Privacy Policy

Last Updated: May 1, 2024

We, 2ND STREET CORPORATION (“2ND STREET”), have established the following Privacy Policy for the treatment of personal information on the 2nd Street online store("Website”) operated by us (“Privacy Policy”).

1.Person in Charge

We are in charge of the processing of your personal information on this Website.

2.Categories of Personal Information We Collect

We collect the following categories of your personal information

• (1)

  Login ID, login password, nickname, secret question and its answer;

• (2)

  Name, address, zip code, data of birth , phone number, email address;

• (3)

  Information obtained by using cookies (e.g., browser identification information, browsing history on the Website); and

• (4)

  Your history of using the Website (e.g., history of purchases, searches, browsing, inquiries).

3.How We Collect Personal Information

We collect your personal information in the following ways.

4.urposes of Processing Personal Information

We process your personal information for the following purposes.

5.How Long We Retain Personal Information

We retain your personal information for as long as it is necessary for the purposes described in section 4. above or consistent with applicable laws. We will delete or anonymize your personal information when we no longer need it in accordance with applicable laws and our established procedures.

6.Disclosure of Personal Information to Third Parties

As shown below, we may disclose certain categories of your personal information to third parties. In such cases, we will take appropriate measures, including obtaining your consent, in accordance with applicable laws.

We may also disclose your personal information to government authorities and other agencies to comply with legal obligations and demands.

7.Entrustment of Processing Personal Information

We may entrust the processing of your personal data to our group companies and other external vendors to the extent necessary to achieve the purposes as described in section 4 of this Privacy Policy. In such cases, we take appropriate measures to ensure that such entrusted vendors processing your personal information with reasonable and appropriate safeguard, including selection of proper vendors who satisfy our security standard and conclusion of agreement on the processing of personal information and we supervise the vendors.

8.Cross Border Transfer of Personal Information

We may transfer your personal information from a country where we collect your personal information to another country in the disclosure of personal information to third parties described in section 6 in this Privacy Policy. In such cases, we take appropriate measures such as obtaining consent from the relevant individual and concluding a data protection contract in accordance with applicable laws.

9.Security Measures for Personal Information

In accordance with our Personal Information Management Policy, Information Security Policy and other relevant policies, we take reasonable security measures including organizational measures and technical measures.

10.Your Rights

You have certain rights with your personal information in accordance with applicable laws such as revocation of consent, access, correction, restriction of processing, deletion, prohibition of disclosure to third parties and objection to processing. If you make such request, we will take steps to verify the request and respond to the request in reasonable time period as set out in applicable laws. If you would like to exercise any of these rights, or if you have any inquiries about your rights, please contact us as described in section 12. below.

11.Complaint

You can lodge complaints about our way of processing your personal information with data protection supervisory authorities in accordance with applicable data protection laws.

12.Inquiry

In the case of any inquiry regarding this Privacy Policy, please contact us by the following methods.

Email: ssol-retail@geo-reply.com

13.Amendment to this Privacy Policy

We may modify this Privacy Policy as necessary, and any such modification will be posted on this website.

14.For Residents in Europe Economic Area Countries and United Kingdom

For residents in the European Economic Area (EEA) and the United Kingdom (UK), we provide additional information in this section in accordance with the General Data Protection Regulation (GDPR). If there is any conflict between this section and sections 1. to 12., this section prevails for residents in the EEA and the UK.

14.1.Controller

We are the data controller for the personal data as defined GDPR Article 4 Item 1 described in this Privacy Policy.

14.2.Lawful Bases for Processing Personal Data

We process your personal data for the following purposes on the following lawful bases.

14.3.Cross-Border Transfer of Personal Data

Our disclosure of your personal data to third parties described in sections 6 of this Privacy Policy may constitute cross-border transfer of personal data to a country or region other than the EEA member countries, the UK or Japan. In such cases, we rely on one of the following appropriate safeguards;

• adequate decisions made by the European Commission or the UK government;
• Standard Contractual Clauses (SCCs) adopted by the European Commission; or
• International Data Transfer Agreement (IDTA) or the International Data Transfer Addendum to the European Commission's SCCs approved by the UK Parliament.

14.4.Children’s Privacy

We usually do not collect and store personal data about children who we know reside in EEA or UK and are under 16 years of age. If we discover that we have unintentionally collected data from a child who reside in EEA or UK in a way that does not meet the requirements under the GDPR and other applicable laws, we will delete the data immediately.

14.5.Your Rights

You have the following legal rights set out in the GDPR with the processing of your personal data by us.

• Revocation of consent – As described in section 14.2. above, you can revoke at any time previously given consent to our processing of your personal data.
• Right to access - You have the rights to make an inquiry, to review and to request us for copies of your personal data we hold.
• Right to rectification - You have the right to request us to correct any of your personal data we hold which you believe is inaccurate. You also have the right to request us to complete your personal data we hold which you believe is incomplete.
• Right to erasure - You have the right to request that we erase your personal data, under certain conditions.
• Right to restrict processing - You have the right to request that we restrict the processing of your personal data, under certain conditions.
• Right to object to processing - You have the right to object to our processing of your personal data, under certain conditions.

If you would like to exercise any of these rights, or if you have any inquiries about your rights, please contact us by using the following methods.

Email: datarequest@datarep.com
Web form: www.datarep.com/data-request

14.6.Lodging Complaint with Data Protection Authority

You can lodge complaints about our way of processing your personal data with a data protection supervisory authority that has a jurisdiction over the region where you reside. Contact information of data protection supervisory authorities is available at the following URL.

• For EEA residents:
  https://edpb.europa.eu/about-edpb/about-edpb/members_en
• For UK residents: https://ico.org.uk/

15.For Residents in California

We provide additional information in this section in accordance with the California Consumer Privacy Act, as amended (CCPA) and other applicable laws. If there is any conflict between this section and sections 1. to 13. , this section prevails for residents in California.

15.1.Categories of Personal Information We Collect

We collect the following categories of your personal information. The categories of the personal information we have collected in the preceding 12 months and its sources are the same as below.

15.2.Purposes of Processing Personal Information

We use the categories of personal information described in section 4. above.

15.3.Your Right to Opt-out of Sale or Sharing of Personal Information

When a business “sells” or “shares,” as defined in the CCPA, personal information of a consumer to or with a third party, the consumer has a right to opt-out of the sale or sharing. To exercise this right, please access our “Do Not Sell or Share” request page by clicking the “Do Not Sell or Share My Personal Information” link at the footer of our website.

15.4.How Long We Retain Personal Information

We retain your personal information for as long as it is necessary for the purposes described in section 4. above or consistent with applicable laws. We will delete or anonymize your personal data when we no longer need it in accordance with applicable laws and our established procedures.

15.5.Sale or Sharing of Personal Information to Third Parties

As described in sections 6, we disclose certain categories of your personal information to third parties to the extent necessary to achieve the purposes described in section 4. above. Such disclosure may constitute a sale or sharing with a third party within the meaning of the CCPA. The following is a list of the parties to which we have sold or shared personal data in the past 12 months.

15.6.Children’s Privacy

We usually do not collect and store personal information about children who we know reside in California and are under 13 years of age. If we discover that we have unintentionally collected information from a child who reside in California in a way that does not meet the requirements under the CCPA and other applicable laws, we will delete the information immediately.

15.7.Your Rights

You have the following legal rights set out in the CCPA with the processing of your personal information by us.

• Right to know what personal information about you we collect, use, disclose, sell or share
• Right to request us to delete your personal information collected by us, with certain exceptions
• Right to request us to correct inaccurate personal information we hold about you
• Right to opt-out of the sale or sharing of your personal information by us
• Right to limit use and disclosure of sensitive personal information to the extent necessary to achieve certain purposes such as to maintain your account
• Right not to receive discriminatory treatment by us for the exercise of the privacy rights conferred by the CCPA

If you would like to exercise any of these rights, or if you have any inquiries about your rights, please contact us by using the following methods.

Email: ssol-retail@geo-reply.com

15.8.AUTHORIZED AGENT

When you use an authorized agent to submit a request to know, a request to delete, or a request to correct inaccurate personal information, we may require that you:

• Provide the authorized agent with written permission to do so and verify your own identity directly with us.
• Directly confirm with us that you provided the authorized agent with permission to submit the request.

We may deny a request from an agent that does not submit a proof that they have been authorized by you to act on your own behalf.

Copyright@2024 2ndStreet,Co. All rights reserved.