Privacy Policy

1. General rules

Headquartered in Seoul, South Korea, it directly sells products available at https://kr.2--7-2--8.com/ (hereinafter referred to as the “Website”) and ships products within the Republic of Korea. ePal (2728) (hereinafter referred to as “2728”) recognizes the importance of maintaining the confidentiality, integrity and security of our customers' personal information (hereinafter referred to as “personal information”). In addition, we use all personal information provided by customers through the website as follows, as well as all personal information to be provided to 2728 in accordance with the currently applicable Act on Promotion of Information and Communications Network Utilization and Information Protection (hereinafter “Information and Communications Network Act”), “Personal Personal information handling policy adopted by 2728 along with related laws such as “Data Protection Act” and “General Data Protection Regulation (GDPR)” regulations of the European Union, principles and general operating rules included in the Code of Ethics.

2. Items of personal information to be collected and method of collection

2728 collects the following personal information to provide services to members. Members' personal information collected by Prada is divided into mandatory and optional items. The essential items are essential for service provision, and the optional items are for providing useful and better services in line with customer needs, even if you do not agree to the optional items. There are no restrictions on using the service.

Personal information is collected through means such as homepage, written form, fax, phone, e-mail, event application, etc., and only through online shopping malls (including websites), brand homepages, direct management stores and affiliated stores contracted with 2728 We collect personal information.

Information generated or collected while using our services (both online and offline at the 2728 showroom or by phone)

A. Website registration and account creation steps

- Required items: title, name, country, e-mail, password

B. Steps to purchase a product (online or by phone)

- Required items: title, name, e-mail, billing and shipping address (including city/province, city/gun/district, postal code), payment method, mobile phone/telephone number, purchase information (including exchange, refund, and repair) ) (if you place a purchase order as a registered customer, the above items will be automatically uploaded from your account), transcript

C. Steps to consent to transmission and reception of information to provide customer service

- Required items: title, name, country, e-mail, cell phone/telephone number, language, conversation content

D. repair service request

- Required items: name, country, contact information (e-mail, mobile phone/telephone number), details of the product to be repaired (including date of purchase and location) (If you are a registered member, it will be automatically uploaded from the data stored in your account. can.)

E. Subscribe to our newsletter

- Required items: e-mail, country, collection of interest (male / female)

F. Register with 2728 customer data by filling out a customer card (hereinafter referred to as “customer card”)

- Required items: title, name, country, e-mail, mobile phone

- Optional items: address (including city/province, city/gun/district, zip code), date of birth

- Additional items (automatically collected items): purchase information (including exchanges, refunds, and repairs), information collected while maintaining a relationship with 2728

When contacting our customer service, we may respond to your request with an SMS message if you agree. We may also provide shipping information via SMS message to the mobile phone number you have provided to us.

G. In addition, 2728 may obtain information about customers as a result of authentication or identity verification (for example, you may be asked to present identification when picking up a purchase from a showroom). The above information is used for purposes such as customer identification, order processing, product and service provision, and payment processing, but 2728 does not retain such information.

When contacting our customer service, we may respond to your request with an SMS message if you agree. We may also provide shipping information via SMS message to the mobile phone number you have provided to us.

Provision of personal information to third parties is an optional consent. However, in order to place an order for products available on 2728's website, register in the 2728 customer database, or use any other service provided on the website, you must fill in all required fields on the relevant form, otherwise 2728 will not be able to provide the service you have requested. cannot be processed.

Customers may explicitly choose whether or not to consent to the collection, processing and use of personal information for the purposes described in Article 3 below. If you do not agree, you may place a purchase order or use our services, but we may not proceed for the purposes indicated, including to notify you of initiatives of interest to you and/or to send you other commercial information about our products, services in 2728, Initiatives and Events, Customers as Members may not be entitled to additional special features to enjoy a useful shopping experience.

3. Purpose of collection and use of personal information

Customers' personal information may be processed for the following purposes as necessary to provide services:

A. Response to all customer requests and customer management

B. Fulfill your purchase of goods and perform all administrative activities related thereto (management of contracts, financial transactions, product delivery or sending invoices, purchases and payments, billing and litigation management, fraud prevention, etc.), and comply with all applicable laws and regulations. Obligation.

C. Provide after-sales service (including repair service)

D. Email newsletters about 2728's products, services, initiatives and events as a result of subscribing to the service.

In addition, if you consent to register as a member of our website or to fill out and sign a loyalty card in our stores at 2728, we may collect, use and process your personal information along with your purchase information online and/or in our stores for the following purposes: :

E. Identification of registered members and consequently personalized customer service and after-sales services Exclusive services and benefits to registered members, such as preservation of purchase history, expedited online checkout process, simplified repair and warranty procedures, discounts, pre-sales and other promotional events, etc.) provided

And, in particular, in the case of members who have consented to the purpose of selective collection,

F. Marketing: Information and promotional activities, including information about events related to 2728 products and services, advertising materials, catalogs and invitations to events

G. Profiling: To provide customized services by conducting research, research, statistical analysis and market research in relation to preferences for 2728 products and services.

The collection and use of personal data referred to in a) to e) is necessary to provide the requested service, to execute and perform any contract or related pre-contractual action with you, and to fulfill any relevant legal obligations. Also, the collection and use of personal data referred to in f) and g) is based on your separate and express consent.

4. Provision of personal information to third parties

Provide personal information about 2728

Customers' personal information is provided to 2728 for the provision of global customer service subject to separate prior consent. Your personal information, along with purchase details and other information collected in the course of managing your relationship with 2728, will be processed as follows:

A. Recipient (contact number) and country of residence: Lee Chil Ipal (2728) Republic of Korea

B. Date and method of transfer: Customer's personal information is collected and registered in the 2728 customer database, immediately transmitted online

C. Purpose of using the personal information of the recipient

(a) Global Customer Service: Provide individualized and efficient service and special customer service and benefits at 2728 showrooms around the world by verifying customer registration.

(b) Profiling: Research, analysis, statistics, market research in relation to preferences for 2728 products and services, to ensure that we provide services tailored to the needs of our customers and to promote cultural and recreational activities that may be of interest to our customers.

(c) Marketing: Transmission of information and promotional activities, including information about events related to 2728 products and services, advertising materials, catalogs and invitations to events.

(d) Newsletter: Email us newsletters about 2728's products, services, initiatives and events as a result of subscribing to the service.

D. Items of personal information provided:

Title, name, date of birth, location, address (including city/province, city/gun/district and postal code), e-mail address, mobile phone/telephone number, purchase information (including exchange, refund and repair) and member and 2728 Other information collected in the course of managing our relationship with you.

E. Retention and use period of personal information of the recipient:

(a) Personal information related to the processing of personal information in 2728's member database: (i) 7 years from the last use of 2728's service, unless there is a retention obligation under other laws (ii) 7 years from the date of purchase for purchase information year

(b) in relation to data processing for the provision of the newsletter service: until you cancel your subscription to the service

Exceptionally, if it falls under any of the following subparagraphs, the customer's personal information may be provided to a third party without the customer's consent.

(a) In case a specific individual is provided in an unidentifiable form for statistical writing, academic research or market research

(b) Special provisions in related laws, such as the Criminal Procedure Act, the Act on Real Name Financial Transactions and Guarantee of Confidentiality, the Use and Protection of Credit Information Act, the Framework Act on Telecommunications, the Telecommunications Business Act, the Radio Waves Act, the Local Tax Act, the Consumer Protection Act, and the Bank of Korea Act if there is

5. Personal information processing consignment (domestic)

2728 may consign customer's personal information to an external specialized company to process it in order to provide smooth service and improve service quality.

A. In the case of entrusting the processing of personal information, the service provider's strict adherence to personal information protection instructions, prohibition of provision to third parties, and liability in case of accidents are clearly stipulated through a consignment contract, etc., and the contents of the contract are stored in writing or electronically. .

B. When a customer pays for a product, the customer's credit card information (including credit card number and other payment information) is provided to our payment service providers who process the payment information. 2728 does not store or retain your credit card information and does not directly use it.

C. For specific details, please see the specific processing tasks entrusted and other relevant information below and the list of service providers in 2728. Personal information transmitted to service providers will be used in accordance with appropriate technical and managerial methods that meet regulatory requirements under applicable laws. The service provider does not use personal information beyond the scope of the entrusted purpose and retains it for the period necessary for the performance of the entrusted task specified in the consignment contract.

Domestic Service Provider

6. Overseas processing and overseas transfer of personal information

Customer's personal information is consigned and transferred overseas as follows.

D. Under no circumstances will your personal information be used for third party advertising purposes or for products, services or initiatives of businesses other than 2728, and will not be disclosed to undisclosed parties.

7. Personal information storage and use period, destruction procedure and method

The personal information provided by the customer is safely stored while receiving the service provided by 2728, and in principle, it is kept for 7 years from the final purchase date or until the customer withdraws consent unless there is a retention obligation under other laws.

When the retention period has elapsed or the purpose of use has been achieved, personal information printed on paper is shredded with a shredder or destroyed by incineration, unless the following related laws stipulate the obligation to preserve personal information. Personal information stored in the form of electronic files is destroyed using a technical method that cannot reproduce the record.

- Records on contract or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)

- Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)

- Records on consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)

- Records on website visits: 3 months (Communications Secrets Protection Act)

- Personal information related to the newsletter service: Until you cancel your subscription to the service

In particular, the retention period related to members' personal information collected for the purposes of Article 3 e), f) and g) is as follows.

- 7 years from the last use of the service of 2728 for personally identifiable information and contact information

- Purchase information is 7 years from the date of purchase

8. Your rights and how to exercise them

A. Customers can view or correct their registered personal information at any time. If you wish to view or correct personal information, you can directly view or correct it in the showroom or homepage, or contact the person in charge of personal information protection by e-mail and we will take action.

B. If a customer requests correction of an error in personal information, the personal information will not be used until the correction is completed.

C. If you have an online customer account, you can access, correct or update your information by logging into ‘My Account’ and editing your details. If you have created a customer profile in the 2728 showroom, visit the showroom and speak to the sales staff, e-mail contact@2--7--2--8.com to access and correct the customer's information , can also be updated.

D. You may also write to 2728 at the contact details set forth in Section 11 or via the "unsubscribe" link included in all of our commercial electronic communications, and/or by using any other appropriate procedure 2728 may provide to you. You have the right to withdraw consent at any time. The withdrawal of your consent does not affect lawful processing based on your consent prior to withdrawal.

E. We give you the right to request that you or your legal representative (if you are under the age of 16 under national law or older depending on your country of residence) information about whether your personal data is being processed and the nature of the processing; We inform you that you may exercise your right to rectify, delete your personal data, object to processing and/or transfer your personal data to another controller.

F. In addition, if you consent to the provision of your personal information to 2728 described in Article 4 above, your rights under the GDPR regulations on 2728, the right to request information about whether and the nature of the processing of your personal information, to correct your personal information, Please note that you may exercise your right to erasure, object to processing and/or transfer of your personal data to another controller.

9. Matters concerning the installation, operation and refusal of automatic personal information collection devices

A. browsing data

The computer systems and software procedures used to operate the website acquire some personal information (log files) during normal operation. Transmission of the above information is required for use of Internet communication protocols. This information is not collected to associate with any specific data subject. However, by their nature, the above information may, in the course of processing and in combination with information held by third parties, make it possible to identify you. This information includes the IP address used by the customer to visit the website, the domain name of the computer, the Uniform Resource Identifiers (URIs) of the requested resource, the time of the request, the method of submitting the request to the server, and the size of the file obtained in response. , a numeric code indicating the server's response status (complete, error, etc.), and other parameters related to the user's operating system and computing environment. The above information is used solely for the purpose of obtaining anonymous statistical information regarding the use of the website and verifying its correct functioning.

B. cookie

Cookies are used to ensure efficient functioning of the website and to improve the service. Cookies are small text files that are sent to your computer (usually your browser) by visiting a website. Cookies are stored on the customer's computer in order to be recognized on subsequent websites visited.

If you want to block or delete cookies received from this site or other websites, you can change your browser settings through a specific function. Customers can find opt-out instructions for the following browsers at the following link:

- Internet Explorer - http://windows.microsoft.com/en-gb/windows-vista/block-or-allow-cookies

- Chrome - https://support.google.com/chrome/answer/95647

- Firefox - https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

- Opera - http://www.opera.com/help/tutorials/security/privacy/

- Safari - http://support.apple.com/kb/PH17191

10. Technical and administrative measures for personal information protection

A. In order to prevent the loss, theft, leakage, falsification and destruction of personal information, we implement reasonable technical and managerial security measures required in accordance with current relevant laws such as the Personal Information Protection Act and the Information and Communications Network Act. In particular, the customer's personal information is processed by appropriate electronic or automated means, computer tools, or manual, hard-copy methods, only for the purpose for which it was collected, without alteration, cancellation, destruction, unauthorized access, unauthorized processing and The security and confidentiality of personal information processing is guaranteed through appropriate methods to prevent the use of personal information for other purposes.

B. Customers' personal information is processed within the legally granted authority according to the respective duties of 2728 internal employees.

C. In addition, if you agree to provide personal information to 2728 in accordance with Article 4, your personal information can be automatically checked in all 2728 showrooms, and 2728 is required by applicable laws to protect the confidentiality and protection of personal information. Please note that all appropriate action will be taken.

11. Personal information management and protection manager name and contact information

If you have any requests regarding your personal data, privacy policy or how you can exercise your rights, you may contact the Privacy Officer or DPO free of charge.

All requests relating to the processing of your personal data for the purpose of fulfillment and administration of your online purchase orders or for any other reason mentioned in Article 3, please direct all requests to:

- Personal Information Protection Officer

- Name: Yoon Sang-hyeok

- Affiliation/Position: Representative

- Email: store@2--7--2--8.com

- Contact: 02-797-2728

2728, Changseong Building, 44, Eonju-ro 147-gil, Gangnam-gu, Seoul, Korea

e-mail: store@2--7--2--8.com

12. Disclosure duty

2728 reserves the right to amend this Privacy Policy at any time. Customers will be notified of any material amendments to this Privacy Policy made pursuant to applicable laws and regulations or Prada's internal policies 7 days prior to the effective date of the amendments. The version posted on the website is the current version. Although 2728 has taken technical supplementary measures, 2728 is not responsible for information damage due to unexpected accidents caused by basic network risks such as hacking and various disputes caused by posts written by visitors.

Effective Date: December 4, 2022