Privacy
Policy
Gridwiz, Inc.,
(hereinafter referred to as the “Company”) has established and presents the
following personal information policies to protect the personal information of
users, and to promptly handle the arising issues therefrom.
Article
1 (Items of personal information processed)
The Company
collects and processes the following personal information via the
website(http:// , hereinafter referred to as the “Website”).
1. Personal
information collected via ‘Q&A’ webpage: the following personal information
could either be collected through the data subject’s provision, or could be
obtained from a third party upon the consent of the data subject.
-
Obligatory: name, phone
number(either home or mobile), e-mail address, company name, position
2. Personal
information automatically created and collected during the time of using the
Website.
-
IP address, record for
service use, record for access, record for visit.
Article
2 (Purpose of personal information process)
The Company
collects and uses personal information for the following purposes.
1. Operating
the ‘Q&A’ webpage
-
Identifying the inquirer,
confirming the question, to contact and/or notice the inquirer, and to answer the
question.
Article
3 (Processing and retention period of personal information)
①
The Company processes and
retains personal information within the period of retention and use of personal
information in accordance with the relevant laws, or within the period of
retention and use of personal information as agreed up on when collecting
personal information from the data subjects.
②
The period of retention
and use of personal information is as below:
|
Personal Information |
Period of retention and use |
|
name, phone number(either home or
mobile), e-mail address, company name, position |
1 year |
Article
4 (Destruction of personal information)
① The
Company shall destroy personal information without delay when the personal
information becomes unnecessary owing to the expiry of the retention period or
achievement of process purpose, etc.
② If
the retention of the personal information is still required despite the expiry
of the retention period as agreed upon with the data subject or achievement of
process purpose, the Company will transfer the personal information concerned
to a separate database (DB) or retain it at other storage place.
③ The
procedure and method for destruction are as follows:
1. Destruction procedure: The Company shall select the personal
information with reason for its destruction and destroy the personal
information with the approval of a personal information protection officer of
the Company.
2. Destruction method: The Company shall destroy the personal
information which is recorded and stored in the form of electronic files using
the technical measures blocking its recovery and revival, and the personal
information recorded and stored in paper documents shall be shredded or
destroyed by a paper shredder.
Article 5 (Use and provision of personal information within the
scope reasonably related to the purpose of collection)
The Company may use or provide personal information to a third
party without the consent of the data subject, considering each of the
following criteria within a reasonable scope and the original purpose of
collection.
1. Whether or not it is related to the original purpose of
collection: Judgment based on whether the original purpose of collection and
the purpose of additional use and provision are related in terms of their nature
or tendency;
2. Whether or not the further use or provision of personal
information is predictable considering the circumstances in which the personal
information was collected or the processing practices: Judgment based on the
relationship between the personal information controller and the data subject,
the level of technology and the rate of development, and general circumstances
(practice) established over a substantial amount of time;
3. Whether the interests of the data subject are unreasonably
infringed: Judgment basd on whether the interests of the data subject are
substantially infringed in relation to the additional purpose of use and
whether the infringement of the interests is unreasonable; and
4. Whether measures necessary to secure safety, such as
pseudonymization or encryption, have been taken: Judgment by considering
whether safety measures are taken in consideration of the possibility of
infringement.
Article 6 (Rights and duties of users and legal representatives,
and exercising method)
① The data subject can
exercise the following rights related to personal information protection
against the Company at any time.
1. Request to read personal
information
2. Request for correction in
case of errors, etc.
3. Request for deletion
4. Request to stop
processing
② The exercise of the
rights pursuant to Paragraph 1 can be made to the Company in writing, by phone,
or by e-mail, and the Company will take action without delay.
③ If the data subject
requests correction or deletion of personal information, the Company shall not
use or provide the personal information until the correction or deletion is
completed.
④ The exercise of rights
pursuant to Paragraph 1 may be done through an agent such as a legal
representative of the data subject or a person who has been delegated. In this
case, a power of attorney must be submitted to the Company.
⑤ The data subject must not
infringe the personal information and privacy of the data subject himself or
others processed by the Company in violation of related laws such as the
Personal Information Protection Act.
Article 7 (Installation, operation and rejection of automatic
personal information collection devices)
①
The Company
uses 'cookies' to store and frequently retrieve usage information to provide
users with individually customized services.
②
Cookies are
a small amount of information sent to the user's mobile device by the server, which
are used to operate the website, etc., and are also stored in the user's mobile
device storage space.
1.
Purpose of
using cookies: It is used to manage security and improve service by analyzing
the user's access frequency and visit time, identifying the user's service
usage pattern and tracking traces, and identifying the number of visits.
2.
Installation,
operation, and rejection of cookies: Users have the option with regards to the
installation of cookies. Therefore, the users can accept all cookies via options
in the mobile device, order to request for a confirmation each time a cookie is
saved, or refuse to save all cookies.
3.
If you
refuse to store cookies, you may experience difficulties in using customized
services.
③
The Company
improves service efficiency and user experience through non-personally
identifiable information.
Article 8 (Personal information
protection officer)
① The
Company designates a personal information protection officer as follows who is
responsible for processing of personal information, handles users’ complaints and
offer relief for damages.
Personal
Information Protection Officer
-
Name: June
-
Phone: 031-698-3381
② The
data subject may inquire to the personal information protection officer for all
personal information protection-related inquiries, complaints, damages, etc.
that occurred while using the Company's website. The Company responds and
handles inquiries from data subjects without delay.
Article 9 (Measures to ensure the safety of personal
information)
The
Company takes the following measures to ensure the safety of personal
information.
1.
The Company
restricts the right to access the user's personal information to those who
perform duties directly against the user, those who perform personal
information management tasks such as the person in charge of personal
information management, and those who are inevitably dealing with personal
information for business purposes.
2.
The Company
provides in-house training to the employees handling personal information, which
focuses on new security technologies and obligations to protect personal information.
3.
If personal
information is lost, leaked, altered, or damaged due to the mistake of an
internal manager or an accident in technical management, the Company will
immediately notify the user and take appropriate measures and compensation.
Article
10 (Personal information complaint service)
The data subject
may request relief of damages and consultation for personal information
infringement to the following organizations.
-
Personal Information
Infringement Report Center (operated by the Korea Internet & Security
Agency): (without area code) 118
-
Personal Information
Dispute Mediation Committee: (without area code) 1833-6972
-
Supreme Prosecutors'
Office Cyber Crime Investigation Team: (without area code) 1301
-
National Police Agency
Cyber Security Bureau: (without area code) 182
Article 11 (Scope
of application and amendment)
① The
Website may contain links to third-party websites, and this Privacy Policy
applies only to the Website.
② If
there are any additions, deletions, or changes to the contents of this Privacy
Policy, we will notify users in advance through a notice on the website at
least 7 days prior to the revision. However, we will notify users at least 30
days in advance of any major changes such as the items of personal information
to be collected or provision of third parties.
Supplementary
provision (Effective Date)
This Privacy
Policy shall come into effect on August 22, 2022.