ASICLAND Co., Ltd. (hereinafter referred to as "the Company") establishes and discloses the following privacy policy to protect the personal information of data subjects and to handle any related complaints promptly and smoothly, in accordance with Article 30 of the Personal Information Protection Act.
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. The processed personal information will not be used for purposes other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be implemented.
Article 2 (Processing and Retention Period of Personal Information)
- The Company processes and retains personal information within the period of retention and use of personal information as prescribed by law or agreed upon when collecting personal information from the data subject.
- The processing and retention periods for each type of personal information are as follows:
- Membership Registration and Management on the Website: Until withdrawal from the business/organization website. However, in the following cases, until the end of the relevant period:
- If there are ongoing investigations or inquiries due to violations of relevant laws, until the end of the investigation or inquiry.
- If there are remaining creditor-debtor relationships arising from the use of the website, until the settlement of the said relationships.
Article 3 (Rights of Users and Legal Representatives and How to Exercise Them)
- Data subjects may exercise the following personal information protection rights at any time regarding the Company:
- Request access to personal information
- Request correction if there are errors
- Request deletion
- Request suspension of processing
- The rights under Paragraph 1 can be exercised by the data subject through written, telephone, email, or fax, and the Company will respond without delay.
- If the data subject requests correction or deletion of errors in personal information, the Company will not use or provide the said personal information until the correction or deletion is completed.
- The rights under Paragraph 1 can be exercised through a legal representative or an authorized agent. In this case, a power of attorney according to the form prescribed in Annex No. 11 of the Personal Information Protection Act Enforcement Rules must be submitted.
- Data subjects must not infringe on their own or others' privacy or personal information that is processed by the Company in violation of the Personal Information Protection Act and other related laws.
Article 4 (Items of Personal Information Processed)
The Company processes the following personal information items:
Membership Registration and Management on the Website
- Required items: Name, date of birth, ID, password, phone number, email address
- Optional items: Areas of interest
Provision of Goods or Services
- Required items: Name, date of birth, ID, password, phone number, email address
- Optional items: Areas of interest
During the use of internet services, the following personal information items may be automatically generated and collected:
- IP address, cookies, MAC address, service use records, visit records, records of bad use, etc.
Article 5 (Destruction of Personal Information)
- The Company will destroy personal information without delay when the retention period has expired or the purpose of processing has been achieved.
- If the retention period consented to by the data subject has expired or the purpose of processing has been achieved, but personal information must be retained in accordance with other laws, the relevant personal information will be moved to a separate database (DB) or stored in a different storage location.
- The procedures and methods for destroying personal information are as follows:
- Destruction Procedure The Company selects personal information to be destroyed and destroys it with the approval of the Company's personal information protection officer.
- Destruction Method Personal information recorded and stored in electronic file format will be destroyed using technical methods that make the records unrecoverable (e.g., low-level format). Personal information recorded and stored in paper documents will be destroyed by shredding or incineration.
Article 6 (Measures to Ensure the Security of Personal Information)
The Company takes the following measures to ensure the security of personal information:
- Administrative Measures: Establishment and implementation of internal management plans, regular employee training, etc.
- Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs.
- Physical Measures: Access control to computer rooms, data storage rooms, etc.
Article 7 (Matters Concerning the Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)
- The Company uses 'cookies' to provide individualized customized services to users by storing and retrieving user information from time to time.
- Cookies are small amounts of information sent by the server (HTTP) used to operate websites to the user's computer browser, and are sometimes stored on the user's hard disk.
- Purpose of Using Cookies: To analyze the visit and usage patterns of users, popular search terms, secure access, etc., to provide optimized information to users.
- Installation, Operation, and Refusal of Cookies: You can refuse to save cookies through the option setting in the privacy menu of your web browser's tools>internet options. However, if you refuse to save cookies, there may be difficulties in using customized services.
Article 8 (Personal Information Protection Officer)
- The Company designates the following personal information protection officer to take overall responsibility for the handling of personal information, to handle complaints and remedy damages related to personal information processing:
- Personal Information Protection Department
- Department: Management Support Headquarters / HR Infrastructure Operation Team
- Manager: Seongwook Lee
- Contact: <031-212-1984>, asicland@asicland.com
- Data subjects may contact the personal information protection officer and department regarding any inquiries, complaints, or damage relief related to personal information protection that occur while using the Company's services (or business). The Company will respond and handle these inquiries without delay.
Article 9 (Request for Access to Personal Information)
Data subjects may request access to personal information in accordance with Article 35 of the Personal Information Protection Act through the following department. The Company will strive to promptly process personal information access requests from data subjects.
- Department for Receiving and Processing Personal Information Access Requests
- Department: Management Support Headquarters / HR Infrastructure Operation Team
- Manager: Seongwook Lee
- Contact: <031-212-1984>, asicland@asicland.com
Article 10 (Remedies for Infringement of Rights)
Data subjects may contact the following institutions for remedies, consultation, etc., regarding personal information infringement:
Personal Information Infringement Report Center (operated by the Korea Internet & Security Agency)
- Responsibilities: Reporting personal information infringement, applying for consultation
- Website: privacy.kisa.or.kr
- Phone: (no area code) 118
- Address: (58324) 9 Jinheung-gil, Naju-si, Jeollanam-do, 3rd Floor, Personal Information Infringement Report Center
Personal Information Dispute Mediation Committee
- Responsibilities: Applying for personal information dispute mediation, collective dispute mediation (civil resolution)
- Website: www.kopico.go.kr
- Phone: (no area code) 1833-6972
- Address: 4th Floor, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul
Supreme Prosecutors' Office Cyber Crime Investigation Division: 02-3480-3573 (www.spo.go.kr)
Cyber Bureau of the Korean National Police Agency: 182 (http://cyberbureau.police.go.kr)
Article 11 (Enforcement and Changes to the Privacy Policy)
This privacy policy is effective from July 1, 2024.
