Privacy Policy

• Membership registration (required): email address, password (for self-registration), name, mobile phone number, date of birth (age verification), gender.
• Athlete registration: name, email, mobile number, and gender of each of the two team members.
• Payment: payment method information (processed by the payment gateway), order and transaction records.
• Competition photos and video: photos, video, audio, and interviews recorded at the competition and official side events, together with the name, team name, bib number, and results displayed with them. The use of athlete footage is governed by Article 8 of the Competition Terms. Spectators and other on-site visitors are informed that filming takes place.
• Optional: whether you receive promotional information and your notification settings, and consent to provision to third parties (sponsors) (optional consent at sign-up).
• Application and consent records: application date and time, applicable terms version, consent status and date and time, and records of the lead applicant's confirmation of authority to act on behalf of teammates.
• Automatically collected: access logs, cookies, etc.

Cookies are used to maintain login sessions and to analyze service usage statistics. Users may refuse the storage of cookies through their web browser settings; however, doing so may limit the use of certain services, such as login.

The Company uses personal data for member management, competition registration and entry verification, payments and refunds, customer support, and competition operations and safety notices. Photos, video, and results are used to provide athlete photos, publish results, and document and promote the competition. Advertising use by official partners and provision to third parties are governed by Article 6. Promotional information by email, text message, or similar channels is sent only to those who have separately consented to receive it.

Member and athlete registration information, service usage records, and competition photos, video, and results are retained and used permanently. Promotional notification settings are retained until you unsubscribe, and facial feature information is retained for the period stated in the separate consent form.

Statutory retention periods are 5 years for records of contracts, order cancellations, payments, and supply of goods; 3 years for records of consumer complaints and dispute resolution; and 6 months for records of labeling and advertising. These records are stored separately for statutory retention purposes. Where applicable law requires deletion or other measures, the Company complies accordingly.

The Company delegates personal data processing to the following parties to facilitate service delivery: Toss Payments (payment processing), PayPal (overseas USD payment processing), AWS (email delivery and infrastructure operation), Solapi (KakaoTalk notification delivery), Kakao (social login), and OurSymbol (competition photography and AI face-classification-based personal photo delivery).

Because OurSymbol's AI face-classification-based photo delivery involves processing facial-feature information, the Company obtains separate consent from the data subject for such processing.

The Company transfers personal data outside Korea as follows (recipient / destination country / categories transferred / date and method of transfer / purpose of use).

• PayPal: United States / payment identification data (email, transaction records) / transmitted over the network at the time of overseas (USD) payment / overseas payment processing.
• AWS (Amazon Web Services): United States and others / email and service usage records / transmitted over the network for email delivery and infrastructure operation / cloud infrastructure operation and email delivery.

Data subjects may refuse consent to cross-border transfer; however, refusal may limit the use of certain services, such as overseas payment.

The Company provides personal data to the official partners listed in the table below for the stated purposes. Participants review the provision details in this Article and consent to that provision by completing their application.

Official partners use the data only for the stated purposes and periods. If the terms of provision change, the Company will carry out the necessary notice and consent procedures.

You may direct inquiries about your personal data and requests to exercise your rights under applicable law to the Chief Privacy Officer listed in Article 10. The Company handles such requests in accordance with applicable law and informs you of the outcome.

The Company destroys personal data without delay once the retention period ends or the purpose of processing has been achieved and the data is no longer needed. Data that must be preserved under applicable law is stored separately for the required period. Electronic files are deleted by methods that make recovery impossible, and paper documents are shredded or incinerated.

The Company implements administrative and technical measures to ensure the secure processing of personal data, including access controls, encryption, and access-log management.

• Name: Jaeseong Park
• Title: SW Engineer
• Contact: jason.park@pnutbtr.com

Data subjects may direct any inquiries, complaints, or requests for remedy regarding personal data to the Data Protection Officer, and the Company will respond and take action without undue delay.

Any additions, deletions, or modifications to this Policy will be announced via the Service interface prior to taking effect.