Solved Company (hereinafter referred to as the **Company**) establishes and discloses the following privacy policy to protect users' personal information under the PERSONAL INFORMATION PROTECTION ACT of the Republic of Korea. This privacy policy applies to the services provided by the Company.

### Collection Items, Purpose, and Retention Period of Personal Information

**Personal information** is information about a living individual that can identify that individual by name, date of birth, e-mail address, etc., including those that can be identified by

The items, purposes, and retention period of the personal information that the Company collects as essential from members are as follows.

| Purpose | Item | Retention Period |
| --- | --- | --- |
| Linkage and user identification, member management | Baekjoon Online Judge ID and e-mail address | Immediate destruction upon withdrawal of membership |
| Providing services such as rating calculation and problem recommendation | Judgement record within the Baekjoon Online Judge | Immediate destruction upon withdrawal of membership |
| Profile | Baekjoon Online Judge ID, profile picture, school, and affiliation | Destruction when information is deleted from Baekjoon Online Judge or upon withdrawal of membership |

In addition, the items, purposes, and retention period of personal information selectively collected from members for the use of additional services are as follows.

| Purpose | Item | Retention Period |
| --- | --- | --- |
| Profile | Region, name, birth date, and gender | Immediate destruction upon the member deleting their information and/or membership withdrawal |
| Electronic Payment | Name, e-mail address, phone number | Immediate destruction upon the member deleting their information and/or membership withdrawal |
| Production and delivery of contest awards and event gifts | Country, address, name, phone number, and clothing size | Immediate destruction upon the member deleting their information and/or membership withdrawal |
| Discord integration to access the solved.ac Discord community | Discord ID, Discord token for identification | Immediate destruction upon disconnection of Discord and/or membership withdrawal |
| X auto posting | X ID, an X token with permission to post tweets | Immediate destruction upon disconnection of X and/or membership withdrawal |
| Delivery of goods/services, processing of related tasks, delivery of purchase details | Name, email, and phone number; Address (when purchasing products that require delivery) | Destruction after 90 days when membership is withdrawn |
| Refund to bank account | Bank name, account number | Destruction upon request for information deletion or membership withdrawal |
| Cash receipt request | Phone number or cash receipt card | Destroy after 5 years storage |

### Provision of Personal Information to Third Parties

The company provides personal information to third parties as follows.

#### Google Analytics

| Purpose | Item | Retention Period |
| --- | --- | --- |
| Understanding demographic characteristics | Pseudonymized region, access history, content usage history, etc. | 18 months |

#### Smartro Co., Ltd.

Applies only to domestic payments within the Republic of Korea.

| Purpose | Item | Retention Period |
| --- | --- | --- |
| Electronic Payment | Name, e-mail address, phone number | Destroy after 5 years storage |

#### PayPal

Applies to payments excluding domestic payments within the Republic of Korea.

| Purpose | Item | Retention Period |
| --- | --- | --- |
| Electronic Payment | Name, e-mail address, phone number, country, account creation date | Retained for the period required by relevant laws |

### Installation, Operation, and Rejection of Automatic Personal Information Collection Devices

The company uses "cookies" that store and retrieve usage information from time to time in order to provide personalized services to users. Cookies are small text files that the server used to run the site sends to the user's browser.

- Cookies allow users to access and conveniently use the website as configured when visiting the website. In addition, it may be pseudonymized for demographic characteristics and used in Google Analytics, etc.
- Users have the option to install cookies. Therefore, the user may allow all cookies by setting options in the web browser, checking each time a cookie is saved, or refusing to save all cookies.
- However, if the user refuses to install cookies, the use of the service may become inconvenient, and some services that require login cannot be used.

### Personal Information Destruction Procedure and Method

The Company destroys personal information without delay when the retention period specified in Article 1 (Collection Items, Purpose, and Retention Period of Personal Information) has elapsed.

Personal information stored in physical form is shredded or incinerated, and personal information stored in electronic file form is deleted using a technical method that cannot reproduce the record.

### Provision of Personal Information

The Company does not use the user's personal information beyond the scope notified in this privacy policy or provide it to others or other companies or organizations. However, the following cases are exceptions.
- When there is an obligation to provide personal information under the relevant laws and regulations
- When separate consent is obtained from the user

### Rights of Data Subjects and Legal Representatives and its Exercise Methods

Users can view or correct the registered personal information at any time. If a request for viewing or correction is made in writing or by e-mail to the person in charge of personal information protection, we will take action immediately.

- When a user requests the correction of an error in personal information, the Company does not use or provide the personal information until the correction is completed.
- If wrong personal information has already been provided to a third party, we will immediately notify the third party of the result of the correction and take action to correct it.
- The user can withdraw their consent at any time in relation to the collection, use, and provision of personal information through membership registration, etc. If the user contacts the person in charge of personal information protection in writing, by phone, or by e-mail, the Company will immediately take necessary measures to withdraw from membership. If there are measures such as withdrawal of consent and destruction of personal information, we will notify the user without delay.

### Measures for Securing the Personal Information

Under Article 29 of the PERSONAL INFORMATION PROTECTION ACT, the Company takes the following technical/administrative and physical measures to ensure safety.

1. **Encryption of personal information.**: Among the user's personal information, X and Discord-related information is encrypted, stored, and managed so that only the user can know it. For sensitive data, separate security features are used, such as encrypting files and transmitting data or using an encrypting method.
2. **Technical measures against hacking, etc.**: To prevent leakage or damage of personal information caused by hacking or computer viruses, the site installs a security program, periodically updates and inspects it, and installs the system in an area where access from outside is controlled and provides technical/physical are monitored and blocked.

### Complaints About Personal Information

The site designates the person in charge of personal information management as follows to protect users' personal information and to handle complaints related to personal information.

Users can report all complaints about personal information protection while using the site's services to the person in charge of personal information management.

#### Personal Information Manager

- **Name:** Suhyun Park (박수현)
- **E-Mail:** shift@solved.ac

Please contact the organizations below if you need to report or consult about other personal information infringements. 
All phone numbers below are for the Republic of Korea.

- National Police Agency Cyber ​​Investigation Bureau (ecrm.cyber.go.kr; ☎ 182)
- Supreme Prosecutor's Office Cyber ​​Investigation Division (spo.go.kr; ☎ 1301)
- Personal Information Infringement Report Center (privacy.kisa.or.kr; ☎ 118)
- Personal Information Dispute Mediation Committee (www.kopico.go.kr; ☎ 1833-6972)

### Changes to Privacy Policy

This Privacy Policy is applied from the enforcement date notified below, and if there is an addition, deletion, or correction of changes under laws and policies, it will be notified through a notice 7 days before implementing the changes.

- Date of announcement: August 15, 2023
- Effective date: August 22, 2023

If the interpretation of the privacy policy differs between English and Korean, the interpretation of the Korean content shall prevail.

### Previous Policies

- [v1](/privacy/previous/v1) - from December 8, 2022 to until August 21, 2023

Privacy Policy – v3