Privacy Policy
1. Personal Information Collected and Collection Methods
2. Purpose of Collection and Use of Personal Information
3. Sharing and Provision of Collected Personal Information
4. Entrustment of Personal Information Processing
5. Retention and Use Period of Collected Personal Information
6. Procedures and Methods for Destruction of Personal Information
7. Measures to Ensure the Security of Personal Information
8. Rights of Users and Legal Representatives and How to Exercise Them
9. Installation, Operation, and Rejection of Automatic Personal Information Collection Devices
10. Personal Information Manager and Responsible Department
11. Duty of Notification
This policy is effective as of August 1, 2021.
1. Personal Information Collected and Collection Methods
1) Items Collected
The Company collects the following personal information in order to manage inquiries related to the Company, service/product inquiries, recruitment inquiries, website inquiries, whistleblowing, and security reports.
- Required Information: Name, Company Name, Email, Contact Number
- Right to Refuse Consent and Disadvantages of Refusal
- You have the right to refuse consent to the collection of required information.
- You have the right to refuse consent to the collection of optional information.
However, refusal to provide required information may result in the inability to respond to inquiries.
2) Collection Methods
The Company collects personal information through the following method:
- “Online Inquiry” menu
2. Purpose of Collection and Use of Personal Information
The Company uses collected personal information for the following purposes:
- Providing feedback and managing customer inquiries, including Company-related inquiries, service/product inquiries, and website inquiries
3. Sharing and Provision of Collected Personal Information
The Company does not provide users’ personal information to external parties in principle. However, the following cases are exceptions:
- When users have given prior consent
- When required by law or requested by investigative authorities in accordance with legally established procedures and methods
4. Entrustment of Personal Information Processing
The Company does not entrust personal information processing to external parties in principle. However, the following cases are exceptions:
- When users have given prior consent
- When required by law or requested by investigative authorities in accordance with legally established procedures and methods
5. Retention and Use Period of Collected Personal Information
Personal information related to Company inquiries, service/product inquiries, and website inquiries will be destroyed without delay once feedback has been provided.
6. Procedures and Methods for Destruction of Personal Information
The Company destroys personal information without delay once the purpose of collection and use has been achieved. The destruction procedures and methods are as follows:
1) Destruction Procedure
Information provided by the user is stored for a certain period according to internal policies (refer to retention period) and then destroyed. The information will not be used for any purpose other than retention unless required by law.
2) Destruction Method
Personal information printed on paper is destroyed by shredding or incineration, and personal information stored in electronic file form is deleted using technical methods that prevent recovery.
7. Measures to Ensure the Security of Personal Information
The Company takes the following technical, administrative, and physical measures to ensure the security of personal information:
1) Establishment and Implementation of Internal Management Plan
The Company establishes an internal management plan and executes it to protect personal information.
2) Minimization and Training of Personnel Handling Personal Information
The Company grants, changes, and revokes access rights to the database system that processes personal information, and controls unauthorized access using intrusion prevention systems.
3) Storage and Protection of Access Records
The Company stores access records to personal information processing systems (web logs, summary information, etc.) for at least 6 months and protects them from forgery, theft, or loss through security functions.
4) Technical and Physical Measures Against Hacking and Unauthorized Access
The Company installs security programs, regularly updates and checks them, and places systems in restricted access areas with monitoring and blocking capabilities. The Company monitors network traffic and detects illegal attempts to alter information.
8. Rights of Users and Legal Representatives and How to Exercise Them
Users and legal representatives may request access to, correction of, or deletion of personal information at any time. Requests may be made via phone or email to the personal information manager, and after identity verification, the Company will take action without delay.
When correction of personal information is requested, the Company will not use or provide the relevant information until the correction is completed. If incorrect information has already been provided to a third party, the Company will notify them without delay so that the correction can be made.
Personal information that is canceled or deleted upon the request of users or legal representatives will be handled according to the retention and use period specified in “Retention and Use Period of Collected Personal Information” and will not be accessed or used for any other purpose.
9. Installation, Operation, and Rejection of Automatic Personal Information Collection Devices
The Company does not operate devices that automatically collect personal information such as cookies.
10. Personal Information Manager and Responsible Department
The Company designates the following department and personal information manager to protect users’ personal information and handle complaints related to personal information:
1) Department in Charge of Personal Information Management
Name:
Phone: - -
Email: @
2) Personal Information Manager
Name:
Phone: - -
Email: @
Users may report any personal information protection-related complaints arising from the use of the Company’s services to the personal information manager or responsible department. The Company will provide prompt and sufficient responses to users’ reports. For additional consultation or reporting regarding personal information infringement, please contact the following organizations:
1. Personal Information Dispute Mediation Committee (www.kopico.go.kr) : 02-2100-2499
2. Supreme Prosecutors’ Office Cyber Crime Investigation Unit : 02-3480-3571 (http://www.spo.go.kr/)
3. National Police Agency Cyber Bureau: (No area code) 182 (http://cyberbureau.police.go.kr/)
According to Articles 35 (Access to Personal Information), 36 (Correction or Deletion of Personal Information), and 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act, individuals whose rights or interests have been infringed due to a disposition or omission by the head of a public agency may file an administrative appeal in accordance with the Administrative Appeals Act.
※ For further details regarding administrative appeals, please refer to the Ministry of Government Legislation website (http://www.moleg.go.kr).
11. Duty of Notification
If there are additions, deletions, or changes to the contents of this Privacy Policy, the Company will notify users through the website notice board at least 7 days before implementation.