SAMU (the "Company") establishes and discloses this Privacy Policy pursuant to Article 30 of the Personal Information Protection Act, in order to protect the personal information of data subjects and to handle related grievances promptly and effectively.
Article 1 (Purposes, Items, and Retention Period of Personal Information Processing)
The Company processes the minimum personal information necessary for the following purposes. The personal information processed will not be used for any purpose other than those stated below, and should the purpose of use change, the Company will take the necessary measures, such as obtaining separate consent, pursuant to Article 18 of the Personal Information Protection Act.
Website inquiry and consultation management (applies only where an inquiry form is provided)
- Items collected: [Required] name, email address, phone number / [Optional] company name
- Purpose of processing: responding to and providing guidance on customer inquiries; contact and notification for fact-finding
- Retention and use period: [3 months or 1 year] after the inquiry has been resolved (or the retention period required under applicable laws)
Items automatically generated and collected in the course of using the internet service
- Items collected: IP address, cookies, service usage records, visit history
- Purpose of processing: stable website operation and analysis of the user environment (e.g., Google Analytics)
- Retention and use period: [up to 2 years] from the date of visit
Article 2 (Procedures and Methods for Destruction of Personal Information)
① The Company destroys personal information without delay when it is no longer needed, for example upon expiration of the retention period or achievement of the processing purpose. ② The procedures and methods for destruction are as follows.
- Destruction procedure: personal information for which the purpose has been achieved is stored for a set period in accordance with internal policy and applicable laws, and then destroyed.
- Destruction method: information in electronic file form is deleted using technical methods that render the records irrecoverable, and personal information printed on paper is destroyed by shredding or incineration.
Article 3 (Rights and Obligations of Data Subjects and How to Exercise Them)
① Data subjects may, at any time, exercise their rights against the Company, including the rights to request access to, correction of, deletion of, or suspension of the processing of their personal information. ② Such rights may be exercised in writing, by email, or through other means, and the Company will act on them without delay.
Article 4 (Measures to Ensure the Security of Personal Information)
The Company takes the following measures to ensure the security of personal information.
- Technical measures: management of access privileges to the personal information processing system and similar systems; installation and periodic updating of security software
- Administrative measures: minimizing the number of employees who handle personal information and providing them with regular training
Article 5 (Installation, Operation, and Refusal of Devices that Automatically Collect Personal Information)
① The Company uses "cookies," which store and periodically retrieve usage information, in order to provide individually tailored services to users. ② Cookies are small pieces of information that the server running the website sends to the user's browser, and they may also be stored on the hard disk of the user's PC.
- Purpose of cookies: to understand users' visit and usage patterns across the services and websites they visit, and to provide them with optimized information.
- Installation, operation, and refusal of cookies: users may decline the storage of cookies through their web browser's option settings. (Edge: Settings > Cookies and site permissions / Chrome: Settings > Privacy and security > Cookies)
- However, if you decline the storage of cookies, you may experience difficulty using some features of the website.
Article 6 (Personal Information Protection Officer)
① The Company designates a Personal Information Protection Officer, as set out below, to take overall responsibility for personal information processing and to handle data subjects' grievances and provide remedies for any related harm.
- Personal Information Protection Officer / Department in charge
- Name/Position: [Kim Dong-wan / Assistant Manager]
- Contact: [041-430-3551]
② Users may direct to the Personal Information Protection Officer or the department in charge any matters relating to personal information protection that arise while using the Company's services, including inquiries, complaints, and requests for remedy. The Company will respond to and address data subjects' inquiries without delay.
Article 7 (Changes to This Privacy Policy)
This Privacy Policy takes effect on [June 15, 2026]. No prior privacy policy exists, and if this policy is amended in the future, notice will be given through the website's announcements at least seven (7) days before the changes take effect.