Privacy Policy

Personal Information Protection Policy 2023-11-07

※ There may be an error in the auto-translated terms and conditions. The contents of the original terms and conditions written in Korean take precedence.

In accordance with Article 30 of the Personal Information Protection Act, U2medtek establishes and discloses a personal information processing policy as follows to protect the personal information of the data subject and to handle related grievances quickly and smoothly.

Article 1 (Purpose of Processing Personal Information)
U2medtek processes personal information for the following purposes. The personal information being processed is not used for purposes other than the following, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act.
1. Service membership registration and management
Personal information is processed for the purpose of confirming membership intention, identifying, certifying, maintaining and managing membership status, preventing negative use of service, confirming the consent of legal representatives, notifying and notifying various complaints when processing personal information of children under the age of 14.
2. Service delivery
It processes personal information for the purpose of shipping goods, providing services, sending contracts and bills, providing content, providing customized services, self-certification, age certification, payment and settlement of charges, and collection of bonds.
3. Dealing with grievances
Personal information is processed for the purpose of identifying the complainant's identity, checking civil complaints, contacting and notifying the results of the processing.
4. Delivering Customized Services
When using the service, personal information is processed for the purpose of checking the current physical condition and delivering coaching contents through it.

Article 2 (Processing and Retaining Period of Personal Information)
① U2medtek processes and holds personal information within the period of holding and using personal information according to laws and regulations or the period of holding and using personal information agreed upon when collecting personal information from the data subject.
② The processing and retention periods of each personal information are as follows.
1. Membership registration and management: until withdrawal from business/group services
Provided, That in cases falling under the following grounds, until the end of the relevant grounds
1) Where an investigation, etc. is in progress due to violation of the relevant statutes, until the relevant investigation is completed
2) If the bond or debt relationship remains due to the use of the service, until the settlement of the relevant bond and debt relationship
3) For medical data, including blood sugar levels, until the end of the retention time for use prepared in the consent form
2. Service provision: Until the service supply is completed, payment of charges and settlement are completed
Provided, That in cases falling under the following grounds, until the end of the relevant grounds
1) Marking and advertising under the Act on Consumer Protection in Electronic Commerce, etc., details of the contract Records on transactions such as implementation, etc
- Marking, advertising records: 6 months
- Record of contract or subscription withdrawal, payment, and supply of goods: 5 years
- Record of consumer complaints or dispute settlement: 3 years
2) Keeping data confirming communication facts under the Communications Secret Protection Act
- Subscriber telecommunications date and time, start.End time, counterpart subscriber number, frequency of use, source station location tracking data: 1 year
- Computer communication, Internet log record data, access point tracking data: 3 months
3) Laws and provisions on the basis of the period of personal information retention: the period of retention
Personal information processing work: retention period

Article 3 (Rights of data subjects and legal representatives).Obligations and Method of Exercise)
① The data subject reads personal information about U2medtek at any time.You can exercise your rights such as correction, deletion, and request for suspension of processing.
② The exercise of rights under paragraph 1 can be done forU2medtek in writing, e-mail, and fax in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and U2medtek will take action without delay.
③ The exercise of rights under paragraph 1 may be carried out through an agent, such as a legal representative of the data subject or a person entrusted. In this case, you must submit a power of attorney in accordance with the attached Form 11 of "Notice on How to Process Personal Information (No. 2020-7)."
④ Requests to view and suspend processing of personal information may limit the rights of the data subject under Articles 35 (4) and 37 (2) of the Personal Information Protection Act.
⑤ A request for correction and deletion of personal information cannot be requested to be deleted if the personal information is specified as a collection target in other laws.
⑥ U2medtek requests and corrections for reading according to the rights of the data subject.Check whether the person who made the request, such as a request for deletion or a request for suspension of processing, is the person who made the request or a legitimate agent.

Article 4 (Personal Information Items Processed)
U2medtek is processing the following privacy items.
1. Membership registration and management
- Required items: Name, gender, date of birth, ID, password, address, phone number, email address

- Optional items: When using SNS login instead of ID/password, email and member nickname are collected for member authentication and stored instead of ID, and are not transmitted outside of the service.

- SNS login providers: google, apple, kakaotalk, naver
2. Provision of goods or services
- Required items: Name, date of birth, ID, password, address, phone number, email address, credit card number, bank account information
3. Delivering Customized Services
- Required: Continuous blood glucose reading, heart rate, BMI, height, weight, blood pressure

- Optional items: Health status questionnaires (lifestyle habits, disease history, medication status) are used to provide personalized content, and users can refuse to answer.
4. In the process of using Internet services, the following personal information items can be automatically created and collected.
- IP address, cookie, MAC address, service usage record, visit record, chat token record, FMSToken record

Article 5 (Destruction of Personal Information)
U2medtek is processing the following privacy items.
① When personal information becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the purpose of processing, U2medtek will destroy the personal information without delay.
② If the period of retention of personal information agreed by the data subject has elapsed or the purpose of processing has been achieved, the personal information should be transferred to a separate database (DB) or stored in different storage locations.
③ The procedure and method of destroying personal information are as follows.
1. procedure for destruction
U2medtek selects personal information that has been destroyed and destroys personal information with the approval of U2medtek's personal information protection manager.
2. Method of destruction
U2medtek records in electronic file format.Stored personal information is not allowed to be played back, recorded on paper documents.The stored personal information is shredded or incinerated with a grinder to be destroyed.

Article 6 (Measures to ensure the stability of personal information)
U2medtek is processing the following privacy items.
1. Management measures: Establishing an internal management plan.Implementation, regular employee training, etc
2. Technical measures: Management of access rights for personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
3. Physical Measures: Control of Access to Computer Rooms, Archive Rooms, etc

Article 7 (Matters concerning the installation, operation, and refusal of automatic personal information collection devices)
U2medtek does not use "cookie," which stores information about the data subject's use and frequently invokes it.

Article 8 (Extra Use).Criteria for determining provision)
U2medtek additionally uses personal information without the consent of the data subject in consideration of matters pursuant to Article 14-2 of the Enforcement Decree of the Personal Information Protection Act pursuant to Article 15 (3) and Article 17 (4) of the Personal Information Protection Act.It can be provided. Accordingly, additional use by U2medtek without the consent of the data subject.The following points were considered to provide.
▶ Additional use of personal information.Is the purpose to be provided relevant to the original purpose of collection
▶ Additional use in light of the circumstances or processing practices in which personal information was collected.Is there any predictability of delivery
▶ additional use of personal information.Whether provision unreasonably infringes the interests of the data subject
▶ Whether measures necessary for securing stability, such as pseudonymization or encryption, have been taken
※ additional use.The criteria for judging considerations when provided are prepared by the operator/organization autonomously.Revealed
Article 9 (Method of remedy for infringement of rights)
In order to receive relief from personal information infringement, the data subject may apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency's Personal Information Infringement Reporting Center. In addition, please contact the following institution for reporting and consulting other personal information infringement.
1. Personal Information Dispute Mediation Committee: (Republic of Korea) 1833-6972 (www.kopico.go.kr )
2. Personal Information Infringement Reporting Center: (Republic of Korea) 118 (privacy.kisa.or.kr )
3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr )
4. National Police Agency: 182 (cyberbureau.police.go.kr )

Article 35 of the Personal Information Protection Act (reading personal information). Article 36 (Correction of Personal Information).Deleted), A person who has been infringed on rights or interests due to disposition or omission made by the head of a public institution in response to a request under Article 37 (Suspension of Processing of Personal Information, etc.) may request an administrative trial as prescribed by the Administrative Trial Act.

※ For more information on administrative trials, please refer to the website of the Central Administrative Trial Committee (www.simpan.go.kr ).

Article 10 (Change of Personal Information Processing Policy) This Personal Information Processing Policy will be applied from September 29, 2021.