Dooricosmetics

Privacy policy of DOORI Cosmetics Co., Ltd.

DOORI Cosmetics complies with the provisions set forth in the "Personal Information Protection Act" and related laws to protect the freedom and rights of information subjects. We process personal information legally, manage it securely, and, in accordance with Article 30 of the Personal Information Protection Act, establish and disclose this Privacy Policy to guide information subjects on the procedures and standards for personal information processing. Additionally, we aim to handle related complaints promptly and efficiently.

- Table of Contents -

 • Purpose, Collection Items, and Retention & Use Period of Personal Information

 • Handling of Personal Information of Children Under 14 Years of Age

 • Provision of Personal Information to Third Parties 

 • Outsourcing of Personal Information Processing

 • Procedures and Methods for the Destruction of Personal Information

 • Rights, Duties, and Methods of Exercising Rights for Information Subjects and Legal Representatives

 • Security Measures for the Protection of Personal Information

 • Installation, Operation, and Refusal of Personal Information Automatic Collection Devices

 • Personal Information Protection Manager and Requests for Access to Personal Information

 • Remedies for Violation of Rights

 • Changes to the Privacy Policy

 • Purpose, Collection Items, and Retention & Use Period of Personal Information

"Doori Cosmetics processes the personal information of data subjects as follows:

Handling of Personal Information of Children Under 14yers of Age

DOORI Cosmetics does not collect personal information from children under the age of 14."

Provision of Personal Information to Third Parties 

DOORI Cosmetics processes the personal information of data subjects within the scope specified in the purpose of processing personal information. We provide personal information to third parties only in cases where there is consent from the data subject or in accordance with special provisions of the "Personal Information Protection Act," such as Article 17 and Article 18. Except in these cases, we do not disclose the personal information of data subjects to third parties.

 Outsourcing of Personal Information Processing

DOORI Cosmetics entrusts the processing of personal information as follows to ensure the smooth handling of personal information tasks:

DOORI Cosmetics, upon entering into outsourcing contracts, abides by Article 26 of the "Personal Information Protection Act." In accordance with this, the purposes of outsourcing tasks, prohibition of processing personal information beyond the specified purposes, protective measures both technically and administratively, restrictions on re-outsourcing, and matters related to the management and supervision of the entrusted party, as well as liability for damages, are clearly specified in the contract or other relevant documents. We actively supervise whether the entrusted party securely processes personal information.

If there is any change in the content of the outsourced tasks or a change in the entrusted party, we will promptly disclose such changes through this Privacy Policy without delay.

Procedures and Methods for the Destruction of Personal Information

DOORI Cosmetics promptly destroys personal information when it becomes unnecessary due to the expiration of the retention period or the achievement of the processing purpose.

If personal information must be retained in accordance with other laws despite the expiration of the retention period agreed upon with the data subject or the achievement of the processing purpose, the company transfers the relevant personal information to a separate database (DB) or stores it in a different location.

The procedures and methods for the destruction of personal information are as follows:

Rights, Duties, and Methods of Exercising Rights for Information Subjects and Legal Representatives

Data subjects have the right to exercise their rights, such as accessing, correcting, deleting, or requesting the cessation of processing their personal information, at any time.

The exercise of these rights can be made in writing, via electronic mail, facsimile transmission (FAX),etx., in accordance with Article 41,Paragraph 1 of the Enforcement Decree of the “Personal Information Protection Act,” and DOORI Cosmetics will promptly take appropriate action.

Rights can also be exercised through a legal representative or an authorized agent. In such cases, a power of attorney, according to the format specified in Annex 11 of the “Guidelines on Personal Information Processing Methods (No. 2020-7)," must be submitted. DOORI Cosmetics verifies the identity of the requester when handling requests for access, correction, deletion, and cessation of processing, in accordance with the rights of data subjects.

Requests for personal information access and processing cessation, according to Article 35, Paragraph 4, and Article 37, Paragraph 2, of the "Personal Information Protection Act," may be subject to limitations on the rights of the data subject. Requests for correction and deletion cannot be accepted if the information is explicitly specified as a collection target under other laws.

Security Measures for the Protection of Personal Information

DOORICOSMETICS takes the following measures to ensure the security of personal information:

1. Administrative Measures: Establishment and implementation of internal management plans, Operation of a dedicated organization, Regular employee training.

2. Technical Measures: Access control management for systems processing personal information, Installation of access control systems, Encryption of personal information. 

3. Installation and regular updating of security programs.

Physical Measures: Access control in areas such as computer rooms and data storage rooms

Installation, Operation, and Refusal of Personal Information Automatic Collection Devices

DOORICOSMETICS uses 'cookies' to store and retrieve usage information periodically to provide individualized, customized services to data subjects.

*Please note that rejecting cookie storage may result in difficulties in using personalized services.

Personal Information Protection Manager and Requests for Access to Personal Information

DOORICOSMETICS oversees and takes responsibility for tasks related to the processing of personal information, including handling complaints and remediation for data subjects in connection with personal information processing. To facilitate this, the company has designated a Personal Information Protection Manager.

Data subjects can exercise their right to request access to personal information in accordance with Article 35 of the "Personal Information Protection Act" by contacting the department listed below. DOORI Cosmetics strives to promptly process requests for access to personal information.

For any inquiries, complaints, or remediation related to the protection of personal information arising from the use of DOORI Cosmetics' services (or business), data subjects can contact the Personal Information Protection Manager and the relevant department. DOORI Cosmetics commits to providing timely responses and resolutions to data subjects' inquiries.

Remedies for Violation of Rights

DOORI Cosmetics ensures the data subject's right to self-determination of personal information and makes efforts for consultation and redress in case of personal information breaches. If reporting or consultation is needed, please contact the following department:

1. Complaints Processing Department: Global Business Division

2. Contact Person : Jieun Lee

3. Tel : 02-3019-4703

Information subjects can apply for dispute resolution or consultation regarding remedies for personal information breaches with the following institutions:

1.Personal Information Dispute Resolution Committee: 1833-6972 (www.kopico.go.kr)

2. Personal Information Breach Reporting Center: 118 (privacy.kisa.or.kr)

3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)

4. National Police Agency: 182 (ecrm.cyber.go.kr)

According to the provisions of Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), and Article 37 (Suspension of Personal Information Processing) of the "Personal Information Protection Act," individuals who have suffered infringements of rights or interests due to the disposition or malfeasance by the head of a public institution can file an administrative appeal in accordance with the Administrative Adjudication Act.

Central Administrative Appeals Commission: 110 (www.simpan.go.kr)

Changes to the Privacy Policy

This Privacy Policy is effective form December 8, 2023.

You can review the previous Privacy Policy below.