Consent to data sharing
About consenting to provision to third parties.
Consent to data sharing
Article 39 (Provision of personal information to third parties)
① Principle and exceptions
ATOVIA uses members' personal information only within the scope of the purposes for which it was collected, and does not provide it to third parties without the member's prior consent.
The following are exceptions.
Where the member has consented in advance to disclosure or provision to a third party
Where an investigative or supervisory authority requests it under the law (following the procedures and methods set out in law)
Where minimal information must be provided in order to deliver the service
For example, where an order and payment have been made, the relevant information may be provided to the parties to the transaction, within the necessary scope, so that they can communicate and complete delivery
Where the orderer's and recipient's details are provided to a courier
② Details of provision to third parties
With the member's consent, ATOVIA may provide personal information to third parties as follows.
Courier (e.g. OO Courier)
Purpose: delivering goods and responding to customer enquiries
Items: orderer's name, recipient's name, delivery details, contact number
Retention and use period: 3 months after delivery is complete
Payment service provider (e.g. OO Card)
Purpose: processing payment and settlement
Items: name, address, mobile number, email
Retention and use period: until the member closes their account or withdraws consent
Event co-host (e.g. OO Company)
Purpose: co-hosting events, issuing affiliated cards
Items: name, address, mobile number, email
Retention and use period: until the member closes their account or withdraws consent
③ Consent procedure for further provision
Where ATOVIA needs to provide personal information to a third party in addition to the above, it does so only after notifying the member in advance and obtaining consent.
Members may withdraw consent to third-party provision at any time, and on withdrawal the personal information is deleted immediately.