<Changeall: the title of the service Mori> has the following process policies to protect the personal information and rights and to address the user’s problems related to personal information.
<Changeall> will notify the user through the website notice (or individual notice) in the case of the modification of the privacy policy.
○ This policy will be implemented from August 1, 2021.
The signing up membership of the service (App) and management
Personal information is processed for the purpose of providing services, contents and the validation of the user
Personal information is processed the following purposes: the development of new services (products) providing customized services, providing information on events and advertisements and opportunities for participating in them, the providing services and advertisements based on demographic characteristics, the confirmation of the validity of services, checking on the frequency of access or statistics of the use of service by the members.
The purpose of processing personal information files registered and disclosed in accordance with Article 32 of the Personal Information Protection Act is as follows
Personal information file name: Personal information handling file
-Personal information items: email, login ID, service usage record
-collection method: service (App), provided by social affiliates
-grounds for retention: customer management, service provision, content provision, marketing utilization, etc.
-the period of retention: 3 years
-related regulations: customers’ complaints or the records of the settlements of the suits. :
3 years
※ For the disclosure of other personal information files, please refer to the Ministry of the Public Administration and Security’s Personal Information Comprehensive Support Portal (www.privacy.go.kr) → Personal Information complaint → Requesting the opening personal information → personal information file list search menu.
① Changeall processes and retains personal information within the period of retention and use of personal information in accordance with regulations and within the period of the retention and use of personal information, personal information given consent by the subjects of the information is processed and retained.
② Each personal information processing and retention period is as follows
① The information subject may exercise his or her right to read, correct, delete or stop processing personal information at any time regarding Changeall
② The exercise of the right under the Paragraph 1 can be done in writing or by email in accordance with Paragraph 1 of Article 41 and Changeall will take measures without delay.
③ The exercise of rights under Paragraph 1 can be done through the legal representative who has been delegated. In this case, one must submit a power of attorney according to Form 11 of the Enforcement Regulations of the Personal Information Protection Act.
④ The request for opening and stopping the process of personal information may restrict the right of the information subject in accordance with Paragraph 5 of Article 35, Paragraph 2 of Article 37
⑤ A request for correction or deletion of personal information may not request the deletion if the personal information is specified for collection in other laws and regulations.
⑥ Changeall confirms that the person who requests the opening according to the right of the information subject, correction and deletion and the suspension of the process is himself or herself or a valid representative.
① Changeall processes the following personal information items.
1<Signing up membership of the service (App) and management>
-Required items: email, login ID, the record of the use of service
-The procedure of destruction
The information entered by the user is transferred to a separate DB ( in the case of paper a different document) on achieving its objective and saved for a specific time in accordance with regulations and immediately destroyed. At the time, the personal information transferred to the DB will not be used for other purposes unless required by law.
-The period of destruction
In case the retention period of personal information expires, within 5 days from the expiration day of the retention period, the personal information of the user is destroyed within 5 days when the information is unnecessary due to such as the achievement pf processing personal information, the termination of the service and the business,
-The method of destruction
Information in the form of electronic files uses a technical method that cannot reproduce the record. Personal information printed on paper is destroyed by shredding or incineration.
Changeall does not use ‘coolies’ that save and retrieve the information of use of the information subject.
Changeall is wholly responsible for the tasks of handling personal information and designates the person mentioned below in order to address the complaints of the information subject related to the processing of personal information.
▶ Supervisor for the protection of Personal Information
Name: Kim Jung Eun
Position: In charge of the protection of personal information
Contact: changeallkorea@naver.com,
The information subject can inquire of all issues concerning the protection of personal information, the handling of complaints, compensation for damage to the supervisor for the protection of personal information and the relevant department. Changeall will respond to and address the inquires of the information subject.
① The policy of personal information is applied to on the day of its implementation, and in the case of adding, deleting, and correcting the contents of the modification, it will be notified through the notice 7 days before the implementation.
1. The implementation of regular self-check
In order to make sure the safety of personal information, Changeall conduct regular self-check (once a quarter).
2. The minimization of the number of employees handling personal information and training.
We implement measures in which employees handling personal information are designated and minimizing their number.
3. The establishment and Implementation of internal management plan
In order to process personal information in safety, we establish internal management plan and implement it.
4. Technological measures against hacking
Changeall installs security program, make regular update and check-up, installs the system in the area to which access is not prevented from the outside and monitors and blocks the access technologically and physically.
5. Encryption of Personal information
The user’s personal information is stored and managed by encrypting the password; therefore, only the user can know it and important data encrypt files and sending data and separate security functions are applied such as locking the files.
6. Storage of access record and the prevention of forgery
We keep and manage the access records to the personal information processing system for at least 6 months and use the security functions to prevent the access record from being forged, stole or lost.
7. Restriction of access to personal information
We take measures to control the access to personal information by means of granting the authorization of access to the data base processing personal information and modifying and nullifying the authorization.
8. Controlling access by unauthorized persons
We set up a separate physical space for personal information and establish and implement the procedures for controlling access.
The version number of the policy of processing personal information: Ver1.0
Announcement Date: October 1, 2021
Effective Day: October 1, 2021