Announcement date: November 21, 2023
Effective date: December 01, 2023

 

According to Article 30 of the Personal Information Protection Act, "HUNESION Co., Ltd. (https://www.hunesion.com/' and https://ionenet-ncloud.hunesion.com ') establishes and discloses a personal information processing policy as follows to protect customers' personal information and to handle related grievances quickly and smoothly.

 

 

Article 1 (Purpose of processing personal information)

① "HUNESION Co., Ltd. (https://ionenet-ncloud.hunesion.com and https://www.hunesion.com/' ') processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

Sortation	Purpose of processing
HUNESION Homepage	Apply for product brochures, register for partner opportunities, support technical support and disability, Purpose of public relations, such as customer newsletter application, etc
Cloud Services	Service application/contract, various notices/notifications

 

 

Article 2 (Period for processing and holding personal information)

① The company processes and retains personal information within the period of personal information retention and use under the Act or within the period of personal information retention and use agreed upon when collecting personal information from customers.

② The processing and retention period of personal information is as follows.

Sortation	Preservation reason	Retention period
Retention of personal information	Customer Agree	withdrawal of membership or consignment contract Until the end

③ In principle, after the purpose of collecting and using personal information is achieved, the information is destroyed without delay. However, if it is necessary to preserve it in accordance with the provisions of the relevant laws and regulations, the member information shall be retained for a certain period of time prescribed by the relevant laws and regulations as follows.

Archive Information	Preservation reason	Retention period
Records of contract or subscription withdrawal, etc	Act on Consumer Protection in Electronic Commerce, etc	5 years
Records on payment and supply of goods, etc		5 years
Record of consumer complaints or dispute resolution		3 years
Records of marking and advertising		6 months
Log In History	Communications Secrets Protection Act	3 months

 

 

Article 3 (Providing personal information processing to a third party)

① The company does not provide personal information to a third party, and if it needs to provide personal information to a third party, this personal information processing policy is revised as below and stipulates necessary matters for safe management of personal information in accordance with relevant laws and regulations.

② The company processes the customer's personal information only within the scope specified in "Article 1 (Purpose of Processing Personal Information)" and will provide personal information to third parties only if it falls under Articles 17 and 18 of the Personal Information Protection Act, such as consent of the information subject and special provisions of the law.

a person	Items to be provided	Purpose of use by the recipient	Retention and use period
-	-	-	Until the purpose of use is achieved

 

 

Article 4 (Consignment of Personal Information Processing)

① The company does not entrust personal information, and if it is necessary to entrust personal information, this personal information processing policy is revised as below and stipulates necessary matters for safe management of personal information in accordance with related laws and regulations.

② The company will entrust the personal information processing work as follows for smooth processing of personal information.

a person	Items to be provided	Purpose of use by the recipient	Retention and use period
-	-	-	Until the purpose of use is achieved

③ According to Article 26 of the Personal Information Protection Act, the company will stipulate in the contract and supervise whether the trustee handles personal information safely, such as prohibition of personal information processing, technical and management protection measures, restrictions on re-consignment.

④ If the eontents of the entrusted work or the trustee changes, we will disclose it through this personal information processing policy without delay.

 

 

Article 5 (Information subject, rights and obligations, and how to exercise them)

① Customer may exercise any of the following privacy rights to the Company at any time.

1. Request to view personal information

2. Request correction if there is an error, etc

3. Deletion request

4. Request for suspension of processing

5. Withdrawal of Consent to Processing

② The exercise of rights under paragraph (1) may be carried out in writing, e-mail, fax, etc. pursuant to Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and the company will take action without delay.

③ If a customer requests correction or deletion of personal information errors, etc., the personal information will not be used or provided until the correction or deletion is completed.

④ The exercise of rights under paragraph 1 may be carried out through a legal representative of the customer or an agent who has been delegated. In this case, you must submit a power of attorney in accordance with attached Form 11 of the Enforcement Rules of the Personal Information Protection Act.

⑤ In the case of a request for suspension of personal information access and processing, the rights of customers may be restricted pursuant to Articles 35 (4) and 37 (2) of the Personal Information Protection Act.

⑥ Requests for correction and deletion of personal information cannot be requested if other laws specify that the personal information is subject to collection.

⑦ The company checks whether it is the person who made the request, such as request for reading, request for correction or deletion, or request for suspension of processing, is the person who made the request or a legitimate agent.

 

 

Article 6 (person in charge of personal information protection and contact information of the department in charge)

① The company is in charge of personal information processing and designates a person in charge of personal information protection as follows to handle complaints and remedy damages related to personal information processing.

Personal Information Protection Officer
Name	Lee Jun Suk
One’s Duty	Team Manager
Position	Director
Contact information	82 02-539-3961, amateus@hunesion.com

※ You are connected to the department in charge of privacy.

② Customers can contact the department in charge of personal information about all personal information protection inquiries, complaints, and damage relief that have occurred while using the company's services (or business). The company will respond and handle your inquiries without delay.

 

 

Article 7 (Request for access to personal information)

① Customers may request the following department to view personal information under Article 35 of the Personal Information Protection Act.

Personal Information Access Request Receipt and Processing Department
Department Office	an information protection team
The person in charge	Lee Jun Suk
Contact information	82 02-539-3961, amateus@hunesion.com

 

 

Article 8 (Method of Relief for Infringement of Rights)

① Customers may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency's Personal Information Infringement Reporting Center to receive relief for personal information infringement. In addition, please contact the institution below for reports and counseling on other personal information infringement.

Personal Information Infringement Reporting Center (Operated by the Korea Internet & Security Agency)	assigned task	Reporting personal information infringement and requesting counseling
	homepage	privacy.kisa.or.kr
	Tel	(Without a country code) 118
Personal Information Dispute Mediation Committee (Operation of the Personal Information Protection Committee)	assigned task	Personal Information Dispute Mediation Application, Collective Dispute Mediation (Civil Resolution)
	homepage	www.kopico.go.kr
	Tel	(Without a country code) 1833-6972
the Supreme Prosecutors' Office Cyber Investigation Division	homepage	www.spo.go.kr
	Tel	(Without a country code) 1301
the National Police Agency Cyber Bureau of Investigation	homepage	cyberbureau.police.go.kr
	Tel	(Without a country code) 182

 

 

Article 9 (items of personal information to be collected)

① 'HUNESION Co., Ltd. (https://www.hunesion.com/' and https://ionenet-ncloud.hunesion.com ') handles the following personal information items.

Sortation	Personal information items that you collect
HUNESION Homepage	Selections: Name, phone number, email
Sign up for Cloud Services	Required items: name, email
Application for Cloud Services	Required items: Representative name, contact name, and phone number of the person in charge
Cloud Service Agreement (Written)	Selections: Business license, order form (representative name, person in charge, phone number, e-mail)

Article 10 (Revocation of Personal Information)

① If the purpose of personal information processing is achieved, the company will destroy the personal information without delay. However, this is not the case if it must be preserved in accordance with other laws.

② The procedure and mathod of destroying personal information are as follows.

1. Destruction procedure: When the personal information file becomes unnecessary, such as achieving the purpose of processing the personal information file, abolishing the service, and terminating the business, the personal information file is destroyed without delay.

2. Destruction method: Electronic file type information is a technical method that cannot be reproduced, and personal information printed on paper is destroyed by crushing with a shredder or incineration.

 

 

Article 11 (Matters concerning the installation, operation, and rejection of automatic personal information collection devices)

① In order to provide individual customized services to customers, the company uses 'cookie' that stores usage information and calls it from time to time.

② Cookies are a small amount of information sent by the server (http) used to run the website to the user's computer browser and can also be stored on the user's hard disk within the user's PC computer.

1. Purpose of use of cookies: It is used to provide more convenient service to customers by identifying their access frequency and visiting time.

2. Installation, operation, and rejection of cookies: You can set settings such as allowing cookies and blocking cookies through browser options settings

- Microsoft Edge: [Select Settings Menu > Site Permissions Tab > Cookies and Site Data Settings]

- Chrome: [Select` Settings Menu > Select` Advanced Settings Display > Privacy and Security > Select` Content Settings > Set Cookie Level]

- Safari: [Select` Configuration Menu > Select` Privacy Tab > Set Cookie and Website Data Levels]

- Internet Explorer: [Choose Tools Menu > Select` Internet Options > Click the Privacy tab > Advanced Privacy Settings > Cookie Level Settings]

 

 

Article 12 (Measures to ensure the safety of personal information)

① The company is taking the following measures to ensure the safety of personal information.

1. Conduct regular self-audit

To secure stability related to personal information handling, we conduct self-audit regularly (once a year).

2. Minimize and train personal information handling staff

We are implementing measures to manage personal information by designating employees who handle personal information and minimizing them by limiting them to those in charge.

3. Establishment and implementation of internal management plan

We have established and implemented an internal management plan for the safe processing of personal information.

4. Technical countermeasures against hacking, etc

To prevent personal information leakage and damage caused by hacking or computer viruses, the company installs security programs, periodically renews, and checks, installs systems in areas where external access is controlled, and technically and physically monitors and blocks them.

5. encryption of personal information

Users' personal information is encrypted, stored, and managed, so only you can know, and important data uses separate security functions such as encrypting files and transmission data or using file lock functions.

6. Storage of access records and prevention of forgery and alteration

Records of access to the personal information processing system are kept and managed for at least one year, but if personal information is added to more than 50,000 data subjects, or unique identification or sensitive information is processed, it is kept and managed for at least two years. In addition, security functions are used to prevent forgery, alteration, theft, and loss of access records.

7. Restriction of access to personal information

We take necessary measures to control access to personal information by granting, changing, and canceling access to the database system that processes personal information, and use the intrusion prevention system to control unauthorized access from outside.

 

 

Article 13 (Change of Personal Information Processing Policy)

① If the contents of the current privacy policy are added, deleted, or revised, it will be notified at least 7 days before the revision. However, if there is an important change in user rights, such as collection and utilization of personal information or provision of third parties, it will be notified at least 30 days in advance.

 

This personal information processing policy will take effect from December 01, 2023.