Dooricosmetics

Privacy policy

Privacy policy of DOORI Cosmetics Co., Ltd.



DOORI Cosmetics complies with the provisions set forth in the "Personal Information Protection Act" and related laws to protect the freedom and rights of information subjects. We process personal information legally, manage it securely, and, in accordance with Article 30 of the Personal Information Protection Act, establish and disclose this Privacy Policy to guide information subjects on the procedures and standards for personal information processing. Additionally, we aim to handle related complaints promptly and efficiently.


- Table of Contents -


 • Purpose, Collection Items, and Retention & Use Period of Personal Information

 • Handling of Personal Information of Children Under 14 Years of Age

 • Provision of Personal Information to Third Parties 

 • Outsourcing of Personal Information Processing

 • Procedures and Methods for the Destruction of Personal Information

 • Rights, Duties, and Methods of Exercising Rights for Information Subjects and Legal Representatives

 • Security Measures for the Protection of Personal Information

 • Installation, Operation, and Refusal of Personal Information Automatic Collection Devices

 • Personal Information Protection Manager and Requests for Access to Personal Information

 • Remedies for Violation of Rights

 • Changes to the Privacy Policy


 • Purpose, Collection Items, and Retention & Use Period of Personal Information

"Doori Cosmetics processes the personal information of data subjects as follows:


Service

Collection Purpose

Collection Items

Retention and Usage Period

OEM/ODM

Export Inquiry Response

Name, Contact Information, Email

1 Year

Export Inquiry

Export Inquiry Response

Name, Contact Information, Email

1 Year

Automatically Generated Information

Statistical analysis related to platform usage

IP address, Date of access, Access records, Service usage records

1 year

 

Handling of Personal Information of Children Under 14yers of Age

DOORI Cosmetics does not collect personal information from children under the age of 14."


Provision of Personal Information to Third Parties 

DOORI Cosmetics processes the personal information of data subjects within the scope specified in the purpose of processing personal information. We provide personal information to third parties only in cases where there is consent from the data subject or in accordance with special provisions of the "Personal Information Protection Act," such as Article 17 and Article 18. Except in these cases, we do not disclose the personal information of data subjects to third parties.


 Outsourcing of Personal Information Processing

DOORI Cosmetics entrusts the processing of personal information as follows to ensure the smooth handling of personal information tasks:


Recipient of Outsourcing

Outsourced Task

Retention and Usage Period

Motion Eye

Website maintenance

Until the termination of the contract


DOORI Cosmetics, upon entering into outsourcing contracts, abides by Article 26 of the "Personal Information Protection Act." In accordance with this, the purposes of outsourcing tasks, prohibition of processing personal information beyond the specified purposes, protective measures both technically and administratively, restrictions on re-outsourcing, and matters related to the management and supervision of the entrusted party, as well as liability for damages, are clearly specified in the contract or other relevant documents. We actively supervise whether the entrusted party securely processes personal information.


If there is any change in the content of the outsourced tasks or a change in the entrusted party, we will promptly disclose such changes through this Privacy Policy without delay.


Procedures and Methods for the Destruction of Personal Information

DOORI Cosmetics promptly destroys personal information when it becomes unnecessary due to the expiration of the retention period or the achievement of the processing purpose.


If personal information must be retained in accordance with other laws despite the expiration of the retention period agreed upon with the data subject or the achievement of the processing purpose, the company transfers the relevant personal information to a separate database (DB) or stores it in a different location.


The procedures and methods for the destruction of personal information are as follows:

Destruction Procedure

Select the personal information for which the reasons for destruction have arisen, and with the approval of the DOORI Cosmetics' Personal Information Protection Manager, proceed to destroy the identified personal information.

Destruction Method:

Personal information recorded or stored in electronic file format is irreversibly destroyed to ensure that the records cannot be regenerated. Procedure

 

Rights, Duties, and Methods of Exercising Rights for Information Subjects and Legal Representatives


Data subjects have the right to exercise their rights, such as accessing, correcting, deleting, or requesting the cessation of processing their personal information, at any time.


The exercise of these rights can be made in writing, via electronic mail, facsimile transmission (FAX),etx., in accordance with Article 41,Paragraph 1 of the Enforcement Decree of the “Personal Information Protection Act,” and DOORI Cosmetics will promptly take appropriate action.


Rights can also be exercised through a legal representative or an authorized agent. In such cases, a power of attorney, according to the format specified in Annex 11 of the “Guidelines on Personal Information Processing Methods (No. 2020-7)," must be submitted. DOORI Cosmetics verifies the identity of the requester when handling requests for access, correction, deletion, and cessation of processing, in accordance with the rights of data subjects.


Requests for personal information access and processing cessation, according to Article 35, Paragraph 4, and Article 37, Paragraph 2, of the "Personal Information Protection Act," may be subject to limitations on the rights of the data subject. Requests for correction and deletion cannot be accepted if the information is explicitly specified as a collection target under other laws.


Security Measures for the Protection of Personal Information

DOORICOSMETICS takes the following measures to ensure the security of personal information:


1. Administrative Measures: Establishment and implementation of internal management plans, Operation of a dedicated organization, Regular employee training.

2. Technical Measures: Access control management for systems processing personal information, Installation of access control systems, Encryption of personal information. 

3. Installation and regular updating of security programs.

Physical Measures: Access control in areas such as computer rooms and data storage rooms


Installation, Operation, and Refusal of Personal Information Automatic Collection Devices


DOORICOSMETICS uses 'cookies' to store and retrieve usage information periodically to provide individualized, customized services to data subjects.

Purpose 

of  Use

The collected information, including the user's visit and usage patterns on services and websites, popular search terms, and the status of secure connections, is utilized to optimize information provision tailored to the user.

Installation, Operation and Rejection

You can reject the storage of cookies by configuring the options in your web browser. 

To do so, go to Tools at the top of the web browser > Internet Options > Privacy.

*Please note that rejecting cookie storage may result in difficulties in using personalized services.


Personal Information Protection Manager and Requests for Access to Personal Information


DOORICOSMETICS oversees and takes responsibility for tasks related to the processing of personal information, including handling complaints and remediation for data subjects in connection with personal information processing. To facilitate this, the company has designated a Personal Information Protection Manager.


Data subjects can exercise their right to request access to personal information in accordance with Article 35 of the "Personal Information Protection Act" by contacting the department listed below. DOORI Cosmetics strives to promptly process requests for access to personal information.


For any inquiries, complaints, or remediation related to the protection of personal information arising from the use of DOORI Cosmetics' services (or business), data subjects can contact the Personal Information Protection Manager and the relevant department. DOORI Cosmetics commits to providing timely responses and resolutions to data subjects' inquiries.


Category

Name & Position

Contact Information

Personal Information Protection Manager

Name : YoungJung Na

Position : CEO

Tel. : 02-3019-4701

E-mail : yjna@dooricare.com

FAX : 02-3019-4799

Personal Information Access Request

Department : Global

Name : Jieun Lee

Tel. : 02-3019-4703

E-mail :sameperson0@dooricare.com

FAX : 02-3019-4799

 

Remedies for Violation of Rights


DOORI Cosmetics ensures the data subject's right to self-determination of personal information and makes efforts for consultation and redress in case of personal information breaches. If reporting or consultation is needed, please contact the following department:


1. Complaints Processing Department: Global Business Division

2. Contact Person : Jieun Lee

3. Tel : 02-3019-4703


Information subjects can apply for dispute resolution or consultation regarding remedies for personal information breaches with the following institutions:


1.Personal Information Dispute Resolution Committee: 1833-6972 (www.kopico.go.kr)

2. Personal Information Breach Reporting Center: 118 (privacy.kisa.or.kr)

3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)

4. National Police Agency: 182 (ecrm.cyber.go.kr)


According to the provisions of Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), and Article 37 (Suspension of Personal Information Processing) of the "Personal Information Protection Act," individuals who have suffered infringements of rights or interests due to the disposition or malfeasance by the head of a public institution can file an administrative appeal in accordance with the Administrative Adjudication Act.


Central Administrative Appeals Commission: 110 (www.simpan.go.kr)


Changes to the Privacy Policy

This Privacy Policy is effective form December 8, 2023.


You can review the previous Privacy Policy below.