This English version is provided for convenience. If there is any discrepancy between this version and the Korean version, the Korean version shall prevail.

KORUST Co., Ltd. (the "Company") complies with the personal information protection provisions of the laws that information and communications service providers must observe, including the Protection of Communications Secrets Act, the Telecommunications Business Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection, and has established this Privacy Policy in accordance with those laws to protect the rights and interests of users.

This Privacy Policy may change due to changes in laws or guidelines on personal information protection or in Company policy. Please check it from time to time when visiting our website.

1. Definitions

  1. "Personal information" means information about a living individual that can identify that individual, such as name or resident registration number, including codes, letters, voice, sound and images (and including information that cannot identify an individual on its own but can easily be combined with other information to do so).
  2. "User" means a person who accesses the Company's website (https://www.korust.com) and receives the services provided by the Company.

2. Consent to Collection of Personal Information

The Company provides a procedure in which users can click "Agree" or "Disagree" to this Privacy Policy or the Terms of Use. If a user indicates agreement, the user is deemed to have consented to the collection of personal information.

3. Personal Information Collected and Method of Collection

  1. Items collected: the Company collects the following personal information to provide customer consultation and services.
    • Online inquiries, replies and customer consultation: name, email address, mobile phone number
    • Newsletter subscription and delivery: name, email address
    • Collected automatically: IP address, cookies, date and time of visit, service usage records
  2. Method of collection: through the consultation board on the website, telephone and email.

4. Protection of Children's Personal Information

  1. When collecting personal information of children under the age of 14, the Company obtains the consent of their legal guardian.
  2. The legal guardian of a child under 14 may request access to, correction of, or withdrawal of consent for the child's personal information, and the Company will take the necessary action without delay.

5. Purpose of Collection and Use

  1. Provision of services
    • Use of content provided to users and handling of consultation inquiries
    • Handling of complaints and civil petitions, and delivery of notices
  2. Development of new services and marketing/advertising
    • Delivery of advertising information such as events, and delivery of prizes
    • Development of new services, provision of services and advertising based on demographic characteristics
    • Identification of access frequency and statistics on users' use of the services

6. Retention and Use Period

The Company retains and uses users' personal information only while providing services to them. When a user withdraws consent, when the purpose of collection and use has been achieved, when the retention period has expired, or when the business is discontinued, the Company destroys the personal information without delay. However, the following information is retained for the period stated below.

  • Under the Act on the Consumer Protection in Electronic Commerce:
    • Personal information and consultation details provided when submitting an inquiry: 3 years
    • Records of consumer complaints or dispute resolution: 3 years

7. Procedure and Method of Destruction

In principle, once the purpose of use has been achieved, the Company destroys the information without delay in accordance with the retention and use period.

  1. Procedure: information entered to use the website is stored for a certain period in accordance with internal policies and relevant laws (see "Retention and Use Period") after the purpose of use has been achieved, and is then deleted or destroyed.
  2. Method: personal information stored in electronic files is deleted using technical methods that make the records unrecoverable. Personal information printed on paper is shredded or incinerated.

8. Provision to and Sharing with Third Parties

The Company uses users' personal information within the scope described in Section 5 and, in principle, does not use it beyond that scope or provide it to third parties without the user's prior consent.

To provide better services, the Company may provide or share users' personal information with third parties. In that case, the Company will notify users individually by email or in writing, or through the terms at the time of an inquiry, of who will receive the information, what information will be provided or shared, why, and how long and how it will be protected, and will obtain consent. Information will not be provided or shared without the user's consent. The same procedure applies when the relationship changes or ends.

The following cases are exceptions:

  1. When the user has agreed in advance to the disclosure of personal information;
  2. When required by law, or when requested by an investigative agency in accordance with the procedures and methods prescribed by law for investigative purposes.

9. Outsourcing of Personal Information Processing

To improve its services, the Company outsources the processing of personal information as follows, and requires in the outsourcing contract that personal information be managed safely in accordance with relevant laws.

ContractorOutsourced work
RAON B&P Co., Ltd.Website management and operation

When concluding an outsourcing contract, the Company specifies in the contract, in accordance with Article 26 of the Personal Information Protection Act, the prohibition of processing personal information for purposes other than the outsourced work, technical and managerial protective measures, restrictions on re-outsourcing, management and supervision of the contractor, and liability for damages, and supervises whether the contractor processes personal information safely. Any change in the outsourced work or contractor will be disclosed in this Privacy Policy without delay.

10. Rights of Users and How to Exercise Them

  1. Users may view or modify their registered personal information and request its deletion at any time.
  2. To view or modify personal information, use "Edit My Information". To cancel membership (withdraw consent), contact the Privacy Officer in writing, by telephone or by email.
  3. If a user requests correction of an error in personal information, the Company will correct it as soon as possible. If incorrect personal information has already been provided to a third party, the Company will notify the third party of the correction without delay.
  4. Personal information cancelled or deleted at a user's request is handled as described in "6. Retention and Use Period" and cannot be viewed or used for any other purpose.

11. Installation, Operation and Refusal of Cookies

A cookie is a small amount of information sent by a website server to the user's computer, containing information about the website visited and personal information needed to provide the service. Users can change their web browser settings to refuse cookies or to be warned when cookies are received. The Company may send cookies to the user's computer when it considers this necessary for using its web services.

  1. Purpose: to provide information tailored to the user's interests; to analyse access frequency and time of use to understand preferences for targeted marketing; to track information viewed with interest to provide personalised services; to analyse user habits as a basis for service improvements; and in connection with posting on boards.
  2. Installation, operation and refusal
    • Users can choose whether to accept cookies. By setting options in the web browser, users can accept all cookies, be asked each time a cookie is stored, or refuse all cookies.
    • If cookies are refused, some of the Company's services may be difficult to use.
    • How to set cookies: Firefox: https://support.mozilla.org/kb/disable-third-party-cookies / Chrome: https://support.google.com/chrome/answer/95647 / Edge: https://support.microsoft.com/microsoft-edge / Safari: https://support.apple.com/guide/safari/sfri11471/mac

12. Technical and Managerial Safeguards

To prevent loss, theft, leakage, alteration or damage of users' personal information, the Company takes the following technical and managerial measures.

  1. Technical measures
    • Users' personal information is strictly protected, and users should not disclose it to anyone. The Company recommends closing the web browser after finishing use, especially when sharing a PC with others or using one in a public place (office, school, library, internet café, etc.).
    • The Company uses antivirus programs to prevent leakage or damage of personal information by hacking or computer viruses, backs up data regularly, transmits personal information securely over the network through encrypted communication, controls unauthorised external access with an intrusion prevention system, and endeavours to have all possible technical means in place to secure the system.
  2. Managerial measures
    • The Company limits the staff who handle personal information to designated persons, issues separate passwords that are updated regularly, and provides ongoing training on new security technologies and personal information protection obligations to ensure compliance with this Privacy Policy.
    • The Company is not responsible for problems caused by leakage of personal information due to the user's own carelessness or problems on the internet.

13. Privacy Officer

Users may report any complaints related to personal information protection arising from the use of the Company's services to the Privacy Officer or the responsible department. The Company will respond promptly and sincerely to inquiries regarding personal information.

  • Privacy Officer, KORUST Co., Ltd. — Email: sales@korust.com

14. Remedies for Infringement of Rights

If you need to report or consult about an infringement of personal information, please contact the following organisations.

  • Personal Information Infringement Report Center (KISA): privacy.kisa.or.kr, tel. 118
  • Personal Information Dispute Mediation Committee: www.kopico.go.kr, tel. 1833-6972
  • Supreme Prosecutors' Office Cyber Investigation: www.spo.go.kr, tel. 1301
  • Korean National Police Agency Cyber Bureau: ecrm.police.go.kr, tel. 182

15. Notice of Changes

Any addition, deletion or modification of this Privacy Policy will be announced through the "Notice" board at least 7 days before the revision. However, significant changes to users' rights, such as changes to the items of personal information collected or the purpose of use, will be announced at least 30 days in advance, and consent may be obtained again if necessary.

Announced: July 1, 2021
Effective: July 1, 2021