Privacy Policy

<CodeMafia Inc.>('jocasso.codemafia.io' hereinafter referred to as 'Jocasso') complies with the Personal Information Protection Act to protect the users' personal information and rights, and has established the following policy to ensure smooth handling of users' grievances relating to personal information.

<CodeMafia Inc.>('Jocasso') will notify through website announcements (or individual notices) when there is a revision of the personal information processing policy.

○ This policy will be enforced from December 1, 2022.

1. Purpose of Processing Personal Information

<CodeMafia Inc.>('jocasso.codemafia.io' hereinafter referred to as 'Jocasso') processes personal information for the following purposes. The processed personal information will not be used for any other purposes, and if the usage purpose changes, we plan to seek prior consent.

a. Website Membership Registration and Management

Processing personal information for the purpose of confirming membership intentions, identifying and authenticating individuals according to the provision of membership services, maintaining and managing membership qualifications, verifying identities for the implementation of limited personal verification system, preventing fraudulent use of services, verifying the consent of legal representatives when collecting personal information of children under the age of 14, various notifications, grievance handling, and record-keeping for dispute resolution etc.

b. Civil Complaint Handling

Processing personal information for the purpose of verifying the identity of the complainant, verifying the details of the complaint, contacting and notifying for fact-finding, notifying the processing results etc.

c. Provision of Goods or Services

Processing personal information for the purpose of service provision, sending invoices, providing personalized services, billing and settlement etc.

d. Utilization for Marketing and Advertising

Processing personal information for the purpose of new service (product) development and provision of personalized services, providing event and advertisement information and offering participation opportunities, verifying service effectiveness, analyzing access frequency or generating statistics regarding members' service usage etc.

2. Personal Information File Status

The processing purpose of the personal information file registered and disclosed by ('jocasso.codemafia.io' hereinafter referred to as 'Jocasso') according to Article 32 of the Personal Information Protection Act is as follows:

1. Personal Information File Name: Member Identification Information

• Personal Information Items: Email, Login ID
• Collection Method: Website
• Basis for Retention: Collection for member identification and transmission of notification information
• Retention Period: 3 years
• Relevant Legislation: Record concerning consumer complaints or dispute resolution: 3 years

2. Personal Information File Name: Member Payment Information

• Personal Information Items: Credit card information, Bank account information
• Collection Method: Website
• Basis for Retention: Information collection for automatic payment
• Retention Period: 3 years
• Relevant Legislation: Record concerning collection/processing and utilization of credit information: 3 years

3. Personal Information File Name: Payment Record Information

• Personal Information Items: Service usage records, Access logs, Cookies, Access IP information, Payment records
• Collection Method: Website
• Basis for Retention: Information collection for payment record preservation and dispute resolution
• Retention Period: 5 years
• Relevant Legislation: Record concerning payment and supply of goods, etc.: 5 years, Record concerning contract or withdrawal of offer, etc.: 5 years

※ For other disclosure of personal information file registration details of ('jocasso.codemafia.io' hereinafter referred to as 'Jocasso'), please use the Ministry of Public Administration and Security Personal Information Protection Support Portal (www.privacy.go.kr) → Personal Information Complaints → Request for Personal Information Viewing → Personal Information File List Search menu.

3. Processing and Retention Period of Personal Information

① <Code Mafia Inc.> ('Jocasso') processes and retains personal information within the personal information retention and usage period stipulated by law or within the personal information retention and usage period agreed upon when collecting personal information from the data subject.

② The respective processing and retention periods for personal information are as follows:

1. <Website Membership Registration and Management>

Personal information related to <Website Membership Registration and Management> is retained and used for the aforementioned purposes from the date of consent to collection and usage, for a period of <3 years>.

• Basis for Retention: Collection for member identification and transmission of notification information
• Relevant Legislation:
  1. Record concerning the collection/processing and utilization of credit information: 3 years
  2. Record concerning consumer complaints or dispute resolution: 3 years
• Exceptions:

2. <Civil Affairs Handling>

Personal information related to <Civil Affairs Handling> is retained and used for the aforementioned purposes from the date of consent to collection and usage, for a period of <3 years>.

• Basis for Retention: Collection of information for handling service usage complaints
• Relevant Legislation: Record concerning consumer complaints or dispute resolution: 3 years
• Exceptions: In case of user exclusion request

3. <Provision of Goods or Services>

Personal information related to <Provision of Goods or Services> is retained and used for the aforementioned purposes from the date of consent to collection and usage, for a period of <5 years>.

• Basis for Retention: Collection of information for resolving service usage disputes
• Relevant Legislation: Record concerning payment and supply of goods, etc.: 5 years
• Exceptions: In case of user exclusion request

3-1. AI Body Profile Service Provision

Code Mafia Inc. collects and uses personal information for providing AI Body Profile Service.

1. Collected Personal Information Items: (Required) User photo, Gender
2. Collection and Usage Purpose: AI Body Profile Image Creation
3. Retention and Usage Period
- User-provided photos, gender: Until AI body profile creation
- AI Body Profile Image: Until user deletion request (maximum 1 year)

The user's consent is maintained until the termination of the AI Body Profile service, and the user can refuse to consent to the collection and use of personal information. However, if you refuse, you will not be able to use the AI Body Profile service.

4. Delegation of Personal Information Processing

① <Code Mafia Inc.>('Jocasso') delegates personal information processing tasks as follows for smooth handling of personal information tasks.

② <Code Mafia Inc.>(‘jocasso.codemafia.io’, hereinafter 'Jocasso') specifies matters concerning the prohibition of processing personal information for purposes other than performing the delegated tasks, technical and administrative protection measures, limitation on re-delegation, management and supervision of the delegatee, and liability for damages, etc., in documents such as contracts in accordance with Article 25 of the Personal Information Protection Act, at the time of concluding the delegation contract, and is supervising whether the delegatee is securely processing personal information.

③ In the event that the content of the delegation tasks or the delegatee changes, we will disclose it through this personal information processing policy without delay.

5. Rights and Obligations of the Information Subject and Legal Representative, and How to Exercise Them

Users can exercise the following rights as personal information subjects.

① The information subject can exercise the rights to request access, correction, deletion, and suspension of processing of personal information to Code Mafia Inc. at any time.

② The exercise of rights under paragraph 1 can be done through written, email, or facsimile (FAX) communication to Code Mafia Inc., in accordance with Paragraph 1 of Article 41 of the Enforcement Regulation of the Personal Information Protection Act, and Code Mafia Inc. will take action without delay.

③ The exercise of rights under paragraph 1 can be done through a legal representative or an agent such as a person who has been delegated. In this case, you must submit a power of attorney according to the form No. 11 of the Enforcement Rules of the Personal Information Protection Act.

④ Requests for access and suspension of processing of personal information may be limited according to Articles 35(5) and 37(2) of the Personal Information Protection Act.

⑤ The request for correction and deletion of personal information cannot be made if the personal information is specified as a collection subject under other laws.

⑥ Code Mafia Inc. confirms whether the person making the request for access, correction, deletion, and suspension of processing, is the person in question or a legitimate representative.

6. Items of Personal Information Processed

① <Code Mafia Inc.>('jocasso.codemafia.io', hereinafter referred to as 'Jocasso') processes the following personal information items:

1. <Website Membership Registration and Management>

• Required items: Email, mobile phone number, password, login ID, name, company phone number, position, department, company name

• The company provides the option to use social login (hereinafter referred to as “OAuth”) according to the user's choice. If you wish to use the OAuth service provided by the OAuth service provider (Google), you must enter the following essential information:

  1. User email address registered and authorized on the service providing email OAuth

  2. Name: Username, nickname registered on the service providing OAuth

  Furthermore, during the use of OAuth service by the OAuth service provider, you can access and use the user’s data. The automatically generated information during the use of OAuth service by the OAuth service provider is as follows:

  • Token information received from the OAuth service provider

  The company does not store the data or personal information received through the use of OAuth service. If you do not wish to use the OAuth service, you can click the disconnect button at any time to disconnect, and delete the stored Token information.

2. <Provision of Goods or Services>

• Required items: Service usage history, access logs, cookies, access IP information, payment records
• Optional items: Credit card information, bank account information

3. <Handling Civil Petitions>

• Required items: Service usage history, access logs, cookies, access IP information

7. Destruction of Personal Information

<Code Mafia Inc.>('Jocasso') fundamentally destroys the relevant personal information without delay when the purpose of processing personal information is achieved. The procedure, period, and method of destruction are as follows:

• Destruction Procedure

The information entered by the user is transferred to a separate DB after the achievement of the purpose (in case of paper, to a separate document), and is destroyed immediately or after being stored for a certain period according to internal policies and other relevant laws. At this time, the personal information transferred to the DB is not used for other purposes unless required by law.

• Destruction Period

The personal information of the user is destroyed within 5 days from the end date of the retention period if the retention period has expired, or within 5 days from the day when the personal information becomes unnecessary, such as upon achievement of the processing purpose, abolition of the service, or termination of the business.

• Destruction Method

Information in electronic file format is destroyed using technical methods that make it impossible to reproduce the records.

8. Installation, Operation, and Rejection of Automatic Personal Information Collection Device

① Code Mafia Inc. uses 'cookies' to store and frequently retrieve usage information in order to provide individualized customized services.

② A cookie is a small amount of information sent from the server (http) operating the website to the user's computer browser, and is also stored on the user's PC hard disk.

a. Purpose of cookie usage: Cookies are used to understand the visit and usage patterns of each service and website visited by the user, popular search terms, secure connection status, etc., to provide optimized information to the user.

b. Installation, operation, and rejection of cookies: You can refuse to store cookies through the option settings in Tools > Internet Options > Privacy menu at the top of the web browser.

c. If you refuse to store cookies, you may experience difficulties in using customized services.

9. Designation of Personal Information Protection Officer

① Code Mafia Inc.('jocasso.codemafia.io', hereinafter referred to as 'Jocasso') is responsible for the overall handling of tasks related to personal information processing, and has designated a Personal Information Protection Officer for complaint handling and damage relief related to personal information processing as follows:

▶ Personal Information Protection Officer

Name: Jo Dong-geun

Position: Representative

Contact: 0507-1392-7836, ceo@jocoding.net

10. Changes to the Personal Information Processing Policy

① This Personal Information Processing Policy will apply from the effective date, and in case of addition, deletion, or correction of changes in accordance with laws and policies, the changes will be notified through the notice section 7 days before the enforcement of the changes.

11. Measures to Ensure the Safety of Personal Information

Code Mafia Inc. (hereinafter referred to as 'Jocasso') is taking technical, managerial, and physical measures necessary to ensure safety in accordance with Article 29 of the Personal Information Protection Law, as follows:

1. Minimization and Training of Personal Information Handling Staff

We have designated and limited the personnel handling personal information to minimize the handling and have implemented measures to manage personal information.

2. Establishment and Implementation of Internal Management Plan

We have established and are executing an internal management plan for the safe handling of personal information.

3. Encryption of Personal Information

Users' personal information, including passwords, is encrypted for storage and management, so only the individual can know it. Important data has additional security features like encryption for file and transmission data, or file lock functions.

4. Restricted Access to Personal Information

We are taking necessary measures for personal information access control through the authorization, modification, and deletion of access rights to the database system processing personal information, and are controlling unauthorized access from the outside using an intrusion prevention system.

12. 3rd Party Terms of Use

For functionality convenience, Jocasso utilizes the API features provided by YouTube and integrates the following policies:

YouTube API Service

Google Privacy Policy

Users can verify and revoke the permissions for the user-authorized YouTube API usage by Jocasso on the following page:

Permission Verification Page