Last updated: October 29, 2019
Collection of Personal Information, Purpose of Use, Information Collected and Period of Retention
Metatron Discovery collects and uses personal information for activities that require ‘mandatory consent’, which are required for the provision of the essential services, and activities that require ‘optional consent’, which are required for the provision of services that meet individual users’ wants and needs. The essential services may be used by users who do not consent to the optional consent activities.
Metatron Discovery does not collect sensitive personal information that has a clear risk of intruding upon the user’s personal life (race and heritage, ideologies and faiths, hometown and residence, political leanings and criminal histories, health status and sex life, etc.). However, if there is a need to collect and process some sensitive information to the minimum degree necessary to provide the relevant services, such information may be collected and processed in accordance with the required measures as proscribed by law, such as receiving user consent, etc.
Metatron Discovery collects and uses personal information for the following purposes.
[Collection, Purpose of Use and Term of Retention of Personal Information (Mandatory Consent)]
|Purpose of Collection and Use||Information Collected and Used||Period of Retention and Use|
|Verifying the identity of a contact person in Metatron Discovery’s products, Providing information regarding such products, etc.||Name, Contact information||Commencing from the date of consent to the collection and use of personal information, Ending on the date of fulfillment of the purpose of such collection and use|
※ This includes not only the information at the time of inquiry but also the information changed as a result of modifications thereto.
[Collection, Purpose of Use and Term of Retention of Personal Information (Optional Consent)]
|Purpose of Collection and Use||Information Collected and Used||Period of Retention and Use|
|Verifying the identity of a contact person in Metatron Discovery’s products, Providing information regarding such products, etc.||Job title, Company information, Products of interests||Commencing from the date of consent to the collection and use of personal information, Ending on the date of fulfillment of the purpose of such collection and use|
|Providing information on benefits provided by Metatron Discovery and updates on news, events, etc.||Name, Contact information||Commencing from the date consent to the collection and use of personal information, Ending on the date of withdrawal of consent|
※ This includes not only the information at the time of inquiry or application but also the information changed as a result of modifications thereto.
※ Metatron Discovery may process collected personal information into anonymized statistical data for its use and/or distribution.
Means to Collect Personal Information Collection and Consent
- Metatron Discovery provides means to consent to the collection and use of personal information, and such means involve the user checking or clicking a button indicating ‘I consent’ or ‘’I do not consent.’ Checking or clicking on a button indicating ‘I consent’ means that the user consents to the collection and use of personal information.
- Users have the right not to consent to the collection and use of personal information, and will not be subject to any disadvantage if they do not consent. However, if a user does not consent to the mandatory consent items, the user may not use the services or there may be limitations to the provision of services for their intended use.
- Metatron Discovery collects personal information through personal identification, sweepstakes entries and the like on websites, apps, forum boards and telephone/fax numbers run by Metatron Discovery.
Provision of Collected Personal Information to Third Parties
Metatron Discovery uses users’ personal information after receiving consent from the user in question or to the extent permitted by law, and does not use or provide to any third parties personal information exceeding such extent. In particular, personal information may be provided in the following cases, with particular care taken and to the extent set forth above.
A. Sale, Merger, Etc.
If all or part of the business is assigned, or the rights and obligations of the service provider are transferred and succeeded due to merger or inheritance, users will be notified thereof in order to ensure users’ rights with regard to the protection of their personal information.
B. When Required or Permitted by Law
※ Even if an administrative or investigative agency requests for administrative or investigative purposes to the extent specifically prescribed by law, users’ personal information will not be provided unconditionally and will be provided in accordance with the appropriate procedure as prescribed by law, including where a request is made through a warrant or in writing with the signature or seal of the head of the relevant agency.
Period of Retention and Use of Personal Information
In case of receiving consent that states otherwise or so long as there is no legal basis, Metatron Discovery will possess and use users’ personal information from the date of the user’s inquiry, and throughout the period during which the user is provided with the inquiry process. The user’s personal information will be destroyed without delay if: the user withdraws consent to the collection and use of personal information; the purpose of the collection and use has been achieved or the period of retention and use has lapsed; or a reason for destroying the information occurs such as the termination of business. However, if there is a need to retain personal information in anticipation of such cases as litigation, dispute, etc., personal information will be retained for a certain period until the applicable purpose has been achieved.
Procedures and Means of Destroying Personal Information
Metatron Discovery will destroy collected personal information without delay once the purpose of use thereof has been achieved or when the period of retention and use has lapsed. The procedure, means, and timing of destruction are as follows:
A. Procedure and Timing of Destruction
Once the purpose of use of the personal information provided by the user for the inquiry to Metatron Discovery or other reasons has been achieved upon completion thereof, such personal information will be deleted or destroyed after being retained for the period permitted by law for the purpose of information protection (see Period of Retention and Use).
B. Means of Destruction
Personal information in electronic file form will be deleted using technical means that do not allow for the recovery of the records.
The security of your Personal Information is our utmost concern. While we strive to use best commercially reasonable means to protect your Personal Information, we cannot guarantee its absolute security. We will nevertheless ensure that transfers of Personal Information to a third country or an international organization are subject to appropriate safeguards as described in Article 46 of the GDPR and that such transfers and safeguards are documented according to Article 30(2) of the GDPR.
A. Location of Data Processing and Storage
Any information we receive from you for the provision of the Services may be transferred to, and stored and processed in, the Republic of Korea, the United States or any other country in which we or our affiliates and subcontractors maintain their servers. By agreeing to use our Services, you appoint us and consent to perform any such transfer to any such country and to store and process the provided information in order for us to provide the Services.
B. Security Incident Notification
If we become aware of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to the Services and your information while processed by us (each a “Security Incident”), we will promptly and without undue delay (1) notify you of the Security Incident; (2) investigate the Security Incident and provide you with detailed information about the Security Incident; and (3) take reasonable steps to mitigate the effects and to minimize any damage resulting from the Security Incident. Notification(s) of Security Incidents will be delivered to your email address via email.
Users’ Rights and Obligations, and Means of Exercising Rights
A. Users’ Rights Regarding Protection of Personal Information
At any time, users can access or receive information on the current status of: the user’s personal information retained by Metatron Discovery; Metatron Discovery’s use or provision of the personal information to a third party; and the user’s consent to the collection, use and provision of personal information. If a user requests access to, the provision of, or corrections to personal information, Metatron Discovery will faithfully respond to the user’s request, and if correction or deletion is deemed required in cases where there are errors with the relevant personal information or the retention period has lapsed, such correction or deletion will be done without delay.