KO·EN
Business Inquiry →

Privacy Policy

SANDBOX NETWORK Inc. (the "Company") establishes and discloses the following privacy policy in accordance with applicable personal information protection laws, in order to protect the personal information and rights of users and to handle their concerns promptly in connection with the use of its website (www.sandbox.co.kr) and the provision of its services.

[Consent to the Collection of Personal Information]

The Company has established a procedure through which users may consent to the collection and use of personal information when applying for individual services. A user may refuse to consent, and if a user refuses to consent, use of the relevant service may be restricted.

[Purpose of Collection and Use of Personal Information]

The purposes for which the Company collects and uses a user's personal information are as follows.

  • Category Purpose of Use
  • When applying as a creator: Confirmation of intent to apply as a creator and identity verification, prevention of fraudulent use of the Service,
    various notices and announcements, and retention of records for dispute resolution
  • When making a brand advertising partnership inquiry: Confirmation of intent and identity verification for a brand advertising partnership inquiry, prevention of fraudulent use of the Service,
    various notices and announcements, and retention of records for dispute resolution
  • When making an IP business partnership inquiry: Confirmation of intent and identity verification for an IP business partnership inquiry, prevention of fraudulent use of the Service,
    various notices and announcements, and retention of records for dispute resolution
  • When applying through the internal recruitment process: Identity confirmation and verification for the job application, prevention of fraudulent use of the Service, checking for duplicate applications,
    use of personal information for the recruitment process, various notices and announcements, and internal talent management
  • When applying to an individual
    job posting for creators: Identity confirmation and verification when applying to an individual job posting for creators, prevention of fraudulent use of the Service,
    checking for duplicate applications, use of personal information for the recruitment process, various notices and announcements, and talent management

[Items and Method of Collection of Personal Information]

  1. 1) The Company collects only the information essential for providing basic services, and if optional information is not provided, use of the Service is not restricted. The Company does not use the collected information for any purpose other than the purpose of collection.
    • Category Items Collected and Used
    • When applying as a creator (required) Name, gender, date of birth, phone number (mobile phone number), email address, YouTube channel address
      (optional) Information on other platforms operated in addition to YouTube
    • When making a brand advertising partnership inquiry (required) Contact person's name, company (organization) name, contact person's phone number (mobile phone number), email address
    • When making an IP business partnership inquiry (required) Contact person's name, company (organization) name, contact person's phone number (mobile phone number), email address
    • When applying through the internal recruitment process (required) Name, date of birth, phone number (mobile phone number), email address, career history, cover letter
      (optional) Optional education information, certificate information, foreign language test information, other career history
    • When applying to an individual
      job posting for creators (required) Name, date of birth, phone number (mobile phone number), email address, address, career history, cover letter
      (optional) Optional education information, certificate information, foreign language test information, other career history
  2. 2) The Company collects personal information through each application form completed by the user via the website.

[Period of Retention and Use of Personal Information]

The Company processes and retains a user's personal information for one year from the date of consent to the collection and use of personal information. Provided, however, that where retention of personal information is required under applicable laws, it shall be retained for the relevant period, and access to and use of the personal information retained for such purpose shall be limited to that purpose.

[Entrustment of Personal Information Processing or Provision to Third Parties]

  1. 1) The Company does not provide a user's personal information to any other person, company, or institution or other third party.
  2. 2) The Company does not currently entrust the processing of a user's personal information to any third party. However, if the Company entrusts the processing of a user's personal information to a third party in the future to improve its services, it will give prior notice thereof and manage the trustee through an entrustment agreement and other means.

[Procedure and Method for Destruction of Personal Information]

  1. 1) In principle, the Company destroys personal information without delay once the purpose of processing the personal information has been achieved and processing is deemed unnecessary, or where a user requests destruction of their personal information. The procedure, timing, and method of destruction are as follows.
  2. 2) Information subject to destruction is transferred to a separate database or document storage after the purpose has been achieved and is destroyed without delay in accordance with internal policy and other applicable laws. Personal information transferred to a separate database or document under internal policy is not used for any purpose other than as required by law.
  3. 3) A user's personal information is destroyed within 5 days from the end of the retention period if the retention period has elapsed, or within 5 days from the date it is deemed unnecessary if the personal information becomes unnecessary due to achievement of the purpose of processing, discontinuation of the relevant service, termination of business, or similar reasons.
  4. 4) Information in the form of electronic files is destroyed using a technical method that prevents the records from being reproduced, and information printed on paper is destroyed by shredding.

[Rights and Obligations of Data Subjects and Legal Representatives and the Method of Exercising Them]

  1. 1) A data subject may exercise the following rights against the Company at any time.
    1. 1. The right to request access to personal information
    2. 2. The right to request correction or deletion of personal information
    3. 3. The right to request suspension of processing of personal information
    4. 4. The right to withdraw consent to the collection and use of personal information
  2. 2) A data subject who wishes to request access to, correction of, deletion of, or suspension of processing of personal information, to withdraw consent, or to request destruction, may make such request to the Personal Information Protection Officer listed below, and the Company will take the necessary measures without delay.
  3. 3) The rights under paragraphs 1 and 2 shall be exercised by the data subject in person; where a legal representative of the data subject or an authorized agent seeks to exercise such rights, the Company may request additional documentation, such as a power of attorney.
  4. 4) A data subject shall not use or infringe upon the personal information of the data subject or of another person in violation of the Personal Information Protection Act and other applicable laws, and a data subject shall manage, at their own responsibility, information under their own control.

[Method of Notifying or Announcing the Privacy Policy]

If the Company uses a user's personal information for a purpose beyond the scope consented to by the user, or provides it to a third party, the Company will obtain the user's separate additional consent. If the Company entrusts the processing of personal information to a third party, it will give prior notice thereof through the privacy policy on its website.

[Technical and Managerial Measures for the Protection of Personal Information]

  1. 1) Establishment and implementation of an internal management plan: The Company establishes and implements an internal management plan for the secure processing of personal information.
  2. 2) Technical measures against hacking, etc.: The Company installs security programs and performs periodic updates and inspections to prevent the leakage or damage of personal information caused by hacking, computer viruses, and the like.
  3. 3) Training of personal information processing staff: Staff involved in the processing of personal information are kept to a minimum number, and the Company provides regular training and maintains internal procedures regarding personal information protection obligations.

[Personal Information Protection Officer]

The Company designates a Personal Information Protection Officer to protect users' personal information and to handle grievances.

This Privacy Policy was established on February 1, 2019. This Privacy Policy applies from its effective date, and where any content is added, deleted, or amended pursuant to applicable laws or this Policy, notice will be given from 7 days prior to the effective date of the change (or 30 days prior in the case of a change that is unfavorable or material to users).

샌팝 애프터7 파삭