MOVV Privacy Policy
MOVV applications and web-pages operated by MOVV Corporation (hereinafter referred to as the "Company") (hereinafter referred to as the "Move Platform") and its members and nonmembers (hereinafter referred to as "Users").
In order to protect the freedom and rights of information subjects, the Company processes personal information legally* and manages it safely in compliance with the Personal Information Protection Act and related laws and regulations. Accordingly, in accordance with Article 30 of the Personal Information Protection Act, the Company informs the information subject of the procedures and standards for processing personal information and handles grievances related to the same promptly and smoothly.
In order to do so, we establish and disclose our privacy policy as follows.
* "Processing of personal information" refers to all actions that the company takes with regard to personal information, including the collection, generation, recording, storage, retention, processing, editing, retrieval, printing, correction, recovery, use, provision, disclosure, destruction, and other similar activities
Article 1 (Purpose of processing personal information)
- The Company processes personal information for the following purposes. The personal information processed will not be used for any purpose other than the following, and if the purpose of use changes, we will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
- 1. Service provision and operation: Personal information is processed for the purpose of mutual identification within the Move service to which the user has subscribed, fulfillment of the contract for service provision and provision of services, provision of content, payment, authentication of financial transactions, collection of receivables, accident handling in the event of a vehicle accident, prevention of unauthorized use of the service, and record inquiry to prosecute violations of the company's terms and conditions or use policy.
- 2. Member and user management: Personal information is processed for the purpose of identifying members and users, verifying their identity, identifying individuals, providing membership services, preventing unauthorized use by users who are restricted from using the services under the terms of use, confirming their intention to subscribe and limiting the number of subscriptions, keeping records for dispute resolution, handling complaints, delivering notices, identifying future legal representatives, delivering the latest information, confirming the validity of the service, identifying the frequency of access, and checking and understanding statistics on users' use of the service.
- 3. For promotional and marketing purposes and to develop new services: We process personal information for the purpose of developing and specializing in new services, delivering advertising communications such as events, and providing personalized advertising and content based on demographic characteristics.
- 4. Identify and remediate incidents
Article 2 (Processing and Retention Period of Personal Information)
- 1. The Company retains and uses users' personal information for the period notified at the time of collection, and destroys it without delay when the purpose of processing personal information is achieved. However, if the purpose of processing personal information is achieved, records that must be preserved in accordance with the provisions of related laws and regulations such as the Edo Commercial Code and the Act on Consumer Protection in Electronic Commerce shall be destroyed after a certain period of preservation.
- ① Records of contract or subscription withdrawal: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ② Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ③ Records of consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
- ④ Records on display/advertising: 6 months (Act on Consumer Protection in Electronic Commerce, etc.)
- ⑤ Records on collection/processing and use of credit information: 3 years (Act on the Use and Protection of Credit Information)
- ⑥ Website visit history: 3 months (Act on the Protection of Communications Secrets)
- 2. In accordance with Article 29, Paragraph 2 of the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Company stores and manages personal information of users who have not used the service in the last 12 months separately from other users' information to protect their privacy. The separated personal information is safely stored for 4 years and then destroyed.
Article 3 (Items of Personal Information Processed and Collection Methods)
- 1. We process the following personal information items
- ① Providing and operating services (required)
- Name (Korean/English), email address, mobile phone number, gender, date of birth, nationality, passport number, and flight information.(same for booker and passenger)
- 해외 서비스 : 한글이름, 영문이름, 이메일 주소, 휴대폰번호, 성별, 생년월일, 국적, 여권번호, 항공편 정보 (예약자, 동승자 동일)
- ② Manage members and users (required)
- Email address, password, name, and phone number
- ③ Make payment (required)
- Card payment: email address, card name, card number, card validity period, cardholder's date of birth, and card authorization number.
- Direct deposit: bank name, account holder, account number
- ④ Provide location-based services (required)
- 개Personal location information
- ⑤ Prevention of fraudulent and unauthorized use and analysis of other services (required)
- Service usage history, cookies, access logs, app installation information, network location information
- ⑥ Utilize public relations and marketing (optional)
- Name, phone number, and email address
- 2. We collect personal information in the following ways
- ① Sign up through the MOVV platform
- ② Book a reservation and request a quote through the Move platform
- ③ Collecting information generated in the course of using the MOVV Platform
- ④ Apply for various events run by the company
Article 4 (Provision of Personal Information to Third Parties)
- 1. The Company processes users' personal information only within the scope notified in the purpose of processing personal information, and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the information subject and special provisions of the law, and otherwise does not provide personal information of the information subject to third parties.
- 2. When it is necessary to provide personal information to a third party for the smooth provision of services, the Company shall obtain consent in advance by specifying the person to whom the information is provided, the purpose of using the personal information of the person to whom the information is provided, the items of personal information to be provided, the period of retention and use of personal information of the person to whom the personal information is provided, the fact that the person to whom the information is provided has the right to refuse consent to provide information, and the disadvantages of refusing consent.
- 3. The third party to whom the personal information is provided may retain and use the personal information until the purpose of the provision is achieved or the user requests withdrawal, even if the information is necessary for internal reporting, audit and inspection, contract fulfillment such as cost settlement (billing), and dispute preparation, and if there are special provisions in relevant laws such as the Commercial Act, it may be retained accordingly.
- 4. If a user violates the company's terms of use or engages in fraudulent behavior such as causing damage to a third party, we may provide information to related organizations without the user's consent if we take legal action or are requested to do so by a judicial agency.
Article 5 (Outsourcing of Personal Information Processing)
- 1. The Company entrusts the processing of personal information for the purpose of providing user convenience and management, such as service use contracts, A/S provision, and agency of ancillary tasks, and stipulates compliance with relevant laws and guidelines, information protection and confidentiality, prohibition of third-party provision, liability in the event of an accident, and obligation to return/destroy personal information immediately upon the end of the entrustment period through the "Above. Entrustment Agreement" for the entrustee.
Custodian status
- 2.If the contents of the consignment work or the consignee change, we will disclose it through this privacy policy without delay.
Article 6 (Procedures and methods of destruction of personal information)
- 1. The Company destroys personal information without delay when it becomes unnecessary, such as the expiration of the personal information retention period or the achievement of the purpose of processing. The procedure and method of destruction are as follows
- ① For as long as you remain a member or user of the Company, we will retain the personal information you have provided to us.
- ② Personal information entered by users for membership registration, etc. is stored for a certain period of time after the purpose is fulfilled and then destroyed in accordance with the internal policy and other relevant laws and regulations for information protection.
- ③ If a user withdraws consent to the provision of personal information, the Company shall destroy the collected personal information after 48 hours unless there is a service use contract relationship with the Company, and shall not use it for any purpose except for exceptions. However, real name identification information (name) for identity verification may be retained for 12 months to verify facts such as identity theft and complaints in the event of complaints.
- ④ All documents such as copies of identification cards sent to the company to prove that the person is a member of the company shall be destroyed immediately after the purpose of collecting and using personal information (identification) is achieved.
- ⑤ If it is necessary to preserve the information in accordance with the provisions of related laws, such as the Commercial Act, the Act on Consumer Protection in Electronic Commerce, etc., the Company shall keep the member's information for a certain period of time set by related laws. In this case, the Company will only use the stored information for the purpose of storage.
- i. Retained for 5 years from the date of termination after membership withdrawal for verification in the event of a dispute such as settlement of usage fees or overpayment of usage fees.
- ii. If it is necessary for the company to fulfill the contract, the personal information will be destroyed after the contract is fully fulfilled. For example, if the customer has not paid the usage fee in a timely manner, we may retain the personal information until the usage fee is fully paid. However, in such cases, the retention period of personal information shall not exceed 5 years from the date of delinquency.
- ⑥ In the case of destruction methods, personal information printed on paper shall be shredded by a shredder or destroyed by incineration, and personal information stored in the form of electronic files shall be deleted using a technical method that does not allow the records to be reproduced.
Article 7 (Processing of Personal Location Information)
- We process Personal Location Data as follows
1. Purpose of processing and retention period of personal location information: The company collects, uses, and provides personal location information within the scope of the purpose set forth in the "Terms of Use for Location Information" and retains it within the period notified in Article 4 of the "Terms of Use for Location Information".- ① Withdrawal of membership from the date of membership to prevent unauthorized use such as events for new members. (unsubscribe request and unsubscribe processing) for 180 days.
- ② In the case of loss of membership (forced withdrawal), we retain the information for 30 days from the date of loss to restrict membership. However, if you lose your membership because you have not used the service for one year from the date of your last use of the service, we will retain it until the next day from the date of loss.
- ③ If there are special provisions in relevant laws, such as the Commercial Code, we will keep it in accordance with them.
- 2. Grounds and Retention Period of Personal Location Information Collection, Use, and Provider Confirmation Data: The Company automatically records and retains personal location information collection and provision confirmation data in accordance with Article 16, Paragraph 2 of the Act on the Protection and Use of Location Information, and retains such data for at least 6 months from the time of recording.
- 3. Procedure and method of destruction of personal location information: The company destroys personal location information without delay in a way that cannot be recovered or reproduced when the purpose of processing such as membership withdrawal is achieved or the retention period has elapsed, and the destruction procedure and method shall be as set forth in Article 7 of this Agreement.
- 4. Provision and notification of personal location information to third parties: The Company does not provide personal location information to third parties without the prior consent of the user. However, if the user directly consents to the provision of personal location information, the Company will provide personal location information only if the obligation to submit it to a relevant organization has arisen in accordance with relevant laws and regulations, or if an imminent danger to the user's life or safety has been identified and is to be resolved.
- 5. Notification of personal location information: If the Company provides personal location information to a third party designated by the user, the Company shall immediately notify the user of the recipient, date of provision, and purpose of provision on the communication device that collected the personal location information each time.
- 6. The contents and purposes of the Company's provision (including consignment) of members' personal location information to third parties for the purpose of providing services are as follows.
- ① Recipients: driver service provider companies and driver service providers (drivers)
- ② Purpose of provision: Activation of the user's location to use the ride-hailing service
- 7. Rights and Obligations of the Protection Obligee and How to Exercise Them: The Company shall be deemed to have the consent of the person who is the protection obligee pursuant to Article 26, Paragraph 2 of the Act on the Protection and Use of Location Information of Persons (hereinafter referred to as the "Protection Obligee") in the following cases (hereinafter referred to as "children under 8 years of age, etc.") if the person agrees to the use or provision of personal location information for the purpose of protecting the life or body of children under 8 years of age, etc.
- ① Children under the age of 8
- ② Guardianship of a minor
- ③ A person with a mental disability pursuant to Article 2, Paragraph 2, Item 2 of the Disability Welfare Act, Chapter 2. Persons with severe disabilities under Article 2, Paragraph 2 of the Employment Promotion and Vocational Rehabilitation Act (only those who have registered as disabled under Article 32 of the Disability Welfare Act).
- 8. A protection obligee who wishes to consent to the use or provision of personal location information for the protection of the life or body of a child under the age of 8 shall attach a document certifying that he/she is a protection obligee to the written consent and submit it to the Company, and the protection obligee shall have all the rights of a user under the Terms of Use of Location Information if he/she consents to the use or provision of personal location information of a child under the age of 8.
- 9. Personal Information Protection Officer and Location Information Management Officer The Company designates a personal location information protection department and a location information management officer to properly manage and protect personal location information and to smoothly handle user complaints and requests. The person in charge of personal location information protection and the person in charge of location information management are notified in Article 2 of the Supplementary Regulations of the Terms of Use for Location Information.
- 10. For more information regarding the processing of personal location information other than the contents of this section, please refer to the Company's "Location Information Terms of Use".
Article 8 (Rights and Obligations of Users and Legal Representatives and How to Exercise Them)
- 1. You may exercise your rights to view, correct, delete, or request suspension of processing of your personal information at any time against the Company.
- 2. You can view and correct your personal information directly through the My Page menu on the Company's platform, and you can request necessary measures from the person in charge of personal information management by phone, email, etc. In this case, the person in charge of personal information management will fulfill the request without delay.
- 3. You may also exercise your rights through an agent, such as the legal representative of the information subject or a person authorized by h im/ her . In this case, you must submit a power of attorney in the form of Appendix No. 11 to the "Notification on the Method of Processing Personal Information (No. 2020-7)"./li>
- 4. The rights of the information subject may be restricted in accordance with Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.
- 5. A request for correction or deletion of personal information cannot be made if the personal information is specified as the subject of collection under another law.
- 6. The Company shall verify whether the person making the request is the person or a legitimate representative when requesting access, correction, deletion, or suspension of processing in accordance with the rights of the information subject.
Article 9 (Measures to secure the safety of personal information)
- 1. In processing users' personal information, the Company takes the following technical measures to ensure safety so that personal information is not lost, stolen, leaked, altered or damaged.
- ① Your personal information is strictly protected by your password.
- ② The password for your account is known only to you, and you can only view and change your personal information if you know your password. For this reason, you must not disclose your password to any third party.
- ③ The Company is doing its best to prevent the leakage or damage of members' personal information by hacking or computer viruses.
- 2. The Company backs up data from time to time in case of damage to personal information, uses the latest antivirus programs to prevent leakage or damage to users' personal information or data, and ensures safe transmission of personal information on the network through encryption algorithms.
- 3. The Company uses an intrusion prevention system to control unauthorized access from the outside and strives to have all possible technical devices to ensure system stability. The Company limits access to users' personal information to a minimum number of persons, and the minimum number of persons is as follows.
- ① Those who conduct marketing activities directly with users
- ② Persons who perform personal information management duties, such as the personal information manager and person in charge.
- ③ Other persons who are required to process personal information for business purposes
- 4. The handover of duties of personal information-related processors is carried out thoroughly while maintaining security, and responsibilities for personal information accidents are clarified after joining and leaving the company. In addition, access to computer rooms and data storage rooms is controlled by setting them as special protection areas, and compliance with the Privacy Policy is always emphasized through frequent training for personnel.
Article 10 (Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)
- 1. The Company uses 'cookies' to store and retrieve usage information from time to time to provide individualized services to users.
- 2. A cookie is a small amount of information sent to a user's computer browser by the server (http) used to operate a website, and may be stored on the hard disk of the user's PC computer.
- ① Purpose of use of cookies: We use cookies to provide optimized information to users by identifying user visits and usage patterns for each service and webpage. We also use cookies to provide SSO (Single Sign On), which allows users to access the MOVV platform without additional login.
- ② Installation, operation and refusal of cookies: You can refuse to store cookies by setting your options, Tools>Internet Options>Privacy menu at the top of the web browser.
- ③ However, if you refuse to save cookies, you may experience difficulties in using the service.
Article 11 (About Personalized Advertising)
- 1. We use your visit history, activity logs, and search history on the Service ("Behavioral Information") to provide you with customized advertisements that are useful to you. The Company uses 'advertising identifiers' to provide appropriate advertisements to users. An advertising identifier is an ID issued by a mobile operating system (OS) that is used to provide customized information or advertisements to users.
- 2. The Company follows the following provisions to protect user information for personalized advertising.
- ① The Company collects only the minimum behavioral information necessary for online personalized advertising, and does not collect sensitive behavioral information that may clearly infringe on the rights, interests, or privacy of individuals, such as ideas, beliefs, family and relative relationships, education, medical history, and other social activity history.
- ② Behavioral information collected through advertising identifiers is stored for up to one year and then completely destroyed or segregated in an irreversible manner in order to provide customized ads and content based on estimated gender, age, and interests based on demographic characteristics.
- ③ We do not collect information such as activity logs from children we know are under the age of 14 or from online services whose primary users are children under the age of 14, nor do we provide customized advertisements to children we know are under the age of 14.
- 3. Here are the details of the behavioral information we collect and use to personalize ads.
| Businesses that collect and process behavioral information | MOVV, Inc. |
|---|
| How we collect behavioral information | Automatically collected and transferred when you use the Services |
|---|
| Purpose of collecting behavioral information | Personalize ads and content based on estimated gender, age, and interests based on demographics |
|---|
| Behavioral data collection items | Your history of visits, activity logs, and searches in the Services. |
|---|
| Retention and use period of behavioral information | Completely destroyed or segregated by irrecoverable means after 1 year of storage |
|---|
| How to Exercise Your Controls and How to Seek Damages | (1) Web browser ① Internet Explorer: Tools → Internet Options → Privacy → Advanced → Select Allow/Block ② Chrome: Settings → Privacy and security → Cookies and other site data → Set cookie level ③ Edge: Settings → Cookies and site permissions → Cookies and site data → Set cookie level (2) Mobile ① Android: Settings → Google → Ads → Uncheck Personalize Ads ② IOS: Settings → Privacy → Tracking → Limit ad tracking |
|---|
- 4. The behavioral information we provide to third parties for personalized advertising is as follows
| To whom behavioral information is provided | Google GDN, Facebook, Kakao |
|---|
| Items in the behavioral information you provide | Your history of visits, activity logs, and searches in the Services. |
|---|
| Purpose of use by the recipient of the behavioral information | Personalize ads and content based on estimated gender, age, and interests based on demographics |
|---|
Article 12 (Privacy Officer)
- 1. The Company has designated a person in charge of personal information protection as follows to take overall responsibility for the processing of personal information and to handle complaints and damage relief of information subjects related to the processing of personal information. In addition, users may request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the following departments. The Company will endeavor to promptly process the user's request for access to personal information.
- ① Privacy Officer
- Name: Lee Jong-eun
- Title: Vice President
- Phone: 1877-2025
- Email: Dev@movvcorp.com
- ② Privacy and Access Request
- Department Name: Customer Experience Team
- Contact Person : Lee Jong-eun
- Phone: 1877-2025
- Email: cs@movvcorp.com
- 2. Users may contact the personal information protection officer and the department in charge for all personal information protection-related inquiries, complaints, and damage relief that occurred while using the Company's services. The Company will respond to and process inquiries from information subjects without delay.
- 3. "Articles 35 (Access to Personal Information), 36 (Correction and Deletion of Personal Information), and 37 of the Personal Information Protection Act. Disposition made by the head of a public institution in response to a request under the provisions of the Act (Suspension of Personal Information Processing, etc.) or any person whose rights or interests have been infringed by the acts or omissions of the Company may file an administrative appeal in accordance with the Administrative Appeals Act.
- Central Administrative Appeals Commission: (www.simpan.go.kr / 110 without area code)
- 4. If you need to report or consult about other personal information infringement, you can contact the following organizations.
- Personal Information Infringement Report Center (privacy.kisa.or.kr / 118 without area code)
- Personal Information Dispute Mediation Committee (www.kopico.go.kr / 02- 1833-6972)
- Cyber Investigation Division of the Supreme Public Prosecutors' Office (www.spo.go.kr / 1301 without area code)
- National Police Agency Cyber Safety Bureau (cyberbureau.police.go.kr / 182 without area code)
Article 13 (Exclusions from the Privacy Policy)
- We may provide you with links to other companies' websites or resources through our website. In this case, we have no control over the external sites and materials, and their collection of personal information is not governed by our Privacy Policy. Therefore, if you click on a link containing MOVV to a page on another site, please be sure to check the privacy policy of the newly visited site.
Article 14 (Data Deletion)
- Users may request the deletion of their personal information. If you wish to have your information deleted, please send a request to cs@movvcorp.com, and we will delete the personal information we hold within 7 days after verification. However, information that must be retained for a certain period in accordance with relevant laws and regulations will be deleted after the required retention period.
Article 15 (Changes to the Privacy Policy)
- If there are any additions, deletions, or modifications to the Privacy Policy due to changes in government policy or security technology, we will notify you through the MOVV Platform screen (pop-up, banner, etc.) at least 7 days before the revision.
- Announcement Date: May 1, 2025.
- Effective Date: May 7, 2025.