Article 1 (Purpose of Processing Personal Information)

1. e-box Co., Ltd. will process personal information for the following purposes: The personal information being processed is not used for purposes other than the following, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

A. Registration and management of service users Confirmation of intention to use the service, identification of identity according to the provision of registered membership service. Certification, identification by implementing a limited identification system, and maintenance of qualification for service use. Management, prevention of fraudulent use of services, confirmation of consent from legal representatives when processing personal information of children under the age of 14, and various notices. Process personal information for the purpose of notification, grievance handling, and service use history management.

B. Register and manage website membership
Confirmation of intention to join membership, identification by providing membership services, certification, and maintenance of membership status. Management, identification by implementing a limited identification system, prevention of fraudulent use of services, confirmation of consent from legal representatives when processing personal information of children under the age of 14, and various notices. Process personal information for the purpose of notification and grievance handling.

C. Handling user grievances
Contact for identification of complainants, confirmation of complaints, and fact-finding. Process personal information for the purpose of notification and notification of processing results.

Article 2 (Processing and Retaining Period of Personal Information)

1. e-box Co., Ltd. processes and holds personal information within the period of use, period of use, or period of use of personal information agreed upon when collecting personal information from the data subject according to laws and regulations.

2. The processing and retention periods of each personal information are as follows.

A. Service user registration/management: Until the data subject requests the deletion and suspension of processing of personal information
B. Register/Manage website membership: Until withdrawal from website membership.
C. User grievance handling: 3 years after completion of civil complaint handling

Article 3 (Providing Personal Information to a Third Party)

1. e-box processes the personal information of the data subject only within the scope specified in Article 1 (for the purpose of processing personal information), and provides personal information to third parties only if it falls under Article 17 of the Personal Information Protection Act, such as the consent of the data subject and special provisions of the law.

2. e-box provides personal information to third parties as follows.
A. Persons who are provided with personal information: E-Box Co., Ltd. Supervisor of guidance and service cooperation agencies
B. Purpose of using the personal information of the recipient: Public interest purpose and service provision, and service linkage
C. Retention of the recipient Period of use: During that perio

Article 4 (Rights of data subjects).Obligations and Method of Exercise)

1. The data subject may exercise the following personal information protection rights at any time for e-box:

A. Request for access to personal information
B. Request correction if there is an error, etc.
C. Request for deletion
D. Request to stop processing

2. The exercise of rights under paragraph (1) can be done in writing, by phone, or by fax, and this box will take action without delay.

3. If the data subject requests correction or deletion of errors in personal information, e-box will not use or provide the personal information until the correction or deletion is completed.

4. The exercise of rights under paragraph 1 may be carried out through an agent, such as a legal representative of the data subject or a person entrusted. In this case, you must submit a power of attorney in accordance with attached Form 11 of the Enforcement Regulations of the Personal Information Protection Act.

5. The data subject shall not infringe on the personal information and privacy of the data subject or others handled by e-box in violation of related laws such as the Personal Information Protection Act.

Article 5 (Personal Information Items Processed)

1. Register and manage service users
A. Required items: Name, date of birth, gender, address, and phone number.
B. Selective items: e-mail address, family matters, economic and residential conditions, educational background, religion, physical and mental health status, national basic living security, basic old-age pension, disability pension, medical benefits, National Health Insurance payment details, guardian name, guardian contact information, etc.

2. Register and manage staff and instructors and trainees
A. Required items: name, date of birth, resident registration number, gender, address, phone number, e-mail address, experience, educational background, related qualifications and license matters, etc.
B. Optional items: family matters, economic and residential conditions, religion, physical and mental health conditions, military service, details of award, criminal history, etc.

3. Registration and management of volunteers, sponsors
A. Required items: name, resident registration number (or business registration number), gender, address, and phone number.
B. Selective items: occupation, religion, e-mail address, physical and mental health status, etc.

4. Register and manage home page membership
A. Required items: name, date of birth, ID, password, address, phone number, gender, e-mail address, and i-pin number.

5. Handling user grievances
A. Mandatory items: name, date of birth, phone number, address
B. Selection item: Email address

6. Personal information items such as IP addresses, cookies, MAC addresses, service usage records, visit records, and bad usage records can be utomatically generated and collected during Internet service use.

Article 6 (Destruction of Personal Information)

1. e-box will destroy the personal information without delay when personal information becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the purpose of processing. 2. If the personal information retention period agreed by the data subject has elapsed or the purpose of processing has been achieved, the personal information (or personal information file) should be transferred to a separate database (DB) or stored in a different storage location. 3. The procedure and method of destroying personal information are as follows. A. Destruction procedure: e-box (week) establishes and destroys a personal information destruction plan for personal information (or personal information file) to be destroyed.This box (Note) selects personal information (or personal information file) that has caused the destruction, and this box (Note) destroys personal information (or personal information file) with the approval of the person in charge of personal information protection.
B. How to destroy: e-box is recorded in electronic file format.The stored personal information is destroyed using methods such as Low Level Format so that the record cannot be reproduced, and recorded in a paper document.The stored personal information is shredded or incinerated with a grinder to be destroyed.

Article 7 (Measures to ensure the safety of personal information)

1. e-Box Co., Ltd. is taking the following measures to ensure the safety of personal information.

A. Management measures: Establishment of internal management plans. Implementation, regular employee training, etc.
B. Technical measures: Management of access rights to personal information processing systems, etc., installation of access control systems, encryption of unique identification information, and installation of security programs.
C. Physical measures: Control of access to computerized and document storage rooms.

Article 8 (Personal Information Protection Officer)

1. e-Box Co., Ltd. is responsible for overall personal information processing, and designates a person in charge of personal information protection as follows to handle complaints and remedy damages from data subjects related to personal information processing.
A. Person in charge of personal information protection Manager : E-box Co., Ltd.
Contact: (Phone number 053-243-6600), (Fax number 053-243-6606)
B. Department in charge of personal information protection
Manager: E-box Co., Ltd.
Contact: (Phone number 053-243-6600), (Fax number 053-243-6606)

2. The data subject may contact the person in charge of personal information protection and the department in charge of personal information protection, handling complaints, and remedy for damage caused by using the service (or business) of e-box. E-box will respond and process the data subject's inquiries without delay.

Article 9 (Request for access to personal information)

1. The data subject may request the following departments to view personal information pursuant to Article 35 of the Personal Information Protection Act. e-box will make efforts to expedite the request for personal information access by the data subject.

A. Receiving requests for access to personal information.
Department name: e-box, Ltd
Contact: (Phone number 053-243-6600)

Article 10 (Method of remedy for infringement of rights)

The data subject may ask the following institutions for damage relief and counseling for personal information infringement.


A. Personal Information Infringement Reporting Center (operation of the Korea Internet & Security Agency)
- Tasks in charge: Report personal information infringement and request for counseling
- Home page: privacy.kisa.or.kr
- Phone: 118 (without country number)
- Address: (138-950) 135, Jungdae-ro, Songpa-gu, Seoul, Korea Internet & Security Agency

B. Personal Information Dispute Mediation Committee (Operation of Korea Internet & Security Agency)
- Tasks in charge: Application for dispute mediation of personal information, collective dispute mediation (civil resolution)
- Home page: privacy.kisa.or.kr
- Phone: 118 (without country number)
- Address: (138-950) 135, Jungdae-ro, Songpa-gu, Seoul, Korea Internet & Security Agency
Personal Information Infringement Reporting Center
C. Cybercrime Investigation Team of the Supreme Prosecutors' Office: 02-3480-3573 (www.spo.go.kr )

D. National Police Agency Cyber Terrorism Response Center: 1566-0112 (www.netan.go.kr )

Article 11 (Installation and Operation of Video Information Processing Devices)

e-box is equipped with video information processing equipment as follows.I'm running it.

1. Basis for the installation of image information processing equipment. Purpose
A. Safety protection of local residents using facilities such as children, adolescents, persons with disabilities, and the elderly.
B. Prevention of fire and crime in facilities
C. Facility theft prevention and damage prevention
D. Prevention of illegal activities such as unauthorized entry and exit

2. Number of installations, location of installations, range of shots
A. Number of installations: 10 inside and outside
B. Installation location and shooting range: main gate, parking lot, and elevator entrance

3. The person in charge of management, the department in charge, and the person who has access to video information
In order to protect the image information of the data subject and to handle complaints related to personal image information, we have a person in charge of personal image information protection as follows.
A. Manager of Management: Director-General
B. Person with access: Appointment of general affairs department

4. Video information shooting time, storage period, storage location, and processing method
A. Filming time: 24 hours.
B. Storage period: Automatic deletion when HDD storage capacity exceeds
C. Storage location: Office
D. Processing method: Store in the video information processing device in the office of E-Box Co., Ltd.Processing, recording matters related to requests such as use of personal image information other than its purpose, provision to a third party, destruction, and access.Manage it and permanently delete it in a way that cannot be restored when the storage period expires.
5. Method and location for checking video information
A. How to check: You can contact the person in charge of video information management in advance and visit this box to check it through the person in charge of management and the person in charge of video information processing device.
B. Check place: E-box Co., Ltd. Office

6. Matters concerning entrustment of installation, management, etc. of video information devices;
The installation and management of the video information processing device of this box is carried out by this box.

7. Measures for the request of data subjects to view image information, etc.
View or confirm the existence of personal image information. If you wish to delete it, you can request it from the operator of the image information processing device at any time. However, it is limited to personal image information photographed and personal image information clearly necessary for the urgent life, body, and property benefits of the data subject. e-box (Note) reads or confirms the existence of personal image information. If you request to delete it, we will take the necessary measures without delay.

8. Technical for the protection of image information. Management and physical safety measures
The image information processed by e-box (Note) is managed safely through encryption measures.In addition, this box differentiates access to personal information as a management measure to protect personal image information, and records and manages the date and time of creation of personal image information, the purpose of reading when reading, the reader, and the date and time of reading to prevent forgery and alteration of personal image information.In addition, locks are installed for safe physical storage of personal image information.

Article 12 (Change of Personal Information Processing Policy)

1. This personal information processing policy will be applied from June 1, 2020.

2. The personal information processing policy is related laws. Add content according to changes in policy or security technology. There may be deletion or modification, and if there is a change in the personal information processing policy, we will notify the reason and contents of the change through the website of e-box at least 7 days before it is implemented.

a supplementary rule

Article 1 (Effective Date)

This Regulation shall come into force on June 1, 2020..