Both ArirangUSA and sellers process members’ personal information (for example, buyer name, email address, and shipping address) and are therefore considered separate and independent data controllers of buyers’ personal information under EU law. That means that each party is responsible for the personal information it processes in providing the Services. For example, if a seller accidentally discloses a buyer’s name and email address when fulfilling another buyer’s order, the seller, not ArirangUSA, will be responsible for that unauthorized disclosure.
If, however, ArirangUSA and sellers are found to be joint data controllers of buyers’ personal information, and if ArirangUSA is sued, fined, or otherwise incurs expenses because of something that you did as a joint data controller of buyer personal information, you agree to indemnify ArirangUSA for the expenses it occurs in connection with your processing of buyer personal information. See Section 9. Indemnification (or What Happens If You Get Us Sued) below for more information about your indemnification obligations to ArirangUSA.