FASCOENG (hereinafter referred to as the "Company") establishes and discloses the following personal information processing guidelines to protect the personal information of data subjects and handle related grievances promptly and smoothly in accordance with Article 30 of the Personal Information Protection Act.
- Article 1 (Purpose of Processing Personal Information)
-
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
-
1. Providing responses to customer inquiries and managing their status on the website
- Article 2 (Processing and Retention Period of Personal Information)
-
-
1. The Company processes and retains personal information within the period of retention and use of personal information in accordance with laws or within the period of retention and use of personal information agreed upon when collecting personal information from the data subject.
-
2. The processing and retention period is as follows:
- Within 3 years from the date of receipt of website customer inquiries
- Article 3 (Provision of Personal Information to Third Parties)
-
-
The Company uses personal information within the pre-notified scope and does not disclose personal information externally or use it beyond this scope without the prior consent of the data subject. However, the following cases are exceptions:
- When the data subject has given prior consent
- When there is a request from investigative agencies in accordance with procedures and methods prescribed by laws and regulations for investigation purposes
- Article 4 (Outsourcing of Personal Information Processing)
-
-
In principle, we do not outsource the processing of personal information without the user's consent. However, the Company may outsource the management of personal information to other companies within a limited scope for smooth and enhanced customer service. When outsourcing, we will notify through notices and privacy policy regarding the outsourcing contractor, outsourcing work content, outsourcing period, outsourcing contract details (compliance with personal information protection laws, prohibition of providing personal information to third parties and liability), and matters concerning safe management of personal information, and obtain prior consent when necessary.
- Article 5 (Rights and Obligations of Data Subjects and Methods of Exercise)
-
-
1. Data subjects may exercise the following personal information protection-related rights to the Company at any time:
- Request to view personal information
- Request for correction in case of errors
- Request for deletion
- Request to stop processing
- 2. Rights under Paragraph 1 may be exercised through written document, telephone, or email to the Company, and the Company will take action without delay.
- 3. When the data subject requests correction or deletion of errors in personal information, the Company will not use or provide such personal information until the correction or deletion is completed.
- 4. The rights under Paragraph 1 may be exercised through a legal representative or an agent who has received delegation. In this case, a power of attorney according to Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
- 5. The data subject must not infringe upon the personal information and privacy of themselves or others that the Company processes in violation of relevant laws such as the Personal Information Protection Act.
- Article 6 (Personal Information Items Being Processed)
-
-
1. Providing responses to customer inquiries and managing their status on the website
- Required items: Name, Contact information (phone number, email address), Company name
-
2. The following personal information items may be automatically generated and collected during the process of using Internet services:
- IP address, cookies, MAC address, service usage records, visit records, malicious usage records, etc.
- Article 7 (Destruction of Personal Information)
-
-
1. The Company destroys personal information without delay when it becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose
-
2. The procedures and methods for destroying personal information are as follows:
- Destruction procedure
The Company selects personal information for which destruction reasons have occurred and destroys it with the approval of the Company's personal information protection officer.
- Destruction method
Personal information printed on paper is destroyed by shredding or incineration. Personal information stored in electronic file format is deleted using technical methods that prevent recovery of records.
- Article 8 (Measures to Ensure Safety of Personal Information)
-
- The Company takes the following measures to ensure the safety of personal information:
- 1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
- 2. Technical measures: Management of access rights to personal information processing systems
- Article 9 (Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)
-
- 1. The Company uses 'cookies' that store and retrieve usage information to provide individualized customized services to users.
- 2. Cookies are small pieces of information sent by the server (http) operating the website to users' computer browsers and may be stored on users' PC hard drives.
- 3. Purpose of using cookies: They are used to provide optimized information to users by understanding visit and usage patterns, popular search terms, secure access status, etc., for each service and website visited by users.
- 4. Installation, operation, and rejection of cookies: Cookie storage can be rejected through option settings in the Tools > Internet Options > Privacy menu at the top of the web browser.
- 5. If cookie storage is rejected, there may be difficulties in using customized services.
- Article 11 (Remedies for Rights Infringement)
-
- Data subjects may inquire about the following institutions regarding relief for personal information infringement, consultation, etc. (The following institutions are separate from the Company, and if you are not satisfied with the Company's own personal information complaint handling and damage relief results, or if you need more detailed help, please inquire)
-
1. Personal Information Infringement Report Center (operated by KISA)
- Jurisdiction: Report personal information infringement, request consultation
- Website: privacy.kisa.or.kr
- Phone: (without area code) 118
- Address: 3rd Floor, Personal Information Infringement Report Center, 9 Jinheung-gil, Naju-si, Jeollanam-do (301-2 Bitgaram-dong) 58324
-
2. Personal Information Dispute Mediation Committee
- Jurisdiction: Personal information dispute mediation application, collective dispute mediation (civil resolution)
- Website: www.kopico.go.kr
- Phone: (without area code) 1833-6972
- Address: 12th Floor, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul (03171)
-
3. Supreme Prosecutors' Office Cybercrime Investigation Division: 02-3480-3573 (www.spo.go.kr)
-
4. National Police Agency Cyber Security Bureau: 182 (cyberbureau.police.go.kr)
- Article 12. Changes to Privacy Policy
-
-
This privacy policy is effective from January 1, 2025.
