Privacy policy

1. Personal information we process and why

① Contact form — required: name, email address, message; optional: organization, phone number, inquiry type. Purpose: reviewing and replying to your inquiry, and keeping a record of how it was handled.

② Misconduct report — required: subject, details; optional: report type, contact for a reply. Reports without contact details are anonymous; contact details are collected only with your separate consent. Purpose: receiving, investigating and replying to reports.

③ Automatically generated information — IP address, access time and browser/device information (web-server access logs), and an identifier derived from your IP address when you submit an inquiry or report (the raw IP is not stored with it). Purpose: responding to security incidents, preventing spam and abuse, and stable operation.

④ This website has no member registration, and the information collected is not used for marketing or advertising.

2. Retention periods

① Inquiries: kept for [○] year(s) after the inquiry is handled (to be confirmed), then destroyed without delay.

② Misconduct reports: kept for [○] year(s) after the investigation ends (to be confirmed), then destroyed, or for as long as the law requires.

③ Web-server access logs: kept for [3 months] (to be confirmed), then destroyed.

3. Provision to third parties

The Company does not provide personal information to third parties, except where you have given prior consent, or where required by law or requested by an investigative authority following the procedures set by law.

4. Outsourcing of processing

The Company currently does not outsource the processing of personal information. (If server operation, notification email or similar services are entrusted to a vendor, the vendor and the entrusted tasks will be disclosed here. Current hosting provider: [to be confirmed])

5. Destruction procedure and method

Personal information is destroyed without delay once the retention period ends or the purpose is achieved. Electronic files are permanently deleted in a way that cannot be restored; printouts are shredded or incinerated. Information that must be kept by law is stored separately from other data.

6. Your rights and how to exercise them

You may at any time ask the Company to let you access, correct or delete your personal information or to suspend its processing, and you may withdraw consent. Requests can be made to the privacy officer below in writing, by phone or by email; the Company will act without delay (within 10 days) and tell you the result. Requests may be made through an agent with a power of attorney. Because anonymous reports cannot be linked to an identity, requests to access or correct them may not be possible.

7. Security measures

The Company protects personal information through: ① least-privilege access and protected administrator accounts (one-way password hashing, login-attempt limits, session expiry); ② encryption in transit (HTTPS); ③ retention and review of access records; ④ protection against spam and repeated submissions (rate limits); ⑤ restricting who can read misconduct reports to the minimum, and not storing identifiers such as the IP address for reports submitted without contact details; ⑥ regular security checks and patching.

8. Cookies

The public pages of this website do not use cookies, and no advertising or analytics cookies or tracking tools are used. A session cookie to keep administrators signed in is used only on the administrator screen.

9. Privacy officer

Name / title: [to be confirmed] · Department: [to be confirmed] · Phone: [to be confirmed] (main line +82-31-611-6166) · Email: [to be confirmed]

For questions, complaints or remedies concerning the processing of personal information, please contact the officer or department above; we will respond promptly.

10. Remedies for infringement

You can report or seek advice on personal-information infringement from: ① Personal Information Dispute Mediation Committee 1833-6972 (www.kopico.go.kr); ② Personal Information Infringement Report Center 118 (privacy.kisa.or.kr); ③ Supreme Prosecutors' Office 1301 (www.spo.go.kr); ④ National Police Agency Cybercrime Reporting System 182 (ecrm.police.go.kr).

11. Changes to this policy

If this policy changes, we will announce it in the website notices at least 7 days before it takes effect (30 days for material changes). Effective date: [YYYY.MM.DD — to be confirmed]