Ohsoft Privacy Policy

OORT Co., Ltd. (hereinafter "Ohsoft") establishes and discloses the following privacy policy in accordance with Article 30 of the 「Personal Information Protection Act」 to protect the personal information of data subjects and to promptly and smoothly handle related grievances.

This privacy policy is effective from April 1, 2025.

Article 1 (Purpose of Personal Information Processing)

Ohsoft processes personal information for the following purposes. The processed personal information will not be used for purposes other than those listed below, and if the purpose of use changes, necessary measures such as obtaining separate consent under Article 18 of the 「Personal Information Protection Act」 will be implemented.

Personal information is used for identity verification, handling complaints, and delivering notices in connection with service use. Member information may also be used for marketing and advertising purposes, such as providing information about new products, services, personalized materials, and significant policy changes related to products.

Article 2 (Personal Information Processing and Retention Period)

Ohsoft processes and retains personal information within the retention and usage period stipulated by law or agreed upon by the data subject at the time of consent.

The specific personal information processing and retention periods are as follows:

Article 3 (Provision of Personal Information to Third Parties)

Ohsoft processes personal information only within the scope specified in Article 1 (Purpose of Personal Information Processing) and provides personal information to third parties only with the data subject's consent or in cases permitted under Articles 17 and 18 of the 「Personal Information Protection Act」.

Currently, Ohsoft does not provide personal information to third parties.

Article 4 (Entrustment of Personal Information Processing)

Ohsoft does not entrust personal information processing to third parties. (However, in the case of payment systems through a payment gateway, processing is handled by the respective company.)

When concluding an entrustment contract, Ohsoft specifies in the contract, in accordance with Article 26 of the 「Personal Information Protection Act」, prohibitions on processing personal information for purposes other than the entrusted tasks, technical and managerial protective measures, restrictions on re-entrustment, management and supervision of the entrusted party, and liability for damages, and supervises the entrusted party to ensure safe processing of personal information.

If the content of the entrusted tasks or the entrusted party changes, Ohsoft will promptly disclose this through the privacy policy.

Article 5 (Rights and Obligations of Data Subjects and Legal Representatives and Methods of Exercise)

Data subjects may exercise their rights to access, correct, delete, or request suspension of processing of their personal information at any time with Ohsoft.

These rights can be exercised through written requests, email, or fax in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the 「Personal Information Protection Act」, and Ohsoft will take action without delay.

Rights may be exercised through a legal representative or an authorized agent of the data subject. In such cases, a power of attorney must be submitted in accordance with Form No. 11 of the "Notice on Personal Information Processing Methods (No. 2020-7)."

Requests for access to or suspension of processing of personal information may be restricted under Article 35, Paragraph 4, and Article 37, Paragraph 2 of the 「Personal Information Protection Act」.

Requests for correction or deletion of personal information cannot be made if the collection of such information is required by other laws.

Ohsoft verifies whether the requester is the data subject or a legitimate representative when handling requests for access, correction, deletion, or suspension of processing.

Article 6 (Destruction of Personal Information)

Ohsoft destroys personal information without delay when the retention period expires, the processing purpose is achieved, or the information becomes unnecessary.

If personal information must be retained under other laws, it is stored in a separate database (DB) or storage location.

Destruction procedure: Ohsoft selects personal information for which destruction is required and destroys it with the approval of the personal information protection officer.

Article 7 (Measures to Ensure the Security of Personal Information)

Ohsoft takes the following measures to ensure the security of personal information:

Article 8 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

The company uses cookies to maintain login sessions for service provision, which are automatically deleted upon browser closure.

Cookie settings can be adjusted in the browser options, and refusal may limit the use of some services.

The provided software communicates via the internet for general operations. This communication function is used for update checks, genuine user authentication and registration, and license management. By installing the program, the user agrees to use the communication functions provided by the software.

Article 9 (Personal Information Protection Officer and Access Requests)

Ohsoft designates a personal information protection officer to oversee personal information processing tasks, handle complaints from data subjects, and provide remedies for damages. Additionally, Ohsoft handles requests for access to personal information under Article 35 of the 「Personal Information Protection Act」.

Data subjects may contact the above contact point for inquiries, complaints, damage remedies, or personal information access requests related to personal information protection during the use of Ohsoft's services, and Ohsoft will respond and process promptly.

Article 10 (Remedies for Infringement of Rights and Interests)

Data subjects may apply for dispute resolution or consultation with the following organizations to seek remedies for personal information infringements:

If a data subject's rights or interests are infringed due to a public institution's disposition or omission regarding requests under Articles 35 (Access to Personal Information), 36 (Correction or Deletion of Personal Information), or 37 (Suspension of Personal Information Processing, Etc.) of the 「Personal Information Protection Act」, they may file an administrative appeal under the Administrative Appeals Act. For more details, refer to the Central Administrative Appeals Commission (www.simpan.go.kr).

Article 11 (Changes to the Privacy Policy)

This privacy policy is effective from April 1, 2025.