Google API Services policies for using Google Analytics user data are:[Google User Data Access] 1.The GA diagnostic service uses the GA View ID entered by the user after OAuth authentication and accesses Google Analytics data using the Google Reporting API. [Save Google User Data] 2. Entrench Consulting Co., Ltd. stores user data in the database in the following way to provide fast GA diagnostic services by minimizing request/response times due to the use of the GA Reporting API. 1) Email information is saved after OAuth authentication for use as a user ID in the database. 2) The GA View ID entered for quick GA diagnostic service is saved. 3) Stores GA diagnostic results derived from metrics and metric values returned via Google Reporting API calls. [Use Google User Data] 3. Get the GA diagnosis result with the user identifier (email) stored in the database and print it out on the results page so that the user can understand the GA diagnosis result.
Appendix of Privacy Protection Policy<1> Lawful processing of personal information under GDPR Processing personal information by the Company shall be lawful only if and to the extent that at least one of the following applies: • A user has given consent to the processing of his or her personal information. • Processing is necessary for the performance of a contract to which a user is party or in order to take steps at the request of a user prior to entering into a contract: - Member management, identification, etc. - Performance of a contract in relation to providing the services required by users, payment and settlement of fees, etc. • Processing is necessary for compliance with a legal obligation to which the Company is subject - Compliance with relevant law, regulations, legal proceedings, requests by the government • Processing is necessary in order to protect the vital interests of users, or other natural persons - Detection of, prevention of, and response to fraud, abuse, security risks, and technical issues that may harm users or other natural persons • Processing is necessary for the performance of a task carried out in the public interest or in the excise of official authority vested in the Company • Processing is necessary for the purposes of the legitimate interests pursued by the Company or by a third party (except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child). <2> User’s right when applying GDPR The users or their legal representatives, as main agents of the information, may exercise the following rights regarding the collection, use and sharing of personal information by the Company: • The right to access to personal information; The users or their legal representatives may access the information and check the records of the collection, use and sharing of the information under the applicable law. • The right to rectification; - The users or their legal representatives may request to correct inaccurate or incomplete information. • The right to erasure; - The users or their legal representatives may request the deletion of the information after the achievement of their purpose and the withdrawal of their consent. • The right to restriction of processing; - The users or their legal representatives may make temporary suspension of treatment of personal information in case of the disputes over the accuracy of information and the legality of information treatment, or if necessary to retain the information. • The right to data portability - The users or their legal representatives may request to provide or transfer the information. • The right to object - The users or their legal representatives may suspend the treatment of personal information if the information is used for the purpose of direct marketing, reasonable interests, the exercise of official duties and authority, and research and statistics. • The right to automated individual decision-making, including profiling - The users or their legal representatives may request to cease the automated treatment of personal information, including profiling, which has critical impact or cause legal effect on them. If, in order to exercise the above rightss, you, as an user, use the menu of 'amendment of member information of webpage or contact the Company by sending a document or e-mails, or using telephone to the Company ( person in charge of management of personal information or a deputy), the Company will take measures without delay: Provided that the Company may reject the request of you only to the extent that there exists either proper cause as prescribed in the laws or equivalent cause.