Privacy Policy

1. Personal data we collect

We do not require account registration. Personal data is collected only when you voluntarily submit one of the forms below.

Attachments are uploaded directly from your browser to the storage service using a signed URL; they do not pass through this website’s server.

2. Purpose of processing

• ·Responding to inquiries and providing the information requested
• ·Preparing and delivering quotations, and communicating about projects
• ·Reviewing applications and managing the recruitment process

We do not use personal data for any purpose beyond the above. If a new purpose arises, we will obtain your consent in advance.

3. Retention and use period

Inquiries, quotation requests, and applications — including resumes and portfolios — are retained for two years from the date of collection and then destroyed. If you request deletion before that, we destroy the data without delay.

Where a specific retention period is required by law, we retain the data for that period. Otherwise we destroy it without delay once the purpose has been achieved.

4. Provision to third parties

We do not provide personal data to third parties except with your consent or where required by law.

5. Outsourced processing

To provide our services, we entrust certain personal data processing tasks as set out below. Our contracts require the processor to keep personal data secure.

If the entrusted tasks or the processor change, we will announce the change through this policy.

6. Your rights and how to exercise them

You may at any time request access to, correction of, deletion of, or suspension of the processing of your personal data. Requests may be made in writing or by email to the contact below, and we will act on them without delay.

You may exercise these rights through a representative, such as your legal guardian or an authorised agent. In that case a power of attorney in the form prescribed by law is required.

7. Destruction of personal data

Once the retention period has elapsed or the purpose of processing has been achieved, we destroy the data without delay. Electronic files are deleted by a method that prevents recovery, and printed materials are shredded or incinerated.

8. Security measures

• ·Limiting access to personal data to the minimum number of staff required
• ·Transmitting data over encrypted connections (HTTPS)
• ·Storing submissions and attachments in access-controlled systems
• ·Reviewing access rights when staff join, change roles, or leave

9. Data protection officer

We have designated a data protection officer with overall responsibility for the processing of personal data, and for handling enquiries, complaints, and remedies relating to it.

You may direct any enquiry about personal data arising from your use of our services to the data protection officer. We will respond and act on it without delay.

10. Remedies for infringement

If your rights have been infringed, you may apply to the following bodies for dispute resolution or consultation.

• ·Personal Information Dispute Mediation Committee — kopico.go.kr / 1833-6972
• ·Privacy Complaint Centre, KISA — privacy.kisa.or.kr / 118
• ·Cybercrime Investigation Division, Supreme Prosecutors’ Office — spo.go.kr / 1301
• ·Cyber Bureau, National Police Agency — ecrm.police.go.kr / 182

11. Changes to this policy

If this policy is added to, removed from, or corrected, we will announce the change on this page at least seven days before it takes effect. Where the change materially affects your rights, we will give at least thirty days’ notice.