(En)Privacy Policy(2)_2025-03-25(수정완료)

Article 12 (Obligation to Notify Changes)

1. Details of this Privacy Policy and other personal information protection policies are disclosed at the bottom of the first page of the BloomingBit homepage operated by the Company so that members can easily view them at all times. The contents of this Privacy Policy may change from time to time, so please check it every time you visit the homepage.

2. If this Privacy Policy is further deleted or modified due to changes in relevant laws and policies or security technology, we will notify the reason and content of the change through the BloomingBit homepage at least 7 days before the revision.

3. This Privacy Policy is applied as follows.

Date of Announcement: March 25, 2025

Effective Date: March 25, 2025

Privacy Policy Addendum

<1> Lawful Processing of Personal Information under the GDPR  

The Company shall lawfully process your personal information only if any of the following applies.

• You have consented to the processing of your personal data 

• Processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into the contract 

  - Member management, identification, etc. - Performance of a contract for the provision of services to you, payment and settlement of charges

• Compliance with a legal obligation to which we are subject  

  - Compliance with applicable laws, regulations, legal procedures and governmental requests - Protection of the vital interests of you or another natural person

 - Fraud that may harm you or another natural person, detecting, preventing and responding to fraud, abuse, security risks and technical issues that may harm you or other natural persons

 • Processing is necessary for the performance of a task of public interest or for the exercise of a public authority vested in us 

• Processing is necessary for the purposes of a legitimate interest pursued by us or a third party (but not where such interest is overridden by your interests or fundamental rights and freedoms which require the protection of your personal data, in particular where you are a child).

 <2> Your Rights under the GDPR 

As a data subject, you or your legal representative may exercise the following rights with respect to our collection, use, and sharing of your personal information 

• Right of access to personal information  

- You or your legal representative may access your information and request confirmation of the collection, use, and sharing of your information in accordance with applicable law. 

• Right to rectification of personal information - You or your legal representative may request that we correct inaccurate or incomplete information. 

• Right to erasure of personal information 

- You or your legal representative may request that we erase your information when the purpose has been achieved, consent has been withdrawn, etc. 

• Right to restriction of processing of personal data 

- You or your legal representative may request the restriction of processing of personal data if there is a dispute about the accuracy of the data, the lawfulness of the processing, or if it is necessary to preserve the data.  

• Right to data portability 

- You or your legal representative may request the provision or transfer of your data. 

• Right to object 

- You or your legal representative may request the cessation of processing for direct marketing, processing based on legitimate interests or the exercise of official duties and functions, and processing for research and statistical purposes. 

• Right to object to automated individual decision-making, including profiling 

- You or your legal representative can demand the suspension of automated data processing, including profiling, which has legal effects or significantly affects you. 

To do so, you can use the 'Edit your personal data' menu on the webpage or contact us (or our data controller or representative) in writing, by phone or by e-mail, and we will act without delay. However, we may only refuse such a request if there is a legitimate reason or equivalent reason specified by law.

The original version of these Terms is written in Korean, so if there is any difference between the original Korean version and the English translation, the original Korean version shall take precedence.