The Recording Industry Association of Korea (hereinafter referred to as the ‘Association’) values your personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection. The Association informs you of the purpose and method of using the personal information you provide and what measures are being taken to protect your personal information through its privacy policy. When the Association revises its privacy policy, it will notify you through the website homepage notice (or individual notice). In addition, we respect the rights and interests of users, such as the right to request access, correction, deletion, and suspension of processing of personal information held in accordance with the relevant laws and regulations, and users may file an administrative appeal in accordance with the Administrative Appeals Act for infringement of such rights and interests under the law. The websites operated by the Association are as follows, and we inform you that this policy applies to all websites operated by the Association unless otherwise specified. However, if the Association enacts and implements a separate privacy policy for a specific website, it will be followed and posted on the homepage operated by the relevant organization.

- Recording Industry Association of Korea http://www.riak.or.kr

- Recording Industry Association of Korea Sound Source Manager http://manage.riak.or.kr

• • Items and Purpose of Personal Information Collection

    1. ① The Association processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use is changed, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
    2. ② The Recording Industry Association of Korea collects the following personal information to provide membership registration and various services to users.
       • 1. At the time of membership registration
         - Name, company name, business registration number, address, postal code, e-mail, contact information, ID, password, etc.
       • 2. Personal information in accordance with the performance of the service contract
         - Photo, name, trade name, resident registration number, business registration number, address, telephone, fax, e-mail, etc.
       • 3. Service use record
         - Access log, cookie, access IP information, etc.

  • Processing and Retention Period of Personal Information

    1. ① The Association processes and retains personal information within the period of retention and use of personal information in accordance with laws and regulations or the period of retention and use of personal information agreed to when collecting personal information from the data subject.
    2. ② The processing and retention period of each personal information is as follows.
       • 1. Records on contract performance, etc.: 5 years
         - Act on Consumer Protection in Electronic Commerce, etc.
       • 2. Records on consumer complaints or dispute resolution: 3 years
         - Act on Consumer Protection in Electronic Commerce, etc.
       • 3. Records on identity verification: 6 months
         - Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.
       • 4. Website visit records: 3 months
         - Protection of Communications Secrets Act
       • 5. Reason for retaining information under internal policy: 1 year
         - Prevention and recording of fraudulent use

  • Procedure and Method of Personal Information Destruction

    In principle, the user's personal information is destroyed without delay when the purpose of collecting and using the personal information is achieved. The procedure and method of destroying personal information are as follows.

    1. ① Destruction procedure
       • - The information entered by the user for membership registration, etc. is transferred to a separate DB (a separate document box in the case of paper) after the purpose is achieved and is stored for a certain period of time in accordance with internal policies and other information protection reasons under relevant laws and regulations (see retention and use period) before being destroyed.
       • - Personal information will not be used for any purpose other than being retained unless required by law.
    2. ② Destruction method
       • - Personal information printed on paper is destroyed by shredding with a shredder or by incineration.
       • - Personal information stored in electronic file format is deleted using a technical method that cannot reproduce the record.

  • Procedure and Method of Personal Information Destruction

    Users and legal representatives (persons who have the effect of agency by law without being delegated by the principal, such as a person with parental authority or a guardian for a minor) may view or modify their own or the registered personal information of a child under 14 years of age (hereinafter referred to as a 'child') and may request to terminate their subscription.

    1. ① To view or modify the personal information of a user or child, you can use 'Change Personal Information' (or 'Modify Member Information', etc.) on the homepage, and to terminate your subscription (withdraw consent), you can click 'Withdraw from Membership' and go through the identity verification process to directly view, correct, or withdraw. However, upon termination of subscription, there may be difficulties or impossibility in using all or part of the service.
    2. ② Alternatively, if you contact the person in charge of personal information management in writing, by phone, or by e-mail, we will take action without delay.
    3. ③ If a user requests correction of an error in personal information, the personal information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, the result of the correction will be notified to the third party without delay so that the correction can be made.
    4. ④ The Association processes personal information that has been terminated or deleted at the request of the user or legal representative in accordance with the provisions of "4. Retention and Use Period of Personal Information" and ensures that it cannot be viewed or used for any other purpose.

  • Matters Concerning the Installation/Operation and Refusal of Automatic Personal Information Collection Devices

    To provide specialized customized services to users, we use 'cookies' that store and retrieve user information from time to time. A cookie is a small amount of information that the server (HTTP) used to operate the website sends to the user's computer browser and may also be stored on the hard disk in the user's PC computer. The Association uses cookies for the following purposes.

    1. ① Purpose of using cookies
       • - When a user accesses the Recording Industry Association of Korea homepage, the server reads the cookies in your browser and identifies your computer. By assigning a unique cookie to the browser of users accessing the homepage, we use cookies to identify the size of the user base, such as the frequency of site use by members and non-members and the total number of users.
    2. ① Installation/operation and refusal of cookies
       • - You can choose to accept all cookies, to be notified each time a cookie is installed, or to refuse all cookies by adjusting the [Tools] menu -> [Internet Options] -> [Security] -> [Custom Level] in your web browser. However, if you refuse to store cookies, you may have difficulty using some services that require login.
    3. ① How to specify whether to allow cookie installation (for Internet Explorer)
       • - Select [Internet Options] from the [Tools] menu.
       • - Click the [Privacy Tab].
       • - You can set the [Privacy Level].

  • Civil Service for Personal Information

    The Association has designated the relevant department and the person in charge of personal information management/person in charge of personal information handling as follows to protect customers' personal information and to handle complaints related to personal information.

    - Phone number: 02-3270-5900

    
    

    You can report all personal information protection-related civil complaints that occur while using the Association's services to the person in charge of personal information handling and the person in charge of personal information management or the relevant department. The Association will provide prompt and sufficient answers to users' reports.
    If you need to report or consult about other personal information infringements, please contact the following organizations.

    
    
    1. - Personal Information Infringement Report Center (www.118.or.kr / 118)
    2. - Information Protection Mark Certification Committee (www.eprivacy.or.kr / 02-580-0533~4)
    3. - Supreme Prosecutors' Office, Advanced Crime Investigation Division (www.spo.go.kr / 02-3480-2000)
    4. - National Police Agency Cyber Terror Response Center (www.ctrc.go.kr / 02-392-0330)

  • Other

    If you move to another site or web page by clicking on a link or banner included in the various web pages operated by the Association, the privacy policy will be subject to the policy posted by the operating institution of that site, so please check the policy of the newly visited site.

  • Duty of Notification

    If there are any additions, deletions, or modifications to the current privacy policy, we will notify you through the “Notice” on the homepage without delay.
    - Announcement date: July 1, 2018