CCCV Personal Data Protection Policy

1. General Provisions

Bloco XYZ Co., Ltd. (hereinafter referred to as 'Company') places great importance on protecting the personal information of members of the CCCV (https://cccv.to/) service (hereinafter referred to as 'Service') provided by the Company, and is doing its best to ensure that personal information provided to the Company online by users while using the Company's services is protected. Accordingly, the company complies with the personal data protection regulations under relevant laws and regulations that information and communication service providers must comply with, as well as the personal data protection guidelines established by the Ministry of Information and Communication.

The company informs users through the personal data protection policy how the personal data provided by users is used and what measures are taken to protect personal data.

The company's personal data protection policy may be changed frequently due to changes in government laws and guidelines or internal company policies, and we have established necessary procedures to continuously improve the personal data protection policy. If we revise the personal data protection policy or when it changes, we will notify users through the personal data protection policy on the first page of the service. Please check the site regularly for updates.

2. Purpose of Collection and Use of Personal Data

1) Membership management and user identification - Confirmation of membership intention, provision of membership-based services, and management of membership qualifications

2) Handling of Customer Inquiries - Verification of complainant identity, confirmation of complaint details, contact for fact-finding, notification of processing results, etc.

3) Use for Marketing and Advertising - New service (product) development and customized service provision, event and advertising information provision, participation opportunity provision, service provision based on demographic characteristics, advertising display, service validity verification, access frequency analysis, or statistics on members' service usage, etc.

3. Collected Personal Data Items and Collection Methods

When signing up or using the service, the company collects the minimum necessary personal data required for service provision through the website as follows:

[ When signing up with email ]

Required: (Login) Email, Password

[ When signing up through SNS account ]

Required: Facebook, Google, KakaoTalk, User ID, Email

[ Upon Identity Verification ]

Phone number

[ When processing refunds or refunds ]

Bank Name, Account Number, Account Holder Name, Email

[ Service Usage Process ]

During the use of PC web, mobile web/app, information such as terminal information (OS, screen size, device ID, phone type, terminal model name), IP address, cookies, visit date and time, abnormal use records, and service use records may be automatically generated and collected.

When collecting personal data, we always inform users in advance and obtain their consent, and collect personal data through the following methods:

• When users agree to personal data collection and directly input their information during the membership registration and service usage process
• If we receive personal data from affiliated services or organizations, etc.
• Consultation via customer service through web pages, email, fax, phone, etc.
• Event/marketing promotion and winner selection notification

4. External Channel Linkage and Content Use Permission

1) When a service user (hereinafter referred to as 'Member') agrees to integrate with a social network service operated by a third party (hereinafter referred to as 'External Channel'), the 'Member' is deemed to have permitted the 'Company' to access the 'External Channel' and to use the 'Member's' content posted on the 'External Channel' in accordance with Paragraph 2 of the same Article, including collecting, reproducing, and transmitting such content. The 'company' may modify the content of the contract at any time without any notice to the 'member' according to the terms of this agreement.

2) In order for the 'member' to provide the 'content' through the 'influencer service' in a legitimate manner, the 'member' needs the right to use the 'content' (without any time or regional restrictions, and without any separate compensation) such as storage, reproduction, modification, public transmission, exhibition, distribution, and creation of secondary works (limited to translation). By linking to the 'external channel', the 'member' is expected to provide the 'company' with the necessary rights and obligations.

5. Termination of External Channel Linkage

1) Members who have linked with external channels can freely terminate the linkage with external channels during service use.

2) If the 'member' deletes the account they opened on the 'external channel', the 'company', upon becoming aware, will in principle terminate the 'external channel' linkage on the 'influencer home'. However, since the 'company' may not immediately become aware of this, if the 'member' wishes immediate deletion or removal from public view, they can notify the 'company' to request deletion.

6. YouTube Terms and Policy Agreement

1) The 'company' uses the Google API Client (YouTube Data API) to collect YouTube account information, and if the 'member' completes the YouTube service connection within the service, it is considered that they have agreed to the following YouTube and Google terms and policies.

7. YouTube Data Collection, Storage, and Use

1) The 'company' can collect, store, and use the 'member's' YouTube data with the 'member's' consent for the following purposes

- YouTube channel information of members to provide a shortcut to their YouTube channel

2) If the 'member' completes the YouTube connection within the service, it is considered to have agreed to the collection, storage, and use of YouTube data in accordance with Article 6.

3) Under this article, the scope of data collected by the 'company' is limited to data provided by the YouTube API with the 'channel operator's' consent.

4) The YouTube data collected by the 'company' and its collection method are as follows

- Information of the YouTube channel managed by the 'channel operator' using the YouTube Data API

8. YouTube Connection Termination and YouTube Data Collection Suspension

1) If the 'member' no longer wants the 'company' to collect their YouTube data, they can immediately stop collecting YouTube data by canceling the YouTube connection through the following method

2) If the 'member' cancels the YouTube connection in accordance with the procedure in paragraph 1, the 'company' will immediately stop collecting the 'member's' YouTube data.

9. Processing and Retention Period of Personal Data

The company processes and retains personal data within the retention period agreed upon with the data subject or as stipulated by law when collecting personal data. The specific personal data processing and retention periods are as follows:

Users' personal data is In accordance with Article 5 'Procedures and Methods for Personal Data Destruction', personal data shall be destroyed without delay five days after a withdrawal request, once the purpose of collection and use has been achieved. However, if necessary under the Telecommunications Privacy Protection Act, the Act on Consumer Protection in Electronic Commerce, or other relevant laws, the company retains user information for the period prescribed by law. In this case, the company will only use the stored information for the purpose of storage, and the retention period is as follows:

- (Telecommunications Privacy Protection Act) Login Records (Log Files): 3 months (Access Tracking Data): 3 months

10. Procedures and Methods for Personal Data Destruction

In principle, the company destroys users' personal data without delay once the purpose of collection and use has been achieved. The destruction procedure, deadline, and method are managed according to the following standards:

1) When a user requests account withdrawal, the Company retains the user's information for up to five days from the request date to allow cancellation in case of mistake or change of mind. User information is destroyed without delay five days after collection (excluding user IDs).

If separate consent for data retention periods is obtained from users or if laws impose a data retention obligation for a specific period, personal data will be securely stored for that period.

2) The Company separately stores and manages the personal data of members who have not used the service for one year, in accordance with the personal data validity period system. Separately stored personal data is retained for four years and then destroyed without delay.

3) When the purpose of collection and use of personal data has been achieved, such as the expiration of the consented retention period for personal data of users who have terminated the service, the Company destroys the personal data in a way that makes it impossible to reproduce. We also promptly destroy, in an irrecoverable way, any information subject to statutory retention obligations after the retention period expires.

In the case of electronic files, we use technical methods to safely delete them in a way that makes it impossible to recover or reproduce them, and we destroy printed materials by shredding or incinerating them.

11. Entrustment of Collected Personal Data

The company may commission the collection, handling, and management of users' personal data to external parties with the necessary consent and legal requirements for service improvement, and may provide personal data to third parties.

The company commissions the following tasks related to personal data processing and stipulates necessary matters to ensure that personal data is safely managed in accordance with relevant laws and regulations when entering into a commissioned contract. Also, shared information is limited to the minimum necessary to achieve the intended purpose.

• Commissioned Service Provider: [PayLetter Co., Ltd.]
  Commissioned Service Details: [Card payment and easy payment electronic payment agency]
• Commissioned Service Provider: [NICE Payments Co., Ltd.]
  Commissioned Service Details: [Card payment and easy payment electronic payment agency, first implemented on February 6, 2018]
• Commissioned Service Provider: [Danal Co., Ltd.]
  Commissioned Service Details: [Mobile phone identity verification]
• Commissioned Service Provider: [Amazon Web Services Inc]
  Commissioned Service Details: [Data Storage]

12. User Rights (Access, Correction, Deletion, etc.) and How to Exercise Them

Data subjects can request access to their personal data in accordance with Article 35 of the Personal Information Protection Act.

Users can view or correct their personal information registered on the service homepage at any time by accessing the 'Account Settings' page, and can request withdrawal.

Users can modify all input fields except for ID and password at the 'Account Settings' page.

Users can exercise their rights through the customer center, and can submit a request for personal data access, correction, deletion, or suspension of processing in writing or by email using Form No. 8 of the Enforcement Rules of the Personal Information Protection Act.

Users may also exercise their rights through a representative, in which case they must submit a power of attorney using Form No. 11 prescribed in the Enforcement Rules of the Personal Information Protection Act.

The company will strive to promptly process data subjects' requests for access to their personal data.

You can also request access to personal data through the Personal Information Protection Commission's 'Comprehensive Personal Data Protection Support Portal' website (www.privacy.go.kr).

13. Installation/Operation and Rejection of Automated Personal Data Collection Devices

The company may use cookies to provide customized services based on individual web usage.

• What are cookies? : Cookies are small pieces of information sent by the server (http) used to operate the website to the user's computer browser, and are also stored on the user's PC computer hard disk.
• Purpose of Use: Used to analyze users' visits and usage patterns of each service and website visited, popular search terms, security of connections, etc., to provide optimized information to users.
• Cookie installation and operation, and rejection: Cookies do not store personally identifiable information such as names and phone numbers, and users have the right to choose whether to install cookies. Therefore, users can configure their web browser to allow all cookies, to be prompted each time a cookie is stored, or to refuse all cookies. However, refusing cookie storage may result in difficulty using personalized services.
  → 1) In the case of Internet Explorer
  Web browser top menu > Internet options > Personal information > Settings
  → 2) In the case of Chrome
  Web browser right menu > Settings menu > Display advanced settings at the bottom of the screen > Personal data content settings button > Cookies

14. Personal Information Protection Officer Contact Information

The company designates a personal data protection officer to be responsible for overall personal data processing and to handle complaints and grievances related to personal data processing. For any inquiries, complaints, advice, or other matters related to personal data protection arising during service use, please contact us at the following address: The best is to answer in a clear and concise manner, and to give a wide range of opinions.

15. Remedies for Infringement of Data Subjects' Rights and Interests

If you are not satisfied with the company's internal personal data complaint handling and grievance resolution, or if your personal data has been infringed upon and you need to report or consult on the matter, you can contact the following organizations for assistance.

16. Duty to Provide Notice

This personal data protection policy will be applied from the effective date, and if there are any changes, additions, deletions, or corrections to the policy in accordance with laws and regulations, we will notify users through the notice board 7 days prior to the implementation of the changes. Additionally, if it becomes necessary to change the data protection policy due to changes in relevant laws or company policy, we promptly notify users via website announcements. Please refer to these notices.

• First implemented on October 1, 2020
• Effective Date: October 1, 2020

BlocoXYZ Co., Ltd. values users' information and promises to make every effort to ensure you can use the service with confidence.