Privacy
Last revised: 24 October 2026 (no transfer abroad; notice emails about measures after a rights report, incl. deletion, and about approval to show an ad again)
If a translation and the Korean text differ, the Korean text controls.
번역이 한국어와 다르면 한국어가 우선합니다.
From an office GATE stores the office name, the realtor’s name, the office establishment number (개설등록번호), the office business number, the phone, the office address, the email, and the text and photos of an ad. The password is stored only as a hash. GATE does not ask for a resident registration number or an ID-card number.
A person looking for a place has no account. The language you choose is stored in this browser under the localStorage key gate-lang. The same choice is also kept for one year in a cookie named gate-lang, so the server can send the page in that language. A session cookie is set when a realtor signs in. The session stores the IP address and the User-Agent.
The data are used to run the account, to keep the access log, to hold a draft, and to take a report or a deletion request. The office email is also used for the emails about its ads: the notice of a temporary measure, of its end, or of a deletion after a rights report, and GATE’s approval or refusal of a request to show an ad again. An email address left with a deletion request (rights) is used only to tell that person about the measure taken (temporary measure, its end, deletion). They are not used to charge a fee. Ads are free right now. They are not used to forward an inquiry or to book a viewing. A public ad is also a purpose. It shows the office name, the realtor’s name, the establishment number, the office phone, the office address, and the photos that office uploaded.
Your rights. You (the data subject) can at any time ask for access, correction or deletion, or a stop of processing of your personal data, and withdraw consent. You can also ask through a legal representative or an authorised agent. Send the request with the contact form (/contact) or to privacy@gate4korea.com. GATE acts on it within 10 days from the day it is received and tells you the result. If GATE postpones access or refuses a request for a legitimate reason, it tells you the reason and how to object; you can object the same way. The privacy contact is privacy@gate4korea.com. The public email is contact@gate4korea.com.
GATE does not sell this data. You can refuse. Then the office cannot register.
Processing on our behalf. NAVER Cloud Corp. (네이버클라우드 주식회사): running the server and the database, showing the map on the website (NAVER Cloud Platform Maps), sending email (NAVER WORKS). When the map opens, your browser connects directly to the servers of NAVER Cloud Corp. and NAVER Corp. (oapi.map.naver.com, *.pstatic.net). The IP address, browser details (User-Agent), the page address and the map area viewed are processed. GATE does not receive this information. Under the NAVER Cloud Maps terms of use, NAVER Cloud Corp. and NAVER Corp. may keep and use map usage information to run and improve the service. The map is loaded only after you press “Show map”. If you do not press it, your browser does not connect to NAVER’s map servers, and the list of ads still shows. When GATE sends the emails for email confirmation, password reset, the reason for a rejection or a block, the end of an ad, the notice of a new contact inquiry, the notices of a temporary measure after a rights report, of its end and of a deletion after a rights report, and GATE’s approval or refusal of a request to show an ad again, the recipient’s email address and the content of the email are passed to NAVER Cloud Corp. (NAVER WORKS). Transfer abroad. GATE does not transfer personal data abroad. If a transfer abroad becomes necessary, GATE will first publish in this policy, as required by Article 28-8 of the Personal Information Protection Act, the recipient, the data, the country, time and method, the purpose and retention period, and how to refuse. No payment provider is connected, so no card number is collected. No analytics provider is used.
Cookies and localStorage. You can refuse them in the browser: block cookies for this site, or clear the site data. Then a realtor cannot stay signed in, and the language resets. A cookie banner is not used.
The map is NAVER Maps. When you press “Show map”, your browser loads the map program and the map tiles directly from NAVER’s servers (oapi.map.naver.com, *.pstatic.net) (see Processing on our behalf above). There is no “my location” control. The place can be looked up on VWorld (api.vworld.kr). Without the key, that address is not sent. If the realtor enters latitude and longitude, those coordinates are used. Coordinates are not made up arbitrarily.
Retention. Office account data are kept while the account exists and are destroyed without delay when you ask for the account to be deleted. Drafts and ads are kept while the account exists. The office data are collected with the registration, before the email address is confirmed. An account whose email address is not confirmed within 7 days of registering is deleted after 7 days together with its office data. An account without office data is likewise deleted 7 days after registering. The consent record made at sign-up (confirmation of the terms and the privacy notice, with terms version and time) is kept while the account exists and is destroyed together with the account. There are no order or payment records (ads are free right now). A removed ad stops showing at once and is destroyed 90 days after removal. A sign-in session (IP address, User-Agent) is valid for at most 7 days after its last use and is destroyed when it expires. Links for email confirmation and password reset are destroyed when they expire. Records for the limits against abuse (IP address or email address) are destroyed after 1 day. The access log (actions of realtors and the administrator) is kept for at least 1 year and destroyed after that. A report (with IP address, User-Agent and contact) is destroyed 1 year after it is filed. Web server access logs (IP address, requested address, User-Agent) are kept for 14 days, server system logs for 30 days. Database backups are kept for 14 days.
How data are destroyed. The server checks every hour and deletes from the database whatever has passed its retention period. An account can be deleted directly on the account screen (at once, after the current password is confirmed) or on request at privacy@gate4korea.com (without delay, after checking that the request comes from the account holder). Electronic data are deleted from the database; copies left in backups disappear once the backup retention period (14 days) has passed. Server logs are deleted automatically after their retention period. After an account is deleted, reports stay for 1 year from filing and the access log for at least 1 year; in those log entries the details are erased and only the user number, the kind of action and the time remain. Personal data are not kept on paper.
Security measures. Traffic to the site is encrypted with TLS (HTTPS). Passwords are stored only as a one-way hash (scrypt). Server administration is possible only with an SSH key, and only from IP addresses allowed by NAVER Cloud’s access control (ACG). The app runs under its own account (gate) without administrator rights. Sign-in, password reset and reports have rate limits, and the admin screen needs a second factor (one-time password). The database is backed up every day.
Privacy officer. Sean Hennig (representative), privacy@gate4korea.com. Please send questions, complaints and requests for remedy about personal data to this address.
Remedies. For remedy of an infringement of personal data you can apply to the bodies below for dispute resolution or advice. Personal Information Infringement Report Center (KISA): 118 (no area code), privacy.kisa.or.kr. Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr. Korean National Police Agency, Cyber Investigation Bureau: 182 (no area code), ecrm.police.go.kr. Supreme Prosecutors’ Office: 1301 (no area code), www.spo.go.kr.
Contact form. When you write to GATE with the contact form, GATE stores your email address, the message, the language of the page and the time. They are used only to answer you. No copy of your message or your email address is sent by email; contact@gate4korea.com only gets a short notice that a new inquiry is waiting, and the inquiry is read in the GATE admin. The form also briefly records the IP address of the request for the per-visitor limit (deleted after 1 day). The inquiry is kept for 1 year and then deleted automatically; you can ask for earlier deletion at privacy@gate4korea.com.
A report stores the IP address and the User-Agent.