DINSS PLUS (hereinafter referred to as the “Company”) complies with the personal information protection provisions of applicable laws that information and communications service providers must observe, including the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Act on Promotion of Information and Communications Network Utilization and Information Protection. The Company has established this Privacy Policy in accordance with applicable laws and makes every effort to protect users’ rights and interests.
This Privacy Policy may change in response to changes in laws or guidelines concerning personal information protection or changes in Company policy. Users are therefore advised to check it regularly when visiting our website.
The Company’s Privacy Policy is as follows.
1. Definitions Used in This Privacy Policy
① “Personal information” means information about an individual, such as a name or resident registration number, that can identify a specific person through symbols, text, voice, sound, images, or similar information. This includes information that cannot identify a specific individual on its own but can do so when readily combined with other information.
② “User” means a person who accesses the DINSS PLUS website (https://dinspluseng.web12.kr) and receives services provided by the Company in accordance with these terms.
2. Consent to the Collection of Personal Information
The Company provides a procedure through which users may click an “Agree” or “Disagree” button regarding the Company’s Privacy Policy or Terms of Use.
If a user indicates agreement, the user is deemed to have consented to the collection of personal information.
3. Personal Information Collected and Collection Methods
① The Company collects the following personal information to facilitate customer consultation and provide various services.
[Information collected for online inquiries and newsletters]
- Online inquiries, responses, and customer consultation: name, email address, and mobile phone number
- Newsletter subscriptions and delivery: name and email address
IP address: cookies, visit dates and times, and service usage records
② Methods of collecting personal information
The Company collects personal information through the following methods.
Website consultation boards, telephone, and email
4. Protection of Children’s Personal Information
① When collecting personal information from children under the age of 14, the Company obtains consent from their legal representatives.
② The legal representative of a child under the age of 14 may request access to or correction of the child’s personal information, or withdraw consent. The Company will take the necessary measures without delay upon receiving such a request.
5. Purposes of Collecting and Using Personal Information
① Provision of services
o Use of various content provided to users and handling consultation inquiries
o Handling complaints and other grievances, and delivering notices
③ Development of new services and use for marketing and advertising
o Delivery of promotional information such as events, and delivery of prizes to event winners
o Development and specialization of new services, and provision of services and advertising based on demographic characteristics
o Identification of access frequency and compilation of statistics on users’ service usage
6. Retention and Use Period of Personal Information
The Company retains and uses users’ personal information only for the period during which it provides services to them.
If consent to collection or use is withdrawn, the collection or use purpose has been fulfilled, the retention or use period has expired, or the business is discontinued, the personal information concerned will be destroyed without delay.
However, the following information will be retained for the periods specified below for the stated reasons.
① Act on the Consumer Protection in Electronic Commerce
o Personal information and consultation details provided when submitting an inquiry: retained for 3 years
o Records of consumer complaints or dispute resolution: retained for 3 years
7. Procedures and Methods for Destroying Personal Information
In principle, once the purpose of using collected personal information has been fulfilled, the Company destroys the information without delay in accordance with the applicable retention and use periods.
The Company’s procedures and methods for destroying personal information are as follows.
① Destruction procedure
Information entered to use the website is deleted or destroyed after the purpose of use has been fulfilled and it has been stored for a certain period in accordance with internal policies and information protection requirements under other applicable laws. Please refer to the retention and use periods.
② Destruction methods
Personal information in electronic file format is deleted using technical methods that prevent the records from being reproduced.
Personal information printed on paper is destroyed by shredding or incineration.
8. Provision and Sharing of Personal Information with Third Parties
The Company uses users’ personal information within the scope stated in Article 4. Without users’ prior consent, it does not use the information beyond that scope or, in principle, provide it to outside parties.
[Provision to third parties]
To provide better services, the Company may provide or share users’ personal information with third parties. Before doing so, the Company will individually notify users by email or in writing of the recipient, the personal information to be provided or shared, the reasons for providing or sharing it, and how and for how long it will be protected and managed, and obtain their consent. Consent may also be obtained through the terms presented when an inquiry is submitted. If a user does not consent, the Company will not provide or share the information with a third party. The same notification or consent procedure will apply when a third-party provision or sharing relationship changes or ends.
However, exceptions apply in the following cases.
① Where the user has consented in advance to disclosure of the personal information
② Where required by law, or where an investigative agency requests the information for investigative purposes in accordance with legally prescribed procedures and methods
9. Outsourcing of Personal Information Processing
To improve its services, the Company outsources personal information processing as described below. In accordance with applicable laws, outsourcing contracts include provisions to ensure that personal information is managed securely.
Service provider | Outsourced tasks |
|---|---|
Raon BNP Co., Ltd. | Website management and operation |
When entering into an outsourcing contract, the Company specifies in the contract or other documents the prohibition on processing personal information for purposes other than performing the outsourced tasks, technical and administrative safeguards, restrictions on subcontracting, management and supervision of the service provider, and responsibilities including compensation for damages, in accordance with Article 26 of the Personal Information Protection Act. The Company supervises the service provider to ensure that personal information is processed securely.
If the outsourced tasks or service provider change, the Company will disclose the changes through this Privacy Policy without delay.
10. Users’ Rights and How to Exercise Them
① Users may access or correct their registered personal information at any time and may request its deletion.
② To access or correct personal information, users may use “Edit Information.” To terminate membership or withdraw consent, users may contact the person responsible for personal information management in writing, by telephone, or by email.
③ If a user requests correction of an error in personal information, the Company will make the correction as quickly as possible.
If incorrect personal information has already been provided to a third party, the Company will notify that third party of the correction results without delay so that the information can be corrected.
④ Personal information terminated or deleted at a user’s request is handled as described in “5. Retention and Use Period of Personal Information,” and is made unavailable for access or use for any other purpose.
11. Installation, Operation, and Rejection of Cookies
A cookie is a small amount of information sent by a website server to a user’s computer. It contains information about the website visited and personal information needed to identify the user when providing services. Users may change their web browser settings to reject cookies or receive a warning when cookies are received. The Company may send cookies to users’ computers when it considers them necessary for the use of web services, as described below.
① Purposes of using cookies: providing different information according to individual interests; analyzing access frequency or usage times to identify preferences and interests for targeted marketing; tracking information users have viewed with interest to provide personalized services; analyzing user habits as a measure for considering service improvements; and collection and use when posting on bulletin boards.
② Cookie installation, operation, and rejection
o Users may choose whether to allow cookies. By setting options in their web browser, users may allow all cookies, be prompted whenever a cookie is stored, or reject all cookies.
o However, rejecting cookies may make some of the Company’s services difficult to use.
o How to configure cookies
- Firefox: https://support.mozilla.com/ko/kb/disable-third-party-cookies
- Chrome: https://support.google.com/chrome/answer/95647?hl=ko&topic=14666&ctx=topic
- Internet Explorer: https://support.microsoft.com/ko-kr/help/17442
- Safari: https://support.apple.com/ko-kr/guide/safari/sfri11471/mac
12. Technical and Administrative Safeguards for Personal Information
When processing users’ personal information, the Company takes the following technical and administrative measures to ensure its security against loss, theft, disclosure, alteration, or damage.
① Technical measures
o Users’ personal information is strictly protected. Users must not disclose their personal information to anyone.
The Company therefore recommends closing the web browser after finishing use on a PC. This is particularly necessary when sharing a PC with others or using one in a public place, such as a workplace, school, library, or internet gaming room, to prevent personal information from becoming known to others.
o The Company uses antivirus programs and takes measures to prevent users’ personal information from being leaked or damaged by hacking or computer viruses.
The Company regularly backs up data to prepare for possible damage to personal information, uses up-to-date antivirus programs to prevent leaks or damage to personal information and data, and uses encrypted communications to transmit personal information securely over networks. It also uses intrusion prevention systems to control unauthorized access from outside and strives to implement all technically feasible measures to ensure system security.
② Administrative measures
o To protect users’ personal information securely, the Company limits personal information processing to designated staff, assigns them separate passwords that are updated regularly, and continually emphasizes compliance with this Privacy Policy through ongoing training on new security technologies and personal information protection obligations.
o However, the Company assumes no liability for problems arising from the disclosure of personal information due to a user’s own negligence or problems on the internet.
13. Contact Details of the Person Responsible for Personal Information Management
Users may report any personal information protection complaints arising while using the Company’s services to the person responsible for personal information management or the relevant department.
The person responsible for handling personal information and the staff in charge will respond promptly and sincerely to personal information inquiries.
Person responsible for personal information management
- Name: Administrator
- Department: Security Business Division
- Position: Division Head
- Contact: raonbnp@raonbnp.com
14. Remedies for Infringement of Data Subjects’ Rights and Interests
If you need to report a personal information infringement or seek advice, please contact the Personal Information Infringement Report Center of the Korea Information Security Agency (KISA). If you have suffered financial or emotional harm as a result of a personal information infringement, you may also apply for relief to the Personal Information Dispute Mediation Committee of KISA.
Personal Information Infringement Report Center (http://www.cyberprivacy.or.kr, telephone 1336)
Personal Information Dispute Mediation Committee (http://www.kopico.or.kr, telephone 1336)
Information Protection Mark Certification Committee (http://www.privacymark.or.kr, telephone 02-580-0533)
Supreme Prosecutors’ Office Internet Crime Investigation Center (http://www.spo.go.kr, telephone 02-3480-3600)
National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr, telephone 02-392-0330)
National Police Agency (http://www.police.go.kr)
15. Obligation to Notify Changes to the Privacy Policy
If this Privacy Policy is supplemented, deleted, or amended, the Company will give advance notice through “Notices” at least 7 days before the revision. However, for material changes to data subjects’ rights, such as changes to the categories of personal information collected or the purposes of use, the Company will provide notice at least 30 days in advance and may obtain consent again where necessary.
Announcement date: November 13, 2026
Effective date: November 13, 2026