Privacy Policy

WARECO Co., Ltd. ("wareco.co.kr") establishes and discloses this Privacy Policy in accordance with the Personal Information Protection Act to protect users' personal information and rights and to smoothly handle user complaints related to personal information.

If WARECO Co., Ltd. revises this Privacy Policy, the company will announce the changes through website notices or individual notices.

This policy is effective from January 1, 2025.

1. Purpose of Processing Personal Information

WARECO Co., Ltd. processes personal information for the following purposes. Processed personal information will not be used for purposes other than those stated below, and prior consent will be obtained if the purpose of use changes.

A. Provision of goods or services

Personal information is processed for service provision and related purposes.

2. Status of Personal Information Files

1. Personal information file name:

• Personal information items:
• Collection method:
• Retention basis:
• Retention period:
• Related laws:

3. Processing and Retention Period of Personal Information

WARECO Co., Ltd. processes and retains personal information within the retention and use period required by law or agreed to by the data subject when collecting personal information.

The processing and retention periods for each item of personal information are as follows.

Personal information related to the above purpose is retained and used from the date of consent to collection and use until the purpose of use is achieved.

• Retention basis: Consent to collection and use of personal information
• Related laws: Records on consumer complaints or dispute handling: 3 years
• Exceptions:

4. Provision of Personal Information to Third Parties

WARECO Co., Ltd. provides personal information to third parties only when the data subject has consented or when permitted by special provisions of law, including Articles 17 and 18 of the Personal Information Protection Act.

WARECO does not currently entrust or provide personal information to third parties.

• Recipient of personal information: None
• Purpose of use by recipient: None
• Retention and use period by recipient: None

5. Entrustment of Personal Information Processing

WARECO Co., Ltd. may entrust personal information processing for smooth handling of personal information tasks. Current entrustment status is as follows.

• Entrusted party: Not applicable
• Entrusted work: Not applicable
• Entrustment period: Not applicable

When entering into an entrustment agreement, WARECO specifies matters required under Article 25 of the Personal Information Protection Act, including prohibition of processing personal information for purposes other than entrusted work, technical and managerial protection measures, restrictions on re-entrustment, management and supervision of the entrusted party, and liability for damages. WARECO also supervises whether the entrusted party processes personal information safely.

If the entrusted work or entrusted party changes, WARECO will disclose the change without delay through this Privacy Policy.

6. Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them

Data subjects may exercise rights such as requesting access to, correction, deletion, or suspension of processing of their personal information at any time.

These rights may be exercised in writing, by email, or by fax in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and WARECO will take action without delay.

Rights may also be exercised through a legal representative or an authorized agent. In this case, a power of attorney in the form prescribed by the Enforcement Rules of the Personal Information Protection Act must be submitted.

Requests for access to or suspension of processing of personal information may be restricted under Article 35, Paragraph 5 and Article 37, Paragraph 2 of the Personal Information Protection Act.

If other laws specify that certain personal information must be collected, a request for deletion of that information may not be accepted.

WARECO verifies whether the person making a request for access, correction, deletion, or suspension of processing is the data subject or a legitimate representative.

7. Personal Information Items Processed

WARECO Co., Ltd. processes the following personal information items.

• Required items: Email, company name
• Optional items: Not applicable

8. Destruction of Personal Information

• Destruction procedure
  

  Information entered by users is transferred to a separate database after the purpose has been achieved, or to separate documents in the case of paper records, and is stored for a certain period according to internal policies and related laws before being destroyed. Personal information transferred to a separate database will not be used for other purposes unless required by law.

• Destruction period
  

  When the retention period has expired, personal information is destroyed within 5 days from the end of the retention period. When personal information becomes unnecessary because the processing purpose has been achieved, the service has been discontinued, or the business has ended, it is destroyed within 5 days from the date the processing is deemed unnecessary.

• Destruction method
  

  Information in electronic file format is destroyed using technical methods that prevent restoration or reproduction.

9. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

WARECO Co., Ltd. does not use cookies that store and periodically retrieve data subject information.

10. Personal Information Protection Officer

WARECO Co., Ltd. designates a personal information protection officer as follows to take overall responsibility for personal information processing and to handle complaints and remedy damages related to personal information processing.

Personal Information Protection Officer

• Person in charge:
• Position:
• Rank:
• Contact:

This contact connects to the department in charge of personal information protection.

Department in Charge of Personal Information Protection

• Department:
• Person in charge:
• Contact:

Data subjects may contact the personal information protection officer or the responsible department regarding all personal information protection inquiries, complaints, and damage relief related to WARECO services or business. WARECO will respond and handle inquiries without delay.

11. Changes to This Privacy Policy

This Privacy Policy applies from the effective date. If additions, deletions, or corrections are made according to laws or policy changes, WARECO will notify users through notices at least 7 days before the changes take effect.

12. Measures to Ensure the Security of Personal Information

• 1. Regular internal audits
  

  WARECO conducts regular internal audits, once per quarter, to ensure the security of personal information handling.

• 2. Minimization and training of personal information handling staff
  

  WARECO designates employees who handle personal information and limits access to the responsible personnel to minimize personal information handling.

• 3. Encryption of personal information
  

  User passwords are encrypted for storage and management so that only the user can know them. Important data is protected through additional security functions such as encryption of files and transmitted data or file locking.

• 4. Use of locking devices for document security
  

  Documents and auxiliary storage media containing personal information are stored in secure locations with locking devices.