Data Protection

Last updated: 2025-03-01

1. Data Controller

Tonso Digital, located at 273-10, Geumgyeri, Geundeok-myeon, Samcheok-si, Gangwon-do, Korea, is the data controller for personal data collected through tonso.digital. Contact: [email protected], +82-6-279-3861.

2. Data We Collect

We may collect name, email, company name, message content from contact forms, cookie preferences, theme settings, and technical logs (IP address, browser type, pages visited). Enrolment data may be collected via separate agreements.

3. Purpose of Processing

Data is processed to respond to enquiries, deliver courses, improve our website, maintain security, and comply with legal obligations. Analytics cookies are used only with your consent.

4. Legal Basis

Processing is based on consent (cookies, marketing), contract performance (enrolment), legitimate interests (site security, service improvement), and legal obligations where applicable under Korean privacy law.

5. Retention

Contact form submissions are retained up to 24 months unless a longer period is required for enrolment records. Cookie consent records are stored locally in your browser. Server logs are retained up to 12 months.

6. Third-Party Sharing

We may use hosting, email, and analytics providers who process data on our instructions. We do not sell personal data. Third-party platforms used in courses (e.g., ad platforms) have their own policies.

7. International Transfers

If data is processed outside Korea, we implement appropriate safeguards such as standard contractual clauses or provider certifications consistent with applicable requirements.

8. Your Rights

You may request access, correction, deletion, or restriction of processing, and withdraw consent where applicable. Contact us at the email above. You may lodge a complaint with the Personal Information Protection Commission (PIPC) in Korea.

9. Security

We apply technical and organizational measures including encryption in transit, access controls, and staff training. No method of transmission over the Internet is fully secure.

10. Children

Our services are directed at professionals aged 18 and over. We do not knowingly collect data from children. Contact us to request deletion if you believe we have collected a minor’s data.

11. Policy Changes

We will post updates on this page with a new last updated date. Significant changes will be highlighted on the site or via email to active participants where appropriate.

Questions: [email protected]