Privacy Policy

서울에너지드림센터 (hereinafter "Company") establishes and discloses this Privacy Policy to protect the personal information of data subjects and to handle related complaints promptly and smoothly, in accordance with the Personal Information Protection Act.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. Personal information being processed shall not be used for purposes other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent shall be taken in accordance with applicable laws.

1. Membership registration and management
   Personal information is processed for the purposes of confirming membership intent, identification and authentication for membership services, maintaining and managing membership, and preventing unauthorized use of services.
2. Customer inquiry handling
   Personal information is processed for receiving inquiries through 1:1 inquiries and bulletin boards, contacting for fact verification, and notifying processing results.

Article 2 (Items of Personal Information Processed)

The Company processes the following personal information items:

During the use of services, IP addresses, access logs, cookies, and service usage records may be automatically generated and collected.

Article 3 (Processing and Retention Period)

The Company processes and retains personal information within the period of retention and use consented to when collecting personal information from the data subject, or within the period prescribed by law.

1. Member information: Until membership withdrawal. However, if an investigation related to a violation of applicable laws is in progress, until the completion of said investigation.
2. Non-member board post information: Until the post is deleted.
3. 1:1 Inquiry information: 3 years after completion of inquiry processing (retention of records related to consumer complaints or dispute resolution under the Act on Consumer Protection in Electronic Commerce).

Article 4 (Provision of Personal Information to Third Parties)

The Company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases falling under applicable laws.

Currently, we do not provide personal information to third parties.

Article 5 (Entrustment of Personal Information Processing)

The Company may entrust personal information processing as follows for smooth processing:

Article 6 (Destruction Procedures and Methods)

1. The Company shall destroy personal information without delay when it becomes unnecessary due to expiration of the retention period or achievement of processing purposes.
2. Destruction procedure: Information entered by users is transferred to a separate database after the purpose is achieved and destroyed after a certain period in accordance with internal policies and applicable laws.
3. Destruction method: Personal information in electronic file format is deleted using technical methods that make the records irreproducible, and personal information printed on paper is destroyed by shredding or incineration.

Article 7 (Rights and Obligations of Data Subjects)

1. Data subjects may exercise the following rights related to personal information protection at any time:
   • Request to view personal information
   • Request for correction in case of errors
   • Request for deletion
   • Request to suspend processing
2. Rights may be exercised in writing, by phone, or by email, and the Company shall take action without delay.
3. If a data subject requests correction or deletion of personal information errors, the Company shall not use or provide the personal information until the correction or deletion is completed.

Article 8 (Measures to Ensure Safety of Personal Information)

The Company takes the following measures to ensure the safety of personal information:

1. Password encryption: User passwords are encrypted for storage and management, so only the user can know them.
2. Technical measures against hacking: Security programs are installed and regularly updated and inspected to prevent leakage and damage of personal information caused by hacking or computer viruses.
3. Access restriction: Access to personal information is controlled through the granting, changing, and revoking of access rights to the database system that processes personal information.

Article 9 (Personal Information Protection Officer)

The Company designates a Personal Information Protection Officer as follows to take overall responsibility for personal information processing and handle complaints and remedies related to personal information processing:

Article 10 (Changes to This Privacy Policy)

This Privacy Policy is effective from the date of implementation. Any additions, deletions, or corrections due to changes in laws or policies will be announced through notices at least 7 days prior to the effective date of the changes.

Effective Date: From the date of posting on the Site