contents of Kakao Privacy Philosophy
This section provides answers to frequently asked questions about privacy protection and the transparency report. If you need additional information regarding privacy protection and the transparency report, please contact the Kakao Customer Service for more details. Customer Service
Under the current law, the concept of personal information is defined in the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection. Personal information is information that pertains to a person’s possessions or identity , including a person’s full name, resident registration number, images and other information that can be used to identify an individual. Information, which in itself cannot be used to identify a person but can be easily combined with other information and used to identify an individual, also constitutes as personal information. Information on a deceased person or a corporate entity, including companies, as well as nicknames that can be used repeatedly is not considered personal information.
On the other hand, a legal definition of ”privacy” is currently unavailable in the Republic of Korea. Active discussion surrounding Privacy was initiated after American attorneys Samuel Warren and Louis Brandeis researched the subject and published “The Right to Privacy”, a law review article on the protection of privacy in 1890. The word privacy usually means an individual’s privacy or refers to “the right to be undisturbed by others”. A concept called “information privacy” was also introduced in later years. The definition of information privacy has expanded to include the information owner’s right of self-determination surrounding their personal information, or the right of the information owner to assert exclusive control over their personal information.
Kakao only collects personal information that is absolutely needed to provide our services. Kakao requests the user for their name, password and contact information (email, telephone number) once a user registers for our service. Some services may verify the identity of the user or collect the user’s delivery, payment, location and device information. Information including IP address, cookie and usage records is collected while the user uses the service. Kakao notifies the user of personal information items that are collected, the purpose of use and the information retention period in advance and acquires the user’s approval for the collection and use of such information. (Details are provided in both Daum and Kakao’s Privacy Policies.)
Cookies are small text files sent to the user’s browser by the server when the user uses a website. Cookies save settings preferred by the user in the computer, providing users with a quicker and more convenient Internet experience. The Internet service provider analyzes cookies; including the number of times the user accesses the service or when the user accesses the services, to identify the user’s preference and areas of interest. This information is used to provide users with services optimized for the user’s needs, including advertisements. Users can configure their browser settings to accept all cookies, receive an alert before accepting cookies or disable all cookies.
Information on the user’s ideology, creed, political orientation, criminal record and medical information are classified as sensitive information and are part of the user’s privacy which must be protected for the sake of the user’s rights. Kakao does not collect such sensitive information in any way.
As a rule, a user’s personal information is not provided to a third party without the user’s consent. However, the Personal Information Protection Act and Act on Promotion of Information and Communications Network Utilization and Information Protection states that personal information can be provided to a third party as an exception if “a special provision exists in another law”. Personal information can be provided without user consent when a court-issued warrant is presented in order to identify a suspect’s identity during an ongoing criminal investigation. Warrants that are issued in accordance with processes in the Criminal Procedure Law have a legal force that must be complied with.
Kakao will disclose detailed records and provide reports of the current situation through a Transparency Report in the event the company provides user’s personal information to an investigative agency without the user’s consent. Kakao is not legally required to present a Transparency Report. However, we, as the service provider, believe that it our obligation to our users to provide such information.
Detailed information is provided in the “FAQs on the Transparency Report”.
Users are entitled to the right to decide which information is disclosed to whom and when, and how the information is to be used. In order to assure such rights, the Act on Promotion of Information and Communications Network Utilization and Information Protection requires service providers to notify the following information to users at least once a year for a certain period of time.
Kakao notifies users of such information via email or messenger service once a year. Our portal site Daum operates a separate service users can access anytime, so that users can exercise their right of self-determination with personal information and check how their personal information was used (Sign In > My Information > Personal Information Usage Status). However, the items of personal information provided to courts or investigatory authorities shall be excluded herefrom according to Article 30-2 of the Act on Promotion of Information and Communications Network Utilization and Information Protection and Article 17 of the Enforcement Decree of the said Act . More detailed explanation is provided in the FAQ section of this Transparency Report (FAQ > Transparency Report > How can I check whether my information has been provided to an investigative organization?)
Incidents where personal information has been leaked, as was the case with several financial companies in Korea, showed that most personal information that had not been used for a prolonged period of time had been leaked. The Act on Promotion of Information and Communications Network Utilization and Information Protection and decree of an enforcement prescribes that necessary measures should be enforced on users’ personal information that have not been used for one (1) year, such as information being destroyed or stored in a separate storage area, in order to protect personal information that have been neglected for a long period of time.
Kakao safely stores personal information from each service in a separate storage area and deletes the information after the designated storage period expires in order to protect our users’ content. Information is used for restricted purposes during the designated storage period and access is limit to only those who are absolutely necessary.
Kakao is doing our best to protect our personal information processing system and user information database. Only authorized officers can access such information. Access is controlled over multiple levels and all unauthorized access attempts is completely blocked. The department responsible for information security monitors all activities conducted on the network in real-time and immediately responds to any abnormal activities upon detection. Kakao has also acquired multiple domestic and international information security certifications that verify security through many stages. We have also separated Internet networks, applied an integrated log monitoring system, conducted simulations to respond to personal information security breaches, inspection systems on partner company’s personal information and prepared various plans to keep users’ personal information secure. Go to “Our Efforts > Technical Measures” for more information on our efforts to keep users’ personal information safe.