Privacy policy

1. Scope and controller

The operator and data controller of Discover Korea Across Europe is Seungyung Lee. Contact Timsylee1403@gmail.com for privacy matters. Public discovery needs no account; comments, advertising inquiries and business management require sign-in.

2. Data and purposes

Accounts: provider account identifier, email, authorized name/profile details and authentication sessions support login and access control. We do not collect your social provider's password. Only configured providers are available.

Comments: account association, display name, text, submission/moderation times and publication consent support posting, review and abuse prevention. Advertising inquiries: company, contact name/email, message, account association and status support replies and advertising discussions.

Business management: venue ID, applicant name/email/role, official verification link, explanation, accepted terms version, submission/review times and decisions support authority checks. Permissions, proposals, image sources, before/after data and approval/rejection/restoration history support review and prevention of unauthorized changes. Do not send identity documents, payment details or unnecessary sensitive data.

Public listings use credited official websites and directories for business names, public contacts, addresses, menus and operating information. Sole traders' personal business contacts may be included and can be reviewed for correction/removal. Hosting/security logs may contain IP addresses, browser/device details, request paths and times.

Near Me obtains coordinates and accuracy only with location permission and calculates straight-line distances to listed businesses and event venues in your browser. An existing permission may allow a location request on arrival. Coordinates remain only in the current page's memory, never sent to or stored in our server, database, cookies or browser storage. Stop using location, leave the page or revoke permission to clear this page's coordinates. Your device/browser's location service has its own processing policy. Ordinary search does not require location access.

3. Grounds and choices

Account, application and inquiry processing provides your requested service or handles requested pre-contract steps. Listings, authority checks, history and security serve legitimate interests in accurate information, service protection and dispute handling. Comment publication and optional advertising/player connections use the relevant consent or choice. Legally required records serve that obligation. Where GDPR applies, the purpose determines the relevant basis under Article 6(1)(a), (b), (c) or (f). Rights under other applicable laws remain respected.

Without required fields we cannot process that member feature or request; public browsing remains possible. We do not sell personal data or decide authority/publication solely through automated decisions with significant effects.

4. Visibility and providers

Approved comments expose display name, text and date, not email/account ID. Pending/hidden comments are not public. Advertising inquiries, management applications and proposals are visible only to their sender and administrators. Approved venue information becomes public; applicant evidence/email does not automatically become public. Only administrators see all approval/restoration records.

Vercel provides hosting/request handling; Supabase provides authentication, database and storage. Sign-in providers receive connection data needed for authentication. Overseas processing is possible; storage in a single country is not promised. Actual locations, retention, transfers and safeguards depend on contracts/configuration; ask the operator for details. Additional provider-specific international-transfer notices required by law must be completed against actual configuration.

Pretendard fonts load from cdn.jsdelivr.net, transmitting IP/connection information. External pictures/logos may disclose connection data to their hosts. Requested Google Maps, ratings and photo features can contact Google. YouTube videos/playlists do not connect a player before you select Load YouTube player. The subsequent privacy-enhanced youtube-nocookie.com mode still shares connection information with YouTube/Google and playback can involve further processing. External links have their own policies.

Maps load only after your selection. Without a Google Maps key, map tiles are requested from the OpenStreetMap Foundation at tile.openstreetmap.org, sharing IP address, connection information and the requested map area. Approximate city locations are distinguished from verified address coordinates.

5. Cookies and advertising

dk-language stores language in a cookie; dk-saved and dk-consent store venue IDs and privacy choices in browser storage. Authentication uses session cookies. Remove saved venues or clear browser cookies/storage. Blocking cookies may prevent sign-in.

Direct banners are labelled advertising. AdSense ads require your advertising choice and the configured consent platform's conditions. Site-verification metadata is not advertising consent. Change choices through Privacy preferences in the footer. Third parties may also require their own deletion process for data already received. No separate visitor analytics service is enabled by default.

On a first visit without a saved language, we choose a default using the country code Vercel estimates from the connecting IP address. Germany, Austria and Liechtenstein use German; France and Monaco use French; South Korea uses Korean; all other or unknown countries use English. This feature does not send your IP to a separate lookup service, store IP addresses or countries in our app database, or request GPS permission. VPNs can affect the estimate. Your saved language and explicitly localized links take priority; the displayed language is kept in the existing dk-language cookie.

6. Retention and deletion

Accounts remain during use of member features; unresolved inquiries/applications remain as needed for handling. Afterwards retention is limited by actual needs for follow-up, authority verification, abuse prevention or disputes. Public comments/listings remain while publication purposes continue; history supports accuracy checks/restoration. Legal obligations or ongoing disputes can justify limited further retention.

No universal automatic deletion period is currently configured. The operator reviews requests and deletes/anonymizes unnecessary data. Database records are deleted; provider backups/hosting logs expire under provider procedures. Account deletion does not automatically remove externally sourced public business details or all approved history; request separate review.

7. Safeguards and rights

Authentication, sender/admin access restrictions, approval, conflict checks, request limits and processing records are applied, but cannot remove all risk. Do not submit others' accounts or personal data.

Subject to applicable law, request access, correction, erasure, restriction, portability, objection or consent withdrawal by email. Identity verification is limited to what is necessary; restrictions are explained. Withdrawal does not affect prior lawful processing. GDPR requests normally receive a response within one month; reasons for permitted extensions are communicated. Complain to the supervisory authority at your residence, workplace or the place of the issue. Korean users may contact the Personal Information Protection Commission or infringement reporting centre. The service is not directed to children; request deletion review if a child's data was collected incorrectly.

8. Changes

Features/processing changes update this notice and date. New optional processing receives any necessary separate notice/consent. The operator's postal address and actual provider-specific international-transfer details remain to be added once confirmed.