GOM Lab Policy
Privacy Policy
GOM & Company, Inc. (hereinafter referred to as the “Company”) is committed to protecting the rights and freedoms of data subjects by lawfully processing and securely managing personal information in accordance with the Personal Information Protection Act and other applicable laws and regulations.
Pursuant to Article 30 of the [Personal Information Protection Act], the Company has established and disclosed this Privacy Policy to inform data subjects of the procedures and standards regarding the processing and protection of personal information, and to ensure that any related complaints or concerns are addressed promptly and appropriately.
1. Purpose of Personal Information Processing, Categories of Personal Information Collected, and Retention Period
- ① The Company processes personal information to the minimum extent necessary for the following purposes, in accordance with the [Personal Information Protection Act]:
The personal information collected will not be used for any purposes other than those listed below.
If there is any change to the purpose of use, the Company will take necessary measures, such as obtaining separate consent, pursuant to Article 18 of the [Personal Information Protection Act].Purpose of Personal Information Processing, Categories of Personal Information Collected, and Retention Period Type Classification Purpose of Use Information Collected Retention and Use Period Legal Basis Required Services Membership Registration Individual Member Email membership registration and service provision, data subject identification and authentication, membership status maintenance and management [Required] Email address, password, check for age 13 or older
[Optional] Mobile phone numberUntil membership cancellation Article 15, Paragraph 1, Subparagraphs 1 and 4 of the [Personal Information Protection Act] Individual (Social Media account) Member SNS membership registration and sign in integration, data subject identification and authentication, membership status maintenance and management [Information provided] Email address, profile image
[Required] Check for age 13 or olderUntil membership cancellation Each SNS provider obtains consent in accordance with Article 17, Paragraph 1 or Article 18, Paragraph 2 of the [Personal Information Protection Act] and provides the information to the Company. Business Member Email membership registration and service provision, data subject identification and authentication, membership status maintenance and management [Required] Email address, password, organization type, organization name, manager’s name, contact information
[Optional] Business registration numberUntil membership cancellation Article 15, Paragraph 1, Subparagraphs 1 and 4 of the [Personal Information Protection Act] Product Purchase Individual Member Service provision contract fulfillment, collection of payment information upon purchase [Required] Order information (email address), payment information (payment method, payment currency, payment amount, payment date and time, payment approval number, payment status) 5 years (Article 6 of the E-Commerce Act) Article 15, Paragraph 1, Subparagraph 4 of the [Personal Information Protection Act] Business Member Service provision contract fulfillment, collection of payment information upon purchase [Required] Order information (email address, organization type, organization name, manager’s name, contact information), payment information (payment method, payment currency, payment amount, payment date and time, payment approval number, payment status) 5 years (Article 6 of the E-Commerce Act) Article 15, Paragraph 1, Subparagraph 4 of the [Personal Information Protection Act] Optional Services Event Product Purchase Individual Member KakaoTalk Student ID, Employee ID Product Purchase and Prize Delivery [Required] Order information (email address), payment information (payment method, payment currency, payment amount, payment date and time, payment approval number, payment status), name, date of birth, mobile phone number Until membership cancellation Article 15, Paragraph 1, Subparagraphs 1 and 4 of the [Personal Information Protection Act] Customer Support Non-member Menu Find license key, deactivate PC, view automatic payment history for non-member purchases [Required] Email address Until purpose is fulfilled Article 15, Paragraph 1, Subparagraph 4 of the [Personal Information Protection Act] Customer Service Handling of service complaints [Required] Inquirer information (email address, nickname, membership number, language of inquiry), inquiry details, purchase history, consultation history) 3 years (Article 6 of the E-Commerce Act) Article 15, Paragraph 1, Subparagraph 1 of the [Personal Information Protection Act] Refund Processing (Only applicable to payment methods that cannot be cancelled) [Required] Refund account information (bank name, depositor name, account number) Until purpose is fulfilled Article 15, Paragraph 1, Subparagraph 1 of the [Personal Information Protection Act] Marketing Notification of various event benefits Advertising information, including company promotions and events [Required] Email address
[Optional] Mobile phone numberUntil consent is withdrawn or membership is cancelled Article 15, Paragraph 1, Subparagraph 1 of the [Personal Information Protection Act] Events Online Events Participation in online events, provision of prizes related to events and benefits [Required] Name, email address, mobile phone number
* The information collected/used may vary depending on the nature of the event. If tax processing is required for prize delivery, additional information such as your resident registration number and bankbook copy may be collected and used in accordance with the [Income Tax Act].Until consent is withdrawn or membership is cancelled Article 15, Paragraph 1, Subparagraph 1 of the [Personal Information Protection Act]
* However, additional information collected from winners will be in accordance with Article 15, Paragraph 1, Subparagraph 4 of the [Personal Information Protection Act] and Article 145 of the [Income Tax Act].SNS Events Participation in SNS events, prizes related to events and benefits [Required] SNS ID, email address, mobile phone number
(*SNS: YouTube, Instagram, Thread, TikTok)Until prize delivery is complete Article 15, Paragraph 1, Subparagraph 1 of the [Personal Information Protection Act] Contest Participation in contests and voting, provision of prizes for contest winners [Required] Name, email address, mobile phone number, social media address
(*SNS: YouTube, Instagram, Thread, TikTok)
[Optional] Prize delivery address
* The information collected/used may vary depending on the nature of the contest. If tax processing is required for prize delivery, additional information such as your resident registration number and bankbook copy may be collected and used in accordance with the [Income Tax Act].90 days after the contest end date Article 15, Paragraph 1, Subparagraph 1 of the [Personal Information Protection Act]
* However, additional information collected from winners will be in accordance with Article 15, Paragraph 1, Subparagraph 4 of the [Personal Information Protection Act] and Article 145 of the [Income Tax Act].Other Advertising/Partnership Inquiries Ensure business-related communication, including advertising and partnership inquiries [Required] Company(organization) name, proposer's name, contact information, email address Until purpose is fulfilled Article 15, Paragraph 1, Subparagraph 1 of the [Personal Information Protection Act] Other Service Operation Display and searchability of content created by the data subject Author information (email address, nickname, membership number, IP address, country of registration) Until directly deleted by the data subject Article 15, Paragraph 1, Subparagraph 4 of the [Personal Information Protection Act] Provision of personalized services based on user characteristics, statistical analysis of product/service usage data, and product/service improvement Cookies, payment information, PC device information (PC name, IP address, PC identification number, language), IP-based country name and code, and unique member key 90 days after membership cancellation Article 15, Paragraph 1, Subparagraph 4 of the [Personal Information Protection Act] Other Records for communication verification, personal information breach preparedness, and dispute resolution Service usage and suspension records, access logs (access IP, access time) 90 days from the last access date Article 15-2, Paragraph 4 of the [Protection of Communications Secrets Act] - ②Concerning the Processing of Personal Information of Children Under 13 Years of Age
- 1)If consent is required to process the personal information of a child under 13 years of age, the Company will obtain consent from the child's legal representative.
- 2)When the company obtains consent from the legal representative regarding the processing of personal information of a child under the age of 13, the company may request the child to provide the minimum information, such as the subscriber's date of birth, the legal representative's name, and email address. The company verifies the fact by sending an e-mail containing the consent details and having the legal representative receive an e-mail containing an expression of consent.
- 3)If user in Other Countries(excluding South Korea) are under 13 years of age, cannot sign up and use the service.
- ③The company, in principle, destruction of personal information once the retention period has expired or the purpose of collection or provision of the personal information has been achieved. However, the following information will be retained for the period as specified below.
- 1)Website membership registration and management: Until membership cancellation.
However, in the following cases, until the end of the relevant reason:
- In the case of ongoing investigations or inquiries due to violations of relevant laws and regulations, until the conclusion of such investigations or inquiries.
- In the case of remaining creditors and debtors arising from website use, until the settlement of such creditors and debtors.
- 2)Provision of goods or services: Until the completion of the supply of goods or services and the completion of payment and settlement.
However, in the following cases, until the end of the relevant period:
- Record of contracts or subscription cancellations: 5 years (Article 6, Paragraph 1, Subparagraph 2 of the [Enforcement Decree of the Act on Consumer Protection in E-Commerce, etc.])
- Record of payment and provision of goods: 5 years (Article 6, Paragraph 1, Subparagraph 3 of the [Enforcement Decree of the Act on Consumer Protection in E-Commerce, etc.])
- Record of consumer complaints or dispute resolution: 3 years (Article 6, Paragraph 1, Subparagraph 4 of the [Enforcement Decree of the Act on Consumer Protection in E-Commerce, etc.])
- Record of labeling and advertising: 6 months (Article 6, Paragraph 1, Subparagraph 1 of the [Enforcement Decree of the Act on Consumer Protection in E-Commerce, etc.])
- 3)Retention of communication verification data pursuant to Article 15-2, Paragraph 2 of the [Protection of Communications Secrets Act]
- Computer communications, Internet log records, and access tracking data: 3 months
- 4)Records of unauthorized use to prevent unauthorized use: 1 year
- 1)Website membership registration and management: Until membership cancellation.
2. Procedures and methods for the destruction of personal information
- ①The Company will destroy personal information without delay when it becomes unnecessary, such as when the retention period expires or the processing purpose is achieved.
- ②If personal information must be retained pursuant to other laws and regulations despite the expiration of the retention period agreed upon by the data subject or the fulfillment of the processing purpose, the Company will transfer the personal information to a separate database (DB) or store it in a different location.
※ The items of personal information retained under other laws and the basis for retention can be found in "1. Purpose of Personal Information Processing, Categories of Personal Information Collected, and Retention Period” - ③The procedures and methods for personal information destruction are as follows:
- 1)Destruction Procedure
The company selects personal information for which destruction is warranted and, upon approval from the Personal Information Protection Officer, destroys the information. - 2)Destruction Method
The company destroys personal information recorded and stored in electronic files in a manner that renders the records unrecoverable. Personal information recorded and stored in paper documents is shredded or incinerated.
- 1)Destruction Procedure
3. Provision of Personal Information with Third Parties
-
①To ensure smooth service provision, the Company obtains the consent of the data subject in accordance with Article 17, Paragraph 1, Subparagraph 1 of the [Personal Information Protection Act] and provides personal information only to the minimum extent necessary.
Provision of Personal Information with Third Parties Recipient Purpose of Provision Information Provided Retention and Usage Period Kakao Corp. Identification of KakaoTalk student ID/employee ID card recipients and delivery of event prizes Name, date of birth, mobile phone number Until the purpose of use is achieved - ②The Company may provide personal information to relevant organizations without the consent of the data subject as follows.
provide personal information to relevant organizations Recipient Purpose of Provision Information Provided Relevent Evidence Related National Police Agency, Prosecutor's Office Requests through Seizure, Search, and Verification Warrants Information Scope of Request Article 18, Paragraph 2, Subparagraph 2 of the [Personal Information Protection Act]
Article 215 of the [Criminal Procedure Act] - ③If personal information is provided to a third party overseas, guidance is provided in ‘6. International Transfer of Personal Information.’
4. Standards for Determining Additional Use and Provision of Personal Information
-
①The Company may additionally use and provide personal information without the consent of the data subject, taking into account the provisions of Article 14-2 of the [Enforcement Decree of the Personal Information Protection Act], pursuant to Article 15, Paragraph 3 or Article 17, Paragraph 4 of the [Personal Information Protection Act].
Standards for Determining Additional Use and Provision of Personal Information Recipient Purpose of Provision Information Provided Retention and Usage Period by Recipient Prize Seller Processing tasks necessary for prize delivery Prize winner information (name, mobile phone number, prize delivery address) 90 days after prize delivery
However, retention and use periods may vary depending on the prize -
②Accordingly, the company has considered the following for additional use and provision without the consent of the data subject.
- The personal information provided is for the original purpose of "prize delivery," and is therefore relevant to the purpose of collection.
- The data subject may anticipate that personal information may be provided during the service contract process.
- This information is provided to deliver prizes at the request of the data subject and does not unfairly infringe upon the data subject's interests.
- We are taking necessary measures to ensure security and minimize the exposure of personal information.
5. Outsourcing of Personal Information Processing
-
①To ensure smooth processing of personal information, the company outsources the processing of personal information as follows.
Outsourcing of Personal Information Processing Trustee Entrusted Task Subcontractor (Sub-entrusted Tasks) PortOne Korea Corp. Provision and facilitation of payment processing systems NHN KCP Corp.
Kakao Pay Corp.
Payletter Inc.
(Payment processing services for KRW, JPY, and USD transactions)Danal Co., Ltd. Payment processing for Korean Won (KRW),
Payment processing for Indonesian Rupiah (IDR)Kakao Pay Corp. Payment processing for Korean Won (KRW) DEGICA Co., Ltd. Payment processing for Japanese Yen (JPY) PayPal Pte. Ltd. Payment processing for US Dollars (USD) LLC dba FastSpring Payment processing for US Dollars (USD) Amazon Web Services, Inc. Data storage, cloud infrastructure operation, and statistical analysis infrastructure provision NAVER Cloud Corp. Data storage, cloud infrastructure operation, and statistical analysis infrastructure provision kt alpha Co., Ltd. Operates text messaging (SMS/LMS/MMS) and mobile coupon delivery services iwnetworks inc. Email delivery service provider - ②When concluding a consignment contract, the company, in accordance with Article 26 of the [Personal Information Protection Act], specifies in the contract or other documents related to the prohibition of processing personal information for purposes other than the performance of the consigned work, technical and administrative protective measures, restrictions on re-consignment, management and supervision of the consignee, and liability for damages, and supervises whether the consignee safely processes personal information.
- ③Pursuant to Article 26, Paragraph 6 of the [Personal Information Protection Act], if a trustee re-entrusts our company's personal information processing tasks, we obtain the consent of the company and disclose the details of the re-entrusted tasks and the re-entrusted tasks through this Privacy Policy.
- ④If the details of the entrusted tasks or the trustee change, we will disclose such changes without delay through this Privacy Policy.
6. International Transfer of Personal Information
-
①The Company transfers personal information collected from service users overseas as described below. Pursuant to Article 28-8, Paragraph 2 of the [Personal Information Protection Act], the following information is provided regarding international transfer. If you decline international transfer, you will be unable to use the service. If you do not wish to have your information transferred overseas, you can cancel your membership on the website (My Page > My Account > Cancel Membership).
International Transfer of Personal Information Transfer recipient Relocated Countries Purpose of use Date and method of transfer Personal information items transferred Retention and Usage Period Basis for transfer Amazon Web Services Inc.(https://aws.amazon.com/compliance/contact) United States To provide stable services within the scope of the personal information processing purposes stipulated in Article 1 of the [Privacy Policy], including smooth service provision Transmission via network at the time of service use Service usage records or all collected personal information
However, AWS only physically manages the relevant servers and does not have access to users' personal information.Until Service Change (Until the change of the cloud services currently used by the company) Article 28-8, Paragraph 1, Subparagraph 3 of the [Personal Information Protection Act] (Processing Consignment/Storage)
7. Measures to Ensure the Security of Personal Information
The company is taking the following measures to ensure the security of personal information:
- ①Administrative Measures: Establishment and implementation of an internal management plan, regular employee training, and operation of a dedicated organization.
- ②Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, and other related protective measures; Internet blocking measures; encryption of personal information; storage and monitoring of access records; installation and updating of security programs; and vulnerability assessment and improvement of personal information processing systems.
- ③Physical Measures: Access control to computer rooms, archives, and other locations; storage of documents and auxiliary storage media in secure locations with locking devices; disaster preparedness measures; and control of the entry and exit of auxiliary storage media.
8. Matters concerning the Installation, Operation, and Rejection of Automatic Personal Information Collection devices
- ①The company uses "cookies" to store and periodically retrieve usage information to provide personalized services and convenience to data subjects.
- ②Cookies are small pieces of information that the server (http) used to operate the website sends to the information subject's browser. They are stored on the information subject's computer or mobile device, and are automatically transmitted from the information subject's browser to the server when accessing the website.
- ③The data subject can set browser options to allow or block cookies.
- 1)Allow/Block Cookies in Your Web Browser
- Chrome: Select the "⋮" icon in the top right corner of the browser > New Incognito Window (Shortcut: Ctrl+Shift+N)
- Edge: Select the "..." icon in the top right corner of the browser > New InPrivate Window (Shortcut: Ctrl+Shift+N)
- 2)Allow/Block Cookies on Mobile Browsers
- Chrome: Select the "⋮" icon in the top right corner of the mobile browser > New Incognito Tab
- Safari: Mobile Device Settings > Safari > Advanced > Block All Cookies
- Samsung Internet: Select the "Tab" icon at the bottom of the mobile browser > Turn on Incognito Mode > Start
- 1)Allow/Block Cookies in Your Web Browser
9. Matters concerning the Collection, Use, Provision, and Refusal of Behavioral Information
- ①When a data subject visits or uses the website, the company allows third parties to automatically collect information, such as third-party cookies and advertising identifiers, to ensure effective service use and advertising and marketing.
- ②The behavioral information collected by third parties from the company's website is as follows.
The behavioral information collected by third parties from the company's website is as follows. Behavioral Information Collected User's website visit history, search history, purchase history, other online activity information, advertising identifier Method of Behavioral Information Collection Automatically collected when a user visits a website Purpose of Behavioral Information Collection Providing personalized advertising based on the user's interests ※ Google Analytics is used to collect behavioral information.
- ③Data subjects can allow or block behavioral information collected by third parties by changing their browser's cookie settings, etc.
- 1)Allow/Block Third-Party Behavioral Information Collection in Web Browsers
- Chrome: Select the "⁝" icon in the top right corner of the web browser > Settings > Privacy & Security > Click Third-Party Cookies and choose whether to block them.
- Edge: Select the "..." icon in the top right corner of the web browser > Settings > Privacy, Search & Services > Select whether to block tracking and the level (Balanced or Strict).
- 2)Allow/Block Cookies on Mobile Browsers
- Chrome: Open the Chrome app on your device, select the "⁝" icon at the top > Settings > Site Settings > Third-Party Cookies > Block Cookies.
- Safari: On your device, select "Settings" > Safari > Advanced > Block All Cookies.
- Samsung Internet: Open the Samsung Internet app on your device, select the "≡" icon at the bottom > Privacy > Privacy Status > Select "Always" from the options under "Prevent Smart Tracking."
- 1)Allow/Block Third-Party Behavioral Information Collection in Web Browsers
10. Rights, Obligations, and Methods of Exercise by the Data Subjects and Legal Representative
- ①Data subjects and their legal representatives may exercise their rights, including requesting access to, correction of, deletion of, or suspension of processing of, their personal information at any time. However, withdrawal of consent or deletion of personal information may restrict access to some or all of the services.
- ②Requests to exercise these rights may be made in writing, by email, or by phone, in accordance with Article 41, Paragraph 1 of the [Enforcement Decree of the Personal Information Protection Act]. Upon receiving a request, the company will promptly take action after verifying the identity of the requester.
- (Inquiry/Edit and Correction) You can process your inquiry through the "My Page > My Account > Edit" menu on the website or through 1:1 Support. Until processing is complete, the information will not be used or provided to others. If incorrect personal information has already been provided to a third party for a reasonable cause, we will promptly notify the third party of the results of the correction process and take steps to correct the information.
- (Withdrawal of Consent/Deletion) You may withdraw your consent to the collection of your information or request deletion through 1:1 Support. However, withdrawal or deletion of your consent may restrict your use of some or all of our services. Furthermore, withdrawal of consent may not be possible for information collected under other laws.
- (Cancel Membership) You can directly withdraw your membership by using the "My Page > My Account > Cancel Membership" menu on the website.
- ③Rights may be exercised through a proxy, such as the data subject's legal representative or authorized representative. In this case, a power of attorney in the format of the "Personal Information Processing Methods Notice" [Appendix 11] must be submitted.
- ④The data subject's right to request access to and suspension of processing of personal information may be restricted under Article 35, Paragraph 4 and Article 37, Paragraph 2 of the [Personal Information Protection Act].
- ⑤If the personal information is designated as a subject of collection under other laws, the deletion of such personal information cannot be requested.
- ⑥The company will verify whether the person exercising the right is the person himself or a legitimate agent.
- ⑦The data subject has a duty to safely protect his or her personal information, and the company is not responsible for any incidents resulting from the data subject's negligence. Therefore, the data subject has a duty to make every effort to protect his or her personal information, including by thoroughly managing his or her ID and password.
- ⑧The data subject is responsible for accurately entering and maintaining their personal information in an up-to-date manner. Any issues arising from inaccurate information entered by the data subject are the responsibility of the data subject.
- ⑨The data subject also has a duty not to infringe upon or disclose the personal information of others. If you learn of another user's personal information while using the service and disclose or leak that information, you may be subject to punishment under relevant personal information protection laws.
11. Personal Information Protection Officer
- ①The company has designated a Personal Information Protection Officer as follows to oversee all personal information processing and to handle complaints and provide remedies to data subjects related to personal information processing.
Personal Information Protection Officer Personal Information Protection Officer Personal Information Complaints Department Name : Kwang Sub Kim
Position : Managing Director
Contact : (+82) 1668-2370, gom.privacy@gomcorp.comDepartment : CX
Contact : (+82) 1668-2370, gom.privacy@gomcorp.com - ②You may contact the Personal Information Protection Officer and Customer Center regarding all inquiries, complaints, and damage relief related to personal information protection that arise while using the services provided by the company, and the company will respond and process such inquiries without delay.
12. Remedies for Infringement of Rights
Data subjects may seek redress for personal information infringements by filing dispute resolution or consultation requests with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Reporting Center, or other organizations. For other inquiries or reports of personal information infringements, please contact the organizations listed below.
- ①Personal Information Dispute Mediation Committee : (+82) 1833-6972 (www.kopico.go.kr)
- ②KISA : (+82) 118 (privacy.kisa.or.kr)
- ③National Police Agency Cyber Bureau : (+82) 182 (ecrm.police.go.kr)
* The information is based in South Korea
13. Changes to the Privacy Policy
This Privacy Policy applies from October 29, 2025.
GOM & Company Co., Ltd. (hereinafter the “Company”) complies with the Personal Information Protection Act and is committed to protecting the rights and interests of users so that users can receive services safely by establishing a privacy policy under relevant laws and regulations.
Through this Privacy Policy, the Company aims to inform you of the purpose and method of using the personal information provided by users and what measures are being taken to protect personal information.
Article 1 [Personal Information to be Collected and Method of Collection]
- ① Collected Items
-
-
1)In order to provide services at the time of initial membership registration, only the most essential and basic personal information is selectively collected according to the membership type.
- ▶ When registering as an Individual member
-
- □Mandatory Items: Email address, password, nickname, Country, age verification (over/under the age of 13)(South Korea – if under 14 years of age), date of birth, legal representatives’ name and email address
- □Optional Items: Contact Number
- ▶ When registering as a Business member
-
- □ Email address, password, nickname, Country, organization type, organization, manager name, age verification (over/under the age of 13), Contact Number
- □Optional Items: Company Registration Number
- ▶ Mandatory Items when registering with your Social Media account
-
- NAVER: Email Address, Profile Picture
- kakao: Email Address, Profile Picture
- Google: Email Address, Profile Picture
- Facebook: Email Address, Profile Picture
- LINE: Email Address, Profile Picture
- VK: Email Address, Profile Picture
-
2)The following information may be automatically generated and collected in the process of service usage or business processing:
- □Service use and suspension records, access logs, cookies, access IP information, payment records, PC device name, device type, and others
- □Mac Address, Disk Serial
- 3)Additional information may be collected only for the users using the other services with their email addresses or in the process of participating in an event. However, this shall apply only when the consent to additional collection of personal information is obtained.
-
4)When using the Talk Student or Company ID service, the following information is mandatory to collect with user consent.
- □Required Information: Name, Date of Birth, Mobile Phone Number
-
1)In order to provide services at the time of initial membership registration, only the most essential and basic personal information is selectively collected according to the membership type.
- ② Method of Collection
-
The Company collects personal information as following methods:
- □Website membership registration, usage of paid/free service, written form, phone, fax, inquiry board, event participation, email, collection through generated information collection tools, and others
Article 2 [Purpose of Collection and Use of Personal Information]
- ①The Company collects users' personal information in order to ensure more safe and comfortable use of service based on trust and provide optimally customized services for users. Based on the personal information provided by the user, the Company is able to provide more useful information to the user at an optional level. The Company does not disclose the users' personal information without their prior consent, and is using the information collected as follows.
- ②Personal information registered by the user is used to facilitate the Company’s provision of services, such as performing what is agreed on service provision, payment for service provision, identity verification for membership services, identification, prevention of illegal use by unqualified members or unauthorized use, confirmation of age, handling of complaints and opinions, sending newsletters on service-related news, events, updates, etc. which are sent upon consent of the users.
- ③The Company may post advertisements, etc. in each service or menu based on the accurate personal information of the Users to provide various free services. The Company provides custom-based advertisements according to the type of users and does not to show or disclose users’ personal information to advertisers.
- ④The Company may use statistics on the use of services by the users and personal information, etc. registered by the users for marketing and advertising activities, such as development and specialization of new services (products), guidance on and solicitation of allied financial products (insurance, cards, etc.) and living convenience services, transmission of event announcement and other advertisement for profit-making purposes (telephone, mail, e-mail, text messages, etc.) and provision of services according to demographic characteristics.
Article 3 [Retention and Use Period of Collected Personal Information]
In principle, personal information will be destroyed when the purpose of collection or provision is achieved as below. However, the following information will be retained for the periods specified below.
-
①Records on Illegal Use
- □Grounds for retention: Prevention of illegal use
- □Retention period: 1 year
In addition, if it is required by the applicable laws and regulations to preserve such information, the Company shall retain the user information for a certain period prescribed by the applicable laws and regulations which is as follows:
- ②Records on contracts and withdrawal of offer, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ③Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ④Records on electronic financial transactions: 5 years (Electronic Financial Transactions Act)
- ⑤Records on consumer complaints and handling of disputes: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ⑥Records on visit: 3 months (Protection of Communications Secrets Act)
Article 4 [Personal Information Collection Items of Mobile App Service, Purpose of Use and Processing Method]
Personal information may be collected in the process of using the mobile app service, and it is processed as follows.
-
①Personal information Category
- □Android advertisement ID
- □Installed Applications
-
②Purpose of personal information
- □In-App advertisement
- □User analysis for advertisement
-
③Method of Collecting Personal Information
- □Auto collection when the user runs the app
-
④Personal Information Retention Period
- □When the purpose is achieved and until the app is deleted
It is used only for user analysis and advertisement for in-app advertising and is completely anonymized. The information listed above is de-identified and may be provided to third parties for purposes of marketing targeting an unspecified population. When the purpose is achieved, personal information will be destroyed and the above category will not be used when deleting the App.
- ▶ Block / allow advertising identifiers on Mobile phones
-
※ (Android) Settings > Privacy > Advertising > Reset Advertising ID or Delete Advertising ID
※ (iPhone) Settings > Privacy > Tracking > Allow apps to request tracking Off
Article 5 [Procedure and Method of Disposing Personal Information]
In principle, the Company will destroy personal information immediately when the purpose of collection and use of such information is attained. The procedure and method of destruction of the personal information of the Company are as follows:
- ① Destruction Procedure
-
- 1)Following the membership registration, your personal information will be retained by the Company and used for the provision of the services during the service period pursuant to the internal policy of the Company. However, in the case of membership withdrawal, after the purpose is achieved, it is transferred to a separate DB (separate filing cabinet in case of paper) and destroyed after being stored for a certain period of time according to internal policy and information protection reasons according to the related law (refer to the retention and usage period). However, if you delete your ID or request to cancel your membership, the information provided by you for membership subscription, etc. will be transmitted to a separate DB(a separate document box in the case of a paper form) after the purpose of collection is achieved and retained for a certain period of time and destroyed pursuant to the internal policies and other applicable laws and regulations (please see the section on retention and use period).
- 2)After transmission to a separate DB, the personal information will not be used for other purposes unless required by applicable laws.
- ② Method of Destruction
-
- 1)The Company destroys personal information stored in electronic file form by using technical methods that render such information irrecoverable.
- 2)Personal information printed on paper will be destroyed by shredding or incineration.
Article 6 [Provision and Sharing Personal Information with Third Parties]
The Company will use the personal information of the users within the scope as notified in “2. Purpose of Collection and Use of Personal Information,” and will not use the personal information of the users beyond the scope without prior consent from the users or disclose it to outside in principle. However, there are exceptions in the following cases:
- ① Exceptions
-
- 1)If the users have given consent to disclosure in advance.
- 2)When required under the applicable laws and regulations, or requested by investigative authorities for investigative purposes in accordance with the procedures and methods set forth in laws and regulations.
- ② GOM Lab’s provision of personal information to third parties is as follows.
-
provision of personal information to third parties Recipient Purpose of Use Issue Information Personal information retention and use of period Kakao Inc. Identification verification for issuing Talk Student/Company ID and sending event prizes. Name, Date of Birth, Mobile Phone Number Until the purpose of use is achieved
Article 7 [Outsourcing of Personal Information Processing]
The Company outsources the processing of personal information as follows to improve its services, and ensures to include certain necessary provisions in the outsourcing agreements to ensure safe management of personal information in accordance with the applicable laws and regulations. The Company's personal information processing agencies and the outsourced services are as follows:
| Outsourcee | Outsourced Service | Retention and Usage Period of Personal Information |
|---|---|---|
| Danal Co., Ltd | Korean Won Payment Agency (Credit/Debit card, Mobile Phone, Virtual Account) | Upon withdrawal from membership or until the termination of outsourcing agreement |
| Kakao Pay Co., Ltd | Korean Won Payment Agency (Credit/Debit card, kakaopay Money) | |
| Degica Co., Ltd. | Japan Yen Payment Agency (Credit card, Convenience store, Account transfer, Prepaid card) | |
| PayPal Pte. Ltd. | US Dollar Payment Agency (Credit card) | |
| LLC DBA FASTSPRING | US Dollar Payment Agency (Credit card) | |
| The White Communication | customer counseling information | 5 years |
The Company entrusts personal information to overseas to provide users with the stable service provision and the latest technology, and stores personal information acquired or created from users (physical storage location: USA) on the AWS (Amazon Web Services Inc.). AWS only physically manages the server and cannot access the user's personal information.
| Trustee | Previous Item | Previous Country | Previous Date and Method | Period of Retention and Use of Personal Information |
|---|---|---|---|---|
| AWS (Amazon Web Services Inc.) privacy@salesforce.com, privacyofficer@marketo.com +1-800-935-9935 |
Service usage records or collected personal information | United States (AWS Virginia region) | Transmission over the network at the time of service use | Until Service Change (Until the change of the cloud services currently used by the company) |
Article 8 [Rights of Users and Legal Representatives and Methods of Exercising]
- ①User may at any time request to inquire for or modify their registered personal information and to withdraw their membership.
- ②In order to view or modify a member's personal information, select "Edit” to modify or "Cancel Membership" to withdraw the membership. Or, users may contact the Personal Information Officer in writing, or via telephone or e-mail, and the Company will take necessary measures without delay.
- ③If you request for correction of any error in your personal information, the Company will not use or provide the personal information until the correction thereof is completed. Also, if any inaccurate personal information has been already provided to a third party, the Company will immediately notify the third party to make sure that the correction is made. Personal information terminated or deleted upon a user's request will be processed as set forth in “3. Retention and Use Period of Collected Personal Information” and will not be viewed or used for any other purposes.
- ④The rules for users under 14 years of age are as follows.
- ▶ For South Korean Users
-
-
1)When collecting personal information from users under the age of 14, GOM Lab collects the minimum amount of personal information to obtain consent from a legal representative.
□ Required Information : Name and email address of legal representative. -
2)When collecting personal information from users under the age of 14, GOM Lab may request minimum information such as email address of the legal representatives and confirm whether the legal representative has consented using the method below.
□ How to send an email that contains the consent and receive and email expressing consent from your legal representative.
-
1)When collecting personal information from users under the age of 14, GOM Lab collects the minimum amount of personal information to obtain consent from a legal representative.
- ▶ For Users in Other Countries(excluding South Korea)
-
- 1)If you are under 13 years of age, you cannot sign up for the service.
Article 9 [Installation/Operation and Refusal of Devices for Automatically Collecting Personal Information]
The Company uses cookies when providing services. Cookies are information that the server used for website operation sends to a user's computer browser, and are encrypted and stored on a user's computer hard disk.
The Company uses cookies for the following purposes:
- ① Purpose of Using Cookies
-
- 1)It is used to provide targeted marketing and personalized service by referring to the frequency and time of visits, areas of interest, and degree of event participation.
- ② Installation/Operation and Refusal of Cookies
-
- 1)Users can choose or reject the use of cookies.
- 2)However, please note that if you refuse to use cookies, there may be restrictions on using some services, and you are solely responsible for the outcome of this decision.
※ Configuration Method: On the top right of your web browser, go to Settings > More Tools > Privacy and Security > Cookies and Data on Other Sites
Article 10 [Technical and Managerial Protective Measures for Personal Information]
The Company establishes the following technical/managerial measures to secure safety and prevent any loss, theft, leakage, alteration, or damage of personal information when handling personal information of users:
- ① Password Encryption
- Users’ passwords may only identify their passwords in a one-way encrypted manner and thus confirmation and change of passwords may also be made only by users themselves who know what the passwords are.
- ② Preparation against Hacking Attempts, etc.
- The Company manages its system through firewall to prevent any leakage or damage of users' personal information due to hacking or computer viruses, etc., and regularly updates the up-to-date anti-virus programs to prevent leakage and damage of personal information.
- ③ Minimization of Employees Handling Personal Information and Training
- The Company's employees handling personal information are restricted to those in charge of processing personal information and are given a separate password to renew the authorized persons on a regular basis. Also, the Company use its efforts to comply with the Company's privacy policy by conducting occasional training on the responsible persons.
- ④ Cautions on Protecting Personal Information
- In principle, the Member's ID and password can be used only by the member self. The Company shall not be liable for any matters arising out of the leakage of personal information, such as IDs, passwords and resident registration numbers, caused from the member’s personal negligence or general risks arising from the Internet. We ask you to take extra care for security of your personal information to prevent any leakage of personal information through shared PCs.
Article 11 [Chief Privacy Officer and Manager]
The Company has appointed the department in charge of protecting users’ personal information and handling personal information-related complaints as well as the chief privacy officer.
- ▶ Chief Privacy Officer
-
- □Name: Kwangsub Kim
- □Position: Vice President
- □E-mail: gom.privacy@gomcorp.com
- ▶ Personal Information Protection Manager
-
- □Name: Eunha La
- □Position: Deputy General Manager
- □E-mail: gom.privacy@gomcorp.com
If you need to report on personal information infringement or require further consultation, you may contact the following agencies:
- ①Personal Information Infringement Reporting Center (privacy.kisa.or.kr)
- ②Cyber Investigation Department of the Supreme Prosecutor’s Office (www.spo.go.kr)
- ③Cyber Safety Department of the National Police Agency (cyberbureau.police.go.kr)
Article 12 [Duty to Notify]
If there is any addition, deletion or modification of the current Privacy Policy, such addition, deletion or modification will be posted on the website notice from at least 7 days prior to such amendment.
Addendum
This Privacy Policy shall take into effect on Jun 25th, 2025.
GOM & Company Co., Ltd. (hereinafter the “Company”) complies with the Personal Information Protection Act and is committed to protecting the rights and interests of users so that users can receive services safely by establishing a privacy policy under relevant laws and regulations.
Through this Privacy Policy, the Company aims to inform you of the purpose and method of using the personal information provided by users and what measures are being taken to protect personal information.
Article 1 [Personal Information to be Collected and Method of Collection]
- ① Collected Items
-
-
1)In order to provide services at the time of initial membership registration, only the most essential and basic personal information is selectively collected according to the membership type.
- ▶ When registering as an Individual member
-
- □Mandatory Items: Email address, password, nickname, Country, age verification (over/under the age of 13)(South Korea – if under 14 years of age), date of birth, legal representatives’ name and email address
- □Optional Items: Contact Number
- ▶ When registering as a Business member
-
- □ Email address, password, nickname, Country, organization type, organization, manager name, age verification (over/under the age of 13), Contact Number
- □Optional Items: Company Registration Number
- ▶ Mandatory Items when registering with your Social Media account
-
- NAVER: Email Address, Profile Picture
- kakao: Email Address, Profile Picture
- Google: Email Address, Profile Picture
- Facebook: Email Address, Profile Picture
- LINE: Email Address, Profile Picture
- VK: Email Address, Profile Picture
-
2)The following information may be automatically generated and collected in the process of service usage or business processing:
- □Service use and suspension records, access logs, cookies, access IP information, payment records, PC device name, device type, and others
- □Mac Address, Disk Serial
- 3)Additional information may be collected only for the users using the other services with their email addresses or in the process of participating in an event. However, this shall apply only when the consent to additional collection of personal information is obtained.
-
4)When using the Talk Student or Company ID service, the following information is mandatory to collect with user consent.
- □Required Information: Name, Date of Birth, Mobile Phone Number
-
1)In order to provide services at the time of initial membership registration, only the most essential and basic personal information is selectively collected according to the membership type.
- ② Method of Collection
-
The Company collects personal information as following methods:
- □Website membership registration, usage of paid/free service, written form, phone, fax, inquiry board, event participation, email, collection through generated information collection tools, and others
Article 2 [Purpose of Collection and Use of Personal Information]
- ①The Company collects users' personal information in order to ensure more safe and comfortable use of service based on trust and provide optimally customized services for users. Based on the personal information provided by the user, the Company is able to provide more useful information to the user at an optional level. The Company does not disclose the users' personal information without their prior consent, and is using the information collected as follows.
- ②Personal information registered by the user is used to facilitate the Company’s provision of services, such as performing what is agreed on service provision, payment for service provision, identity verification for membership services, identification, prevention of illegal use by unqualified members or unauthorized use, confirmation of age, handling of complaints and opinions, sending newsletters on service-related news, events, updates, etc. which are sent upon consent of the users.
- ③The Company may post advertisements, etc. in each service or menu based on the accurate personal information of the Users to provide various free services. The Company provides custom-based advertisements according to the type of users and does not to show or disclose users’ personal information to advertisers.
- ④The Company may use statistics on the use of services by the users and personal information, etc. registered by the users for marketing and advertising activities, such as development and specialization of new services (products), guidance on and solicitation of allied financial products (insurance, cards, etc.) and living convenience services, transmission of event announcement and other advertisement for profit-making purposes (telephone, mail, e-mail, text messages, etc.) and provision of services according to demographic characteristics.
Article 3 [Retention and Use Period of Collected Personal Information]
In principle, personal information will be destroyed when the purpose of collection or provision is achieved as below. However, the following information will be retained for the periods specified below.
-
①Records on Illegal Use
- □Grounds for retention: Prevention of illegal use
- □Retention period: 1 year
In addition, if it is required by the applicable laws and regulations to preserve such information, the Company shall retain the user information for a certain period prescribed by the applicable laws and regulations which is as follows:
- ②Records on contracts and withdrawal of offer, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ③Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ④Records on electronic financial transactions: 5 years (Electronic Financial Transactions Act)
- ⑤Records on consumer complaints and handling of disputes: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ⑥Records on visit: 3 months (Protection of Communications Secrets Act)
Article 4 [Personal Information Collection Items of Mobile App Service, Purpose of Use and Processing Method]
Personal information may be collected in the process of using the mobile app service, and it is processed as follows.
-
①Personal information Category
- □Android advertisement ID
- □Installed Applications
-
②Purpose of personal information
- □In-App advertisement
- □User analysis for advertisement
-
③Method of Collecting Personal Information
- □Auto collection when the user runs the app
-
④Personal Information Retention Period
- □When the purpose is achieved and until the app is deleted
It is used only for user analysis and advertisement for in-app advertising and is completely anonymized. The information listed above is de-identified and may be provided to third parties for purposes of marketing targeting an unspecified population. When the purpose is achieved, personal information will be destroyed and the above category will not be used when deleting the App.
- ▶ Block / allow advertising identifiers on Mobile phones
-
※ (Android) Settings > Privacy > Advertising > Reset Advertising ID or Delete Advertising ID
※ (iPhone) Settings > Privacy > Tracking > Allow apps to request tracking Off
Article 5 [Procedure and Method of Disposing Personal Information]
In principle, the Company will destroy personal information immediately when the purpose of collection and use of such information is attained. The procedure and method of destruction of the personal information of the Company are as follows:
- ① Destruction Procedure
-
- 1)Following the membership registration, your personal information will be retained by the Company and used for the provision of the services during the service period pursuant to the internal policy of the Company. However, in the case of membership withdrawal, after the purpose is achieved, it is transferred to a separate DB (separate filing cabinet in case of paper) and destroyed after being stored for a certain period of time according to internal policy and information protection reasons according to the related law (refer to the retention and usage period). However, if you delete your ID or request to cancel your membership, the information provided by you for membership subscription, etc. will be transmitted to a separate DB(a separate document box in the case of a paper form) after the purpose of collection is achieved and retained for a certain period of time and destroyed pursuant to the internal policies and other applicable laws and regulations (please see the section on retention and use period).
- 2)After transmission to a separate DB, the personal information will not be used for other purposes unless required by applicable laws.
- ② Method of Destruction
-
- 1)The Company destroys personal information stored in electronic file form by using technical methods that render such information irrecoverable.
- 2)Personal information printed on paper will be destroyed by shredding or incineration.
Article 6 [Provision and Sharing Personal Information with Third Parties]
The Company will use the personal information of the users within the scope as notified in “2. Purpose of Collection and Use of Personal Information,” and will not use the personal information of the users beyond the scope without prior consent from the users or disclose it to outside in principle. However, there are exceptions in the following cases:
- ① Exceptions
-
- 1)If the users have given consent to disclosure in advance.
- 2)When required under the applicable laws and regulations, or requested by investigative authorities for investigative purposes in accordance with the procedures and methods set forth in laws and regulations.
- ② GOM Lab’s provision of personal information to third parties is as follows.
-
provision of personal information to third parties Recipient Purpose of Use Issue Information Personal information retention and use of period Kakao Inc. Identification verification for issuing Talk Student/Company ID and sending event prizes. Name, Date of Birth, Mobile Phone Number Until the purpose of use is achieved
Article 7 [Outsourcing of Personal Information Processing]
The Company outsources the processing of personal information as follows to improve its services, and ensures to include certain necessary provisions in the outsourcing agreements to ensure safe management of personal information in accordance with the applicable laws and regulations. The Company's personal information processing agencies and the outsourced services are as follows:
| Outsourcee | Outsourced Service | Retention and Usage Period of Personal Information |
|---|---|---|
| Danal Co., Ltd | Korean Won Payment Agency (Credit/Debit card, Mobile Phone, Virtual Account) | Upon withdrawal from membership or until the termination of outsourcing agreement |
| Kakao Pay Co., Ltd | Korean Won Payment Agency (Credit/Debit card, kakaopay Money) | |
| Degica Co., Ltd. | Japan Yen Payment Agency (Credit card, Convenience store, Account transfer, Prepaid card) | |
| PayPal Pte. Ltd. | US Dollar Payment Agency (Credit card) | |
| LLC DBA FASTSPRING | US Dollar Payment Agency (Credit card) | |
| The White Communication | customer counseling information | 5 years |
The Company entrusts personal information to overseas to provide users with the stable service provision and the latest technology, and stores personal information acquired or created from users (physical storage location: USA) on the AWS (Amazon Web Services Inc.). AWS only physically manages the server and cannot access the user's personal information.
| Trustee | Previous Item | Previous Country | Previous Date and Method | Period of Retention and Use of Personal Information |
|---|---|---|---|---|
| AWS (Amazon Web Services Inc.) privacy@salesforce.com, privacyofficer@marketo.com +1-800-935-9935 |
Service usage records or collected personal information | United States (AWS Virginia region) | Transmission over the network at the time of service use | Until Service Change (Until the change of the cloud services currently used by the company) |
Article 8 [Rights of Users and Legal Representatives and Methods of Exercising]
- ①User may at any time request to inquire for or modify their registered personal information and to withdraw their membership.
- ②In order to view or modify a member's personal information, select "Edit” to modify or "Cancel Membership" to withdraw the membership. Or, users may contact the Personal Information Officer in writing, or via telephone or e-mail, and the Company will take necessary measures without delay.
- ③If you request for correction of any error in your personal information, the Company will not use or provide the personal information until the correction thereof is completed. Also, if any inaccurate personal information has been already provided to a third party, the Company will immediately notify the third party to make sure that the correction is made. Personal information terminated or deleted upon a user's request will be processed as set forth in “3. Retention and Use Period of Collected Personal Information” and will not be viewed or used for any other purposes.
- ④The rules for users under 14 years of age are as follows.
- ▶ For South Korean Users
-
-
1)When collecting personal information from users under the age of 14, GOM Lab collects the minimum amount of personal information to obtain consent from a legal representative.
□ Required Information : Name and email address of legal representative. -
2)When collecting personal information from users under the age of 14, GOM Lab may request minimum information such as email address of the legal representatives and confirm whether the legal representative has consented using the method below.
□ How to send an email that contains the consent and receive and email expressing consent from your legal representative.
-
1)When collecting personal information from users under the age of 14, GOM Lab collects the minimum amount of personal information to obtain consent from a legal representative.
- ▶ For Users in Other Countries(excluding South Korea)
-
- 1)If you are under 13 years of age, you cannot sign up for the service.
Article 9 [Installation/Operation and Refusal of Devices for Automatically Collecting Personal Information]
The Company uses cookies when providing services. Cookies are information that the server used for website operation sends to a user's computer browser, and are encrypted and stored on a user's computer hard disk.
The Company uses cookies for the following purposes:
- ① Purpose of Using Cookies
-
- 1)It is used to provide targeted marketing and personalized service by referring to the frequency and time of visits, areas of interest, and degree of event participation.
- ② Installation/Operation and Refusal of Cookies
-
- 1)Users can choose or reject the use of cookies.
- 2)However, please note that if you refuse to use cookies, there may be restrictions on using some services, and you are solely responsible for the outcome of this decision.
※ Configuration Method: On the top right of your web browser, go to Settings > More Tools > Privacy and Security > Cookies and Data on Other Sites
Article 10 [Technical and Managerial Protective Measures for Personal Information]
The Company establishes the following technical/managerial measures to secure safety and prevent any loss, theft, leakage, alteration, or damage of personal information when handling personal information of users:
- ① Password Encryption
- Users’ passwords may only identify their passwords in a one-way encrypted manner and thus confirmation and change of passwords may also be made only by users themselves who know what the passwords are.
- ② Preparation against Hacking Attempts, etc.
- The Company manages its system through firewall to prevent any leakage or damage of users' personal information due to hacking or computer viruses, etc., and regularly updates the up-to-date anti-virus programs to prevent leakage and damage of personal information.
- ③ Minimization of Employees Handling Personal Information and Training
- The Company's employees handling personal information are restricted to those in charge of processing personal information and are given a separate password to renew the authorized persons on a regular basis. Also, the Company use its efforts to comply with the Company's privacy policy by conducting occasional training on the responsible persons.
- ④ Cautions on Protecting Personal Information
- In principle, the Member's ID and password can be used only by the member self. The Company shall not be liable for any matters arising out of the leakage of personal information, such as IDs, passwords and resident registration numbers, caused from the member’s personal negligence or general risks arising from the Internet. We ask you to take extra care for security of your personal information to prevent any leakage of personal information through shared PCs.
Article 11 [Chief Privacy Officer and Manager]
The Company has appointed the department in charge of protecting users’ personal information and handling personal information-related complaints as well as the chief privacy officer.
- ▶ Chief Privacy Officer
-
- □Name: Kwangsub Kim
- □Position: Vice President
- □E-mail: gom.privacy@gomcorp.com
- ▶ Personal Information Protection Manager
-
- □Name: Jungha Cha
- □Position: Manager
- □E-mail: gom.privacy@gomcorp.com
If you need to report on personal information infringement or require further consultation, you may contact the following agencies:
- ①Personal Information Infringement Reporting Center (privacy.kisa.or.kr)
- ②Cyber Investigation Department of the Supreme Prosecutor’s Office (www.spo.go.kr)
- ③Cyber Safety Department of the National Police Agency (cyberbureau.police.go.kr)
Article 12 [Duty to Notify]
If there is any addition, deletion or modification of the current Privacy Policy, such addition, deletion or modification will be posted on the website notice from at least 7 days prior to such amendment.
Addendum
This Privacy Policy shall take into effect on Feb 18th, 2025.
GOM & Company Co., Ltd. (hereinafter the “Company”) complies with the Personal Information Protection Act and is committed to protecting the rights and interests of users so that users can receive services safely by establishing a privacy policy under relevant laws and regulations.
Through this Privacy Policy, the Company aims to inform you of the purpose and method of using the personal information provided by users and what measures are being taken to protect personal information.
Article 1 [Personal Information to be Collected and Method of Collection]
- ① Collected Items
-
-
1)In order to provide services at the time of initial membership registration, only the most essential and basic personal information is selectively collected according to the membership type.
- ▶ When registering as an Individual member
-
- □Mandatory Items: Email address, password, nickname, Country, age verification (over/under the age of 13)(South Korea – if under 14 years of age), date of birth, legal representatives’ name and email address
- □Optional Items: Contact Number
- ▶ When registering as a Business member
-
- □ Email address, password, nickname, Country, organization type, organization, manager name, age verification (over/under the age of 13), Contact Number
- □Optional Items: Company Registration Number
- ▶ Mandatory Items when registering with your Social Media account
-
- NAVER: Email Address, Profile Picture
- kakao: Email Address, Profile Picture
- Google: Email Address, Profile Picture
- Facebook: Email Address, Profile Picture
- LINE: Email Address, Profile Picture
- VK: Email Address, Profile Picture
-
2)The following information may be automatically generated and collected in the process of service usage or business processing:
- □Service use and suspension records, access logs, cookies, access IP information, payment records, PC device name, device type, and others
- □Mac Address, Disk Serial
- 3)Additional information may be collected only for the users using the other services with their email addresses or in the process of participating in an event. However, this shall apply only when the consent to additional collection of personal information is obtained.
-
4)When using the Talk Student ID service, the following information is mandatory to collect with user consent.
- □Required Information: Name, Date of Birth, Mobile Phone Number
-
1)In order to provide services at the time of initial membership registration, only the most essential and basic personal information is selectively collected according to the membership type.
- ② Method of Collection
-
The Company collects personal information as following methods:
- □Website membership registration, usage of paid/free service, written form, phone, fax, inquiry board, event participation, email, collection through generated information collection tools, and others
Article 2 [Purpose of Collection and Use of Personal Information]
- ①The Company collects users' personal information in order to ensure more safe and comfortable use of service based on trust and provide optimally customized services for users. Based on the personal information provided by the user, the Company is able to provide more useful information to the user at an optional level. The Company does not disclose the users' personal information without their prior consent, and is using the information collected as follows.
- ②Personal information registered by the user is used to facilitate the Company’s provision of services, such as performing what is agreed on service provision, payment for service provision, identity verification for membership services, identification, prevention of illegal use by unqualified members or unauthorized use, confirmation of age, handling of complaints and opinions, sending newsletters on service-related news, events, updates, etc. which are sent upon consent of the users.
- ③The Company may post advertisements, etc. in each service or menu based on the accurate personal information of the Users to provide various free services. The Company provides custom-based advertisements according to the type of users and does not to show or disclose users’ personal information to advertisers.
- ④The Company may use statistics on the use of services by the users and personal information, etc. registered by the users for marketing and advertising activities, such as development and specialization of new services (products), guidance on and solicitation of allied financial products (insurance, cards, etc.) and living convenience services, transmission of event announcement and other advertisement for profit-making purposes (telephone, mail, e-mail, text messages, etc.) and provision of services according to demographic characteristics.
Article 3 [Retention and Use Period of Collected Personal Information]
In principle, personal information will be destroyed when the purpose of collection or provision is achieved as below. However, the following information will be retained for the periods specified below.
-
①Records on Illegal Use
- □Grounds for retention: Prevention of illegal use
- □Retention period: 1 year
In addition, if it is required by the applicable laws and regulations to preserve such information, the Company shall retain the user information for a certain period prescribed by the applicable laws and regulations which is as follows:
- ②Records on contracts and withdrawal of offer, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ③Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ④Records on electronic financial transactions: 5 years (Electronic Financial Transactions Act)
- ⑤Records on consumer complaints and handling of disputes: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ⑥Records on visit: 3 months (Protection of Communications Secrets Act)
Article 4 [Personal Information Collection Items of Mobile App Service, Purpose of Use and Processing Method]
Personal information may be collected in the process of using the mobile app service, and it is processed as follows.
-
①Personal information Category
- □Android advertisement ID
- □Installed Applications
-
②Purpose of personal information
- □In-App advertisement
- □User analysis for advertisement
-
③Method of Collecting Personal Information
- □Auto collection when the user runs the app
-
④Personal Information Retention Period
- □When the purpose is achieved and until the app is deleted
It is used only for user analysis and advertisement for in-app advertising and is completely anonymized. The information listed above is de-identified and may be provided to third parties for purposes of marketing targeting an unspecified population. When the purpose is achieved, personal information will be destroyed and the above category will not be used when deleting the App.
- ▶ Block / allow advertising identifiers on Mobile phones
-
※ (Android) Settings > Privacy > Advertising > Reset Advertising ID or Delete Advertising ID
※ (iPhone) Settings > Privacy > Tracking > Allow apps to request tracking Off
Article 5 [Procedure and Method of Disposing Personal Information]
In principle, the Company will destroy personal information immediately when the purpose of collection and use of such information is attained. The procedure and method of destruction of the personal information of the Company are as follows:
- ① Destruction Procedure
-
- 1)Following the membership registration, your personal information will be retained by the Company and used for the provision of the services during the service period pursuant to the internal policy of the Company. However, in the case of membership withdrawal, after the purpose is achieved, it is transferred to a separate DB (separate filing cabinet in case of paper) and destroyed after being stored for a certain period of time according to internal policy and information protection reasons according to the related law (refer to the retention and usage period). However, if you delete your ID or request to cancel your membership, the information provided by you for membership subscription, etc. will be transmitted to a separate DB(a separate document box in the case of a paper form) after the purpose of collection is achieved and retained for a certain period of time and destroyed pursuant to the internal policies and other applicable laws and regulations (please see the section on retention and use period).
- 2)After transmission to a separate DB, the personal information will not be used for other purposes unless required by applicable laws.
- ② Method of Destruction
-
- 1)The Company destroys personal information stored in electronic file form by using technical methods that render such information irrecoverable.
- 2)Personal information printed on paper will be destroyed by shredding or incineration.
Article 6 [Provision and Sharing Personal Information with Third Parties]
The Company will use the personal information of the users within the scope as notified in “2. Purpose of Collection and Use of Personal Information,” and will not use the personal information of the users beyond the scope without prior consent from the users or disclose it to outside in principle. However, there are exceptions in the following cases:
- ① Exceptions
-
- 1)If the users have given consent to disclosure in advance.
- 2)When required under the applicable laws and regulations, or requested by investigative authorities for investigative purposes in accordance with the procedures and methods set forth in laws and regulations.
- ② GOM Lab’s provision of personal information to third parties is as follows.
-
provision of personal information to third parties Recipient Purpose of Use Issue Information Personal information retention and use of period Kakao Inc. Identification verification for issuing Talk Student ID Name, Date of Birth, Mobile Phone Number Until the purpose of use is achieved
Article 7 [Outsourcing of Personal Information Processing]
The Company outsources the processing of personal information as follows to improve its services, and ensures to include certain necessary provisions in the outsourcing agreements to ensure safe management of personal information in accordance with the applicable laws and regulations. The Company's personal information processing agencies and the outsourced services are as follows:
| Outsourcee | Outsourced Service | Retention and Usage Period of Personal Information |
|---|---|---|
| Danal Co., Ltd | Korean Won Payment Agency (Credit/Debit card, Mobile Phone, Virtual Account) | Upon withdrawal from membership or until the termination of outsourcing agreement |
| Kakao Pay Co., Ltd | Korean Won Payment Agency (Credit/Debit card, kakaopay Money) | |
| Degica Co., Ltd. | Japan Yen Payment Agency (Credit card, Convenience store, Account transfer, Prepaid card) | |
| PayPal Pte. Ltd. | US Dollar Payment Agency (Credit card) | |
| LLC DBA FASTSPRING | US Dollar Payment Agency (Credit card) | |
| The White Communication | customer counseling information | 5 years |
The Company entrusts personal information to overseas to provide users with the stable service provision and the latest technology, and stores personal information acquired or created from users (physical storage location: USA) on the AWS (Amazon Web Services Inc.). AWS only physically manages the server and cannot access the user's personal information.
| Trustee | Previous Item | Previous Country | Previous Date and Method | Period of Retention and Use of Personal Information |
|---|---|---|---|---|
| AWS (Amazon Web Services Inc.) privacy@salesforce.com, privacyofficer@marketo.com +1-800-935-9935 |
Service usage records or collected personal information | United States (AWS Virginia region) | Transmission over the network at the time of service use | Until Service Change (Until the change of the cloud services currently used by the company) |
Article 8 [Rights of Users and Legal Representatives and Methods of Exercising]
- ①User may at any time request to inquire for or modify their registered personal information and to withdraw their membership.
- ②In order to view or modify a member's personal information, select "Edit” to modify or "Cancel Membership" to withdraw the membership. Or, users may contact the Personal Information Officer in writing, or via telephone or e-mail, and the Company will take necessary measures without delay.
- ③If you request for correction of any error in your personal information, the Company will not use or provide the personal information until the correction thereof is completed. Also, if any inaccurate personal information has been already provided to a third party, the Company will immediately notify the third party to make sure that the correction is made. Personal information terminated or deleted upon a user's request will be processed as set forth in “3. Retention and Use Period of Collected Personal Information” and will not be viewed or used for any other purposes.
- ④The rules for users under 14 years of age are as follows.
- ▶ For South Korean Users
-
-
1)When collecting personal information from users under the age of 14, GOM Lab collects the minimum amount of personal information to obtain consent from a legal representative.
□ Required Information : Name and email address of legal representative. -
2)When collecting personal information from users under the age of 14, GOM Lab may request minimum information such as email address of the legal representatives and confirm whether the legal representative has consented using the method below.
□ How to send an email that contains the consent and receive and email expressing consent from your legal representative.
-
1)When collecting personal information from users under the age of 14, GOM Lab collects the minimum amount of personal information to obtain consent from a legal representative.
- ▶ For Users in Other Countries(excluding South Korea)
-
- 1)If you are under 13 years of age, you cannot sign up for the service.
Article 9 [Installation/Operation and Refusal of Devices for Automatically Collecting Personal Information]
The Company uses cookies when providing services. Cookies are information that the server used for website operation sends to a user's computer browser, and are encrypted and stored on a user's computer hard disk.
The Company uses cookies for the following purposes:
- ① Purpose of Using Cookies
-
- 1)It is used to provide targeted marketing and personalized service by referring to the frequency and time of visits, areas of interest, and degree of event participation.
- ② Installation/Operation and Refusal of Cookies
-
- 1)Users can choose or reject the use of cookies.
- 2)However, please note that if you refuse to use cookies, there may be restrictions on using some services, and you are solely responsible for the outcome of this decision.
※ Configuration Method: On the top right of your web browser, go to Settings > More Tools > Privacy and Security > Cookies and Data on Other Sites
Article 10 [Technical and Managerial Protective Measures for Personal Information]
The Company establishes the following technical/managerial measures to secure safety and prevent any loss, theft, leakage, alteration, or damage of personal information when handling personal information of users:
- ① Password Encryption
- Users’ passwords may only identify their passwords in a one-way encrypted manner and thus confirmation and change of passwords may also be made only by users themselves who know what the passwords are.
- ② Preparation against Hacking Attempts, etc.
- The Company manages its system through firewall to prevent any leakage or damage of users' personal information due to hacking or computer viruses, etc., and regularly updates the up-to-date anti-virus programs to prevent leakage and damage of personal information.
- ③ Minimization of Employees Handling Personal Information and Training
- The Company's employees handling personal information are restricted to those in charge of processing personal information and are given a separate password to renew the authorized persons on a regular basis. Also, the Company use its efforts to comply with the Company's privacy policy by conducting occasional training on the responsible persons.
- ④ Cautions on Protecting Personal Information
- In principle, the Member's ID and password can be used only by the member self. The Company shall not be liable for any matters arising out of the leakage of personal information, such as IDs, passwords and resident registration numbers, caused from the member’s personal negligence or general risks arising from the Internet. We ask you to take extra care for security of your personal information to prevent any leakage of personal information through shared PCs.
Article 11 [Chief Privacy Officer and Manager]
The Company has appointed the department in charge of protecting users’ personal information and handling personal information-related complaints as well as the chief privacy officer.
- ▶ Chief Privacy Officer
-
- □Name: Kwangsub Kim
- □Position: Vice President
- □E-mail: gom.privacy@gomcorp.com
- ▶ Personal Information Protection Manager
-
- □Name: Jungha Cha
- □Position: Manager
- □E-mail: gom.privacy@gomcorp.com
If you need to report on personal information infringement or require further consultation, you may contact the following agencies:
- ①Personal Information Infringement Reporting Center (privacy.kisa.or.kr)
- ②Cyber Investigation Department of the Supreme Prosecutor’s Office (www.spo.go.kr)
- ③Cyber Safety Department of the National Police Agency (cyberbureau.police.go.kr)
Article 12 [Duty to Notify]
If there is any addition, deletion or modification of the current Privacy Policy, such addition, deletion or modification will be posted on the website notice from at least 7 days prior to such amendment.
Addendum
This Privacy Policy shall take into effect on May 8th, 2024.
GOM & Company Co., Ltd. (hereinafter the “Company”) complies with the Personal Information Protection Act and is committed to protecting the rights and interests of users so that users can receive services safely by establishing a privacy policy under relevant laws and regulations.
Through this Privacy Policy, the Company aims to inform you of the purpose and method of using the personal information provided by users and what measures are being taken to protect personal information.
Article 1 [Personal Information to be Collected and Method of Collection]
- ① Collected Items
-
-
1)In order to provide services at the time of initial membership registration, only the most essential and basic personal information is selectively collected according to the membership type.
- ▶ When registering as an Individual member
-
- □Mandatory Items: Email address, password, nickname, Country, age verification (over/under the age of 13)(South Korea – if under 14 years of age), date of birth, legal representatives’ name and email address
- □Optional Items: Contact Number
- ▶ When registering as a Business member
-
- □ Email address, password, nickname, Country, organization type, organization, manager name, age verification (over/under the age of 13), Contact Number
- □Optional Items: Company Registration Number
- ▶ Mandatory Items when registering with your Social Media account
-
- NAVER: Email Address, Profile Picture
- kakao: Email Address, Profile Picture
- Google: Email Address, Profile Picture
- Facebook: Email Address, Profile Picture
- LINE: Email Address, Profile Picture
- VK: Email Address, Profile Picture
-
2)The following information may be automatically generated and collected in the process of service usage or business processing:
- □Service use and suspension records, access logs, cookies, access IP information, payment records, PC device name, device type, and others
- □Mac Address, Disk Serial
- 3)Additional information may be collected only for the users using the other services with their email addresses or in the process of participating in an event. However, this shall apply only when the consent to additional collection of personal information is obtained.
-
1)In order to provide services at the time of initial membership registration, only the most essential and basic personal information is selectively collected according to the membership type.
- ② Method of Collection
-
The Company collects personal information as following methods:
- □Website membership registration, usage of paid/free service, written form, phone, fax, inquiry board, event participation, email, collection through generated information collection tools, and others
Article 2 [Purpose of Collection and Use of Personal Information]
- ①The Company collects users' personal information in order to ensure more safe and comfortable use of service based on trust and provide optimally customized services for users. Based on the personal information provided by the user, the Company is able to provide more useful information to the user at an optional level. The Company does not disclose the users' personal information without their prior consent, and is using the information collected as follows.
- ②Personal information registered by the user is used to facilitate the Company’s provision of services, such as performing what is agreed on service provision, payment for service provision, identity verification for membership services, identification, prevention of illegal use by unqualified members or unauthorized use, confirmation of age, handling of complaints and opinions, sending newsletters on service-related news, events, updates, etc. which are sent upon consent of the users.
- ③The Company may post advertisements, etc. in each service or menu based on the accurate personal information of the Users to provide various free services. The Company provides custom-based advertisements according to the type of users and does not to show or disclose users’ personal information to advertisers.
- ④The Company may use statistics on the use of services by the users and personal information, etc. registered by the users for marketing and advertising activities, such as development and specialization of new services (products), guidance on and solicitation of allied financial products (insurance, cards, etc.) and living convenience services, transmission of event announcement and other advertisement for profit-making purposes (telephone, mail, e-mail, text messages, etc.) and provision of services according to demographic characteristics.
Article 3 [Retention and Use Period of Collected Personal Information]
In principle, personal information will be destroyed when the purpose of collection or provision is achieved as below. However, the following information will be retained for the periods specified below.
-
①Records on Illegal Use
- □Grounds for retention: Prevention of illegal use
- □Retention period: 1 year
In addition, if it is required by the applicable laws and regulations to preserve such information, the Company shall retain the user information for a certain period prescribed by the applicable laws and regulations which is as follows:
- ②Records on contracts and withdrawal of offer, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ③Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ④Records on electronic financial transactions: 5 years (Electronic Financial Transactions Act)
- ⑤Records on consumer complaints and handling of disputes: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ⑥Records on visit: 3 months (Protection of Communications Secrets Act)
Article 4 [Personal Information Collection Items of Mobile App Service, Purpose of Use and Processing Method]
Personal information may be collected in the process of using the mobile app service, and it is processed as follows.
-
①Personal information Category
- □Android advertisement ID
- □Installed Applications
-
②Purpose of personal information
- □In-App advertisement
- □User analysis for advertisement
-
③Method of Collecting Personal Information
- □Auto collection when the user runs the app
-
④Personal Information Retention Period
- □When the purpose is achieved and until the app is deleted
It is used only for user analysis and advertisement for in-app advertising and is completely anonymized. The information listed above is de-identified and may be provided to third parties for purposes of marketing targeting an unspecified population. When the purpose is achieved, personal information will be destroyed and the above category will not be used when deleting the App.
- ▶ Block / allow advertising identifiers on Mobile phones
-
※ (Android) Settings > Privacy > Advertising > Reset Advertising ID or Delete Advertising ID
※ (iPhone) Settings > Privacy > Tracking > Allow apps to request tracking Off
Article 5 [Procedure and Method of Disposing Personal Information]
In principle, the Company will destroy personal information immediately when the purpose of collection and use of such information is attained. The procedure and method of destruction of the personal information of the Company are as follows:
- ① Destruction Procedure
-
- 1)Following the membership registration, your personal information will be retained by the Company and used for the provision of the services during the service period pursuant to the internal policy of the Company. However, in the case of membership withdrawal, after the purpose is achieved, it is transferred to a separate DB (separate filing cabinet in case of paper) and destroyed after being stored for a certain period of time according to internal policy and information protection reasons according to the related law (refer to the retention and usage period). However, if you delete your ID or request to cancel your membership, the information provided by you for membership subscription, etc. will be transmitted to a separate DB(a separate document box in the case of a paper form) after the purpose of collection is achieved and retained for a certain period of time and destroyed pursuant to the internal policies and other applicable laws and regulations (please see the section on retention and use period).
- 2)After transmission to a separate DB, the personal information will not be used for other purposes unless required by applicable laws.
- ② Method of Destruction
-
- 1)The Company destroys personal information stored in electronic file form by using technical methods that render such information irrecoverable.
- 2)Personal information printed on paper will be destroyed by shredding or incineration.
Article 6 [Provision and Sharing Personal Information with Third Parties]
The Company will use the personal information of the users within the scope as notified in “2. Purpose of Collection and Use of Personal Information,” and will not use the personal information of the users beyond the scope without prior consent from the users or disclose it to outside in principle. However, there are exceptions in the following cases:
- ①If the users have given consent to disclosure in advance;
- ②When required under the applicable laws and regulations, or requested by investigative authorities for investigative purposes in accordance with the procedures and methods set forth in laws and regulations.
Article 7 [Outsourcing of Personal Information Processing]
The Company outsources the processing of personal information as follows to improve its services, and ensures to include certain necessary provisions in the outsourcing agreements to ensure safe management of personal information in accordance with the applicable laws and regulations. The Company's personal information processing agencies and the outsourced services are as follows:
| Outsourcee | Outsourced Service | Retention and Usage Period of Personal Information |
|---|---|---|
| Danal Co., Ltd | Korean Won Payment Agency (Credit/Debit card, Mobile Phone, Virtual Account) | Upon withdrawal from membership or until the termination of outsourcing agreement |
| Kakao Pay Co., Ltd | Korean Won Payment Agency (Credit/Debit card, kakaopay Money) | |
| Degica Co., Ltd. | Japan Yen Payment Agency (Credit card, Convenience store, Account transfer, Prepaid card) | |
| PayPal Pte. Ltd. | US Dollar Payment Agency (Credit card) | |
| LLC DBA FASTSPRING | US Dollar Payment Agency (Credit card) | |
| The White Communication | customer counseling information | 5 years |
The Company entrusts personal information to overseas to provide users with the stable service provision and the latest technology, and stores personal information acquired or created from users (physical storage location: USA) on the AWS (Amazon Web Services Inc.). AWS only physically manages the server and cannot access the user's personal information.
| Trustee | Previous Item | Previous Country | Previous Date and Method | Period of Retention and Use of Personal Information |
|---|---|---|---|---|
| AWS (Amazon Web Services Inc.) privacy@salesforce.com, privacyofficer@marketo.com +1-800-935-9935 |
Service usage records or collected personal information | United States (AWS Virginia region) | Transmission over the network at the time of service use | Until Service Change (Until the change of the cloud services currently used by the company) |
Article 8 [Rights of Users and Legal Representatives and Methods of Exercising]
- ①User may at any time request to inquire for or modify their registered personal information and to withdraw their membership.
- ②In order to view or modify a member's personal information, select "Edit” to modify or "Cancel Membership" to withdraw the membership. Or, users may contact the Personal Information Officer in writing, or via telephone or e-mail, and the Company will take necessary measures without delay.
- ③If you request for correction of any error in your personal information, the Company will not use or provide the personal information until the correction thereof is completed. Also, if any inaccurate personal information has been already provided to a third party, the Company will immediately notify the third party to make sure that the correction is made. Personal information terminated or deleted upon a user's request will be processed as set forth in “3. Retention and Use Period of Collected Personal Information” and will not be viewed or used for any other purposes.
- ④The rules for users under 14 years of age are as follows.
- ▶ For South Korean Users
-
-
1)When collecting personal information from users under the age of 14, GOM Lab collects the minimum amount of personal information to obtain consent from a legal representative.
□ Required Information : Name and email address of legal representative. -
2)When collecting personal information from users under the age of 14, GOM Lab may request minimum information such as email address of the legal representatives and confirm whether the legal representative has consented using the method below.
□ How to send an email that contains the consent and receive and email expressing consent from your legal representative.
-
1)When collecting personal information from users under the age of 14, GOM Lab collects the minimum amount of personal information to obtain consent from a legal representative.
- ▶ For Users in Other Countries(excluding South Korea)
-
- 1)If you are under 13 years of age, you cannot sign up for the service.
Article 9 [Installation/Operation and Refusal of Devices for Automatically Collecting Personal Information]
The Company uses cookies when providing services. Cookies are information that the server used for website operation sends to a user's computer browser, and are encrypted and stored on a user's computer hard disk.
The Company uses cookies for the following purposes:
- ① Purpose of Using Cookies
-
- 1)It is used to provide targeted marketing and personalized service by referring to the frequency and time of visits, areas of interest, and degree of event participation.
- ② Installation/Operation and Refusal of Cookies
-
- 1)Users can choose or reject the use of cookies.
- 2)However, please note that if you refuse to use cookies, there may be restrictions on using some services, and you are solely responsible for the outcome of this decision.
※ Configuration Method: On the top right of your web browser, go to Settings > More Tools > Privacy and Security > Cookies and Data on Other Sites
Article 10 [Technical and Managerial Protective Measures for Personal Information]
The Company establishes the following technical/managerial measures to secure safety and prevent any loss, theft, leakage, alteration, or damage of personal information when handling personal information of users:
- ① Password Encryption
- Users’ passwords may only identify their passwords in a one-way encrypted manner and thus confirmation and change of passwords may also be made only by users themselves who know what the passwords are.
- ② Preparation against Hacking Attempts, etc.
- The Company manages its system through firewall to prevent any leakage or damage of users' personal information due to hacking or computer viruses, etc., and regularly updates the up-to-date anti-virus programs to prevent leakage and damage of personal information.
- ③ Minimization of Employees Handling Personal Information and Training
- The Company's employees handling personal information are restricted to those in charge of processing personal information and are given a separate password to renew the authorized persons on a regular basis. Also, the Company use its efforts to comply with the Company's privacy policy by conducting occasional training on the responsible persons.
- ④ Cautions on Protecting Personal Information
- In principle, the Member's ID and password can be used only by the member self. The Company shall not be liable for any matters arising out of the leakage of personal information, such as IDs, passwords and resident registration numbers, caused from the member’s personal negligence or general risks arising from the Internet. We ask you to take extra care for security of your personal information to prevent any leakage of personal information through shared PCs.
Article 11 [Chief Privacy Officer and Manager]
The Company has appointed the department in charge of protecting users’ personal information and handling personal information-related complaints as well as the chief privacy officer.
- ▶ Chief Privacy Officer
-
- □Name: Kwangsub Kim
- □Position: Vice President
- □E-mail: gom.privacy@gomcorp.com
- ▶ Personal Information Protection Manager
-
- □Name: Jungha Cha
- □Position: Manager
- □E-mail: gom.privacy@gomcorp.com
If you need to report on personal information infringement or require further consultation, you may contact the following agencies:
- ①Personal Information Infringement Reporting Center (privacy.kisa.or.kr)
- ②Cyber Investigation Department of the Supreme Prosecutor’s Office (www.spo.go.kr)
- ③Cyber Safety Department of the National Police Agency (cyberbureau.police.go.kr)
Article 12 [Duty to Notify]
If there is any addition, deletion or modification of the current Privacy Policy, such addition, deletion or modification will be posted on the website notice from at least 7 days prior to such amendment.
Addendum
This Privacy Policy shall take into effect on March 7th, 2024.
GOM & Company Co., Ltd. (hereinafter the “Company”) complies with the Personal Information Protection Act and is committed to protecting the rights and interests of users so that users can receive services safely by establishing a privacy policy under relevant laws and regulations.
Through this Privacy Policy, the Company aims to inform you of the purpose and method of using the personal information provided by users and what measures are being taken to protect personal information.
Article 1 [Personal Information to be Collected and Method of Collection]
- ① Collected Items
-
-
1)In order to provide services at the time of initial membership registration, only the most essential and basic personal information is selectively collected according to the membership type.
- ▶ When registering as an Individual member
-
- □Mandatory Items: Email address, password, nickname, Country, age verification (over/under the age of 13)(South Korea – if under 14 years of age), date of birth, legal representatives’ name and email address
- □Optional Items: Contact Number
- ▶ When registering as a Business member
-
- □Mandatory Items: Email address, password, nickname, Country, organization type, organization, manager name, age verification (over/under the age of 13)
- □Optional Items: Company Registration Number, Contact Number
- ▶ Mandatory Items when registering with your Social Media account
-
- NAVER: Email Address, Profile Picture
- kakao: Email Address, Profile Picture
- Google: Email Address, Profile Picture
- Facebook: Email Address, Profile Picture
- LINE: Email Address, Profile Picture
- VK: Email Address, Profile Picture
-
2)The following information may be automatically generated and collected in the process of service usage or business processing:
- □Service use and suspension records, access logs, cookies, access IP information, payment records, PC device name, device type, and others
- □Mac Address, Disk Serial
- 3)Additional information may be collected only for the users using the other services with their email addresses or in the process of participating in an event. However, this shall apply only when the consent to additional collection of personal information is obtained.
-
1)In order to provide services at the time of initial membership registration, only the most essential and basic personal information is selectively collected according to the membership type.
- ② Method of Collection
-
The Company collects personal information as following methods:
- □Website membership registration, usage of paid/free service, written form, phone, fax, inquiry board, event participation, email, collection through generated information collection tools, and others
Article 2 [Purpose of Collection and Use of Personal Information]
- ①he Company collects users' personal information in order to ensure more safe and comfortable use of service based on trust and provide optimally customized services for users. Based on the personal information provided by the user, the Company is able to provide more useful information to the user at an optional level. The Company does not disclose the users' personal information without their prior consent, and is using the information collected as follows.
- ②Personal information registered by the user is used to facilitate the Company’s provision of services, such as performing what is agreed on service provision, payment for service provision, identity verification for membership services, identification, prevention of illegal use by unqualified members or unauthorized use, confirmation of age, handling of complaints and opinions, sending newsletters on service-related news, events, updates, etc. which are sent upon consent of the users.
- ③The Company may post advertisements, etc. in each service or menu based on the accurate personal information of the Users to provide various free services. The Company provides custom-based advertisements according to the type of users and does not to show or disclose users’ personal information to advertisers.
- ④The Company may use statistics on the use of services by the users and personal information, etc. registered by the users for marketing and advertising activities, such as development and specialization of new services (products), guidance on and solicitation of allied financial products (insurance, cards, etc.) and living convenience services, transmission of event announcement and other advertisement for profit-making purposes (telephone, mail, e-mail, text messages, etc.) and provision of services according to demographic characteristics.
Article 3 [Retention and Use Period of Collected Personal Information]
In principle, personal information will be destroyed when the purpose of collection or provision is achieved as below. However, the following information will be retained for the periods specified below.
-
①Records on Illegal Use
- □Grounds for retention: Prevention of illegal use
- □Retention period: 1 year
In addition, if it is required by the applicable laws and regulations to preserve such information, the Company shall retain the user information for a certain period prescribed by the applicable laws and regulations which is as follows:
- ②Records on contracts and withdrawal of offer, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ③Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ④Records on electronic financial transactions: 5 years (Electronic Financial Transactions Act)
- ⑤Records on consumer complaints and handling of disputes: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ⑥Records on visit: 3 months (Protection of Communications Secrets Act)
Article 4 [Personal Information Collection Items of Mobile App Service, Purpose of Use and Processing Method]
Personal information may be collected in the process of using the mobile app service, and it is processed as follows.
-
①Personal information Category
- □Android advertisement ID
- □Installed Applications
-
①Purpose of personal information
- □In-App advertisement
- □User analysis for advertisement
-
①Method of Collecting Personal Information
- □Auto collection when the user runs the app
-
①Personal Information Retention Period
- □When the purpose is achieved and until the app is deleted
It is used only for user analysis and advertisement for in-app advertising and is completely anonymized. The information listed above is de-identified and may be provided to third parties for purposes of marketing targeting an unspecified population. When the purpose is achieved, personal information will be destroyed and the above category will not be used when deleting the App.
- ▶ Block / allow advertising identifiers on Mobile phones
-
※ (Android) Settings > Privacy > Advertising > Reset Advertising ID or Delete Advertising ID
※ (iPhone) Settings > Privacy > Tracking > Allow apps to request tracking Off
Article 5 [Procedure and Method of Disposing Personal Information]
In principle, the Company will destroy personal information immediately when the purpose of collection and use of such information is attained. The procedure and method of destruction of the personal information of the Company are as follows:
- ① Destruction Procedure
-
- 1)Following the membership registration, your personal information will be retained by the Company and used for the provision of the services during the service period pursuant to the internal policy of the Company. However, in the case of membership withdrawal, after the purpose is achieved, it is transferred to a separate DB (separate filing cabinet in case of paper) and destroyed after being stored for a certain period of time according to internal policy and information protection reasons according to the related law (refer to the retention and usage period). However, if you delete your ID or request to cancel your membership, the information provided by you for membership subscription, etc. will be transmitted to a separate DB(a separate document box in the case of a paper form) after the purpose of collection is achieved and retained for a certain period of time and destroyed pursuant to the internal policies and other applicable laws and regulations (please see the section on retention and use period).
- 2)After transmission to a separate DB, the personal information will not be used for other purposes unless required by applicable laws.
- ② Method of Destruction
-
- 1)The Company destroys personal information stored in electronic file form by using technical methods that render such information irrecoverable.
- 2)Personal information printed on paper will be destroyed by shredding or incineration.
Article 6 [Provision and Sharing Personal Information with Third Parties]
The Company will use the personal information of the users within the scope as notified in “2. Purpose of Collection and Use of Personal Information,” and will not use the personal information of the users beyond the scope without prior consent from the users or disclose it to outside in principle. However, there are exceptions in the following cases:
- ①If the users have given consent to disclosure in advance;
- ②When required under the applicable laws and regulations, or requested by investigative authorities for investigative purposes in accordance with the procedures and methods set forth in laws and regulations.
Article 7 [Outsourcing of Personal Information Processing]
The Company outsources the processing of personal information as follows to improve its services, and ensures to include certain necessary provisions in the outsourcing agreements to ensure safe management of personal information in accordance with the applicable laws and regulations. The Company's personal information processing agencies and the outsourced services are as follows:
| Outsourcee | Outsourced Service | Retention and Usage Period of Personal Information |
|---|---|---|
| Danal Co., Ltd | Korean Won Payment Agency (Credit/Debit card, Mobile Phone, Virtual Account) | Upon withdrawal from membership or until the termination of outsourcing agreement |
| Kakao Pay Co., Ltd | Korean Won Payment Agency (Credit/Debit card, kakaopay Money) | |
| Degica Co., Ltd. | Japan Yen Payment Agency (Credit card, Convenience store, Account transfer, Prepaid card) | |
| PayPal Pte. Ltd. | US Dollar Payment Agency (Credit card) | |
| LLC DBA FASTSPRING | US Dollar Payment Agency (Credit card) | |
| The White Communication | customer counseling information | 5 years |
The Company entrusts personal information to overseas to provide users with the stable service provision and the latest technology, and stores personal information acquired or created from users (physical storage location: USA) on the AWS (Amazon Web Services Inc.). AWS only physically manages the server and cannot access the user's personal information.
| Trustee | Previous Item | Previous Country | Previous Date and Method | Period of Retention and Use of Personal Information |
|---|---|---|---|---|
| AWS (Amazon Web Services Inc.) privacy@salesforce.com, privacyofficer@marketo.com +1-800-935-9935 |
Service usage records or collected personal information | United States (AWS Virginia region) | Transmission over the network at the time of service use | Until Service Change (Until the change of the cloud services currently used by the company) |
Article 8 [Rights of Users and Legal Representatives and Methods of Exercising]
- ①User may at any time request to inquire for or modify their registered personal information and to withdraw their membership.
- ②In order to view or modify a member's personal information, select "Edit” to modify or "Cancel Membership" to withdraw the membership. Or, users may contact the Personal Information Officer in writing, or via telephone or e-mail, and the Company will take necessary measures without delay.
- ③If you request for correction of any error in your personal information, the Company will not use or provide the personal information until the correction thereof is completed. Also, if any inaccurate personal information has been already provided to a third party, the Company will immediately notify the third party to make sure that the correction is made. Personal information terminated or deleted upon a user's request will be processed as set forth in “3. Retention and Use Period of Collected Personal Information” and will not be viewed or used for any other purposes.
- ④The rules for users under 14 years of age are as follows.
- ▶ 한국 이용자의 경우
-
-
1)When collecting personal information from users under the age of 14, GOM Lab collects the minimum amount of personal information to obtain consent from a legal representative.
□ Required Information : Name and email address of legal representative. -
2)When collecting personal information from users under the age of 14, GOM Lab may request minimum information such as email address of the legal representatives and confirm whether the legal representative has consented using the method below.
□ How to send an email that contains the consent and receive and email expressing consent from your legal representative.
-
1)When collecting personal information from users under the age of 14, GOM Lab collects the minimum amount of personal information to obtain consent from a legal representative.
- ▶ For Users in Other Countries(excluding South Korea)
-
- 1)If you are under 13 years of age, you cannot sign up for the service.
Article 9 [Installation/Operation and Refusal of Devices for Automatically Collecting Personal Information]
The Company uses cookies when providing services. Cookies are information that the server used for website operation sends to a user's computer browser, and are encrypted and stored on a user's computer hard disk.
The Company uses cookies for the following purposes:
- ① Purpose of Using Cookies
-
- 1)It is used to provide targeted marketing and personalized service by referring to the frequency and time of visits, areas of interest, and degree of event participation.
- ② Installation/Operation and Refusal of Cookies
-
- 1)Users can choose or reject the use of cookies.
- 2)However, please note that if you refuse to use cookies, there may be restrictions on using some services, and you are solely responsible for the outcome of this decision.
※ Configuration Method: On the top right of your web browser, go to Settings > More Tools > Privacy and Security > Cookies and Data on Other Sites
Article 10 [Technical and Managerial Protective Measures for Personal Information]
The Company establishes the following technical/managerial measures to secure safety and prevent any loss, theft, leakage, alteration, or damage of personal information when handling personal information of users:
- ① Password Encryption
- Users’ passwords may only identify their passwords in a one-way encrypted manner and thus confirmation and change of passwords may also be made only by users themselves who know what the passwords are.
- ② Preparation against Hacking Attempts, etc.
- The Company manages its system through firewall to prevent any leakage or damage of users' personal information due to hacking or computer viruses, etc., and regularly updates the up-to-date anti-virus programs to prevent leakage and damage of personal information.
- ③ Minimization of Employees Handling Personal Information and Training
- The Company's employees handling personal information are restricted to those in charge of processing personal information and are given a separate password to renew the authorized persons on a regular basis. Also, the Company use its efforts to comply with the Company's privacy policy by conducting occasional training on the responsible persons.
- ④ Cautions on Protecting Personal Information
- In principle, the Member's ID and password can be used only by the member self. The Company shall not be liable for any matters arising out of the leakage of personal information, such as IDs, passwords and resident registration numbers, caused from the member’s personal negligence or general risks arising from the Internet. We ask you to take extra care for security of your personal information to prevent any leakage of personal information through shared PCs.
Article 11 [Chief Privacy Officer and Manager]
The Company has appointed the department in charge of protecting users’ personal information and handling personal information-related complaints as well as the chief privacy officer.
- ▶ Chief Privacy Officer
-
- □Name: Kwangsub Kim
- □Position: Vice President
- □Contact Number: 1668-2370
- □E-mail: gom.privacy@gomcorp.com
- ▶ Personal Information Protection Manager
-
- □Name: Jungha Cha
- □Position: Manager
- □Contact Number: 1668-2370
- □E-mail: gom.privacy@gomcorp.com
If you need to report on personal information infringement or require further consultation, you may contact the following agencies:
- ①Personal Information Infringement Reporting Center (privacy.kisa.or.kr / 118 without regional code)
- ②Cyber Investigation Department of the Supreme Prosecutor’s Office (www.spo.go.kr / 1301 without regional code)
- ③Cyber Safety Department of the National Police Agency (cyberbureau.police.go.kr / 182 without regional code)
Article 12 [Duty to Notify]
If there is any addition, deletion or modification of the current Privacy Policy, such addition, deletion or modification will be posted on the website notice from at least 7 days prior to such amendment.
Addendum
This Privacy Policy shall take into effect on January 2nd, 2024.
20230104
WHAT THIS PRIVACY POLICY COVERS
This policy covers how GOM & Company treats personal information that GOM & Company collects and receives.
The information we collet is personally identifiable like your name, address, email address, phone number, IP address or device information(unique identifiers, OS)and generally technical about your device such as OS, browser types or whether programs are installed. This is not otherwise publicly available.
This policy does not apply to the practices of companies that GOM & Company does not own or control, or to people that GOM & Company does not employ or manage.
COMMITMENT TO YOUR PRIVACY
This site is owned and operated by GOM & Company. Your privacy on the Internet is of the utmost importance to us. At GOM & Company, we want to make your experience online satisfying and safe.
Because we gather certain types of information about our users, we feel you should fully understand our policy and the terms and conditions surrounding the capture and use of that information. This privacy statement discloses what information we gather and how we use it.
INFORMATION GOM & Company GATHERS AND TRACKS
GOM & Company gathers two types of information about users
Information that users provide through optional, voluntary submissions.
Information GOM & Company gathers through aggregated tracking information derived mainly by tallying page views throughout our sites. This information allows us to better tailor our content to readers' needs and to help our advertisers and sponsors better understand the demographics of our audience. Because GOM & Company derives its revenue mainly from sponsorships and advertising, providing such aggregated demographic data is essential to keeping our service free to users. Under no circumstances does GOM & Company divulge any information about an individual user to a third party.
GOM & Company Gathers User Information In The Following Processes
The following information may be collected in process of using mobile app service.
*Personal information Category
-Android advertisement ID
-Installed Applications
*Purpose of personal information
-In-App advertisement
-User analysis for advertisement
*Method of Collecting Personal Information
-Auto collection when the user runs the app
*Personal Information Retention Period
-When the purpose is achieved and until the app is deleted
It is used only for user analysis and in-App advertisement which is completely anonymous.
The information will not be identified and used only for marketing purposes targeting unspecified 3rd party (Marketing: TDI Play Co., Ltd., location : 601-81-37139, customer center: +82-(0)70-5097-1656)
When the purpose is achieved, personal information will be destroyed and the above category will not be used when deleting the App.
* Block / allow advertising identifiers on smartphones
*(1) (Android) ① Settings → ② Privacy → ③ Advertising → ③ Reset Advertising ID or Delete Advertising ID*
*(2) (iPhone) ① Settings → ② Privacy → ③ Tracking → ④ Allow apps to request tracking Off*
※ Depending on the mobile OS version, menu and method might be slightly different
When a user views different webpages or downloads GOM software
When a user writes us an email
When a user buys paid services
Optional Voluntary Information
We offer the following free services, which require some type of voluntary submission of personal information by users
Newsletter
PRIVACY POLICY
Electronic newsletters policy (Dispatches)
We will offer a free electronic newsletter to users. GOM & Company gathers the email addresses of users who voluntarily subscribe. Users may remove themselves from this mailing list by following the link provided in every newsletter that points users to the subscription management page. Users can also subscribe to the newsletters at the time of registration.
Children
Consistent with the Federal Children's Online Privacy Protection Act of 1998 (COPPA), User who is under 13 years old cannot register for the GOMLab services.
Usage tracking
GOM & Company tracks user traffic patterns throughout all of our sites. However, we do not correlate this information with data about individual users. GOM & Company does break down overall usage statistics according to a user's domain name, browser type, and MIME type by reading this information from the browser string (information contained in every user's browser).
GOM & Company sometimes tracks and catalogs the search terms that users enter in our Search function, but this tracking is never associated with individual users. We use tracking information to determine which areas of our sites users like and don't like based on traffic to those areas. We do not track what individual users read, but rather how well each page performs overall. This helps us continue to build a better service for you.
Cookies
We may place a text file called a "cookie" in the browser files of your computer. The cookie itself does not contain Personal Information although it will enable us to relate your use of this site to information that you have specifically and knowingly provided. But the only personal information a cookie can contain is information you supply yourself. A cookie can't read data off your hard disk or read cookie files created by other sites. GOM & Company uses cookies to track user traffic patterns (as described above). Our advertising system delivers a one-time cookie to better track ad impressions and click rates.
You can refuse cookies by turning them off in your browser. If you've set your browser to warn you before accepting cookies, you will receive the warning message with each cookie. You do not need to have cookies turned on to use this site.
Advertisement
We may use third-party advertising companies to serve ads when you visit our website.
Commission for collected personal information
For carrying out services, GOM & Company commissions external professional companies (subcontractors) to process personal information as follows. This commissioned works for processing personal information are carried out by each subcontractor and service only if necessary for providing that service.
| Name of subcontractors | Description of commissioned works (services) |
|---|---|
| PayPal Pte. Ltd. | US dollar payment agent (Credit card) |
| Avangate B.V. | US dollar payment agent (Credit card) |
| LLC DBA FASTSPRING | payment agent (Credit card, Debit card, PayPal) |
The company entrusts personal information to overseas to provide users with the stable service provision and the latest technology, and stores personal information acquired or created from users (physical storage location: USA) on the AWS (Amazon Web Services Inc.). AWS only physically manages the server and cannot access the user's personal information.
| Trustee | Previous item | Previous Country | Previous Date and Method | Period of Retention and Use of Personal Information |
|---|---|---|---|---|
| AWS (Amazon Web Services Inc.) | Service usage records or collected personal information | United States (AWS Virginia region) | Transmission over the network at the time of service use | Until Service Change (Until the change of the cloud services currently used by the company) |
USE OF INFORMATION
GOM & Company uses any information voluntarily given by our users to enhance their experience in our network of sites, whether to provide interactive or personalized elements on the sites or to better prepare future content based on the interests of our users.
When we use tracking information to determine which areas of our sites users like and don't like based on traffic to those areas. We do not track what individual users read, but rather how well each page performs overall. This helps us continue to build a better service for you. We track search terms entered in Search function as one of many measures of what interests our users. But we don't track which terms a particular user enters.
GOM & Company creates aggregate reports on user demographics and traffic patterns for advertisers, sponsors and partners. This allows our advertisers to advertise more effectively, and allows our users to receive advertisements that are pertinent to their needs. Because we don't track the usage patterns of individual users, an advertiser or sponsor will never know that a specific user clicked their ad. We will not disclose any information about any individual user except to comply with applicable law or valid legal process or to protect the personal safety of our users or the public.
SHARING OF THE INFORMATION
GOM & Company uses the above-described information to tailor our content to suit your needs and help our advertisers better understand our audience's demographics. This is essential to keeping our service free. We will not share information about individual users with any third party, except to comply with applicable law or valid legal process or to protect the personal safety of our users or the public.
SECURITY
GOM & Company operates secure data networks protected by industry standard firewall and password protection systems. Our security and privacy policies are periodically reviewed and enhanced as necessary and only authorized individuals have access to the information provided by our customers.
YOUR CONSENT
By using this site, you consent to the collection and use of this information by GOM & Company. If we decide to change our privacy policy, we will post those changes on this page so that you are always aware of what information we collect, how we use it, and under what circumstances we disclose it.
DATA SUBJECT RIGHTS
Please note that you have the right to request access to and rectification or erasure of your personal data, or to restrict or to object to the processing of your personal data. In order to submit a request for accessing and/or deleting your information, please send an email with your request to the following address: info@gomcorp.com. Please note that we will process your request subject to verification of your identity
DPO (Data Protection Officer)
In order to protect customer's personal information and handle complaints regarding personal information, GOM Lab has designated Data Protection Officer as follows:
Personal data protection Officer
Name : Kwangsub Kim
Position : Director
Contact Number : 1688-2370
e-Mail : gom.privacy@gomcorp.com
Personal data protection Manager
Name : Cha Jeongha
Position : General Manager
Contact Number : 1688-2370
e-Mail : gom.privacy@gomcorp.com