In accordance with Article 30 of the Personal Information Protection Act of Korea, K1 Co., Ltd. (“the Company”) establishes and discloses the following privacy policy to protect the personal data of data subjects and to handle related concerns promptly.
Article 1 (Purpose of Processing)
The Company processes the minimum personal data necessary to receive and respond to enquiries submitted through this website.
- Reviewing and replying to your enquiry
- Contacting you for follow-up discussion such as consultation or quotation
Personal data is not used for any purpose beyond those stated above. Should the purpose change, the Company will obtain separate consent and take the other measures required under Article 18 of the Act.
Article 2 (Categories of Personal Data Processed)
| Category | Data collected | Method of collection |
|---|---|---|
| Required | Name, email address, purpose of enquiry, message | Website enquiry form |
| Optional | Company / organisation name, phone number | Website enquiry form |
IP address, access time and browser information may be generated and collected automatically in the course of using the service.
Article 3 (Processing and Retention Period)
The Company processes and retains personal data within the retention and use period consented to at the time of collection.
- Personal data relating to enquiries: three years from the date the enquiry is received
Where retention is required by applicable law, the data is kept for the period prescribed by that law.
Article 4 (Provision to Third Parties)
The Company processes personal data only within the scope set out in Article 1, and provides it to third parties only with the consent of the data subject or where Articles 17 and 18 of the Act otherwise permit. At present the Company does not provide personal data to any third party.
Article 5 (Outsourcing of Processing)
To provide the service smoothly, the Company outsources personal data processing as follows.
| Processor | Outsourced work |
|---|---|
| Cafe24 Corp. | Website server operation and maintenance |
In the outsourcing contract the Company stipulates the prohibition of processing beyond the outsourced purpose, technical and administrative safeguards, and restrictions on sub-processing, and supervises whether the processor handles personal data securely.
Article 6 (Destruction of Personal Data)
When the retention period expires or the purpose of processing is achieved, the Company destroys the personal data without delay.
- Electronic files: permanently deleted by a method that makes recovery impossible
- Paper documents: shredded or incinerated
Article 7 (Rights of Data Subjects and How to Exercise Them)
Data subjects may at any time request access to, correction of, deletion of, or suspension of the processing of their personal data.
- Such requests may be made in writing or by email, and the Company will act on them without delay.
- Where correction of an error is requested, the Company will not use or provide the personal data concerned until the correction is complete.
- Where rights are exercised through a representative, a letter of authority must be submitted.
Article 8 (Security Measures)
- Minimising the number of staff who handle personal data, and providing regular training
- Managing the grant, change and revocation of access rights to the processing system, and retaining access logs
- Encrypting personal data in transit (HTTPS)
- Installing security software such as anti-virus programs and checking it periodically
Article 9 (Automatic Collection Devices and How to Refuse Them)
The Company does not use cookies, which store and retrieve user information.
Article 10 (Data Protection Officer)
The Company has designated the following data protection officer to take overall responsibility for personal data processing and to handle complaints and remedies from data subjects.
| Category | Details |
|---|---|
| Name · Position | Sangwoon Kang, Chief Executive Officer |
| Telephone | 055-736-5959 |
| minseon.kim@k1tnc.co.kr |
Data subjects may contact the data protection officer with any question, complaint or request for remedy relating to personal data arising from their use of the Company services.
Article 11 (Remedies for Infringement of Rights)
To obtain redress for infringement of personal data rights, data subjects may apply to the following bodies for dispute resolution or advice.
- Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Centre: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors Office, Cyber Investigation Division: 1301 (www.spo.go.kr)
- National Police Agency, Cyber Bureau: 182 (ecrm.police.go.kr)
Article 12 (Changes to This Policy)
This privacy policy applies from the date it is published. Where content is added, removed or amended in line with changes to legislation, policy or security technology, the change will be announced on this website at least seven days before it takes effect.