Privacy
This english translation version is provided for convenience only and is not valid or legally binding. In case of a conflict between the Korean version and any translation, the Korean version will control.
This Privacy Policy applies to services provided by Opensurvey Co., Ltd.
- 1. Why We Collect Personal Information
- 2. Personal Information Collected and How We Collect It
- 3. Personal Information Usage and Retention Period
- 4. How We Delete Personal Information
- 5. Disclosure of Personal Information
- 6. Delegation of Personal Information Processing
- 7. Your Rights and How to Exercise Them
- 8. The Installation, Usage, and Refusal of Automatic Data Collection Devices
- 9. Technical/Operational Measures to Protect Your Personal Information
- 10. Personal Information Manager
- 11. Changes to Privacy Policy
Opensurvey Co., Ltd. (hereinafter "the Company") strives to protect your personal information and adheres to relevant laws on personal information as well as guidelines provided by institutions such as the Personal Information Protection Commission. This Privacy Policy explains how the Company uses your personal information and what measures are taken to protect it.
Updates can be made to the Privacy Policy following changes in relevant law and government regulations, or to improve our services. In such case, the Company will inform users through notices on our website or via email.
Updates can be made to the Privacy Policy following changes in relevant law and government regulations, or to improve our services. In such case, the Company will inform users through notices on our website or via email.
Opensurvey's "Google Forms Import" service follows Google API service user data policies including usage restrictions when using and transferring information from Google API.
1. Why We Collect Personal Information
The Company collects personal information for the following purposes. Collected personal information is not used for any other purpose than what is stated below. Should the intended purpose change, measures will be taken to seek your consent according to Article 18 of the Personal Information Protection Act.
- Registration, account management, identity and age verification, bot prevention, account closure
- To restrict users that violate our Terms of Service and relevant laws, to prevent fraud and other activities that may hinder operations
- To provide and improve services, to develop new services
- To manage payment and operations for paid services
- To provide customer service and address inquiries
- To analyze service usage and access frequency, to view user statistics
- To analyze services and provide customized services and advertisements according to statistics
- To introduce new information and notify on policy changes
- To upgrade services and collect/analyze precedents for clients
- To share content such as service overviews and newsletters
- To select winners and provide prizes for promotional events
2. Personal Information Collected and How We Collect It
The Company collects the minimum required information during account registration, and may collect additional information when necessary for payments, account management, marketing, refunds, etc.
a. Personal Information Collected
Firstly, the Company collects the minimum required personal information below to register users, provide services, address inquiries, and request marketing information.
[Required]- For account registration and usage of services: Email, name, password
- For inquiries: Name, company/affiliation, email, mobile number, title, department name
- For newsletter subscriptions: Name, email, company name
Secondly, the Company seeks user consent to additionally collect the information below.
[Optional]- When using Dataspace services: Company/organization name, industry type, scale of company/organization, department, occupational group, title
- For two-factor authentication: Mobile number
- When consenting to newsletters and customized marketing information: Name, company/affiliation, email, mobile number, title, department name
Thirdly, the following information is collected for processing inquiries.
- Non-members: Email
- Members: Email, name
Fourthly, the information below may be automatically generated and collected in the course of using or providing services.
- Service usage records, access log, payment history, cookie information, IP, access environment
Fifthly, the payment information below may be collected in the process of refunding paid services.
- For bank transfer payments: Bank name, account number, account holder name
- For credit card payments: Credit card number, expiry date, birthdate
Sixthly, the information below may be collected in the course of cash compensation.
- Cash compensation: Name, resident registration number, bank account number, verifying documents (ID copies, bank statement copies)
b. How We Collect Personal Information
- Personal information is collected with your consent when you voluntarily provide it during registration or service usage.
- Separate consent is required for newsletters and marketing information.
- For customer inquiries, personal information is provided voluntarily or requested by the Company when needed.
- Service usage records and logs are collected automatically when you use our website.
3. Personal Information Usage and Retention Period
- The Company uses and retains your personal information for a time period you consent to or as stated by law.
- Once your personal information serves its purpose, the Company deletes it without delay.
- If you withdraw your consent of the collection and usage of your personal information, the Company deletes your personal information without delay.
- Personal information that is within the retention period, notified in advance and under your consent, is retained according to the stipulated time period.
4. How We Delete Personal Information
In principle, once your personal information serves its purpose, the Company deletes it without delay. However, if further retention is required by law, the Company stores your personal information separately and does not use it for any other purpose.
- Records on contracts and withdrawals: 5 years (according to the Act on the Consumer Protection in Electronic Commerce, etc.)
- Records on payment and provision of goods: 5 years (according to the Act on the Consumer Protection in Electronic Commerce, etc.)
- Records on consumer disputes and resolutions: 3 years (according to the Act on the Consumer Protection in Electronic Commerce, etc.)
- Identity verification records: 6 months (according to the Act on the Consumer Protection in Electronic Commerce, etc.)
- Records on website visits: 3 months (according to the Protection of Communications Secrets Act)
- Ledgers and document verifications on all transactions as required by tax law: 5 years (according to the Framework Act on National Taxes)
The Company deletes and destroys personal information in the following methods.
a. Our Process
User information is deleted promptly once its purpose is fulfilled. If further retention is required by law, the information is stored in a separate database (or a separate folder for physical copies) and destroyed once the retention period expires.
b. Our Methods
Electronic files are irretrievably deleted, while hard copies are shredded or incinerated beyond restoration.
5. Disclosure of Personal Information
The Company uses your personal information only within the scope stipulated on our Privacy Policy and Terms of Service and without sharing it with third parties. However, in the following cases, personal information may be disclosed to a third party following careful measures.
a. With user consent
This is when the user voluntarily agrees to the disclosure of their personal information to a third party. In such case, the Company notifies you and requests your separate consent for (1) the recipient of your personal information, (2) the purpose of usage, (3) the particulars of personal information provided, and (4) the usage and retention period. During this whole process, the Company does not collect additional information against your will or disclose any information beyond the scope of your consent.
b. When required by law or when needed for criminal investigation and public prosecution following Article 18 of the Personal Information Protection Act
In such case, your personal information can be shared with a third party without your consent.
6. Delegation of Personal Information Processing
For a smooth operation, the Company delegates the task of processing personal information as follows, and complies with the necessary rules to ensure your information is kept safe. Below are the institutions that process your personal information on behalf of the Company.
a. Delegated Tasks and Institutions
| Delegators | Delegated tasks |
|---|---|
| Amazon Web Services Korea LLC | Cloud service usage (Seoul region) |
| LG Uplus Corp | SMS transmission |
| NHN Cloud Corp. | Sending emails, SMS, KakaoTalk Business messages |
| LG CNS Co., Ltd. | Sending KakaoTalk Business messages |
| KG Inicis Co., Ltd. | Processing payments |
| Toss Payments | Processing payments |
| Intercom | Operating customer service platform |
| Salesforce | Using CRM platforms and email marketing solutions |
| PNS Research | Conducting surveys |
| Peopleinsight Lab | Conducting surveys |
| 11Street Co., Ltd. | Sending vouchers |
| KT Alpha Co., Ltd. | Sending vouchers |
| Douzone Bizon | Income processing |
| Payday Co., Ltd. | Income processing and reporting |
b. International Transfer of Personal Information
For improved services, the Company discloses your personal information internationally as follows, taking necessary measures to ensure your information is kept safe. The overseas transfer of personal information is in accordance with Article 28-8 of the Personal Information Protection Act.
1. Delegator: Intercom- Information manager and contact info: https://preferences.intercom.com/privacy
- Purpose of disclosure: To provide customer service solutions during the personal information retention period
- Recipient country: USA
- Transfer method and time: Via network during service usage
- Transferred personal information: Personal information collected for customer service (email, name, customer ID number)
- Usage and retention period: Until account is closed, until services are discontinued, or until delegation contract expires
- Information manager and contact info: privacymark@salesforce.com
- Purpose of disclosure: To use CRM (Customer Relationship Management) platform and email marketing solutions
- Recipient country: Japan
- Transfer method and time:
- Via network when inquiry is submitted
- Via network when user consents to marketing emails
- Transferred personal information: Company name, person in charge, email, mobile number, department, title, occupational group, industry group
- Personal information usage and retention period:
- For CRM purposes: Until user account is closed, until services are discontinued, or until delegation contract expires
- For marketing purposes: Until user account is closed or until consent for marketing emails is withdrawn
The Company uses cloud services only after carefully inspecting the cloud service provider's policies for protecting personal information. Cloud service providers do not have access to the personal information stored by the Company.
You can refuse the international transfer of your personal information by contacting the Company's personal information manager. Once you refuse, your personal information won't be transferred overseas. However, this may restrict you from using services that require your personal information to be transferred internationally.
You can refuse the international transfer of your personal information by contacting the Company's personal information manager. Once you refuse, your personal information won't be transferred overseas. However, this may restrict you from using services that require your personal information to be transferred internationally.
7. Your Rights and How to Exercise Them
- For children under 14 years of age, legal representatives have the right to view/modify the child's personal information, or withdraw the consent for collection and usage. However, children under 14 are not eligible to use our services.
- You or your legal representative can view or modify your personal information at any time, or request to withdraw your consent by closing your account.
- To view or edit your personal information, click "Edit profile," and to close your account, click "Close account," then verify your identity first to proceed. You can also contact our personal information manager via mail, email, or phone, and your request will be met without delay.
- You can request that we stop processing your personal information at any time. Unless required otherwise by law, the Company cannot deny your request. In the event your request is denied, you will be promptly informed of the reason.
- In the event you request changes to incorrect personal information, your information won't be used or shared until the corrections are made. If incorrect information is already shared with a third party, the third party will be informed promptly of the changes.
- The Company disposes of your expired personal information as stated on this Privacy Policy and ensures that it cannot be viewed or used for any other purpose.
8. The Installation, Usage, and Refusal of Automatic Data Collection Devices
The Company uses cookies to save and retrieve your information. Cookies are small text files sent by the web server to your browser and downloaded to your computer. The Company uses cookies for the following purposes.
a. What are cookies?
Small text files sent to the user's browser and saved on the device when a website is accessed.
b. Purpose of cookies
Cookies are used to provide customized services and to save and retrieve user information. When you visit our website, the web server reads the cookies saved on your device and maintains your settings while providing personalized services. Cookies help you save your settings and conveniently use the website you visit. They are also used to optimize advertisements and provide information based on your visit records and behavior.
c. Installation, usage, and refusal of cookies
You have a right to refuse cookies, and can enable or disable cookies through your web browser settings. However, refusing cookies can inconvenience your use of the website and restrict access to certain services that require login.
9. Technical/Operational Measures to Protect Your Personal Information
The Company implements the following technical and operational measures to keep your personal information safe and prevent it from being lost, stolen, leaked, or falsified.
a. Password encryption
Your password is encrypted before storage and known only to you. Your personal information can be viewed and changed only by yourself after entering your password.
b. Measures to prevent hacking, etc.
The Company makes every effort to prevent your personal information from being leaked or damaged by hackers or computer viruses. Personal information is frequently backed up to prevent damage. The latest vaccine programs are implemented to prevent data leakage or damage, while personal information is safely transmitted across networks through encrypted channels. A firewall system blocks unauthorized access from outsiders. Measures are taken systematically and technologically to ensure safety.
c. Minimizing and training personal information staff
The Company limits personal information access to a single manager who is given a separate, regularly updated password and undergoes frequent training, always emphasizing the importance of Privacy Policy compliance.
d. Certification for personal information security
To ensure the safety of your personal information, the Company implements the following in addition to what is regulated by law.
- Personal Information Security Certification: ISMS-P
10. Personal Information Manager
The Company appoints the following employee to manage all tasks related to processing personal information, including relevant dispute resolution and damage compensation.
[Personal information manager and department]
[Personal information manager and department]
- Name: Lee Geon-no
- Department: Product Development Group
- Title: CPO (Chief Privacy Officer)
- Phone number: +82-2-2070-2110
- Email: privacy@opensurvey.io
For all personal information related complaints that arise from using the Company's services, you can submit an inquiry to the Personal Information Manager or relevant department. The Company will respond to your inquiry promptly and without delay. To file a report on violated privacy or request further assistance, contact the agencies below.
- Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: +82-118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office of the Republic of Korea: +82-1301 (www.spo.go.kr)
- National Police Agency: +82-182 (police.go.kr)
11. Changes to Privacy Policy
- This Privacy Policy is easily accessible on the home page of our website.
- For changes made to the Privacy Policy due to statutory policy or technical updates, users will be notified of the details and reasons on the website before the changes are implemented.
- Changes to this Privacy Policy may be made frequently, so check whenever you visit the website.
Effective date: January 25, 2025
revision date