1. Collection of Personal Information Items Collected, Collection Method, and Purpose of Use
A. Items of Personal Information Collected
The Company processes the following items of personal information.
- Required Items: Name, phone number, email address, company name
- Optional Items: Workplace, job title
B. Method of Collecting Personal Information
- Users provide their information directly, after consenting to its collection, when submitting an online inquiry through the website.
C. Purpose of Collecting and Using Personal Information
The Company processes personal information for the following purposes. Personal information is not used for any purpose other than those stated below; if the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.
- Used for New Service Development and Marketing: Personal information is processed for purposes such as developing new services (products) and providing customized services, offering promotional information and event participation opportunities, verifying service validity, and analyzing access frequency or usage statistics.
2. Provision of Personal Information to Third Parties
The Company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the data subject's consent or under special provisions of law.
3. Outsourcing of Personal Information Processing
The Company does not currently outsource the processing of users' personal information to any external party. Should such outsourcing occur in the future, it will be disclosed through this Privacy Policy.
4. Retention Period and Destruction of Personal Information
A. Retention and Use Period
The Company retains users' personal information as notified and consented to, until the purpose of collection and use is achieved or the user requests withdrawal. The Company destroys the information without delay once its purpose is achieved, if the business closes, or if the user requests destruction or withdraws consent to collection and use.
B. Procedure and Method of Destroying Personal Information
The procedure and method for destroying personal information are as follows.
- Destruction Procedure: The Company selects personal information subject to destruction and destroys it upon approval from the Personal Information Protection Officer.
- Destruction Method: Personal information recorded and stored in electronic file form is destroyed in a way that prevents the record from being reproduced; personal information recorded and stored on paper is destroyed by shredding or incineration.
5. Rights of Users and Legal Representatives and How to Exercise Them
Data subjects may exercise their rights at any time with respect to this Privacy Policy, including the right to request access to, correction of, deletion of, or suspension of processing of their personal information.
The rights under paragraph 1 may be exercised in writing, by email, or by fax, in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will act on such requests without delay.
The rights under paragraph 1 may also be exercised through a legal representative or an authorized agent of the data subject. In this case, a power of attorney in the form set out in Attachment 11 of the "Notice on Methods for Processing Personal Information" (No. 2020-7) must be submitted.
Requests to access personal information or suspend its processing may be restricted under Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.
Requests for correction or deletion may not be made where the personal information in question is specified as subject to collection under other laws.
When a data subject requests access, correction, deletion, or suspension of processing, the Company verifies that the requester is the data subject themselves or their rightful representative.
6. Installation, Operation, and Refusal of Cookies
A cookie is a small piece of information that a website server sends to a member's computer, containing information about the sites visited and personal information needed to verify the member when providing services. Members may change their web browser settings to refuse cookies or to be warned before cookies are received. The Company may send cookies to a member's computer when deemed necessary for providing web services, as follows.
- Purpose of Cookie Use: Cookies are used to understand visit and usage patterns across services and websites, popular search terms, and secure-connection status, in order to provide users with optimized information.
- Installation, Operation, and Refusal of Cookies: Users have the choice of whether to allow cookies to be installed, and can set their browser options to accept all cookies, be prompted each time a cookie is stored, or refuse the storage of all cookies.
7. Technical and Administrative Safeguards for Personal Information
In handling users' personal information, the Company implements the following technical and administrative safeguards to prevent loss, theft, leakage, alteration, or damage. Personal information is transmitted securely over the network using encrypted communication. The Company also uses an intrusion prevention system to control unauthorized external access, and strives to maintain every possible technical safeguard to ensure system security.
To ensure the safe protection of users' personal information, the Company limits the handling of personal information to designated staff, assigns them separate passwords that are updated regularly, and continually emphasizes compliance with the Company's personal information handling policies through ongoing training on new security technologies and data protection obligations.
8. Personal Information Protection Officer and Responsible Department
Users may report any personal-information-related grievances arising from using the Company's services to the Personal Information Protection Officer or the responsible department. For other reports or inquiries regarding personal information infringement, please contact the organizations listed below.
→ Personal Information Protection Officer
Name: Chon Jae-wan / Title: Head of Division
– Phone: 02-2138-3481 / Email: jaewan.chon@gowit.co.kr / Fax: 02-462-2600
→ Personal Information Protection Department
Department: Management Support Team / Contact: Kim Ju-yeon
– Phone: 02-2138-3451 / Email: juyeon.kim@gowit.co.kr / Fax: 02-462-2600
For other reports or consultations regarding personal information infringement, please contact the agencies below.
- Personal Information Infringement Report Center (Korea Internet & Security Agency): privacy.kisa.or.kr / 118 (no area code)
- Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972 (no area code)
- Supreme Prosecutors Office Cyber Crime Investigation Team: www.spo.go.kr / 1301 (no area code)
- National Police Agency Cyber Bureau: ecrm.cyber.go.kr / 182 (no area code)
9. Changes to This Privacy Policy
This Privacy Policy takes effect on April 10, 2022.
