Last Updated: March 20th, 2024

Data Protection and Privacy Policy

Welcome to https://www.cre.ma/en, a website (the “Site”) and the CREMA Reviews application (the “App”) operated by CREMA Inc. (the “Company”).

The following Data Protection and Privacy Policy applies when you use the Site or the App. Since most of the same terms apply to both, the term "Site" is often used in these Terms to refer to both the Site and App.

The Site provides the Service as explained in our Terms of Use.

We respect and protect the privacy of our Site users. This Data Protection and Privacy Policy (“Policy”) explains how we collect and use your information and is part of our Terms of Use when you use our Site.

Your Consent

By using our Site or App, you consent to our Data Protection and Privacy Policy. If you don’t agree, please don’t use our Site or App.

Definitions

Company “Company” means CREMA Inc. #1113 48, Achasan-ro 17-gil, Seongdong-gu, Seoul, Republic of Korea.

GDPR “GDPR” means that General Data Protection Regulation Act. (This is a law that applies in the European Economic Area (EEA).)

Data Controller “Data Controller” means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed. The Company is the Data Controller for the personal data you submit via the Site.

Data Processor “Data Processor” means any natural or legal person who processes the data on behalf of the Data Controller.

Data Subject Data Subject is any living individual who is using our Site.

Principles for Processing Personal Data

Our principles for processing personal data under the GDPR are:

• Fairness and lawfulness. When we process personal data, the individual rights of the Data Subjects must be protected. All personal data must be collected and processed in a legal and fair manner.
• Restricted to a specific purpose. The personal data of the Data Subject must be processed only for specific purposes.
• Transparency. The Data Subject must be informed of how his/her data is being collected, processed and used.
• Accuracy. We take reasonable steps to ensure that personal data will be accurate, and that any mistakes are rectified or erased without delay.
• Storage Limitation. We will not keep personal data for longer than we need it. (However, we may keep anonymized data for an indefinite term.)