<ONCOBIX Inc.>
Per Article 30 of the Personal Information Protection Act and to protect the personal information of main agent of information and promptly and smoothly handle related complaints, "http://oncobix.com/," hereby referred to as "ONCOBIX," has established and disclosed the following Personal Information Management Policy as follows:
○ The Personal Information Management Policy herein is effective as of January 1st, 2022.
Article 1 Purpose of Management of Personal Information
ONCOBIX Inc. (http://oncobix.com, hereby referred to as “ONCOBIX”) manages personal information for the following purposes:
Personal information under management is not used for any other purposes described below. In cases of changes to the purpose of use, actions such as obtaining additional agreement will be implemented per Article 18 of the Personal Protection Act.
Article 2 Period for which Personal Information is Managed and Held
① ONCOBIX manages and holds personal information either for a period of holding and using personal information as prescribed by the relevant law or for a period of holding and using personal information as agreed by the subject-of-information at the time of collecting the relevant personal information.
② The period for which each personal information is managed and held is as follows:
Personal information in connection with Article 2-1 is held and used for the above objectives of usage until the date agreed upon for collection and usage.
Basis for Collection: Period of Collection
Pertinent Laws and Regulations: Records in connection with the collection, management, and use of credit information – 3 years
Exceptions: Requests for correction or deletion by the person who provided the information
Article 3. Rights, Duties, and Manner of Exercise of main agent of information and Legal Representatives
① A main agent of information ation can exercise their rights to demand ONCOBIX an inspection, correction, deletion, and suspension of personal information at any time.
② Exercise of rights per Clause 1 can be done via written requests, electronic mail, or facsimile (FAX) per Article 41-1 of the Personal Protection Act. ONCOBIX will promptly process the request without delay.
③ Exercise of rights per Clause 1 may be completed through a legal representative or representatives with proper authorizations of the main agent of information. In such case, the main agent of information must submit a completed authorization form per Document 11 of "Notice on the Method of Personal Information Management" (No. 2020-7).
④ Per Article 35-4 and Article 37-2 of the Personal Information Act, the rights of a main agent of information may be limited when requesting to inspect or cease management of personal information.
⑤ Requests to correct or delete personal information may not be granted if relevant laws or regulations require the collection of the relevant personal information.
⑥ ONCOBIX confirms the identity and legal authority of the person who requests to inspect, correct, delete, or cease management of personal information on the rights of a main agent of information.
Article 4 Items of Personal Information Subject to Management
① ONCOBIX manages the following items of personal information.
1. Provision of Goods or Services
Required Items: E-mail address, mobile phone number, password, name, company name, occupation
Optional Items:
Article 5 Destruction of Personal Information
① When personal information is no longer needed after the period for which personal information is held expires, or the objectives for which personal information was held have been accomplished, ONCOBIX destroys the relevant personal information without delay.
② If the law requires personal information to be held longer, even after the period agreed upon by the main agent of information for holding personal information or the objectives for which personal information was collected have been accomplished, the relevant personal information is transferred to a separate database (DB) or stored in a separate location.
1. Legal Basis
2. Stored Personal Information Categories: Account information, transaction date
③ The process and methods of destroying personal information are as follows:
1. Process of Destruction
ONCOBIX identifies the personal information for which reasons for destruction have been established and destroys the relevant information with the approval of the Personal Information Protection Manager.
2. Method of Destruction
Information in the form of electronic data is destroyed using technical methods that render the information irrecoverable.
Information printed on paper is destroyed using a document shredder or incinerated.
Article 6 Measures to Ensure Security of Personal Information
ONCOBIX takes the following measures to ensure the security of personal information:
1. Minimizing the number of employees handling personal information and their training
ONCOBIX has taken measures to specially designate a select number of employees for handling personal information. ONCOBIX also limits and minimizes the number of employees who are tasked with personal information-related work.
2. Limiting Access to Personal Information
Necessary measures have been taken to control access to personal information, including granting, changing, and canceling permission to access the database system that manages personal information. External unauthorized accesses are being controlled using a firewall.
3. Locking Tools to Secure Documents
Documents or auxiliary storage devices containing personal information are stored in secure locations with lock devices.
Article 7 With Regard to Installation, Operation, and Rejection of Personal Information Automatic Collection Tools
ONCOBIX does not use "cookies," which store and constantly load the user information of main agent of information.
Article 8 Personal Information Protection Manager
① ONCOBIX designated the following Personal Information Protection Manager to comprehensively oversee tasks related to the management of personal information, process complaints by the main agent of information in connection with the management of personal information, and damage compensation.
▶ Personal Information Protection Manager
Name: Jeong, Hwa-yeong
Title: Operation Support
Rank: Manager
Contact Information: 031-212-9104, jhy@oncobix.com, 031-212-9105
※ You will be connected to Personal Information Protection Managing Department.
▶ Personal Information Protection Managing Department
Department: Department of Operational Support
Contact Person: Ji, Yoon-ju
Contact Information: 031-212-9104, juru95@oncobix.com, 031-212-9105
② The main agent of information may contact the Personal Information Protection Manager and relevant department with regards to all matters regarding the protection of personal information, complaints, damage compensation, etc., that occurred while using services (or business) provided by ONCOBIX. ONCOBIX strives to promptly respond to and process requests made by subjects of information.
Article 9 Request for access to personal information
Per Article 35 of the Personal Information Protection Act, a main agent of information may submit a request to inspect his/her personal information with the following departments.
ONCOBOX strives to ensure that the request of a main agent of information to inspect his/her personal information is processed promptly.
▶ Personal Information Inspection Request Filing and Processing Department
Department: Department of Operational Support
Contact Person: Jeong, Hwa-yeong
Contact Information: 031-212-9104, jhy@oncobix.com, 031-212-9105
Article 10 Damages from Violation of Rights
To seek damages incurred by infringement upon personal information, a main agent of information may request dispute mediation or consultation from Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Center under Korea Internet and Security Agency. To report or seek advice on personal information infringement, contact the following agencies.
1. Personal Information Dispute Mediation Committee: (no area code) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: (no area code) 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office of the Republic of Korea: (no area code) 1301 (www.spo.go.kr)
4. Korean National Police: (no area code) 182 (ecrm.cyber.go.kr)
Persons whose rights or profits were infringed due to the actions taken by or negligence committed by the persons of public agencies with regards to the requests made based on Article 35 (Inspection of Personal Information), Article 36 (Correction and Deletion of Personal Information), and Article 37 (Suspension, etc. from Managing Personal Information) of Personal Protection Act may pursue administrative appeals per Administrative Appeals Act.
※ For more information on administrative appeals, please visit Central Administrative Appeals Commission's website (www.simpan.go.kr).
Article 11 Revision to Personal Information Management Policy
① The Personal Information Management Policy herein is effective as of January 1st, 2022.
