Privacy Policy
- Article 1 (Purpose of Processing Personal Information)
- The Company processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following. If the purpose of use changes, the Company will implement necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
| Name of Personal Information Processing Activity | Legal Basis for Collection | Purpose of Processing |
|---|---|---|
| AS Inquiries, Applications, and Quotation Requests | Consent of the Data Subject | Responding to inquiries and service fulfillment |
- Article 2 (Processing and Retention Period of Personal Information)
- A. The Company processes the minimum amount of personal information as follows.
| Name of Personal Information Processing Activity | Items Processed | Retention Period |
|---|---|---|
| AS Inquiries, Applications, and Quotation Requests | Inquirer Name : Company Name, Contact Number, Email Address | 3 years |
-
B. However, exceptions shall be made if it is necessary to retain the personal information in accordance with relevant statutes as follows.
- 01. Records on consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce)
- 02. Records of website visits: 3 months (Retention of communication confirmation data in accordance with Article 15 of the Protection of Communications Secrets Act)
-
03. Cases where separate consent has been obtained from the customer: For the period for which consent was obtained
If there is a need to continue retaining the personal information notwithstanding the aforementioned retention periods, the Company shall notify the customer accordingly.
- Article 3 (Matters Concerning the Provision of Personal Information to Third Parties)
- The Company provides personal information to third parties only in cases that fall under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or under special provisions of the law. In the event of such provision to a third party, the Company will notify users through the announcements section on its website.
- Article 4 (Matters Concerning the Outsourcing of Personal Information Processing)
- A. The Company does not outsource the processing of personal information to any third party for its business operations.
- B. Upon entering into an outsourcing contract, the Company specifies in documents such as contracts, in accordance with Article 26 of the Personal Information Protection Act, matters concerning responsibilities including the prohibition of processing personal information for purposes other than the performance of the outsourced work, safety securing measures, restrictions on re-outsourcing, management and supervision of the outsourcee, and compensation for damages, and supervises whether the outsourcee processes personal information securely.
- C. In the event that the details of the outsourced work or the outsourcee change, the Company will disclose such changes through this Privacy Policy without delay.
- Article 5 (Matters Concerning the Procedures and Methods for Destruction of Personal Information)
- A. The Company shall destroy personal information without delay when the personal information becomes unnecessary, such as due to the expiration of the retention period or the achievement of the purpose of processing.
- B. If it is necessary to continue to retain personal information in accordance with other statutes, notwithstanding the expiration of the retention period consented to by the data subject or the achievement of the purpose of processing, such personal information (or personal information files) shall be moved to a separate database (DB) or stored in a different location.
-
C. The procedures and methods for the destruction of personal information are as follows.
- - Personal information stored in the form of electronic files shall be deleted using technical methods that render the records non-reproducible.
- - In the case of records, printed materials, written documents, or any other recording media other than electronic files, the personal information shall be destroyed through shredding or incineration.
- Article 6 (Matters Concerning Measures to Ensure the Safety of Personal Information)
- In handling the personal information of data subjects, the Company is taking the following measures to ensure safety so that personal information is not lost, stolen, leaked, altered, or damaged.
- A. Administrative measures: Establishment and implementation of internal management plans, regular training for employees, etc.
- B. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, etc., and installation of security programs.
- C. Physical measures: Access control to locations such as server rooms, data storage rooms, etc.
- Article 7 (Matters Concerning the Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)
-
The Company does not currently operate devices that automatically collect personal information generated during service use, such as cookies.
However, if necessary for future service provision, the Company may install and operate automatic collection devices. In such cases, data subjects may have the option to choose whether to allow the installation of cookies or may refuse the storage of all cookies. -
A. What are Cookies?
- Cookies are very small text files sent to the data subject's browser by the server used to operate the website and are stored on the hard disk of the data subject's computer. When the data subject visits the website thereafter, the website server reads the contents of the cookies stored on the data subject's hard disk to maintain the user's preferences and provide customized services. Cookies do not automatically or actively collect information that identifies an individual, and data subjects may refuse to store or delete these cookies at any time.
-
B. Installation, Operation, and Refusal of Cookies
- Data subjects have the right to choose whether to allow the installation of cookies and can configure settings to allow, block, or delete cookies through their web browser's option settings.
-
- Allowing/Blocking Cookies in Web Browsers
- 01. Chrome: Web browser settings > Privacy and security > Clear browsing data
- 02. Edge: Web browser settings > Cookies and site permissions > Manage and delete cookies and site data
-
Allowing/Blocking Cookies in Mobile Browsers
- 01. Chrome: Mobile browser settings > Privacy and security > Clear browsing data
- 02. Safari: Mobile device settings > Safari > Advanced > Block All Cookies
- 03. Samsung Internet: Mobile browser settings > Browsing data > Delete browsing data
- Article 8 (Matters Concerning the Personal Information Protection Officer)
- A. The Company has designated a Personal Information Protection Officer and a department responsible for personal information protection as follows to protect customers' personal information and handle related complaints.
| Category | Department | Name | Contact |
|---|---|---|---|
| Personal Information Protection Officer | Executive Management | Hyosik Kim | Email : privacy@gfs.co.kr Phone : 1660-0829 |
| Personal Information Protection Department | Digital Strategy Team | - | Email : hoseok@gfs.co.kr Phone : 1660-0829 |
- B. You may report any complaints related to personal information protection that arise while using the Company's services to the Personal Information Protection Department. The Company will provide prompt and sufficient responses to such reports.
- Article 9 (Matters Concerning Requests for Access to Personal Information)
- Data subjects may file a request for access to personal information pursuant to Article 35 of the Personal Information Protection Act to the department below. The Company will endeavor to ensure that such requests are processed promptly.
| Activities Subject to Access Requests | Department | Name | Contact |
|---|---|---|---|
| Personal Information Related to AS Inquiries, Applications, and Quotation Requests | Customer Support Team | Hyejeong Kim | Email : as@gfs.co.kr Phone : 1588-0825 |
- Article 10 (Remedies for Infringement of Rights and Interests of Data Subjects)
-
In order to receive aid for personal information infringement, data subjects may apply for dispute resolution or consultation with the organizations listed below.
- Personal Information Dispute Mediation Committee (KOPRICO): 1833-6972 (without area code) (www.kopico.go.kr)
- - Personal Information Infringement Reporting Center: 118 (without area code) (privacy.kisa.or.kr)
- - Supreme Prosecutors' Office: 1301 (without area code) (www.spo.go.kr)
- - National Police Agency: 182 (without area code) (ecrm.cyber.go.kr)
- Article 11 (Matters Concerning Changes to the Personal Information Processing Policy)
- A. This Policy shall take effect on October 1, 2026.
- B. Previous versions of the Personal Information Processing Policy can be found below.