SM Universe

SMU STORY

HOME SMU LIFE SMU STORY

More videos on SM UNIVERSE official YouTube.

CAMPUS LIFE

Collection and usage of personal information

유지관리 업체에 문의해주세요.

Collection and usage of personal information

Article 1 (Items of Personal Information Collected)
SM Universe (hereinafter referred to as the 'Company') collects the following personal information for user identification, consultation, and service use. 
① Collected items: name, gender, date of birth, phone number, address, student's photo, legal representative name and relationship, address, legal representative contact information, self-introduction, attendance status, admission and expulsion dates, payment records, school of origin, graduation year, email address
② Collection method: Homepage (audition application, consultation), written form, offline consultation, etc.

Article 2 (Purpose of Collection and Use of Personal Information)
The Company utilizes the collected personal information for the following purposes. 
① Use of educational services: admission application and counseling, announcement of successful applicants, payment of tuition fees, attendance inquiry and notification, posting of outstanding students, sending report cards, counseling, etc.

② Student management: confirmation of enrollment, personal identification, prevention of unauthorized use by bad members, and prevention of unauthorized use.
③ Marketing and advertising use: development and specialization of new services (products), delivery of advertising information such as events, information sessions and new products, provision of services and advertisements according to demographic characteristics, identification of access frequency or statistics on members' use of services.

Article 3 (Retention and use period of personal information)
In principle, the Company destroys personal information without delay when it becomes unnecessary, such as when the retention period of personal information has expired or the purpose of collection and use has been achieved. However, if it is necessary to preserve it in accordance with the provisions of the relevant laws and regulations, the Company shall retain member information for a certain period of time prescribed by the relevant laws and regulations as follows. 
① Grounds for retention: Act on Consumer Protection in Electronic Commerce, etc.
② Retention period: 3 years 
A. Records on display/advertising: 6 months (Act on Consumer Protection in Electronic Commerce, etc.)
B. Records on contract or subscription withdrawal: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
C. Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
D. Records of consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
E. Records on collection/processing and use of credit information: 3 years (Act on the Use and Protection of Credit Information)

Article 4 (Procedures and Methods for Destroying Personal Information)
The procedures and methods for destroying personal information are as follows. 
① Procedure for destruction
A. The information entered by the member for membership registration, etc. is transferred to a separate database (DB) after the purpose is fulfilled (separate filing cabinet for paper) and stored for a certain period of time (see Retention and Use Period) in accordance with the information protection reasons under the company's internal policies and other relevant laws, and then destroyed. 
B. Personal information transferred to a separate DB will not be used for any purpose other than that for which it is retained unless required by law. 
② Destruction method
A. Personal information stored in the form of electronic files will be deleted using a technical method that cannot reproduce the records. 
B. Personal information printed on paper shall be destroyed by shredding or incineration. 

Article 5 (Provision of Personal Information to Third Parties)
① The Company shall process the user's personal information only within the scope specified in the purpose of processing the personal information, and shall provide the personal information to a third party only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as the user's consent or special provisions of the law, and shall not otherwise provide the user's personal information to a third party. 

②In order to provide smooth service, the Company shall obtain the consent of the user in the following cases and provide it only to the minimum extent necessary. 
Recipients: SM Entertainment, ESteem, Jongno Academy, Inc.
Purpose of provision: Providing educational contents and discounts for academy students, inviting briefings, providing audition and college entrance examination information, and delivering advertising information such as events and giveaways.
Items to be provided: name, major, date of birth, email, mobile phone number, address, member ID
Retention and use period: Immediate destruction after the purpose of use is achieved  

③ The Company may provide personal information to related organizations without the consent of the information subject in the event of an emergency, such as a disaster, infectious disease, an event or accident that poses an imminent risk to life or body, or an imminent loss of property, in accordance with the personal information processing and protection guidelines for emergency situations jointly announced by the relevant government departments. For more information, please visit https://bit.ly/40QkG06.

Article 6 (Consignment of Collected Personal Information) 
① The Company entrusts the handling of personal information to external specialized companies as follows in order to provide better services and facilitate customer convenience. The consignment company retains the member's personal information for the period of the contract. However, if the relevant laws and regulations specify a statutory retention period, the company shall retain the member's personal information for that period. 
② The Company stipulates and manages the obligations of the outsourcing company to comply with personal information protection laws and regulations, maintain confidentiality of personal information, prohibit the provision of personal information to third parties, bear responsibility in the event of an accident, entrustment period, and return or destroy personal information after the end of processing to the outsourcing company through the outsourcing business contract, etc. 
③ Companies entrusted with personal information for the provision of this service 
The entrusted company may be changed depending on the change of the service and the contract period, and we will notify you in advance when changing the service. 
A. Entrusted company name: Inpiad Inc. 
- Entrusted business and purpose: Website operation, audition acceptance, briefing session acceptance
- Contact information: 1688-9785
- Retention and use period: Immediate destruction after achieving the purpose of use
B. Entrusted company name: Busan Information & Communication Co.
- Entrusted business and purpose: Management of hagwon student management program and hagwon payment management, SMS sending
- Contact Information : 1522-0656
- Retention and use period: Immediate destruction after achieving the purpose of use
C. Consignee name: Dow Technology Co. 
- Consignment business and purpose: Sending SMS
- Contact information of the trustee: 1588-5412
- Retention and use period: Immediate destruction after achieving the purpose of use

Article 7 (Rights of users and legal representatives and how to exercise them)

① Users and their legal representatives may view or modify the personal information of themselves or their children under the age of 14 at any time, and may also request to cancel their membership.
② To view and modify the personal information of a child under the age of 14 by a user or legal representative, click 'Change Personal Information' (or 'Modify Membership Information', etc.), and to cancel membership (withdraw consent), click 'Withdraw Membership' to view, modify, or withdraw directly after going through the identity verification procedure. Or, if you contact the person in charge of personal information management in writing, by phone, or by email and make a related request, we will take action without delay. 
③ If you request correction of errors in your personal information, we may not use or provide the personal information until the correction is completed. 
④ If incorrect personal information has already been provided to a third party, the Company will notify the third party of the result of the correction process without delay so that the correction can be made. 
⑤ The Company shall process personal information that has been terminated or deleted at the request of the user or legal representative in accordance with Article 3 and shall manage it so that it cannot be viewed or used for any other purpose. 
⑥ In the case of a request to suspend the viewing and processing of personal information, the user's rights may be restricted in accordance with Article 35, Paragraph 4, and Article 37, Paragraph 2 of the Personal Information Protection Act. 

Article 8 (Installation, operation, and rejection of automatic personal information collection devices)

The Company operates 'cookies' that store and retrieve user information from time to time. A cookie is a text file that is stored on the user's computer hard disk by the server used to operate the Company's website. The Company uses cookies for the following purposes. 

① Purpose of using cookies, etc.
A. Providing targeted marketing and personalized services by analyzing the access frequency and visiting time of members and non-members, identifying users' tastes and interests, tracking their traces, and identifying the degree of participation in various events and the number of visits. 
B. Users have the right to choose whether to install cookies. Therefore, users can allow all cookies by setting options on their web browsers, check each time a cookie is saved, or refuse to save all cookies. 
② How to refuse cookies 
A.        To refuse to set cookies, you can allow all cookies, check each time a cookie is saved, or refuse to save all cookies by selecting an option in the web browser you use. 
B. Example of setting method (for Internet Explorer): Tools > Internet Options > Privacy at the top of the web browser
C.        If the user refuses to install cookies, there may be difficulties in providing the service. 

Article 9 (Measures for Personal Information)
① The Company establishes and implements an internal management plan for the safe management of personal information, and conducts training. 
② The Company takes technical measures to ensure the safety of users' personal information so that it is not lost, stolen, leaked, altered, or damaged when handling personal information. 
③ Users' personal information is managed by utilizing an internal network that cannot be accessed or invaded from an external network, and important data is thoroughly protected through separate security functions by encrypting files and transmission data or using a file lock function (LOCK).
④ In preparation for external intrusions such as hacking, the company is fully committed to internal network security by using a firewall and an intrusion detection system for each server, and has installed an access control system to strengthen security.
⑤ The Company prevents personal information from being infringed by installing an antivirus program to check and handle the infiltration of malicious programs such as computer viruses and spyware in the personal information processing system and information devices used by personal information handlers to process personal information at all times.
⑥ In order to limit access to users' personal information to a minimum number of people and ensure the safety of personal information, the Company establishes internal procedures necessary for access to and management of personal information, establishes access control and locking devices, and ensures that employees are familiar with and comply with them.
⑦ The handover of duties of personal information-related handlers is carried out thoroughly while maintaining security, and responsibilities for personal information accidents are clarified even after joining and leaving the company.
⑧ Users shall maintain accurate information through their own verification and management of personal information provided to the company, and may be subject to civil and criminal liability as well as company sanctions if they use the personal information of others without authorization or infringe on the rights of others in the process of using the Internet site.
⑨ The Company is not responsible for any problems caused by the leakage of personal information due to the user's own carelessness or problems on the Internet. Therefore, each user must thoroughly manage his/her personal information to protect his/her personal information and take responsibility for it. However, if a user's personal information is lost, leaked, altered, or damaged due to a mistake by the Company's internal manager or an accident in technical management, the Company will immediately notify the user and take appropriate measures and compensation.

Article 10 (Additional Use and Provision)
① The Company may additionally use and provide personal information without the user's consent in accordance with Articles 15(3) and 17(4) of the Personal Information Protection Act, taking into account the matters under Article 14(2) of the Enforcement Decree of the Personal Information Protection Act.
② The Company shall consider the following matters in order to make additional use and provision without the consent of the user.
1. whether the purpose of further use and provision of personal information is related to the original purpose of collection
2. whether the additional use and provision of personal information is predictable in light of the circumstances under which the personal information was collected or the processing practices.
3. whether the additional use and provision of personal information unreasonably infringes on the interests of the user
4. whether necessary measures have been taken to ensure safety, such as pseudonymization or encryption.

Article 11 (Obligation to notify users when changing the privacy policy) 
① If there is any addition, deletion, or modification of the contents of this Privacy Policy in accordance with the government's policy or the company's policy, we will notify you through the homepage 7 days before the revision.
② This Privacy Policy is effective from March 30, 2023.
- Announcement date: March 30, 2023
- Effective Date: March 30, 2023

Article 12 (Civil Service on Personal Information)
① The Company designates the relevant departments and the person in charge of personal information protection as follows to protect customers' personal information and handle related complaints regarding personal information.

Department in charge of personal information protection customer service: Board of Education
Telephone number : 02-518-9810
Email : dahee@smuniverse.com
Personal Information Protection Officer Name: Park Da-hee
Telephone number : 02-518-9810
Email : dahee@smuniverse.com

② Users may report any complaints related to personal information protection arising from the use of the Company's services to the person in charge of personal information protection or the department in charge. The Company will promptly provide a sufficient response to the user's report.
If you need to report or consult about other personal information infringement, please contact the following organizations.
1. Personal Information Dispute Mediation Committee (http://www.kopico.go.kr/ Telephone number: 1833-6972 without area code)
2. Personal Information Infringement Reporting Center (http://privacy.kisa.or.kr, 118 without area code)
3. Information Protection Mark Certification Committee (www.eprivacy.or.kr, 02-550-9531~2)
4. National Police Agency Cyber Security Bureau (www.ctrc.go.kr, 02-3150-2659)
③ A person whose rights or interests have been infringed by a disposition or omission made by the head of a public institution in response to a request under the provisions of Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information), or Article 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act may file an administrative appeal as provided in the Administrative Appeals Act.
‣ Central Administrative Appeals Committee: (without area code) 110 (www.simpan.go.kr)

이용약관

Publicity and Marketing Consent

The Company collects and uses personal information for service promotion and marketing as described below. You have the right to refuse to consent to the collection and use of personal information, and if you refuse to consent, you will not be able to receive the service.
Purpose of collection: Information sessions and events, identity verification
Items: Name, email, phone number, birth year, gender
Retention period: 5 years from the date of collection

이메일무단수집거부

본 홈페이지에 게시된 이메일 주소가 전자우편 수집 프로그램이나 그 밖의 기술적 장치를 이용하여 무단으로 수집되는 것을 거부하며, 이를 위반시 정보통신망법에 의해 형사처벌됨을 유념하시기 바랍니다 .

※ 정보통신망 이용촉진 및 정보보호 등에 관한 법률

* 제 50조의 2 (전자우편주소의 무단 수집행위 등 금지)

누구든지 전자우편주소의 수집을 거부하는 의사가 명시된 인터넷 홈페이지에서 자동으로 전자우편주소를 수집하는 프로그램 그 밖의 기술적 장치를 이용하여 전자우편주소를 수집하여서는 아니된다.
누구든지 제1항의 규정을 위반하여 수집된 전자우편주소를 판매·유통하여서는 아니된다.
누구든지 제1항 및 제2항의 규정에 의하여 수집·판매 및 유통이 금지된 전자우편주소임을 알고 이를 정보전송에 이용하여서는 아니된다.

* 제74조 (벌칙) 다음 각호의 1에 해당하는 자는 1천만원 이하의 벌금에 처한다.

제8조제4항의 규정을 위반하여 표시ㆍ판매 또는 판매할 목적으로 진열한 자
제44조의7제1항제1호의 규정을 위반하여 음란한 부호ㆍ문언ㆍ음향ㆍ화상 또는 영상을 배포ㆍ판매ㆍ임대하거나 공연히 전시한 자
제44조의7제1항제3호의 규정을 위반하여 공포심이나 불안감을 유발하는 부호ㆍ문언ㆍ음향ㆍ화상 또는 영상을 반복적으로 상대방에게 도달하게 한 자
제50조제6항의 규정을 위반하여 기술적 조치를 한 자
제50조의8의 규정을 위반하여 광고성 정보를 전송한 자 제50조의2의 규정을 위반하여 전자우편 주소를 수집ㆍ판매ㆍ유통 또는 정보전송에 이용한 자
제50조의8의 규정을 위반하여 광고성 정보를 전송한 자
제53조제4항을 위반하여 등록사항의 변경등록 또는 사업의 양도ㆍ양수 또는 합병ㆍ상속의 신고를 하지 아니한 자