Visang Education Co., Ltd. (hereinafter referred to as "Visang Education" or "the Company") strictly complies with the Personal Information Protection Act and other domestic personal information protection laws.
The Company adheres to the statutory basis related to personal information protection, such as the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and other related laws.
In accordance with these laws, the Company has established its Privacy Policy, which is made publicly available on its website and mobile applications so that users (or "customers") can easily access and review it at any time.
Article 1 (Purpose of Personal Information Use and Processing)
The Company uses the collected information for the following purposes.
The personal information being processed will not be used for purposes other than those specified below. If the purpose of use changes, necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act, will be taken.
Assisting users in using the services smoothly
Details: Education management/support, management of educational history, member management, handling VOC (Voice of Customer), and other educational services.
User management and identification following service use, approval of membership, and prevention of fraudulent use
Improving services through data analysis and internal research based on statistical insights
Enhancing AI analysis, machine learning, and speech recognition algorithm performance
Providing personalized services
Service improvement through necessary surveys and analysis
Verifying user identity and responding to inquiries when users ask questions
Providing important notifications as needed
Retaining records for grievance handling and dispute resolution
(Upon consent to marketing) Providing promotional information such as new feature (product) announcements, discounts, coupons, and event advertising
Users may refuse to consent to the collection, use, and provision of personal information if they do not wish to. However, if a user refuses to consent, they may not be able to use all or part of the service.
Article 2 (Collection and Use of Personal Information)
The Company collects, uses, provides, and disposes of personal information as follows, depending on the type of service being used.
Additionally, when the Company collects personal information that can personally identify users, it will always obtain the user's consent.
Furthermore, if there are any changes to the privacy policy, the Company will notify users and make it available for review at any time.
Items of Personal Information Collected
The personal information items processed by the Company are as follows. The collected personal information will be destroyed immediately after membership withdrawal. However, if preservation is required by relevant laws, the information will be stored separately for the mandatory retention period. The following information will be retained for a specific period for the reasons listed below.
(User IDs will be permanently retained to prevent duplicate registrations and manage posts.)
1) Personal Information Collection Items by Member
Service Name
Category
Member Type
Collected Personal Information Items
master k Academy
Membership Registration
Instructor
[Required] ID, Password, Name, Gender (Male/Female), Contract Status, Instructor Grade
[Optional] Email, Contact Number, Contract Date, Contract Duration, Nationality, Experience, Country of Residence, Area of Residence
Collected upon completion of registration when additional information is provided
Student
[Required] ID, Password, Name, Gender (Male/Female), Registration Status
[Optional] Email, Contact Number, Date of Birth, Registration Date, Registration Duration, Student Level, Nationality, Country of Residence, Area of Residence
[Minor] Legal Representative Information (Name of Legal Representative)
Service Use
Instructor, Student
[Required] Service Usage Records
AI Speak (한국어 발음연습 학습)
Service Use
Instructor, Student
[Required] User's Voice/Text Data
master k Busines
Inquiry
User
[Required] Company Name, Name, Email, Contact Number
[Optional] Department Name, Title
strongNote on Required and Optional Items
- Required Items: Information necessary to perform the essential functions of the service.
- Optional Items: Information collected additionally to provide added value, which does not restrict the use of the service if not provided.
Methods of Collecting Personal Information
The Company collects personal information for the provision of services through the following methods:
1) Information entered directly by the user during membership registration or service application.
2) Information entered directly by the user's affiliated company/school during membership registration or service application.
3) Information about the user (educational participant) transmitted to the Company by the user's affiliated company/school.
- During service use: Automatically collected.
Personal Information Collection and Retention Period
This follows Article 3 regarding the retention and use period of collected personal information.
Right to Refuse Consent for the Collection and Use of User Personal Information
Users have the right to refuse consent for the collection and use of their personal information. However, if consent is refused, users will not be able to access the Company’s services that require the collection of the aforementioned information.
Additional Information Collected After User Consent
During the process of using services or business operations, the following information may be generated and collected:
Service usage records, access logs, device size, access IP information, product usage application information, type of operating system, type of internet browser, screen resolution, and other attribute values.
User voice information (collected separately as additional required information when using the AI Speak service)
Restrictions on Service Use by Minors
In accordance with Article 22, Paragraph 6 of the Personal Information Protection Act, the Company must obtain the consent of a legal guardian when collecting personal information from minors under the age of 14.
For members in EU countries, under the General Data Protection Regulation (GDPR), the consent of a legal guardian is required when collecting personal information from minors under the age of 16.
Please note that if the legal guardian's consent is not obtained, there may be restrictions on the use of all or part of the services.
Article 3 (Retention and Use Period of Collected Personal Information)
The Company shall, in principle, promptly destroy users' personal information upon membership withdrawal or when the purposes stated in the privacy policy have been achieved. However, if certain laws require information to be retained for a specified period, the personal information will be retained accordingly.
After the purpose of collecting and using personal information has been achieved , or upon request for withdrawal or revocation of consent, the Company will store the user's personal information for a certain period (up to 30 days from the completion of the course) to verify the completion of transactions such as education fee payment or contract cancellation, and then destroy the personal information.
If personal information must be retained in accordance with relevant laws and regulations, the Company will retain the user's personal information for the period specified by the relevant laws.
Act on the Consumer Protection in Electronic Commerce, Article 6, Paragraph 3, Enforcement Decree, Article 6, Paragraph 1, Subparagraph 1
Records on Consumer Complaints or Dispute Resolution
3 years
Act on the Consumer Protection in Electronic Commerce, Article 6, Paragraph 3, Enforcement Decree, Article 6, Paragraph 1, Subparagraph 4
Records on Contracts or Withdrawal of Subscription
5 years
Act on the Consumer Protection in Electronic Commerce, Article 6, Paragraph 3, Enforcement Decree, Article 6, Paragraph 1, Subparagraph 2
Article 4 (Rights and Obligations of the Data Subject and Legal Representative, and Methods of Exercising Them)
The data subject may exercise their rights to request access, correction, deletion, or suspension of the processing of personal information from the Company at any time.
Rights can be exercised by submitting a written request, email, or fax to the Company in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will respond without delay.
The exercise of rights may also be carried out through a legal representative or a delegated person authorized by the data subject. In such cases, a power of attorney in the format prescribed in Form No. 11 of the "Notice on Personal Information Processing Methods (No. 2020-7)" must be submitted.
Requests for access or suspension of processing of personal information may be restricted according to Articles 35(4) and 37(2) of the Personal Information Protection Act.
Requests for correction or deletion of personal information cannot be made if other laws specify that such personal information must be collected.
The Company will verify whether the individual requesting access, correction, deletion, or suspension of processing is the data subject themselves or a legitimate representative.
Article 5 (Overseas Transfer of Personal Information)
(1) Transfer of Information Overseas
The Company entrusts personal information overseas by using AWS servers to provide stable services and the latest technology to users.
In accordance with this policy, the Company transfers, stores, and processes personal information either within the user's country of residence or internationally, particularly transferring data to Singapore.
The data protection and other laws of the country to which your information is transferred may not be as comprehensive as those in your country of residence.
Trustee Company
Previous Item
Previous Country
Previous Date and Method
Retention and Usage Period of Personal Information
Amazon Web Services Inc.
Service usage records or collected personal information
Singapore
Transmission via network at the time of service usage
Until service changes (until the current Company's change of cloud service usage)
Article 6: Provision and Delegation of Personal Information
Visang Education processes personal information for the following purposes. The personal information being processed will not be used for any purposes other than those listed below, and if the purpose of use changes, necessary measures, such as obtaining prior consent, will be implemented.
Provision of Personal Information to Third Parties
The Company, in principle, processes users' personal information only within the scope specified in "Article 1 (Purpose of Use and Processing of Personal Information)" and does not process beyond the original scope or provide it to third parties.
If it becomes necessary to provide or share personal information with third parties for better service delivery, the Company will specify the recipient, the categories of personal information provided, the purpose of use of the recipient's personal information, and the retention period of the recipient. A procedure for obtaining prior consent will be followed, and if consent is not given, the information will not be provided or shared with third parties.
However, in cases falling under Article 17 of the Personal Information Protection Act, such as special provisions of the law, personal information may be provided to third parties.
Entrustment of Personal Information Processing
Trustee
Personal Information Items
Purpose and Tasks of Entrustment
Retention and Usage Period
Tutorus Labs
Collection of Korean voice data
Collection and analysis of Korean voice data, improvement of AI machine learning algorithms Data collection and analysis, improvement of AI machine learning algorithms
Until the withdrawal of consent for personal information use upon membership cancellation or customer request, and until the expiration of the entrustment contract. (Subject to the record retention policy regarding consumer complaints or dispute resolution)
The Company, when entering into an entrustment contract, specifies in the contract or other documents matters related to the prohibition of processing personal information beyond the purpose of performing entrusted tasks, technical and managerial protective measures, restrictions on re-entrustment, management and supervision of the trustee, and liability for damages, in accordance with Article 25 of the Personal Information Protection Act. The Company also supervises whether the trustee handles personal information securely.
Article 7: Retention and Destruction of Personal Information
The Company will destroy users' personal information without delay after the retention and usage period has expired.
To protect personal information and prevent damage caused by data breaches, the Company will destroy personal information using the following methods:
1) Printed personal information will be destroyed by shredding or incineration.
2) Personal information stored in electronic file formats will be deleted using technical methods that render the records unrecoverable.
Article 8: Technical and Administrative Measures for Personal Information Protection
The Company implements the following technical and managerial measures to ensure the security of users' personal information and to prevent loss, theft, leakage, alteration, or damage while processing personal information.
However, the Company does not bear any responsibility for issues arising from the user's own negligence or problems related to the internet or communication, such as leakage of personal information like IDs or passwords.
1) Passwords are stored and managed in an encrypted format, known only to the user, and personal information can only be verified and changed by the user who knows the password.
2) The Company makes every effort to prevent the leakage or damage of users' personal information due to hacking or computer viruses.
The Company regularly backs up data to prepare for potential damage to personal information and implements the latest security updates and technical measures to prevent the leakage or damage of users' personal information or data.
Additionally, the Company ensures that personal information is transmitted securely over the network through encrypted communication and controls unauthorized access from external sources using an intrusion prevention system. The Company strives to equip itself with all possible technical measures to ensure system security.
3) The Company limits the number of personnel responsible for processing personal information, assigns separate passwords, and regularly updates them. It also conducts regular training for responsible personnel and staff to consistently emphasize compliance with the personal information processing policy.
Article 9: Designation of Personal Information Protection Officers and Administrators
The Personal Information Protection Officer is responsible for protecting users' personal information and preventing leaks, helping users to use the services provided by the Company with peace of mind. The officer will be liable for any incidents that occur in violation of the information provided to users regarding the protection of personal information.
However, this liability does not apply in cases of damage or loss of information due to unforeseen events, such as natural disasters, even if the Company has taken appropriate measures to ensure security, nor does it apply to various disputes arising from the information provided by users to the Company.
he Company designates the Personal Information Protection Officer as specified in the Personal Information Protection Act as follows.
[Personal Information Protection Officer and Responsible Department]
Personal Information Protection Officer (CPO)
Affiliation: IT Strategy Core
Name: Jeong-woo Lee
Personal Information Responsible Department
Information Security Cell
Contact Information
Phone: (+82) 1544-0554
Email : privacy@visang.com
a. Visang Education is responsible for overseeing the processing of users' personal information and has designated the Personal Information Protection Officer and responsible departments to address users' inquiries and handle complaints.
b. Users can direct any inquiries related to personal information protection, complaints, and damage remedies arising from the use of Visang Education's services to the Personal Information Protection Officer and the responsible department.
Data subjects may contact the institutions listed below for remedies and consultations regarding personal information infringements. <The institutions listed below are separate from the Company, and if you need more detailed assistance, please reach out to them.>
Category
Website
Phone
Personal Information Infringement Reporting Center (operated by the Korea Internet & Security Agency)
Article 10: Installation, Operation, and Rejection of Automated Personal Information Collection tools
The Company uses "cookies" to store and retrieve usage information frequently in order to provide users with personalized services.
A cookie is a small amount of information sent from the server (HTTP) that operates the website to the user's computer browser, which may be stored on the hard disk of the user's PC.
a. Purpose of Using Cookies: Cookies are used to understand the usage patterns of users regarding each service and website they visit, including visits, usage types, popular search terms, and whether secure access is enabled, in order to provide optimized information to users.
b. Installation, Operation, and Refusal of Cookies: Users can refuse the storage of cookies by adjusting the settings in the options menu found under Tools > Internet Options > Privacy in the web browser.
c. Consequences of Refusing to Store Cookies: Refusing to store cookies may result in difficulties in using personalized services.
Article 11: Obligation to Notify
If there are any additions, deletions, or modifications to the contents of this Privacy Policy, notice will be given through the service announcements at least 7 days prior to the amendment. If prior notification is difficult, it will be made without delay. In cases where important changes affect the rights or obligations of users, notice will be provided at least 30 days in advance.
- Announcement Date: September 30, 2024
- Effective Date: October 11, 2024
- Previous versions of the Privacy Policy can be found in the previous Privacy Policies.