personal information processing policy
Pica Project Co., Ltd. establishes and discloses the following personal information processing policies to protect the personal information of information subjects and to process complaints quickly and smoothly in accordance with Article 30 of the Personal Information Protection Act (establishment and disclosure of personal information processing policies.)
Article 1 (Purpose of Processing Personal Information)
Pica Project Co., Ltd. (http://www.Picaproject.co.kr) processes personal information with his/her consent for the following purposes in order to perform its duties under Article 15 of the Personal Information Protection Act (Collection and Use of Personal Information). The processed personal information is not used for any purpose other than the following purposes, and if the purpose of use changes, prior consent may be required.
Purpose of Processing: Art intermediation, sale service and various marketing related to arts, art ownership management
Article 2 (Processing and Retention Period of Personal Information)
The collected personal information is destroyed without delay when the next retention period elapses or the information becomes unnecessary, such as achieving the purpose of use. However, this is not the case if it must be preserved in accordance with other laws and regulations. Other preservation periods are determined in accordance with ‘Consumer Protection Act for Electronic Commerce, etc.’
Preservation Content: Payment Record
Reasons for Preservation: Record of contract or withdrawal of subscription, etc.
Preservation Period: 3 years
Article 3 (Provision of Personal Information to Third Parties)
In principle, the Pica Project processes the user's personal information within the scope specified in Article 1 (Purpose of Personal Information Processing) and does not process exceeding the original scope or provide it to a third party without the user's prior consent. However, in accordance with Article 18 of the Personal Information Protection Act (Restriction on the Use and Provision of Personal Information), personal information can be processed in the following cases.
In case that the user agrees to provide and process a third party in advance.
In case that provision is required by law, etc.
In case that it is remarkably difficult to obtain ordinary consent for economic/technical reasons as personal information necessary for the implementation of a contract on the provision of services.
Article 4 (Consignment of Personal Information Processing)
Pica Project Co., Ltd. can entrust personal information processing related to the business with the consent of the user to achieve the purpose of processing personal information smoothly.
According to Article 26 of the Personal Information Protection Act (Restriction on the Processing of Personal Information by Business Consignment), Pica Project stipulates matters related to prohibition of personal information processing, technical and administrative protection measures, re-consignment restrictions, management of trustees, and compensation, and oversees whether the trustee handles personal information safely when signing a consignment contract.
If the contents of the entrusted business or the trustee changes, we will disclose it without delay through this personal information processing policy.
Article 5 (Rights, Obligations and Method of Exercising of Information Subjects)
Users can exercise the following rights as information subjects.
Request for Access to Personal Information: Personal information collected by Pica Project Co., Ltd. may be requested by the parties based on Article 35 of the Personal Information Protection Act (Accessing Personal Information) and may be restricted from accessing the following cases under the provisions.
-In case that access is restricted or prohibited by law
-in case that Pica Project Co., Ltd. determines that it is justifiable to refuse to view
Request for Correction and Deletion of Personal Information: Personal information held by Pica Project Co., Ltd. may be requested to be corrected or deleted in accordance with Article 36 of the Personal Information Protection Act (Correction and Deletion of Personal Information). However, if other laws and regulations stipulate that personal information is subject to collection, it cannot be requested to be deleted.
Article 6 (Processing Personal Information Lists)
Personal information lists collected and processed by Pica Project are as follows.
Required contents: Name, date of birth, gender, address, mobile number, email, login ID, password, cookie, payment history.
Optional: Account information, additional contact information.
In addition, the following personal information lists can be automatically generated and collected in the process of using Pica Project website.
User IP, date and time of visit, service usage records.
The above automatically collected and stored information will be used for statistical analysis to improve and supplement the website and for smooth communication between users and sites to provide better service to users. However, such information may be submitted in accordance with the provisions of the law.
Article 7 (Matters Concerning the Installation, Operation, and Refusal of an Automatic Personal Information Collection Device)
Pica Project Co., Ltd. operates cookies that store and find user information from time to time.
Cookies are very small text files that the server used to run the website sends to the user's browser and are stored on the user's computer's hard disk.
Target marketing and personalized services are provided by analyzing the frequency of access and visiting hours of members and non-members, identifying, and tracking users' tastes and interests, and identifying the degree of participation in various events and visits.
Users have choice options of installing cookies. By setting options in web browser, users can allow all cookies, or go through verification whenever cookies are saved, or refuse to save all cookies.
However, if the user refuses to install cookies, it may be difficult to use the service provided by Pica Project Co., Ltd.
Article 8 (Destruction of Personal Information)
In principle, the website of Pica Project Co., Ltd. destroys the personal information if the retention period has elapsed, or the purpose of processing personal information has been achieved. In principle, the website of Pica Project Co., Ltd. destroys the personal information if the retention period has elapsed, or the purpose of processing personal information has been achieved.
However, this is not the case if it must be preserved in accordance with other laws. The procedure, deadline, and method of destruction are as follows.
Information entered by user is either stored for a certain period of time or immediately destroyed in accordance with internal policies and related laws after the retention period has elapsed or after the purpose has been achieved.
Personal information recorded or stored in the form of an electronic file shall be destroyed so that the record cannot be reproduced, and the persona information recorded or stored in a paper document shall be destroyed by crushing or incinerating it with a shredder.
Article 9 (Measure to Ensure the Safety of Personal Information)
Pica Project Co., Ltd. is taking the following measures to ensure the safety of personal information.
Administrative Measures: Establishing and Implementing internal management principles
Technical Measures: Management of access rights to the system
Physical Measures: Storage of separate data on personal information data, access control for unauthorized persons
Article 10 (Matters Concerning the Person in Charge of Personal Information Protection)
Pica Project Co., Ltd. designates a person in charge of personal information protection as follows in accordance with Article 31 of the Personal Information Protection Act (designating of the person in charge of personal information protection) to protect personal information and handle complaints related to personal information.
Personal Information Protection Officer of Pica Project Co., Ltd.
Affiliated: Pica Project Co., Ltd.
Name: Sung hae-Jung, Song Ja-ho
Position: Representative Director