Addendum applicable to users in South Korea

This addendum (“Addendum”) supplements the Application Privacy Policy and sets forth, in greater detail, the information related to how we collect, use, and disclose the personal information of users in South Korea.

(Cross-border) Outsourcing of Data

Specifically, we transfer your personal information to third parties as below.

Recipients (For corporations: name of corporation and contact information of person-in-charge of managing data (“Data Protection Officer” or “DPO”))Countries of recipientsItems of the personal information to be transferredDate/time/methods of transferPurposes of use of recipients of personal informationPeriods of retention by such recipients of personal information
Cloudflare Australia Pty Ltd. privacyquestions@cloudflare.com
Australia
All Personal information as described in section 2, “Information We Collect”
Over the network, upon collection of personal information
To operate and improve the Application, such as to assist us in our debugging efforts if an issue arises.
As long as necessary to fulfill the purposes on the left.
Cloudflare (Canada) Information Technology Co., Ltd.
privacyquestions@cloudflare.com
Canada
All Personal information as described in section 2, “Information We Collect”
Over the network, upon collection of personal information
To operate and improve the Application, such as to assist us in our debugging efforts if an issue arises.
As long as necessary to fulfill the purposes on the left.
Cloudflare Middle East FZ-LLC privacyquestions@cloudflare.com
U.A.E.
All Personal information as described in section 2, “Information We Collect”
Over the network, upon collection of personal information
To operate and improve the Application, such as to assist us in our debugging efforts if an issue arises.
As long as necessary to fulfill the purposes on the left.
Cloudflare France SAS privacyquestions@cloudflare.com
France
All Personal information as described in section 2, “Information We Collect”
Over the network, upon collection of personal information
To operate and improve the Application, such as to assist us in our debugging efforts if an issue arises.
As long as necessary to fulfill the purposes on the left.
Cloudflare Germany GmbH privacyquestions@cloudflare.com
Germany
All Personal information as described in section 2, “Information We Collect”
Over the network, upon collection of personal information
To operate and improve the Application, such as to assist us in our debugging efforts if an issue arises.
As long as necessary to fulfill the purposes on the left.
Cloudflare India Private Limited privacyquestions@cloudflare.com
India
All Personal information as described in section 2, “Information We Collect”
Over the network, upon collection of personal information
To operate and improve the Application, such as to assist us in our debugging efforts if an issue arises.
As long as necessary to fulfill the purposes on the left.
Cloudflare Japan K.K.
privacyquestions@cloudflare.com
Japan
All Personal information as described in section 2, “Information We Collect”
Over the network, upon collection of personal information
To operate and improve the Application, such as to assist us in our debugging efforts if an issue arises.
As long as necessary to fulfill the purposes on the left.
Cloudflare Netherlands B.V. privacyquestions@cloudflare.com
Netherlands
All Personal information as described in section 2, “Information We Collect”
Over the network, upon collection of personal information
To operate and improve the Application, such as to assist us in our debugging efforts if an issue arises.
As long as necessary to fulfill the purposes on the left.
Cloudflare Portugal Unipessoal Lda. privacyquestions@cloudflare.com
Portugal
All Personal information as described in section 2, “Information We Collect”
Over the network, upon collection of personal information
To operate and improve the Application, such as to assist us in our debugging efforts if an issue arises.
As long as necessary to fulfill the purposes on the left.
Cloudflare Pte. Ltd. privacyquestions@cloudflare.com
Singapore
All Personal information as described in section 2, “Information We Collect”
Over the network, upon collection of personal information
To operate and improve the Application, such as to assist us in our debugging efforts if an issue arises.
As long as necessary to fulfill the purposes on the left.
United Kingdom
All Personal information as described in section 2, “Information We Collect”
Over the network, upon collection of personal information
To operate and improve the Application, such as to assist us in our debugging efforts if an issue arises.
As long as necessary to fulfill the purposes on the left.

Procedures/methods for Destruction of Personal Information

  • Procedures of destruction

We select the personal information to be destroyed (i.e., personal information whose purpose of processing is achieved or whose retention period has expired) and destroy it with the approval of our Data Protection Officer.

  • Method of destruction

We do not print any personal information related to the 1.1.1.1 Application on paper. If we did, however, such personal information will be destroyed by shredding, incinerating, or some other similar method and, if saved in electronic form, the data will be destroyed by technical methods (e.g. Low Level Format) which ensure that the data cannot be restored or recovered.

Periods of Retention of Personal Information

If required to retain personal information pursuant to applicable Korean laws, such as those set forth below, then, to the extent we collect such personal information, we will retain it solely for the retention periods and purposes prescribed thereunder.

(a) Commercial ledgers and material documents/statements related to business operations, all ledgers on business transactions and information related to supporting documentation: 10 years for material business documents and 5 years for statements (as required under the Commercial Code, the Framework Act on National Taxes, and the Corporate Tax Act)

(b) Records on contracts and withdrawal of subscriptions: 5 years (as required under the Act on Consumer Protection in Electronic Commerce Transactions)

(c) Records on payments and supply of goods: 5 years (as required under the Act on Consumer Protection in Electronic Commerce Transactions)

(d) Records on consumer complaints and processing of disputes: 3 years (as required under the Act on Consumer Protection in Electronic Commerce Transactions)

(e) Records of logins: 3 months (as required under the Protection of Communications Secrets Act)


Rights and Obligations as a Data Subject and How to Exercise Them

As detailed here, we collect only very limited personal data. A user and/or their legal representative may access, correct, or delete the user’s registered personal information at any time. A user and/or their legal representative may also withdraw consent to the collection, use, provision, or storage of personal information that the user provided in order to use the services. Please contact SAR@cloudflare.com if you wish to exercise any of these above rights.

Amendment of this policy