UNIVA Co., Ltd. (hereinafter 'Company') establishes and discloses the following personal information processing policy in order to protect the personal information of data subjects and handle related complaints quickly and smoothly in accordance with Article 30 of the Personal Information Protection Act. The Company will notify any revisions to this privacy policy through the website.

Article 1: Purposes of Personal Information Processing

The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those listed below, and if the purpose of use changes, necessary measures such as obtaining separate consent will be implemented in accordance with Article 18 of the Personal Information Protection Act.

① Service Provision: Personal information is processed for the purpose of service consultation.

Article 2: Provision of Personal Information to Third Parties

The Company processes personal information of data subjects only within the scope specified in Article 1 (Purposes of Personal Information Processing), and provides personal information to third parties only in cases corresponding to Article 17 and Article 18 of the Personal Information Protection Act, such as the consent of the data subject or special provisions of law.

Article 3: Entrustment of Personal Information Processing

The Company currently does not entrust personal information to external companies. If such a need arises in the future, the Company will notify users of the entrusted party and the scope of the entrusted work and obtain prior consent. When concluding an entrustment contract, the Company will specify matters related to responsibilities such as prohibition of processing personal information beyond the purpose of entrusted work, technical and administrative protection measures, restriction on re-entrustment, supervision of the trustee, and compensation for damages in the contract or other documents, and will supervise whether the trustee processes personal information safely in accordance with Article 26 of the Personal Information Protection Act.

제4조 정보주체와 법정대리인의 권리, 의무 및 행사방법

① 정보주체는 회사에 대해 언제든지 개인정보 열람, 정정, 삭제, 처리정지 요구 등의 권리를 행사할 수 있습니다.

② 제1항에 따른 권리 행사는 uunchange@univa.co.kr 전자 우편을 통하여 하실 수 있으며, 회사는 이에 대해 지체없이 조치하겠습니다.

③ 제1항에 따른 권리 행사는 정보주체의 법정대리인이나 위임을 받은 자 등 대리인을 통하여 하실 수 있습니다. 이 경우 “개인정보 처리 방법에 관한 고시(제2020-7호)” 별지 제11호 서식에 따른 위임장을 제출하셔야 합니다.

④ 개인정보 열람 및 처리정지 요구는 개인정보보호법 제35조 제4항, 제37조 제2항에 의하여 정보주체의 권리가 제한될 수 있습니다.

⑤ 개인정보의 정정 및 삭제 요구는 다른 법령에서 그 개인정보가 수집 대상으로 명시되어 있는 경우에는 그 삭제를 요구할 수 없습니다.

⑥ 회사는 정보주체 권리에 따른 열람의 요구, 정정·삭제의 요구, 처리정지의 요구 시 열람 등 요구를 한 자가 본인이거나 정당한 대리인인지를 확인합니다.

Article 6: Categories of Personal Information Processed

The Company collects the following personal information for consultation, quotation inquiries, and user management.

① Information related to consultation and quotation inquiries
Company name, name, position, email, landline, phone number, consent to information provision

② The following information may be generated and collected during service use or business processing.
Service usage records, access logs, volume, access IP information

Article 7: Procedures and Methods for Destruction of Personal Information

① The Company destroys personal information without delay when it becomes unnecessary, such as when the personal information retention period has elapsed or the processing purpose has been achieved.

② If personal information must continue to be preserved pursuant to other laws despite the expiration of the agreed retention period or achievement of the processing purpose, the personal information is transferred to a separate database (DB) or stored in a different location.

③ The procedures and methods for destroying personal information are as follows.

1) Destruction Procedure: The Company selects personal information for which a reason for destruction has occurred and destroys it with the approval of the Company's personal information protection officer.

2) Destruction Method: The Company destroys personal information recorded and stored in electronic file form using methods such as Low Level Format so that records cannot be reproduced, and personal information recorded and stored on paper documents is destroyed by shredding or incineration.

Article 8: Measures to Ensure Safety of Personal Information

The Company takes the following measures to ensure the safety of personal information.

① Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.

② Technical measures: Access rights management for personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs

③ Physical measures: Access control for computer rooms, data storage rooms, etc.

Article 9: Installation, Operation, and Opt-Out of Automatic Personal Information Collection Devices

The Company uses the following automatic collection devices for website operation and user analysis.

① The Company uses cookies to store and retrieve usage information. Cookies are small text files sent by the server operating the website to the user's browser and stored on the user's computer hard disk.

② The Company uses web log analysis services to analyze visitor numbers and page view counts. Web log analysis services use cookies to report website usage statistics using anonymous user information without identifying individual users' personal information.

③ Users have the right to choose whether to install cookies. Users can allow all cookies, require confirmation each time a cookie is stored, or refuse all cookie storage by setting options in their web browser.

Article 10: Personal Information Protection Officer

① The Company designates a personal information protection officer as follows to take overall responsibility for personal information processing and to handle complaints and provide redress related to personal information processing by data subjects.

Personal Information Protection Officer

② Data subjects may inquire about all matters related to personal information protection, complaint processing, and damage relief arising from the use of the Company's services (or business) to the personal information protection officer and the department in charge. The Company will respond to and process data subject inquiries without delay.

Article 11: Methods for Remedying Rights Infringement

Data subjects may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, KISA Personal Information Infringement Report Center, etc. to receive remedies for personal information infringement. For other reports and consultations on personal information infringement, please contact the following organizations.

① Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
② Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)
③ Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)
④ National Police Agency: (without area code) 182 (cyberbureau.police.go.kr)

Those who have had their rights or interests infringed upon by a disposition or omission made by the head of a public institution in response to a request under Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information), and Article 37 (Suspension of Processing of Personal Information, etc.) of the Personal Information Protection Act may file an administrative appeal pursuant to the Administrative Appeals Act. For detailed information on administrative appeals, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).

Article 12: Changes to the Privacy Policy

This privacy policy is effective from December 31, 2024.