representatives, and how to excise the rights; consent from Data Subjects (including their legal representatives as stated in paragraph 6. The installation and operation of the device (5), hereinafter the same applies to this collecting automatically the personal information Article) with respect to personal data like the Internet logon files, etc. and how to deny processing under this Act, the Personal Data such device; Controller shall inform the Data Subjects of 7. The name of a Privacy Officer, or the the fact by separating the matters requiring department to protect the personal information of consent and helping the Data Subjects to Users and deal with complaints of Users related recognize it explicitly, and obtain their with the personal information, and the contact consent thereof, respectively. points like telephone numbers. (2) When a Personal Data Controller obtains (3) In case of change of the Privacy Policy consent from Data Subjects with respect to pursuant to paragraph (1), the Information and personal data processing in accordance with Communications Service Provider, etc. shall make Articles 15(1)i, 17(1)i and 24(1)i, the Personal public without delay the reason and changes Data Controller shall segregate the personal thereof in such a manner as stated in the data which needs the Data Subjects’ consent Presidential Decree so that Users may identify the to process, from the personal data which change of policy statement with ease at any time. needs no consent when entering into a contract with the Data Subjects. In such case, the burden of proof that no consent is Article 30 (User's Right, etc.) (1) Every user may at required in processing the personal data any time withdraw his/her consent given to the shall be borne by the Personal Data information and communications service provider, Controller. etc. for the collection, utilization or provision of the (3) The Personal Data Controller shall, when personal information. intending to obtain Data Subjects’ consent to (2) Every user may request the access to, or personal data processing for the purpose of provision of, any of the following items related with soliciting the purchase or promoting the him/her, and if his/her personal information is goods and services thereof, inform the Data found to be erroneous, he/she may request the Subjects of the fact by helping the Data correction thereof: Subjects to recognize it explicitly, and obtain their consent thereof. 1. The personal information of users retained by the information and communications service (4) The Personal Data Controller shall not
representatives, and how to excise the rights; 6. The installation and operation of the device collecting automatically the personal information like the Internet logon files, etc. and how to deny such device; 7. The name of a Privacy Officer, or the department to protect the personal information of Users and deal with complaints of Users related with the personal information, and the contact points like telephone numbers. (3) In case of change of the Privacy Policy pursuant to paragraph (1), the Information and Communications Service Provider, etc. shall make public without delay the reason and changes thereof in such a manner as stated in the Presidential Decree so that Users may identify the change of policy statement with ease at any time. Article 30 (User's Right, etc.) (1) Every user may at any time withdraw his/her consent given to the information and communications service provider, etc. for the collection, utilization or provision of the personal information. (2) Every user may request the access to, or provision of, any of the following items related with him/her, and if his/her personal information is found to be erroneous, he/she may request the correction thereof: 1. The personal information of users retained by the information and communications service consent from Data Subjects (including their legal representatives as stated in paragraph (5), hereinafter the same applies to this Article) with respect to personal data processing under this Act, the Personal Data Controller shall inform the Data Subjects of the fact by separating the matters requiring consent and helping the Data Subjects to recognize it explicitly, and obtain their consent thereof, respectively. (2) When a Personal Data Controller obtains consent from Data Subjects with respect to personal data processing in accordance with Articles 15(1)i, 17(1)i and 24(1)i, the Personal Data Controller shall segregate the personal data which needs the Data Subjects’ consent to process, from the personal data which needs no consent when entering into a contract with the Data Subjects. In such case, the burden of proof that no consent is required in processing the personal data shall be borne by the Personal Data Controller. (3) The Personal Data Controller shall, when intending to obtain Data Subjects’ consent to personal data processing for the purpose of soliciting the purchase or promoting the goods and services thereof, inform the Data Subjects of the fact by helping the Data Subjects to recognize it explicitly, and obtain their consent thereof. (4) The Personal Data Controller shall not