{"id":1648,"date":"2024-02-02T04:53:38","date_gmt":"2024-02-01T19:53:38","guid":{"rendered":"http:\/\/SME-env.eba-nzdzcipe.ap-northeast-2.elasticbeanstalk.com\/privacy-policy\/"},"modified":"2025-03-28T17:39:29","modified_gmt":"2025-03-28T08:39:29","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.smentertainment.com\/ja\/privacy-policy\/","title":{"rendered":"PRIVACY POLICY"},"content":{"rendered":"\n
SM Entertainment Co., Ltd. (hereinafter \u201cCompany\u201d) complies with the Personal Information Protection Act and collects, retains, and handles users\u2019 personal information legitimately and appropriately in accordance with relevant laws and regulations. The Company’s privacy policy contains the following;<\/p>\n\n\n\n
SM Entertainment Co., Ltd. (hereinafter referred to as the \u201cCompany\u201d) legally processes and safely manages personal information of data subjects in compliance with the Personal Information Protection Act and related statutes or regulations.<\/p>\n\n\n\n
Accordingly, in accordance with Article 30 of the Personal Information Protection Act, the following privacy policy is established and disclosed to inform data subjects of the procedures and standards for processing personal information and to promptly and smoothly handle complaints related thereto.<\/p>\n\n\n\n
This privacy policy applies to the services provided by the company (hereinafter referred to as \u201cservices\u201d) and the data subjects using the services (hereinafter referred to as \u201cdata subjects\u201d).<\/p>\n<\/div>\n<\/div>\n\n\n\n
The company processes personal information for the following purposes: The personal information, which is processed by the company, will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, e.g., obtaining separate consent from the data subjects in accordance with Article 18 of the Personal Information Protection Act.<\/p>\n\n\n\n
[Recruitment]<\/p>\n\n\n\n
[Reporting of unethical behavior]<\/p>\n\n\n\n
[Submit Business Inquiry]<\/p>\n\n\n\n
[SMTOWN website and app, KWANGYA 119]<\/p>\n\n\n\n
[Audition (integrated)]<\/p>\n\n\n\n
The Company collects the minimum amount of personal information as follows to provide smooth service, and does not collect \u2018sensitive information\u2019 without the consent of the data subject.<\/p>\n\n\n\n
*Sensitive information: information that may infringe on the privacy of the data subject (personal information that may significantly infringe on the privacy of the user, such as thoughts, beliefs, political views, and health)<\/p>\n\n\n\n
[Recruitment]<\/p>\n\n\n\n
Required: name, email, cell phone number, gender, date of birth, nationality, address, academic background, profile photo, veteran status, self-introduction, application path, and curriculum vitae<\/p>\n\n\n\n
Optional: work experience, overseas experience, language test scores, certificates, military service, and disability<\/p>\n\n\n\n
Other: Portfolio and Pre-assignments (required or optional depending on jobs and job posting)
*Information, such as visit history during service use, job application records, records of fraudulent use, and terminal information (OS, screen size, and unique identifier of a device), may be automatically generated and collected.<\/p>\n\n\n\n
[Reporting of unethical behavior]<\/p>\n\n\n\n
Required: name and e-mail address<\/p>\n\n\n\n
* Information, such as visit history during service use, job application records, records of fraudulent use, and terminal information (OS, screen size, and unique identifier of a device), may be automatically generated and collected.<\/p>\n\n\n\n
[Submit Business Inquiry]<\/p>\n\n\n\n
Required: Name, Affiliation(Name of Organization), Email, Contact, Inquiry Title, Inquiry Content
Optional: Website, File Attachment<\/p>\n\n\n\n
* Information, such as visit history during service use, job application records, records of fraudulent use, and terminal information (OS, screen size, and unique identifier of a device), may be automatically generated and collected.<\/p>\n\n\n\n
[SMTOWN website and app]<\/p>\n\n\n\n
Required: name, login ID, password, email address, service usage history, access log, cookie, access IP information, terminal identification number (terminal ID), and PUSH token<\/p>\n\n\n\n
*The information about the above terminal is in a form that cannot identify individuals, and the company does not engage in any activities that identify individuals based on the collected information.<\/p>\n\n\n\n
[KWANGYA 119]<\/p>\n\n\n\n
Required: e-mail address<\/p>\n\n\n\n
*We do not collect any information other than your email address.<\/p>\n\n\n\n
[Audition]<\/p>\n\n\n\n
Name, date of birth, gender, country, contact information, email address, SNS account ID, information on legal representative (name, contact information, date of birth, email address) in case of applicants under 14 years of age, highest level of education, name of school that the applicant graduated from\/dropped out of\/attended<\/p>\n\n\n\n
*Information, such as service use records during service use, access logs, cookies, access IP information, access device information, terminal identification number (terminal ID), PUSH tokens, and country of access, may be automatically generated and collected.<\/p>\n<\/div>\n<\/div>\n\n\n\n
In principle, the company retains and uses personal information for a period of time for which separate consent has been obtained from the data subject, and when the period for retaining personal information expires or the purpose of collecting and using personal information is achieved, the personal information will be destroyed immediately. However, the following information will be retained for a period of time specified for the following reasons:<\/p>\n\n\n\n
\u3008Period for processing and retaining personal information according to relevant laws\u3009<\/p>\n\n\n\n
\u3008Processing and retention period according to company internal policy of the company\u3009<\/p>\n\n\n\n
[Common]<\/p>\n\n\n\n
In case of records of fraudulent use, personal information related to fraudulent use prevention is retained for one year from the date of collection to prevent fraudulent use.<\/p>\n\n\n\n
[Recruitment]<\/p>\n\n\n\n
Personal information provided during job application will be retained for 3 years from the date of collection. If consent to the processing of personal information is withdrawn or a request for withdrawal is made, however, personal information will be destroyed immediately unless there are special reasons.<\/p>\n\n\n\n
[Reporting of unethical behavior]<\/p>\n\n\n\n
Personal information provided when reporting unethical behavior will be retained for up to 6 months from the date of reply after the result of report processing is returned.<\/p>\n\n\n\n
[Submit Business Inquiry]<\/p>\n\n\n\n
Personal information provided when submitting a business inquiry will be retained for up to 6 months from the date of the reply after the submission is processed.<\/p>\n\n\n\n
[SMTOWN website and app]<\/p>\n\n\n\n
Personal information provided upon membership signup will be retained for up to 3 months from the date of withdrawal to improve CS response and service even after withdrawal from membership.<\/p>\n\n\n\n
[Audition]<\/p>\n\n\n\n
Personal information provided when applying for an audition will be retained for one year from the date of application for audition. If you request withdrawal of consent to the processing of personal information or withdrawal from membership, however, the personal information provided will be destroyed immediately unless there are special reasons.<\/p>\n<\/div>\n<\/div>\n\n\n\n
When the company obtains consent from the legal representative regarding the processing of personal information of a child under the age of 14, it may request the child to provide the minimum information, such as the legal representative’s name and contact information, and requires the legal representative to indicate whether or not he or she consents on the website where the consent is posted.<\/p>\n<\/div>\n<\/div>\n\n\n\n
The company processes the personal information of the data subject only within the scope specified in the purpose of processing personal information, and provides personal information to third parties only in cases described in Articles 17 and 18 of the Personal Information Protection Act, e.g., with the consent of the data subject or special provisions of the law. In other cases, the company does not provide the personal information of the data subject to third parties.<\/p>\n\n\n\n
In the following cases, the company provides personal information to third parties only to the minimum extent necessary with the consent of the data subject in order to provide services efficiently.<\/p>\n\n\n\n
[SMTOWN website and app]<\/p>\n\n\n\n
Recipient: SM Brand Marketing Co., Ltd.
Purpose of providing personal information: to verify membership qualifications for the sale of member-only goods
Particulars of personal information provided: name and login ID
Retention and use period: Until withdrawal from membership<\/p>\n\n\n\n
In accordance with the guidelines for handling and protecting personal information in emergency situations jointly announced by government agencies, the company may provide personal information to relevant organizations without the consent of the data subject in the event of an emergency, such as a disaster, infectious disease, an incident or accident that poses an imminent risk to life or body, or an imminent loss of property. For more information, please click here<\/a>.<\/p>\n<\/div>\n<\/div>\n\n\n\n In order to process personal information efficiently, the company has entrusted the processing of personal information as follows:<\/p>\n\n\n\n The company manages and enforces entrustees\u2019 compliance with laws related to personal information protection, confidentiality of personal information, prohibition of provision to third parties, liability in case of accidents, period of entrustment, and obligation to return or destroy personal information after completion of processing, through entrustment contracts, etc.<\/p>\n\n\n\n The companies to which the company entrusts personal information processing are as follows:<\/p>\n\n\n\n *The entrustees may be changed depending on changes in the relevant service and the contract period, and we will notify you in advance when changing the service.<\/strong><\/p>\n\n\n\n [Recruitment]<\/p>\n\n\n\n Name of the entrustee: Doodlin Co., Ltd. [SMTOWN website and app]<\/p>\n\n\n\n Name of the entrustee: Megazone Cloud Co., Ltd. [KWANGYA 119]<\/p>\n\n\n\n Name of the entrustee: Hyosung ITX Co., Ltd. [Audition]<\/p>\n\n\n\n Name of the entrustee: Picpac Co., Ltd. The company provides and entrusts personal information collected from data subjects to overseas countries as follows. In principle, we back up (store) all data to recover data in the event of data loss due to a disaster or catastrophe. Therefore, if you refuse overseas transfer, you will not be able to use the service. If you do not want cross-border transfer, you can withdraw from membership on the website or request withdrawal through the customer center.<\/p>\n\n\n\n [Common]<\/p>\n\n\n\n Name of the storage company: Amazon Web Service<\/strong><\/p>\n\n\n\n Purpose of storage: System Management through AWS<\/p>\n\n\n\n Particulars of personal information to be transferred: all personal information collected during the service provision process<\/p>\n\n\n\n Country to which the personal information is transferred: Japan (AWS Tokyo Region)<\/p>\n\n\n\n Date of personal information transfer: membership signup<\/p>\n\n\n\n Method of personal information transfer: storing personal information in the AWS cloud computing environment<\/p>\n\n\n\n Contact information of the entrustee: Aws-korea-blog@amazon.com<\/a><\/p>\n\n\n\n Name of the entrustee: SENDGRID<\/p>\n\n\n\n Entrusted work and purpose: Sending emails for membership signup and password resetting<\/p>\n\n\n\n Particulars of personal information to be transferred: name and e-mail address<\/p>\n\n\n\n Country to which the personal information is transferred: the US<\/p>\n\n\n\n Date of personal information transfer: membership signup<\/p>\n\n\n\n Method of personal information transfer: Transmitted over the network each time the service is used<\/p>\n\n\n\n Contact information of the entrustee: datasubjectrequests@sendgrid.com<\/p>\n<\/div>\n<\/div>\n\n\n\n The company destroys personal information without delay when the personal information becomes unnecessary, e.g., when the period for retaining personal information expires or the processing purpose is achieved.<\/p>\n\n\n\n The procedures and methods for destroying personal information are as follows:<\/p>\n\n\n\n \u3008Destruction procedure\u3009<\/p>\n\n\n\n The information entered by the data subject for purposes such as signing up for membership is transferred to a separate database (separate file in the case of paper) after the purpose of collecting and using personal information has been achieved and is stored for a certain period of time in accordance with the company’s internal policy and other relevant laws depending on information protection reasons (see the period for retaining and using personal information) and then destroyed.<\/p>\n\n\n\n \u3008Destruction method\u3009<\/p>\n\n\n\n Personal information stored in electronic files is erased using a technical method that renders the records unrecoverable. Personal information printed on paper is destroyed in a shredder or through incineration.<\/p>\n<\/div>\n<\/div>\n\n\n\n <Request to access personal information ><\/p>\n\n\n\n Data subjects may request access to their personal information pursuant to Article 35 of the Personal Information Protection Act. However, requests to access personal information may be restricted as follows pursuant to Paragraph 5 of Article 35 of the Personal Information Protection Act.<\/p>\n\n\n\n < Request for correction\/erasure of personal information ><\/p>\n\n\n\n Data subjects who have accessed their personal information may request correction or erasure of such information in accordance with Article 36 of the Personal Information Protection Act. However, the erasure is not permitted where other statutes or regulations stipulate that the said personal information should be collected.<\/p>\n\n\n\n <Request to suspend processing of personal information and withdrawal of consent to processing><\/p>\n\n\n\n Data subjects may request suspension of processing or withdraw consent to processing pursuant to Article 37 of the Personal Information Protection Act. However, requests for suspension of processing may be rejected pursuant to Paragraph 2 of Article 37 of the Personal Information Protection Act as follows:<\/p>\n\n\n\n In accordance with Article 29 of the Personal Information Protection Act, Article 30 of the Enforcement Decree of the Personal Information Protection Act, and the standards for ensuring the safety of personal information notified by the Personal Information Protection Commission, the company is taking the following measures to ensure the safety of your personal information.<\/p>\n\n\n\n The company is doing its best to prevent personal information of its members from being divulged or damaged by hacking or computer viruses. In order to protect against damage to personal information, we regularly back up data, and use the latest antivirus and intrusion detection and blocking programs to prevent personal information or data of data subjects from being divulged or damaged. It also uses encrypted communication to ensure that personal information can be safely transmitted over the network.<\/p>\n\n\n\n We are also using an intrusion prevention system to control unauthorized access from the outside and are trying to equip ourselves with all possible technical devices to ensure the security of our systems.<\/p>\n\n\n\n The company operates \u201ccookies\u201d that store and retrieve information about the data subject whenever necessary. Cookies are text files that the server used to operate the company\u2019s website stores on the data subject\u2019s computer hard disk. The company uses cookies for the following purposes:<\/p>\n\n\n\n \u3008Purpose of using cookies, etc.\u3009<\/p>\n\n\n\n \u3008How to refuse cookie settings\u3009<\/p>\n\n\n\n -For Internet Explorer: [Tool]> [Internet option]> [personal information]> [Settings]<\/p>\n\n\n\n -For Chrome: [Settings> [View advanced settings]> [Setting personal information contents [cookie]<\/p>\n\n\n\n The company may additionally use or provide personal information without the consent of the data subject in consideration of , Paragraph 3 of Article 15 and Paragraph 4 of Article 17 of the Personal Information Protection Act and Article 14-2 of the Enforcement Decree of the Personal Information Protection Act.<\/p>\n\n\n\n The company considers the following in order to use or provide additional information without the consent of the data subject.<\/p>\n\n\n\n The company is responsible for the overall management of personal information processing and has designated a privacy officer as follows to handle the complaints of data subjects and provide remedies for damages related to personal information processing. Data subjects may report, to the privacy officer, any complaints related to personal information protection that occur while using the company’s services.<\/p>\n\n\n\n \u3008Privacy officer\u3009 The company safely manages the personal location information of data subjects in accordance with the \u300cAct on the Protection and Use of Location Information\u300d in relation to the location-based service \u201cPASSPORT\u201d provided by the SMTOWN app.<\/p>\n\n\n\n <Purpose of processing personal location information and retention period><\/p>\n\n\n\n The company destroys personal location information collected in relation to the \u201cPASSPORT\u201d service without delay after one-time or temporary use.<\/p>\n\n\n\n <Basis for holding data confirming collection, use, and provision of personal location information, and retention period><\/p>\n\n\n\n The company automatically records and retains confirmation data on the use and provision of personal location information of data subjects based on Paragraph 2 of Article 16 of the Act on the Protection and Use of Location Information, and stores such data for 6 months.<\/p>\n\n\n\n < Procedure for destroying personal location information and method><\/p>\n\n\n\n After the purpose of processing personal location information has been achieved, the company safely destroys personal location information in a way that makes it impossible to reproduce it.<\/p>\n\n\n\n Personal information stored in electronic file formats is erased using a technical method that renders the records unrecoverable.<\/p>\n\n\n\n Personal information printed on paper is destroyed in a shredder or through incineration.<\/p>\n\n\n\n <Matters concerning provision and notification of personal location information to third parties><\/p>\n\n\n\n The company does not provide personal location information to third parties without the consent of the data subject, and when providing personal location information to a third party, the company notifies the user of the recipient and purpose of provision in advance and obtains his or her consent.<\/p>\n\n\n\n <Rights and obligations of guardians of children under the age of 8 and how to exercise such rights><\/p>\n\n\n\n In the event that the person who fall under the provisions of Paragraph 2 of Article 26 of the Act on the Protection and Use of Location Information (hereinafter the \u201clegal guardian\u201d) of the data subjects corresponding to the following cases (hereinafter \u201cchildren under the age of 8, etc.\u201d) consents to the collection, use or provision of personal location information for the purpose of protecting the life or body of children under the age of 8, etc., the company deems that such data subjects consented to it.<\/p>\n\n\n\n A guardian who wishes to consent to the use or provision of personal location information for the protection of life or body of a child under the age of 8 must submit a written consent form to the company along with a document proving that he or she is the guardian.<\/p>\n\n\n\n If a guardian consents to the use or provision of personal location information of a child under the age of 8, he or she may exercise all the rights of the data subject.<\/p>\n\n\n\n <Matters concerning the personal location information protection officer><\/p>\n\n\n\n The company’s privacy officer concurrently serves as the personal location information protection officer.<\/p>\n<\/div>\n<\/div>\n\n\n\n Data subjects may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Privacy call center of Korea Internet & Security Agency, etc. to seek relief for personal information infringement. If you need to report or consult about other personal information infringements, please contact the following organizations.<\/p>\n\n\n\n If the company revises the contents of this privacy policy, e.g., addition, erasure or modification, in accordance with the government or company\u2019s policy, it will notify it through the home screen of the website at least 7 days in advance. If the contents of the privacy policy are changed in a way that is disadvantageous to the data subject, however, it will notify the user at least 30 days in advance so that the data subject can easily understand the contents before and after the revision.<\/p>\n\n\n\n This privacy policy will go into effect on March 28, 2025.<\/p>\n\n\n\n You can check our previous privacy policies below.<\/p>\n\n\n\n <\/p>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":88,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/www.smentertainment.com\/ja\/wp-json\/wp\/v2\/pages\/1648"}],"collection":[{"href":"https:\/\/www.smentertainment.com\/ja\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.smentertainment.com\/ja\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.smentertainment.com\/ja\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.smentertainment.com\/ja\/wp-json\/wp\/v2\/comments?post=1648"}],"version-history":[{"count":8,"href":"https:\/\/www.smentertainment.com\/ja\/wp-json\/wp\/v2\/pages\/1648\/revisions"}],"predecessor-version":[{"id":59272,"href":"https:\/\/www.smentertainment.com\/ja\/wp-json\/wp\/v2\/pages\/1648\/revisions\/59272"}],"wp:attachment":[{"href":"https:\/\/www.smentertainment.com\/ja\/wp-json\/wp\/v2\/media?parent=1648"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}7. Matters concerning the entrustment of personal information processing<\/strong><\/h4>\n\n\n\n
Entrusted work and purpose: operation and maintenance of the talent recruitment website and storage of applicant information<\/p>\n\n\n\n
Entrusted work and purpose: operation of the AWS service<\/p>\n\n\n\n
Entrusted work and purpose: KWANGYA 119 Report\/whistleblowing operation support<\/p>\n\n\n\n
Entrusted work and purpose: operation of the AWS service<\/p>\n<\/div>\n<\/div>\n\n\n\n8. Matters concerning overseas collection and cross-border transfer of personal information<\/strong><\/h4>\n\n\n\n
9. Matters concerning the procedures and methods for destroying personal information<\/strong><\/h4>\n\n\n\n
10. Matters concerning the rights and obligations of data subjects and legal representatives, and how to exercise such rights<\/h4>\n\n\n\n
The data subject and legal representative may at any time request access, cancel processing, etc. (hereinafter referred to as \u201crequest for access, etc.\u201d) in accordance with the data subject\u2019s rights, and when the data subject requests access, etc., the company will check whether the person requesting access, etc. is the data subject or a legitimate representative. The legal representative of a child under the age of 14 may request access to, correction\/erasure of, or suspension of processing of, the child\u2019s personal information.<\/h4>\n\n\n\n
\n
\n
11. Technical\/administrative safeguards for personal information<\/strong><\/h4>\n\n\n\n
\n
\n
12. Matters concerning the installation, operation and refusal of automatic personal information collection devices<\/strong><\/h4>\n\n\n\n
\n
\n
\n
13. Additional use\/provision of personal information<\/strong><\/h4>\n\n\n\n
\n
14. Privacy officer and personal information protection officer<\/strong><\/h4>\n\n\n\n
Name: Seon Jongin
Position: Director (Technical Information Committee)
Phone: 02-6240-9800
E-mail: privacy@smtown.com<\/p>\n<\/div>\n<\/div>\n\n\n\n15. Processing of personal location information<\/strong><\/h4>\n\n\n\n
\n
16. Remedies for infringement of users\u2019 rights<\/strong><\/h4>\n\n\n\n
\n
17. Matters concerning changes to the privacy policy<\/strong><\/h4>\n\n\n\n
\n
\n