LEGAL · MUSiKON
Privacy Policy
Musikon Co., Ltd. (the “Company”) establishes the following Privacy Policy in accordance with the Act on Promotion of Information and Communications Network Utilization and Information Protection (the “Network Act”) and the Personal Information Protection Act, in order to protect the personal information of individuals who are data subjects (“Members”) and to handle related matters.
1. Purpose of Processing Personal Information
The Company collects, retains, and destroys Members’ personal information for the purposes below. The personal information under management is not used for any purpose other than the following; where the purpose of use changes, the Company takes necessary measures such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act.
- Member registration and management
- Verifying intent to register and eligibility (age 14+), identifying and authenticating individuals for membership-based services, processing registration and withdrawal, maintaining and managing membership status, and various notices and communications.
- Provision of goods or services
- Processing service purchase/change/termination, age verification for certain content, identity verification for financial transactions and confirmation of a legal representative’s intent, performance of paid-service contracts and related billing, payment, discounts and settlement, notification and collection of usage fees, prevention of fraudulent and unauthorized use, verification of service usage, provision of personalized services based on age, gender, and preferences, analysis of access frequency and statistics on Members’ service use, and service-related notices.
- Member support
- Securing communication channels for handling complaints, confirming Member identity and inquiries related to use, confirming complaints, contacting for fact-finding, notifying results, and preserving records for dispute resolution.
- Events
- Providing the latest information on new services, products, and events, and awarding prizes to Members who win events or promotions.
- Other
- Entrusting tasks necessary for the performance of the contract, such as service provision, to the processors disclosed in this Privacy Policy.
2. Personal Information Items Collected
The Company provides a consent procedure for the Terms of Service and the collection and use of personal information at the time of Member registration; if a Member selects consent, they are deemed to have consented to the collection and use of their personal information. The Company may collect personal information as follows to provide services and perform contracts, such as registration consultation and service applications:
- Required: email account, password (stored after an irreversible encryption process), nickname, service version, OS, OS version, device model name, unique device ID (an ID the Company randomly assigns to the Member’s device), language, country or region of residence, and time zone.
- Optional: mobile phone number, address, purchase history of paid services such as products and content, and location information.
In addition, the Company may collect automatically generated information during service use, such as service usage records, access logs, cookies, access IP information, ID, and payment records. - Website (musikon.kr) inquiry form: name, company or affiliation, email address, and inquiry content.
The website inquiry form can be used without registering as a Member. Information collected through it is used only to respond to the inquiry and is destroyed three years after the inquiry is received. While the website is used, access IP address, cookies, access date and time, browser and device information, and visit and usage records may be collected automatically.
3. Methods of Collecting Personal Information
- Member registration, service inquiries, event entries, delivery requests, etc.
- Collection through automated data-collection tools.
4. Provision of Personal Information to Third Parties
Except where a Member has given separate consent or where required by law, the Company does not provide Members’ personal information to third parties. However, where necessary for users to use the service, the Company may provide personal information through lawful procedures such as obtaining the user’s consent.
5. Entrustment of Personal Information Processing and Overseas Transfers
To provide its services smoothly, the Company entrusts personal information processing tasks as set out below. When concluding entrustment agreements, the Company specifies in writing, pursuant to Article 26 of the Personal Information Protection Act, matters such as the prohibition of processing beyond the purpose of the entrusted work, technical and administrative safeguards, restrictions on sub-entrustment, supervision of the processor, and liability including damages, and supervises whether the processor handles personal information safely. Separately, when a paid service is purchased, personal information is entrusted to payment gateway companies for payment processing and fraud prevention; those companies are shown on the payment screen.
| Processor | Entrusted work | Retention and use period |
|---|---|---|
| Alibaba Cloud (Alibaba Cloud Computing Ltd.) | Website server hosting and infrastructure operation | Until termination of the entrustment agreement or destruction of the personal information |
| Microsoft Corporation | Delivery of website inquiry notifications and operation of the internal collaboration tool (Microsoft Teams) | Until termination of the entrustment agreement or destruction of the personal information |
| Google LLC | Website usage analytics (Google Analytics · Google Tag Manager) | Until termination of the entrustment agreement or destruction of the personal information |
Transfer of Personal Information Overseas
Pursuant to Article 28-8(1)3 of the Personal Information Protection Act, the Company entrusts the processing and storage of personal information overseas as follows and discloses it through this Privacy Policy.
Alibaba Cloud Computing Ltd.
- Country
- Hong Kong
- Date and method
- Transmitted over the network when the website is accessed or an inquiry is submitted
- Items transferred
- Website inquiry form entries and access logs
- Purpose
- Website server hosting and infrastructure operation
- Retention period
- Until termination of the entrustment agreement or destruction of the personal information
- Contact
- https://www.alibabacloud.com/help/legal
Microsoft Corporation
- Country
- The United States and other countries where Microsoft operates data centres
- Date and method
- Transmitted over the network when an inquiry is submitted
- Items transferred
- Name, company or affiliation, email address, inquiry content
- Purpose
- Delivering inquiry notifications to the responsible staff
- Retention period
- 3 years from the date the inquiry is received
- Contact
- https://privacy.microsoft.com
Google LLC
- Country
- The United States
- Date and method
- Transmitted over the network when the website is accessed
- Items transferred
- Cookies, access IP address, browser and device information, visit and usage records
- Purpose
- Website usage analytics
- Retention period
- The period set in Google Analytics data retention settings (up to 14 months)
- Contact
- https://policies.google.com/privacy
Data subjects may refuse the overseas transfer of their personal information by contacting the address in Section 12 below. However, website hosting and inquiry handling depend on the transfers above, so refusing may prevent use of the website inquiry form; in that case you may contact the Company directly by email.
6. Retention Period and Conditions for Destruction of Personal Information
The Company retains and uses a Member’s personal information from the time of collection until the Member requests withdrawal or withdraws consent to the collection and use of personal information. When the retention period has elapsed or the purpose of use has been achieved, the Company destroys the relevant personal information without delay in a manner that renders it impossible to recover or reproduce, except where relevant laws (such as the Act on Consumer Protection in Electronic Commerce, etc.) require the information to be preserved. Please note, however, that the information below may be retained for a certain period in accordance with the relevant laws. Personal information received through the website inquiry form is retained for three years from the date the inquiry is received and then destroyed; if a data subject requests destruction earlier, the Company destroys it without delay except where retention is required by applicable law.
| Legal basis | Retention period | Items |
|---|---|---|
| Act on Consumer Protection in Electronic Commerce, etc. | 6 months | Identity of transaction parties, records on labeling/advertising, etc. |
| 5 years | Identity of transaction parties, records on contracts or withdrawal of subscription, etc. | |
| 5 years | Identity of transaction parties, records on payment and supply of goods, etc. | |
| 3 years | Identity of transaction parties, records on consumer complaints or dispute handling, etc. | |
| Protection of Communications Secrets Act | 3 months | Website visit records, etc. |
7. Handling of Personal Information of Dormant Members
Under the “personal information validity period” system, the Company notifies Members who have not used the service for one year 30 days before the end of the validity period, and separately stores their personal information; the separately stored personal information is retained for 4 years and then destroyed immediately.
8. Members’ Rights
- Members may view or correct their registered personal information at any time. To view or correct personal information, you may do so directly by clicking “Change Member Information.”
- You may withdraw at any time the consent you gave to the collection/use/provision of personal information through membership registration. To withdraw consent to the processing of personal information (Member withdrawal), you may apply directly by clicking “Member Withdrawal.”
- Only where it is difficult to correct or delete personal information (Member withdrawal) directly for unavoidable reasons, you may request correction or deletion in writing, by phone, or by email, and the Company will act on such request promptly.
- Where a Member or their legal representative requests to view, obtain proof of, or correct personal information, the Company responds in good faith; where correction or deletion is deemed necessary — for example, where the personal information is found to contain errors or the retention period has elapsed — the Company acts promptly.
- The Company permits membership registration for users aged 14 or older.
- Personal information that is terminated, deleted, or corrected at the request of a Member or legal representative is handled as specified in “Retention Period and Use Period of Personal Information,” and is processed so that it cannot be viewed or used for any other purpose.
If you cannot access the app or cannot complete withdrawal within it, you may also request account deletion on the web. The page below lists what is deleted and what is retained under applicable law. Account deletion request page →
9. Members’ Obligations
- Members shall enter their personal information accurately and keep it up to date so that they can secure the right to self-determination over their personal information and receive important information — such as changes to, suspension of, or termination of the Musikon service — in a timely manner, thereby preventing unexpected incidents. Members are responsible for consequences arising from inaccurate information, and entering false information, such as misusing another person’s information, may result in loss of Member status.
- Members are obliged to protect their own personal information and, at the same time, not to infringe on others’ information. Members must carefully manage their personal information, including IDs and passwords, so that it is not leaked, and must take care not to damage others’ personal information or reputation, including in posts. Damaging others’ information may be subject to punishment under relevant laws such as the Network Act.
- In particular, when using the service on a shared PC or other device, or when accessing via a shared network and then ending use of the service, be sure to log out of the account used. Otherwise, the Member’s personal information may be easily leaked or altered by others through that browser.
10. Notice on Automated Processing of Personal Information
The Company uses cookies that periodically retrieve information about Members. A cookie is a small, deletable data file stored on a computer by a web browser. Cookies serve to enhance the overall online user experience; however, if a user does not want the collection of behavioral information, they may configure their settings so that cookies are not used or so that cookie functionality is restricted. Members may set the desired level in the “browser settings” of the device they use — for example, being warned each time a cookie is sent, or disabling all cookies. On the website (musikon.kr) the Company uses Google Tag Manager and Google Analytics to analyse usage; in this process cookies collect information such as access IP address, browser and device information, and visit and usage records, which is used solely for statistical analysis. You may refuse the installation and operation of cookies as follows.
- Choose whether to allow cookies in your browser settings (Chrome: Settings > Privacy and security > Third-party cookies / Edge: Settings > Cookies and site permissions / Safari: Settings > Privacy).
- Install the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout) to refuse collection.
- Refusing to store cookies may make some functions difficult to use.
11. Collecting Opinions and Handling Complaints
The Company operates a one-on-one Member support channel to address Members’ opinions and complaints regarding personal information protection. In Korea, if a dispute arises between a Member and the Company regarding personal information protection and consultation on personal information infringement is needed, you may contact the Korea Internet & Security Agency’s Personal Information Infringement Report Center, the Cyber Bureau of the National Police Agency, and others.
| Personal Information Infringement Report Center | https://privacy.kisa.or.kr | 118 |
|---|---|---|
| Personal Information Dispute Mediation Committee | https://www.kopico.go.kr | 1833-6972 |
| Supreme Prosecutors’ Office Cyber Investigation Division | https://www.spo.go.kr | 1301 |
| National Police Agency Cyber Investigation Bureau | https://ecrm.police.go.kr | 182 |
12. Personal Information Protection Officer
The Company designates a Personal Information Protection Officer, and the responsible department makes its best efforts to protect Members’ valuable personal information. If you wish to raise inquiries, opinions, or complaints regarding personal information, please contact us at the contact or email below. We will respond promptly and faithfully.
Personal Information Protection Officer
- Name
- Kim Ki-dae
- privacy@musikon.kr
Department Handling Personal Information Grievances
- Department
- Customer Service
- cs@musikon.kr
13. Efforts to Ensure the Security of Personal Information
The Company takes the following measures to ensure the security of personal information:
- Administrative measures: limiting the personnel who handle personal information, providing regular employee training, and requiring information-security pledges when hiring new employees.
- Technical measures: managing access rights to the personal information processing system, operating an internal network intrusion-prevention system and intrusion-detection system, using encryption algorithms and security devices, and installing antivirus programs.
- Physical measures: access control to areas where data is stored.
14. Linked Sites
The Company may provide Members with links to other companies’ websites or materials through its homepage. In such cases, the Company neither assumes responsibility for nor guarantees the usefulness of services or materials received from external sites. Also, when you click a link included on the homepage and move to a page of another site or service, Musikon’s Privacy Policy does not apply to the use of that site or service.
15. Amendment of the Privacy Policy
If the Company amends this Privacy Policy, it will announce the reason for the change and the effective date, together with the current Privacy Policy, through in-service notices from 7 days before the effective date until the day before it takes effect. However, if there is a change to content that is material to users’ rights or obligations, it will be announced at least 30 days in advance.
This Privacy Policy was amended on 14 August 2026 and takes effect on 21 August 2026. The previous version (effective 6 November 2022) applies until 20 August 2026.