately from the other information.
- The destruction procedure and method are as follows:
- Destruction Procedure
The information entered by the user for customer consultation, etc. is stored for a certain period and then destroyed according to the internal policy and other relevant laws and regulations (refer to the retention and use period) after the purpose is achieved. This personal information will be used only for the purpose of retention unless required otherwise by law.
- Destruction Term
For information which the retention term has expired, the purpose achieved, the Service closed, or such information becomes unnecessary, the information is destroyed after 5 days from the end date of the retention term.
- Destruction Method
Personal information stored in electronic file format will be deleted using a technical method so that it cannot be reproduced.
Personal information printed on paper will be shredded with a shredder or destroyed through incineration.
7. Person In Charge of Personal Information Management
- In order to protect users’ personal information and handle complaints related to personal information, the Company has designated the relevant department and personal information manager as follows.
Department Customer Service
Email: cs@gpex.io
- Users can report any complaints related to personal information protection that occur while using the Company’s Service to the person in charge of personal information management, or the department in charge. The Company will promptly and sufficiently respond to the user’s report.
- Users shall be responsible for the management of one’s account and password including the PIN number. Please be cautious to protect the password from leakage, especially when logged in at a public place. The Company in no event asks about the password to the user in any form.
- The Company is not liable for the loss of data caused by an unpredictable accident such as hacking when the Company took all predictable and reasonable measures such as using up-to-date technology to prevent risks in the network security.
8. Matters Concerning the Installation and Operation of Automatic Personal Information Collection Devices
- The Company installs and operates a device that automatically collects personal information such as ‘cookies’ and ‘sessions’. Cookies are very small text files sent to the user’s browser by the server used to operate the company’s website and are stored on the user’s computer hard disk.
- Purpose of use of cookies, etc.
The Company uses cookies in order to provide personally customized services. When a user visits the Company’s website, the website server reads cookies stored on the user’s device to maintain environment settings and customized services. Cookies help the user to use the website easily and conveniently by finding out the user’s preferences.
- The Company collects users’ ADID/IDFA. ADID/IDFA are each an identifier for advertisers assigned by Android and Apple to an application user’s device.
- Purpose of Collecting ADID/IDFA
In order to provide customized contents based on demographic features, users’ interest, taste and propensity, including Customized advertisement.
- Ways to collect ADID/IDFA
It is automatically collected when the users visit the application.
- Retention/Usage period of collected ADID/IDFA
1 year from the collected date
- Rejection of ADID/IDFA being collected
- Examples of settings
1) Android OS
“Settings” > “Google Settings” > “Ad” > Turn off “Ad Personalization”
2) IOS
“Settings” > “Protection of Personal Information” > “Apple Advertisement” > Turn off “Ad personalization”
9. Liability on Connected Sites
The Company may provide links to other websites to users. In this case, since the Company does not have the control over the other websites, the Company is not liable for and does not guarantee the usefulness, correctness, or legality of those connected websites. Please check the privacy policy of the connected websites because the Company has no relation with the connected sites.
10. Amendment to the Privacy Policy
- This Privacy Policy is applied from December 1, 2022
- The Company may amend its Privacy Policy to reflect any legal or service changes.
- The Company shall notify such amendment, and the amended Privacy Policy shall take effect 7 days after the foregoing notification.
- See past privacy policies below
Notification Date: December 1, 2022
Enforcement Date: December 1, 2022
