HYBE Co., Ltd. (hereafter referred to as the “Company”) acknowledges the importance of users’ personal information obtained in the course of providing performance services by the Company’s artists (hereafter referred to as the “Service”) and has the following Privacy Policy in place to protect such personal information. This Privacy Policy outlines how users’ personal information is used and for what purposes, and what measures are taken by the Company to protect the information. As this Privacy Policy is subject to change to reflect a revision to relevant laws and regulations as well as the Company’s policies, the Company recommends that users review it regularly.
①The Company collects and uses the following personal information during provision of the Service.
Type of Information | Purpose of Collection and Use | Information Items | Use and Retention Period |
---|---|---|---|
Directly collected information |
|||
maintenance of performance venue security and guest safety | Personal video information (video footage) | Destroyed within 30 days after the date of the event | |
HYBE INSIGHT(hereafter referred to as the “Museum”) membership registrations and Museum Web/app service use | Nickname | Account becomes inactive after one year of last log-in Inactive membership account information is deleted after 5 year |
|
Museum reservation and payment information | Financial transaction history (Payment type, payment amount) |
Retained for 5 years before deletion in accordance with the Act on the Consumer Protection in Electronic Commerce | |
Museum membership service registration and use | Name, phone number | ||
Information generated through the Service |
To statistically analyze service usage | Usage information (usage time, time of visit, IP address, etc.) and cookies | Usage information: retained for 3 months Cookies: retained until the date of expiry |
②The Company obtains and collects the following personal information from third parties.
Information Provider | Type of Information | Purpose of Collection and Use | Information Items | Use and Retention Period |
---|---|---|---|
WEVERSE COMPANY Inc. | |||
Membership account purchase | Operations for providing membership services including membership identification and event eligibility, analysis of usage, ticket purchase eligibility verification and other related operations | Name, membership information (membership number, expiration date, etc), gender, e-mail, contact number, shipping address(recipient) | At membership expiration and cancellation |
Applications for event tickets | To obtain applications for event tickets (including public music shows) and provide attendance guidelines | Name, date of birth, contact number, Weverse ID | Deleted within 90 days after end of album promotional activities |
Museum login | Museum Web/app login using Weverse account | Name, e-mail | At Museum membership cancellation or exceeding 5 years of inactive account status |
③The Company collects the above personal information, excluding certain sensitive personal details that may infringe on the basic human rights of users (e.g. race, ethnicity, ideology, faith, birthplace, political disposition, criminal records, health conditions and intimate behavior) and unique identification information.
④The Company uses the ticketing lottery and pre-booking system for members of the fan community to allow for fair and safe ticketing. See the ticket purchasing guidelines for further details when purchasing a ticket. Also, users shall use their own name when booking a ticket, otherwise the purchase may be cancelled. In the case of a violation of the Company’s policies, users are subject to penalties and the Company may retain certain minimum identification information.
⑤The Service is not for children under the age of 14 (16 for non-Koreans). If the Company learns that it has collected personal information from a child without consent from his or her legal representative, the Company will delete such information and cancel the child’s account. If you believe that the Company might have obtained any information from a child without consent from his or her legal representative, please contact the Company at privacy@hybecorp.com.
The Company does not provide users’ personal information to any third parties, except when required by applicable laws and regulations or authorized to do so based on users’ consent.
①Users can access their personal information registered or request changes to such information at any time.
②If required by applicable laws, users may exercise their rights to personal information against the Company. For instance, users may request that the Company suspend the use of and delete their personal information and may withdraw their consent to the collection and use of personal information. Provided, however, the Company may decline such requests in the following inevitable situations:
③Please contact the Company at privacy@bighitcorp.com to exercise your rights under this Article.
① In principle, the Company retains personal information collected from users until the term of users’ service expires or users request withdrawal of service, in which case the Company will destroy such information to prevent further access or use.
- Applicable law: The Protection of Communications Secrets Act provides that website visit logs shall be maintained for 3 months
Once users’ personal information is collected and used for its intended purpose within the use and retention period, the Company will destroy such information without delay. The Company destroys personal information according to the following procedures and methods:
①The Company provides a customer service channel through which users can make suggestions and complaints in relation to a privacy issue, communicate the problem to the Company and resolve it.
②In Korea, in the case of a dispute between the Company and a user in relation to a privacy issue, the user may direct inquiries to the Korea Internet & Security Agency’s Privacy Infringement Call Center, National Policy Agency’s Cyber Security Bureau or other relevant organizations and receive relevant advice.
Organization | Website | Contact |
---|---|---|
Privacy Infringement Call Center at the KISA | http://privacy.kisa.or.kr | 118 |
Personal Information Dispute Mediation Committee | http://www.kopico.go.kr | 1833-697 |
Cyber Crime Investigation Division at the Supreme Prosecutors’ Office | http://www.spo.go.kr | 1303 |
Cyber Security Bureau at the National Policy Agency | http://cyber.go.kr | 182 |
①The Company has designated a Personal Information Protection Manager and a responsible department to provide the utmost personal information protection.
②Please contact the Company via the following contact points if you need to make an inquiry, offer a suggestion or make a complaint in relation to your personal information. The Company will provide answers as promptly and sincerely as possible.
Personal Information Protection Manager | ||
---|---|---|
Name (Position) | Sung Koo Ryeo(CPO) | |
privacy@hybecorp.com | ||
Department Responsible for Privacy Protection Issues | ||
Department Name | Digital Communications Team | |
privacy@hybecorp.com |
①The Company commissions personal information processing to the following data processing companies, domestic and foreign, within the scope disclosed in the Privacy Policy to fulfill its contractual duty, provide the Service and improve user convenience when using the Service.
1. Personal Information Transferred to Domestic Companies
Transferee | Purpose of Transfer | Purpose of Transfer & Use and Retention Period |
---|---|---|
Membership | WEVERSE COMPANY Inc. | Membership purchase and community operation |
Event | HYBE Three Sixty Co., Ltd | operation of performance event |
Dream With Us Co., Ltd. | maintenance of performance venue security and guest safety | |
Museum | Gcomm Co. | Museum location operation and CS |
WEVERSE COMPANY Inc. | Museum MD sales agent | |
SPTek Co. | Museum system operation and management | |
NHN KCP Corp. | Payment processing through payment methods including credit card, etc. | |
Kakao Pay Corp. | ||
System | Amazon Web Services, Inc. | To operate and manage cloud servers |
2. Personal Information Transferred to Foreign Companies (Cross-border Transfer of Personal Information)
Transferee | Transferee Country | Timing and Method of Transfer | Transferred Information | Purpose of Transfer & Use and Retention Period |
---|---|---|---|---|
HYBE SOLUTIONS JAPAN Inc. | Japan | Transmission by network at the point of service use | Information collected under Article 1 | At membership expiration and cancellation |
Zendesk | US | Transferred over the network when 1:1 customer enquiries are registered and e-mails are sent | Information collected under Article 1 | To handle customer enquiries Period: Retained until the user leaves the Service or the commissioning contract with the transferee terminates |
Amplitude | US | Transmission over the network at point of service use | Information generated under Article 1 | To improve the Service using big data analysis Period: Retained until the user leaves the Service or the commissioning contract with the transferee terminates |
Paypal | US | Transmission over the network at point of service use | Information collected under Article 1 | For payment in foreign currency, or upon withdrawal of membership or termination of commissioning contract |
②The commissioning contract with data processing companies specifies terms and conditions in relation to the prohibition of information processing outside of the intended purpose, technical and managerial measures for personal information protection, restrictions on re-consignment, management and supervision of the transferee, compensation for damages and other obligations. The Company also supervises if the data processing companies process the transferred personal information in a secure manner.
③Any future changes to the commissioning of personal information processing or change in data processing companies will be notified via this Privacy Policy.
This Privacy Policy became effective on October 25, 2019. Any additions, deletions or modifications made in accordance with the Company's and the government’s policy changes will be notified in advance via the website. All material changes will be notified 30 days prior to such changes taking effect.
Privacy Policy Version : V1.2
Initial Effective Date of Privacy Policy : September 10, 2019_V1.0
View previous privacy policy : January 13, 2020_V1.1