![Environmental Management System Certificate [Korean]](http://www.easytech.kr/assets/images/common/no-img1.jpg)
Easytech (hereinafter “the Company”) establishes and discloses the following personal information handling guidelines in accordance with Article 30 of the Personal Information Protection Act, in order to protect data subjects’ personal information and to handle related complaints promptly and smoothly.
- Article 1 (Purpose of processing personal information)
-
The Company processes personal information for the following purposes. Personal information being processed will not be used for purposes other than those below; if the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
- 1. Responding to website inquiries and managing related records
- Article 2 (Period of processing and retention of personal information)
-
- 1. The Company processes and retains personal information within the retention and use period permitted by law or the period consented to by the data subject at the time of collection.
-
2. The processing and retention periods are as follows:
- Within three years from the date a website inquiry is received
- Article 3 (Provision of personal information to third parties)
-
-
The Company uses personal information within the scope disclosed in advance and, in principle, does not use it beyond that scope or disclose personal information externally without the prior consent of the data subject. Exceptions apply in the following cases:
- Where the data subject has given prior consent
- Where required by law, or where an investigative agency requests information in accordance with procedures and methods prescribed by law for investigative purposes
-
The Company uses personal information within the scope disclosed in advance and, in principle, does not use it beyond that scope or disclose personal information externally without the prior consent of the data subject. Exceptions apply in the following cases:
- Article 4 (Outsourcing of personal information processing)
-
- In principle, the Company does not outsource the processing of personal information without the user’s consent. However, the Company may outsource the management of personal information to third parties within a limited scope in order to provide smooth and improved customer services. When entering into an outsourcing agreement, the Company will disclose, through notices and this privacy policy, matters required by applicable laws, including the outsourcee, scope of outsourced work, outsourcing period, contract terms (compliance with privacy-related laws, prohibition of unauthorized disclosure of personal information, allocation of liability, etc.), and safe management of personal information, and will obtain prior consent where necessary.
- Article 5 (Rights and obligations of data subjects and methods of exercise)
-
-
1. Data subjects may exercise the following rights related to personal information protection against the Company at any time:
- Request to access personal information
- Request correction if there are errors
- Request deletion
- Request suspension of processing - 2. Exercise of rights under paragraph 1 may be made in writing, by telephone, or by email to the Company, and the Company will take action without undue delay.
- 3. If a data subject requests correction or deletion of errors in personal information, the Company will not use or provide the relevant personal information until correction or deletion is completed.
- 4. Exercise of rights under paragraph 1 may be done through a legal representative or an agent such as a person authorized in writing. In such cases, a power of attorney in the form prescribed in Annex 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
- 5. Data subjects must not infringe on the personal information or privacy of themselves or others, as processed by the Company, in violation of the Personal Information Protection Act or other applicable laws.
-
1. Data subjects may exercise the following rights related to personal information protection against the Company at any time:
- Article 6 (Categories of personal information processed) The Company processes the following categories of personal information.
-
-
1. Responding to website inquiries and managing related records
- Required items: name, contact information (phone number, email address), company name
-
2. The following categories of personal information may be automatically generated and collected in the course of using internet services:
- IP address, cookies, MAC address, service usage records, visit history, records of misuse, etc.
-
1. Responding to website inquiries and managing related records
- Article 7 (Destruction of personal information)
-
- 1. When personal information is no longer needed, such as upon expiry of the retention period or achievement of the purpose of processing, the Company destroys the relevant personal information without undue delay.
-
2. Procedures and methods for destruction are as follows:
- Destruction procedure
The Company selects personal information subject to destruction, obtains approval from the person responsible for personal information protection, and then destroys the information.
- Destruction method
Personal information printed on paper is destroyed by shredding or incineration. Personal information stored in electronic file form is deleted using technical methods that make records irreproducible.
- Article 8 (Measures to ensure security of personal information)
-
- The Company takes the following measures to ensure the security of personal information.
- 1. Administrative measures: establishment and implementation of internal management plans, regular staff training, etc.
- 2. Technical measures: access control for personal information processing systems, etc.
- Article 9 (Installation, operation, and refusal of automatic collection devices such as cookies)
-
- 1. The Company uses “cookies” that store usage information and retrieve it from time to time in order to provide individualized services to users.
- 2. A cookie is a small amount of information sent from the server (http) operating a website to the user’s browser and may be stored on the user’s PC hard disk.
- 3. Purpose of cookies: They are used to understand visit and usage patterns for each service and website visited, popular search terms, secure connection status, etc., in order to provide optimized information to users.
- 4. Installation, operation, and refusal of cookies: You can refuse to store cookies by adjusting options in your browser settings (e.g., Tools or Settings > Privacy or Security, depending on the browser).
- 5. Refusing cookies may make it difficult to use personalized services.
- Article 11 (Remedies for infringement of rights and interests)
-
- Data subjects may contact the organizations below for relief, consultation, etc., regarding infringement of personal information. (These organizations are separate from the Company; please contact them if you are not satisfied with the Company’s handling of complaints or relief, or if you need further assistance.)
-
1. Personal Information Infringement Report Center (operated by Korea Internet & Security Agency, KISA)- Services: reporting personal information infringement, consultation requests
- Website: privacy.kisa.or.kr
- Phone: 118 (no area code)
- Address: 3F, Personal Information Infringement Report Center, 9 Jinheung-gil, Naju-si, Jeollanam-do 58324, Korea (Bitgaram-dong 301-2) -
2. Personal Information Dispute Mediation Committee
- Services: application for mediation of personal information disputes, collective dispute mediation (civil resolution)
- Website: www.kopico.go.kr
- Phone: 1833-6972 (no area code)
- Address: 12F, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul 03171, Korea -
3. Supreme Prosecutors’ Office Cybercrime Investigation Division: +82-2-3480-3573 (www.spo.go.kr)
-
4. Korean National Police Agency Cyber Bureau: 182 (cyberbureau.police.go.kr)
- Article 12. Changes to this privacy policy
-
- This privacy policy is effective from December 1, 2024.