Privacy Policy
EASY TOOL Privacy Policy
EasyTool GDPR Compliant Privacy Policy
Article 1 (Purpose of Processing Personal Information)
EasyTool (hereinafter "the Company") processes personal information for the following purposes. The processed personal information will not be used for purposes other than the following, and if the purpose of use is changed, we will seek prior consent.
Providing Services
- Providing content, personalized services, identity verification, age verification, and member management.
Marketing and Advertising
- Developing new services (products), providing personalized services, providing event and advertising information, and offering participation opportunities, frequency analysis, or statistical analysis of users' service usage.
Google AdSense
- Providing personalized ads through Google AdSense and other ad networks and analyzing ad performance.
Article 2 (Processing and Retention Period of Personal Information)
① The Company processes and retains personal information within the period of personal information retention and use agreed upon by the information subject or within the period stipulated by law.
② The retention and processing periods for each type of personal information are as follows:
- Membership Registration and Management: Until membership withdrawal
- Marketing and Advertising: Until consent is withdrawn
- Google AdSense: Until consent is withdrawn
Article 3 (Provision of Personal Information to Third Parties)
The Company processes personal information within the scope specified in Article 1 and does not provide personal information to third parties without prior consent from the information subject, except in the following cases:
- When the information subject has given prior consent
- When required by law or for investigative purposes according to legal procedures and methods
Article 4 (Commissioned Processing of Personal Information)
① The Company entrusts the following personal information processing tasks to ensure smooth personal information handling.
- Google AdSense: Providing ads through Google AdSense and analyzing ad performance
② When signing an outsourcing contract, the Company specifies matters related to responsibilities such as prohibiting the processing of personal information for purposes other than those specified, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the trustee, and liability for damages in the contract documents, and supervises whether the trustee handles personal information safely.
Article 5 (Rights and Obligations of Information Subjects and How to Exercise Them)
① Information subjects can exercise the following personal information protection rights at any time against the Company.
- Request to access personal information
- Request correction if there are errors
- Request deletion
- Request to stop processing
② The exercise of rights under Paragraph 1 can be done in writing, by email, or fax to the Company, and the Company will take action without delay.
Article 6 (Measures to Ensure the Safety of Personal Information)
The Company takes the following measures to ensure the safety of personal information.
- Administrative Measures: Establishment and implementation of internal management plans, regular employee training, etc.
- Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
- Physical Measures: Access control to computer rooms, data storage rooms, etc.
Article 7 (Personal Information Protection Officer)
① The Company has designated the following person as the Personal Information Protection Officer to take responsibility for overall personal information processing, handle complaints, and provide remedies for data subjects.
- Personal Information Protection Officer
- Name: [Name of the officer]
- Position: [Position of the officer]
- Contact Information: [Contact information including email]
② Information subjects can contact the Personal Information Protection Officer and the relevant department for all personal information protection-related inquiries, complaints, and damage relief while using the Company’s services (or business). The Company will respond and handle the inquiries without delay.
Article 8 (Changes to the Privacy Policy)
① This privacy policy is effective from the date of implementation and any changes, additions, deletions, or corrections in accordance with laws and policies will be notified through announcements 7 days before the changes take effect.
- Effective Date: July 18, 2024
Article 9 (Rights of Data Subjects under the GDPR)
① Under GDPR, EU residents have the following rights.
- Right of Access: The right to know whether personal data is being processed and, if so, to access the personal data.
- Right to Rectification: The right to correct inaccurate personal data.
- Right to Erasure: The right to have personal data deleted under certain conditions.
- Right to Restriction of Processing: The right to restrict processing of personal data under certain conditions.
- Right to Data Portability: The right to receive personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
- Right to Object: The right to object to the processing of personal data.
- Rights Related to Automated Decision-Making and Profiling: The right to not be subject to decisions based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
② Information subjects can contact the Company's Personal Information Protection Officer to exercise the above rights. The Company will take action without delay.