— Legal · Privacy Notice & GDPR —

Privacy Notice

Last updated · 2026-06-21

This document summarizes Re:PAGE's privacy practices in English and details the procedure by which data subjects — particularly those located in the European Economic Area (EEA), the United Kingdom, and other GDPR-equivalent jurisdictions — may exercise their rights.

It is a companion to the Korean «Re:PAGE 개인정보처리방침», which is the controlling version.

1. Who We Are

Re:PAGE is a weekly editorial magazine operated by Re:B Studios (the "Company"). Re:B Studios is the data controller for personal information processed in connection with the Re:PAGE service.

· Magazine: Re:PAGE — https://www.repage.co.kr

· Publisher: Re:B Studios (Republic of Korea)

· Contact: contact@rebstudios.com

2. What Personal Data We Collect

Re:PAGE does not require account registration to read content. We automatically collect the following information for service operation and analytics:

CategoryItemsMethod
Access logsIP address, access timestamp, browser type, OS, referrer URLWeb server logs
Analytics dataPage views, time on page, device type, traffic sourceAnalytics tools
CookiesAnonymous identifiers for session and analyticsBrowser cookies

We do not currently collect information that you actively submit (such as registration data or newsletter subscriptions). If we introduce such features in the future, we will update this Notice in advance.

3. Purposes and Legal Bases (GDPR Art. 6)

PurposeLegal basis under GDPR
Delivering the magazine and ensuring service stabilityLegitimate interest (Art. 6(1)(f))
Aggregated analytics and audience measurementLegitimate interest (Art. 6(1)(f))
Preventing abuse and improving the serviceLegitimate interest (Art. 6(1)(f))
Compliance with applicable lawLegal obligation (Art. 6(1)(c))
Optional cookies (non-essential analytics)Consent (Art. 6(1)(a)) — where required by local law

We do not use your personal data (IP, access logs, cookies, etc.) to train, fine-tune, or evaluate any artificial intelligence model, nor do we transfer such data to third parties for that purpose. (Note: Re:PAGE's editorial content may be used by AI engines under the separate terms in our Terms of Service Article 5. That permission applies only to copyrighted editorial content — never to reader data.)

4. Retention Periods

DataRetentionBasis
Website access logs3 monthsProtection of Communications Secrets Act (Korea)
Abuse-related records1 yearInternal policy
Analytics (aggregated/anonymized)Indefinite (anonymous form only)Statistical purposes

5. Processors and Sub-processors

We engage the following processors who handle personal data on our behalf under written agreements requiring appropriate safeguards:

ProcessorPurposeLocationSafeguards
Google LLC (Google Analytics 4)Behavioral analyticsUSA / GlobalIP anonymization enabled; Standard Contractual Clauses (SCCs)
Google LLC (Search Console)Search traffic analyticsUSA / GlobalSCCs
Cloud infrastructure & CDN providersHosting and deliveryGlobalSCCs / Data Processing Agreements

6. International Data Transfers

Personal data may be transferred to and processed in countries outside the EEA/UK/Korea, including the United States, where our processors operate. For such transfers, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, supplementary measures where appropriate, and any adequacy decisions in force at the time of transfer.

7. Cookies

We use cookies for session continuity and analytics. You may refuse cookies via your browser settings:

· Chrome: Settings → Privacy and security → Cookies and other site data

· Edge: Settings → Cookies and site permissions → Cookies and stored data

· Safari: Preferences → Privacy → Cookies and website data

· Firefox: Settings → Privacy & Security → Cookies and Site Data

Refusing cookies may limit some functionality.

8. Security Measures

In accordance with applicable law (including Korea's Personal Information Protection Act Art. 29 and GDPR Art. 32), we implement:

· Technical: access controls, HTTPS/TLS encryption in transit, security software and regular updates

· Organizational: internal management plan, minimized access by trained personnel, audit logs

· Physical: access controls to servers and storage; reliance on certified cloud infrastructure providers

9. Your Rights

See the GDPR Data Subject Rights section below for the full list of rights and the step-by-step process for exercising them.

10. Contact

For any privacy-related inquiry — including data subject requests, complaints, or questions — please contact:

Re:B Studios — Privacy Team

Email: contact@rebstudios.com

11. Supervisory Authorities

If you believe our processing infringes applicable law, you have the right to lodge a complaint with:

· Korea — Personal Information Protection Commission (PIPC), https://www.pipc.go.kr

· EU/EEA — your local Data Protection Authority. Directory: https://edpb.europa.eu/about-edpb/about-edpb/members_en

· United Kingdom — Information Commissioner's Office (ICO), https://ico.org.uk

12. Changes to This Notice

We will post material changes on the service at least 7 days before they take effect (30 days for material changes affecting your rights). The current version controls; prior versions are superseded as of the effective date stated above.

GDPR Data Subject Rights — At a Glance

If you are located in the EEA, the UK, or another jurisdiction that grants equivalent rights, you may exercise the following rights free of charge:

#RightGDPR ArticleWhat it means
1Right of accessArt. 15Obtain confirmation of whether we process your data, and a copy of it
2Right to rectificationArt. 16Correct inaccurate or incomplete data
3Right to erasure ("right to be forgotten")Art. 17Request deletion of your data under certain conditions
4Right to restriction of processingArt. 18Limit how we use your data during disputes or verification
5Right to data portabilityArt. 20Receive your data in a structured, machine-readable format
6Right to objectArt. 21Object to processing based on legitimate interests
7Rights related to automated decision-makingArt. 22Not be subject to decisions made solely by automated means (Re:PAGE does not currently engage in such processing)
8Right to withdraw consentArt. 7(3)Withdraw any consent at any time (where consent is the legal basis)
9Right to lodge a complaintArt. 77File a complaint with your local supervisory authority

How to Submit a GDPR Request

Step 1 — Send your request.

Email contact@rebstudios.com with the subject line: [GDPR Request] <Right type> — <Your name or pseudonym>. Example: [GDPR Request] Erasure — Jane Doe.

Include in the body: (1) the right(s) you wish to exercise; (2) a clear description of your request; (3) your country of residence so we can determine the applicable framework; (4) sufficient information for us to identify the relevant data — typically the IP address(es) and approximate date/time window of your visit(s), since we do not maintain user accounts; (5) your preferred contact channel for our response (email is default).

Step 2 — Identity verification. To protect against unauthorized disclosure, we may ask for additional information to verify your identity. We will use such information only for verification and delete it promptly afterward.

Step 3 — Acknowledgment. We will acknowledge receipt within 5 business days.

Step 4 — Substantive response. We will respond substantively within one (1) month of receipt of a valid request, as required by GDPR Art. 12(3). This period may be extended by up to two additional months for complex or numerous requests, in which case we will inform you of the extension and the reasons within the first month.

Step 5 — Outcome. Our response will confirm that the request has been fulfilled; or state that it is refused in whole or in part, with reasons and information about your right to lodge a complaint with a supervisory authority and to seek judicial remedy; or request further clarification.

Step 6 — No fee. Requests are handled free of charge. We may charge a reasonable fee or refuse to act only where requests are manifestly unfounded or excessive (GDPR Art. 12(5)).

Practical Limitations, Children & Automated Decisions

Because Re:PAGE does not require account registration, we may be unable to locate data about a specific individual where no identifying linkage exists in our logs; in such cases, we will document this fact in our response. Aggregated and anonymized analytics data cannot be linked back to an individual and is therefore outside the scope of access/erasure requests.

Children's data. Re:PAGE is not directed at children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect data from such children. If you believe we have inadvertently collected such data, please contact us and we will delete it.

Automated decision-making. Re:PAGE does not make decisions about individual data subjects through solely automated means that produce legal or similarly significant effects under GDPR Art. 22.

EU/UK representative. Re:B Studios is established in the Republic of Korea. We are currently evaluating whether the offering of services to EEA/UK data subjects triggers the requirement to designate an EU/UK representative under GDPR Art. 27 / UK GDPR Art. 27. Once designated, contact details will be added here.

Privacy at a Glance

We try to keep this simple. Here is what you need to know about Re:PAGE and your data, in plain language.

· No account needed. Read Re:PAGE freely — we do not ask you to sign up.

· What we collect. Standard web logs (IP, browser, page views) and cookies for analytics. Nothing else, for now.

· Why we collect it. To run the magazine, count readers, fix bugs, and prevent abuse.

· What we don't do. We do not sell your data. We do not use your personal data to train AI models. We do not link analytics back to your real identity.

· Cookies. You can turn them off in your browser. Most of the site will still work.

· Your rights. You can ask us to show, correct, or delete your data — including under GDPR if you are in the EU/UK. Email contact@rebstudios.com.

· Where your data goes. Some processors (like Google Analytics) are based outside Korea. We use Standard Contractual Clauses for those transfers.

· AI and our content. Our articles are written by three editors with AI assistance, and we allow AI engines to learn from and cite our articles — but that policy applies only to our published content, never to reader data.