HSC Korea Co., Ltd. Privacy Policy
HSC Korea Co., Ltd. (hereinafter referred to as the "Company") complies with the Personal Information Protection Act and related laws and regulations to protect the freedom and rights of data subjects, processing personal information lawfully and managing it safely. In accordance with Article 30 of the Personal Information Protection Act, the Company hereby establishes and discloses the following Privacy Policy to inform data subjects of the procedures and standards for the processing of personal information and to promptly and smoothly handle related grievances.
- Purposes of Processing Personal Information
- Items of Personal Information Processed
- Processing and Retention Period of Personal Information
- Procedures and Methods for Destruction of Personal Information
- Provision of Personal Information to Third Parties
- Overseas Transfer of Personal Information
- Entrustment of Personal Information Processing Tasks
- Measures to Ensure the Security of Personal Information
- Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
- Rights and Obligations of Data Subjects and Legal Representatives and Methods of Exercising Them
- Operation and Management of Fixed Visual Information Processing Devices
- Personal Information Protection Officer
- Remedies for Infringement of Data Subjects' Rights
- Changes to the Privacy Policy
1. Purposes of Processing Personal Information
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those listed below, and if the purpose of use changes, necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act, will be implemented.
- Responding to Customer Inquiries and Consultations
Personal information is processed to respond to product inquiries, quote requests, technical consultations, and other inquiries submitted through the website inquiry form. - Management of Business Partners and Conclusion and Performance of Contracts
Personal information is processed for business consultations, contract conclusion, and tasks necessary to maintain business relationships, including quotations, orders, delivery, and settlement. - Facility Safety and Prevention of Fire and Crime
Video information is processed through fixed visual information processing devices (CCTV) for the safety management of the interior and exterior of the office and building, as well as the parking lot, and for the prevention of theft, crime, and vehicle damage.
2. Items of Personal Information Processed
The Company collects and uses personal information to the minimum extent necessary for the purpose of processing, as follows.
| Category | Legal Basis | Items Processed | Collection Method |
|---|---|---|---|
| Customer Inquiries and Consultations | Article 15(1)(1) of the Personal Information Protection Act (Consent) | Name, company name, position, contact number (phone number), email, inquiry content | Website inquiry form, email |
| Business Partner Management and Contract Performance | Article 15(1)(4) of the Personal Information Protection Act (Conclusion and Performance of Contracts) | Contact person's name, affiliation (company name/department), position, contact number, email, transaction-related details | Collected during business consultations, contracts, and order/settlement processes |
| Facility Safety Management | Article 25 of the Personal Information Protection Act (Fixed Visual Information Processing Devices), Article 6(1) of the Enforcement Rule of the Parking Lot Act | Video information (persons entering/leaving the interior and exterior of the office and building, parking lot, vehicle license plates, etc.) | Automatic recording via CCTV |
| Automatically Generated During Internet Service Use | Article 15(1)(4) of the Personal Information Protection Act (Conclusion and Performance of Contracts) | IP address, cookies, service usage records, browser type | Automatically collected when accessing the website |
The Company does not process sensitive information such as ideology, beliefs, union or political party membership, political opinions, health, sexual life, or other information that may significantly infringe upon the privacy of data subjects, nor does it process unique identification information (such as resident registration numbers).
3. Processing and Retention Period of Personal Information
The Company processes and retains personal information within the retention and usage period required by law or the period agreed upon when collecting personal information from data subjects.
| Category | Retention Period | Basis |
|---|---|---|
| Customer Inquiry and Consultation Records | 1 year after completion of inquiry response | Internal company policy (dispute prevention and response history management) |
| Business Partner Management Information | Until the end of the transaction (or for the relevant period if preservation is required by applicable laws) | Contract performance, Article 33 of the Commercial Act, Article 85-3 of the Framework Act on National Taxes, etc. |
| CCTV Video Information | 30 days from the date of recording | Internal company policy |
| Internet Access Logs and Other Communication Confirmation Data | 3 months | Article 15-2 of the Protection of Communications Secrets Act |
However, if an investigation or inquiry is in progress due to a violation of relevant laws and regulations, the information will be retained until the conclusion of such investigation or inquiry.
4. Procedures and Methods for Destruction of Personal Information
When personal information becomes unnecessary, such as upon expiration of the retention period or fulfillment of the processing purpose, the Company destroys the relevant personal information without delay.
- Destruction Procedure
The Company identifies personal information for which a reason for destruction has arisen, and destroys the personal information upon approval by the Personal Information Protection Officer. - Destruction Method
Personal information recorded and stored in electronic file format is destroyed using technical methods that prevent the recovery of records (such as permanent deletion), while personal information recorded and stored in paper documents is destroyed by shredding or incineration. CCTV video information is permanently deleted in a manner that prevents restoration upon expiration of the retention period.
5. Provision of Personal Information to Third Parties
The Company processes the personal information of data subjects only within the scope specified in Article 1, and does not provide it to third parties without the prior consent of the data subject. However, the following exceptions apply:
- When the data subject has given separate consent
- When there are special provisions in other laws, such as Article 17(1)(2) and Article 18(2) of the Personal Information Protection Act
- When provided in accordance with the procedures and methods prescribed by law, upon the request of an investigative agency
6. Overseas Transfer of Personal Information
The Company transfers personal information overseas (storage and processing entrustment) for business email/collaboration services and website operation as follows, and provides the following information in accordance with Article 28-8(2) of the Personal Information Protection Act.
6-1. Google Workspace (Email and Collaboration Services)
| Category | Details |
|---|---|
| Legal Basis for Overseas Transfer | Article 28-8(1)(3) of the Personal Information Protection Act (Overseas Processing Entrustment and Storage for Contract Performance) |
| Items of Personal Information Transferred | Send/receive data processed through email, including name, email address, contact number, and inquiry content |
| Recipient | Google LLC Address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA Contact: support.google.com/policies/contact/general_privacy_form |
| Country of Transfer | Countries where Google operates data centers, including the United States (detailed locations can be found at www.google.com/about/datacenters/locations) |
| Timing and Method of Transfer | Automatic transmission via information and communication networks at the time of email send/receive and data storage |
| Purpose of Use | Provision of Google Workspace services (email, document collaboration, etc.) and data storage |
| Retention and Usage Period | During the period the Company uses Google Workspace services (destroyed in accordance with Google's policy when the Company deletes data or terminates the service) |
| Method, Procedure, and Effect of Refusing Transfer | Data subjects may contact the Company by phone or mail instead of email. However, if you do not wish to use the email inquiry service, the use of such service may be restricted. |
6-2. Amazon Web Services (Website Hosting and Server Operation)
| Category | Details |
|---|---|
| Legal Basis for Overseas Transfer | Article 28-8(1)(3) of the Personal Information Protection Act (Overseas Processing Entrustment and Storage for Contract Performance) |
| Items of Personal Information Transferred | Name, company name, position, contact number, email, inquiry content entered via the website inquiry form, and automatically collected information such as IP address and cookies |
| Recipient | Amazon Web Services, Inc. Address: 410 Terry Avenue North, Seattle, WA 98109-5210, USA Contact: aws.amazon.com/contact-us |
| Country of Transfer | Countries where AWS operates data centers (according to the region set by the Company) |
| Timing and Method of Transfer | Automatic transmission via information and communication networks at the time of website access and inquiry submission |
| Purpose of Use | Data storage and processing for website hosting and server operation |
| Retention and Usage Period | During the period the Company uses AWS services (destroyed in accordance with AWS's policy when the Company deletes data or terminates the service) |
| Method, Procedure, and Effect of Refusing Transfer | Data subjects may contact the Company by phone or mail instead of using the website. However, the use of services through the website may be restricted. |
7. Entrustment of Personal Information Processing Tasks
The Company may entrust personal information processing tasks when necessary for smooth handling of personal information operations. When concluding entrustment contracts, the Company specifies necessary matters in the contract and supervises the trustee in accordance with Article 26 of the Personal Information Protection Act.
※ Matters regarding overseas entrustment (Google Workspace, AWS) are described in "6. Overseas Transfer of Personal Information."
※ In the event of any additional domestic entrustment, the Company will promptly disclose such information through this Privacy Policy.
8. Measures to Ensure the Security of Personal Information
- Administrative Measures: Establishment and implementation of an internal management plan, minimizing the number of employees handling personal information, and conducting regular training
- Technical Measures: Access privilege management, installation of access control systems, encryption of personal information, installation and periodic updates/inspections of security programs, retention of access logs, and prevention of forgery and alteration
- Physical Measures: Access control to data storage rooms, and storage of documents and auxiliary storage media in secure locations with locking devices
9. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
- The Company may use "cookies" to provide customized services.
- Cookies are small pieces of information sent by the server to the data subject's browser, which are stored on the device and automatically transmitted when accessing the website.
- Data subjects can set their browser options to allow or refuse cookies. However, if you refuse to allow cookies, there may be restrictions on the use of certain services.
How to Set Cookies in Web Browsers
- Chrome: ⋮ in the top right → Settings → Privacy and Security → Third-party cookies
- Edge: ⋯ in the top right → Settings → Cookies and site permissions → Manage and delete cookies and site data
- Safari (Mac): Safari menu → Settings → Privacy → Cookies and website data
10. Rights and Obligations of Data Subjects and Legal Representatives and Methods of Exercising Them
- Data subjects may request the Company to view, correct, delete, or suspend the processing of their personal information, or withdraw their consent at any time.
- Rights may be exercised in writing, by email, fax, etc., in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.
- Rights may also be exercised through a legal representative or a delegated agent. In this case, a power of attorney must be submitted.
- Requests for access to and suspension of processing of personal information may be restricted under Article 35(4) and Article 37(2) of the Personal Information Protection Act.
- Personal information designated for collection under other laws cannot be requested for deletion.
- When exercising rights, the Company verifies whether the requester is the data subject or a legitimate representative.
11. Operation and Management of Fixed Visual Information Processing Devices
The Company hereby informs you of how personal video information processed by fixed visual information processing devices (CCTV) is used and managed, as follows.
① Basis and Purpose of Installation
The Company installs and operates CCTV for the following purposes in accordance with Article 25(1) of the Personal Information Protection Act and Article 6(1) of the Enforcement Rule of the Parking Lot Act.
- Facility safety and fire prevention
- Theft and crime prevention
- Prevention of vehicle theft and damage
② Number of Installations, Installation Locations, and Filming Range
| Number of Installations | Installation Locations and Filming Range |
|---|---|
| 6 units | Interior of the office and building (entrances, corridors, etc.), exterior of the building (entrances and perimeter), parking lot |
③ Management Officer and Persons with Access Privileges
| Category | Name | Position | Contact |
|---|---|---|---|
| Management Officer | Lee Seung Hyun | Manager | 031-794-5085 |
④ Filming Time, Retention Period, Storage Location, and Processing Method
| Filming Time | Retention Period | Storage Location |
|---|---|---|
| 24 hours | 30 days from the date of recording | Video recording storage device |
Processing Method: Matters concerning the use of personal video information for purposes other than its intended purpose, provision to third parties, destruction, and requests for access, etc., are recorded and managed, and the information is permanently deleted in a manner that prevents restoration upon expiration of the retention period.
⑤ Method and Location for Confirming Personal Video Information
- Confirmation Method: You may confirm by contacting the Personal Video Information Management Officer in advance and visiting the Company.
- Confirmation Location: Company office
⑥ Measures Regarding Data Subjects' Requests for Access to Video Information
Data subjects may request the Company at any time to view, confirm the existence of, or delete personal video information. However, this is limited to personal video information in which the data subject is recorded. The Company will take necessary action without delay upon the request of the data subject.
⑦ Measures to Ensure the Security of Personal Video Information
Personal video information processed by the Company is safely managed through secure physical and administrative storage measures, including differentiated access privileges and the installation of locking devices.
12. Personal Information Protection Officer
| Category | Details |
|---|---|
| Personal Information Protection Officer | Name: Lee Seung Hyun Position: Manager Contact: 031-794-5085 Email: hsck013@gmail.com |
| Personal Information Protection Department | Department: Customer service team Contact: 031-794-5085 Email: hsck013@gmail.com |
13. Remedies for Infringement of Data Subjects' Rights
- Personal Information Dispute Mediation Committee: 1833-6972 (no area code required) (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (no area code required) (privacy.kisa.or.kr)
- Supreme Prosecutors' Office Cyber Investigation Division: 1301 (no area code required) (www.spo.go.kr)
- National Police Agency Cyber Crime Reporting System: 182 (no area code required) (ecrm.police.go.kr)
- Central Administrative Appeals Commission: 110 (no area code required) (www.simpan.go.kr)
14. Changes to the Privacy Policy
- This Privacy Policy is effective from May 14, 2026.
- Content may be added, deleted, or modified in accordance with changes in laws, policies, or security technologies, and any changes will be announced through the website.
Announcement Date: May 14, 2026
Effective Date: May 14, 2026
HSC Korea Co., Ltd. Privacy Policy
HSC Korea Co., Ltd. (hereinafter referred to as the "Company") complies with the Personal Information Protection Act and related laws and regulations to protect the freedom and rights of data subjects, processing personal information lawfully and managing it safely. In accordance with Article 30 of the Personal Information Protection Act, the Company hereby establishes and discloses the following Privacy Policy to inform data subjects of the procedures and standards for the processing of personal information and to promptly and smoothly handle related grievances.
- Purposes of Processing Personal Information
- Items of Personal Information Processed
- Processing and Retention Period of Personal Information
- Procedures and Methods for Destruction of Personal Information
- Provision of Personal Information to Third Parties
- Overseas Transfer of Personal Information
- Entrustment of Personal Information Processing Tasks
- Measures to Ensure the Security of Personal Information
- Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
- Rights and Obligations of Data Subjects and Legal Representatives and Methods of Exercising Them
- Operation and Management of Fixed Visual Information Processing Devices
- Personal Information Protection Officer
- Remedies for Infringement of Data Subjects' Rights
- Changes to the Privacy Policy
1. Purposes of Processing Personal Information
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those listed below, and if the purpose of use changes, necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act, will be implemented.
- Responding to Customer Inquiries and Consultations
Personal information is processed to respond to product inquiries, quote requests, technical consultations, and other inquiries submitted through the website inquiry form. - Management of Business Partners and Conclusion and Performance of Contracts
Personal information is processed for business consultations, contract conclusion, and tasks necessary to maintain business relationships, including quotations, orders, delivery, and settlement. - Facility Safety and Prevention of Fire and Crime
Video information is processed through fixed visual information processing devices (CCTV) for the safety management of the interior and exterior of the office and building, as well as the parking lot, and for the prevention of theft, crime, and vehicle damage.
2. Items of Personal Information Processed
The Company collects and uses personal information to the minimum extent necessary for the purpose of processing, as follows.
| Category | Legal Basis | Items Processed | Collection Method |
|---|---|---|---|
| Customer Inquiries and Consultations | Article 15(1)(1) of the Personal Information Protection Act (Consent) | Name, company name, position, contact number (phone number), email, inquiry content | Website inquiry form, email |
| Business Partner Management and Contract Performance | Article 15(1)(4) of the Personal Information Protection Act (Conclusion and Performance of Contracts) | Contact person's name, affiliation (company name/department), position, contact number, email, transaction-related details | Collected during business consultations, contracts, and order/settlement processes |
| Facility Safety Management | Article 25 of the Personal Information Protection Act (Fixed Visual Information Processing Devices), Article 6(1) of the Enforcement Rule of the Parking Lot Act | Video information (persons entering/leaving the interior and exterior of the office and building, parking lot, vehicle license plates, etc.) | Automatic recording via CCTV |
| Automatically Generated During Internet Service Use | Article 15(1)(4) of the Personal Information Protection Act (Conclusion and Performance of Contracts) | IP address, cookies, service usage records, browser type | Automatically collected when accessing the website |
The Company does not process sensitive information such as ideology, beliefs, union or political party membership, political opinions, health, sexual life, or other information that may significantly infringe upon the privacy of data subjects, nor does it process unique identification information (such as resident registration numbers).
3. Processing and Retention Period of Personal Information
The Company processes and retains personal information within the retention and usage period required by law or the period agreed upon when collecting personal information from data subjects.
| Category | Retention Period | Basis |
|---|---|---|
| Customer Inquiry and Consultation Records | 1 year after completion of inquiry response | Internal company policy (dispute prevention and response history management) |
| Business Partner Management Information | Until the end of the transaction (or for the relevant period if preservation is required by applicable laws) | Contract performance, Article 33 of the Commercial Act, Article 85-3 of the Framework Act on National Taxes, etc. |
| CCTV Video Information | 30 days from the date of recording | Internal company policy |
| Internet Access Logs and Other Communication Confirmation Data | 3 months | Article 15-2 of the Protection of Communications Secrets Act |
However, if an investigation or inquiry is in progress due to a violation of relevant laws and regulations, the information will be retained until the conclusion of such investigation or inquiry.
4. Procedures and Methods for Destruction of Personal Information
When personal information becomes unnecessary, such as upon expiration of the retention period or fulfillment of the processing purpose, the Company destroys the relevant personal information without delay.
- Destruction Procedure
The Company identifies personal information for which a reason for destruction has arisen, and destroys the personal information upon approval by the Personal Information Protection Officer. - Destruction Method
Personal information recorded and stored in electronic file format is destroyed using technical methods that prevent the recovery of records (such as permanent deletion), while personal information recorded and stored in paper documents is destroyed by shredding or incineration. CCTV video information is permanently deleted in a manner that prevents restoration upon expiration of the retention period.
5. Provision of Personal Information to Third Parties
The Company processes the personal information of data subjects only within the scope specified in Article 1, and does not provide it to third parties without the prior consent of the data subject. However, the following exceptions apply:
- When the data subject has given separate consent
- When there are special provisions in other laws, such as Article 17(1)(2) and Article 18(2) of the Personal Information Protection Act
- When provided in accordance with the procedures and methods prescribed by law, upon the request of an investigative agency
6. Overseas Transfer of Personal Information
The Company transfers personal information overseas (storage and processing entrustment) for business email/collaboration services and website operation as follows, and provides the following information in accordance with Article 28-8(2) of the Personal Information Protection Act.
6-1. Google Workspace (Email and Collaboration Services)
| Category | Details |
|---|---|
| Legal Basis for Overseas Transfer | Article 28-8(1)(3) of the Personal Information Protection Act (Overseas Processing Entrustment and Storage for Contract Performance) |
| Items of Personal Information Transferred | Send/receive data processed through email, including name, email address, contact number, and inquiry content |
| Recipient | Google LLC Address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA Contact: support.google.com/policies/contact/general_privacy_form |
| Country of Transfer | Countries where Google operates data centers, including the United States (detailed locations can be found at www.google.com/about/datacenters/locations) |
| Timing and Method of Transfer | Automatic transmission via information and communication networks at the time of email send/receive and data storage |
| Purpose of Use | Provision of Google Workspace services (email, document collaboration, etc.) and data storage |
| Retention and Usage Period | During the period the Company uses Google Workspace services (destroyed in accordance with Google's policy when the Company deletes data or terminates the service) |
| Method, Procedure, and Effect of Refusing Transfer | Data subjects may contact the Company by phone or mail instead of email. However, if you do not wish to use the email inquiry service, the use of such service may be restricted. |
6-2. Amazon Web Services (Website Hosting and Server Operation)
| Category | Details |
|---|---|
| Legal Basis for Overseas Transfer | Article 28-8(1)(3) of the Personal Information Protection Act (Overseas Processing Entrustment and Storage for Contract Performance) |
| Items of Personal Information Transferred | Name, company name, position, contact number, email, inquiry content entered via the website inquiry form, and automatically collected information such as IP address and cookies |
| Recipient | Amazon Web Services, Inc. Address: 410 Terry Avenue North, Seattle, WA 98109-5210, USA Contact: aws.amazon.com/contact-us |
| Country of Transfer | Countries where AWS operates data centers (according to the region set by the Company) |
| Timing and Method of Transfer | Automatic transmission via information and communication networks at the time of website access and inquiry submission |
| Purpose of Use | Data storage and processing for website hosting and server operation |
| Retention and Usage Period | During the period the Company uses AWS services (destroyed in accordance with AWS's policy when the Company deletes data or terminates the service) |
| Method, Procedure, and Effect of Refusing Transfer | Data subjects may contact the Company by phone or mail instead of using the website. However, the use of services through the website may be restricted. |
7. Entrustment of Personal Information Processing Tasks
The Company may entrust personal information processing tasks when necessary for smooth handling of personal information operations. When concluding entrustment contracts, the Company specifies necessary matters in the contract and supervises the trustee in accordance with Article 26 of the Personal Information Protection Act.
※ Matters regarding overseas entrustment (Google Workspace, AWS) are described in "6. Overseas Transfer of Personal Information."
※ In the event of any additional domestic entrustment, the Company will promptly disclose such information through this Privacy Policy.
8. Measures to Ensure the Security of Personal Information
- Administrative Measures: Establishment and implementation of an internal management plan, minimizing the number of employees handling personal information, and conducting regular training
- Technical Measures: Access privilege management, installation of access control systems, encryption of personal information, installation and periodic updates/inspections of security programs, retention of access logs, and prevention of forgery and alteration
- Physical Measures: Access control to data storage rooms, and storage of documents and auxiliary storage media in secure locations with locking devices
9. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
- The Company may use "cookies" to provide customized services.
- Cookies are small pieces of information sent by the server to the data subject's browser, which are stored on the device and automatically transmitted when accessing the website.
- Data subjects can set their browser options to allow or refuse cookies. However, if you refuse to allow cookies, there may be restrictions on the use of certain services.
How to Set Cookies in Web Browsers
- Chrome: ⋮ in the top right → Settings → Privacy and Security → Third-party cookies
- Edge: ⋯ in the top right → Settings → Cookies and site permissions → Manage and delete cookies and site data
- Safari (Mac): Safari menu → Settings → Privacy → Cookies and website data
10. Rights and Obligations of Data Subjects and Legal Representatives and Methods of Exercising Them
- Data subjects may request the Company to view, correct, delete, or suspend the processing of their personal information, or withdraw their consent at any time.
- Rights may be exercised in writing, by email, fax, etc., in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.
- Rights may also be exercised through a legal representative or a delegated agent. In this case, a power of attorney must be submitted.
- Requests for access to and suspension of processing of personal information may be restricted under Article 35(4) and Article 37(2) of the Personal Information Protection Act.
- Personal information designated for collection under other laws cannot be requested for deletion.
- When exercising rights, the Company verifies whether the requester is the data subject or a legitimate representative.
11. Operation and Management of Fixed Visual Information Processing Devices
The Company hereby informs you of how personal video information processed by fixed visual information processing devices (CCTV) is used and managed, as follows.
① Basis and Purpose of Installation
The Company installs and operates CCTV for the following purposes in accordance with Article 25(1) of the Personal Information Protection Act and Article 6(1) of the Enforcement Rule of the Parking Lot Act.
- Facility safety and fire prevention
- Theft and crime prevention
- Prevention of vehicle theft and damage
② Number of Installations, Installation Locations, and Filming Range
| Number of Installations | Installation Locations and Filming Range |
|---|---|
| 6 units | Interior of the office and building (entrances, corridors, etc.), exterior of the building (entrances and perimeter), parking lot |
③ Management Officer and Persons with Access Privileges
| Category | Name | Position | Contact |
|---|---|---|---|
| Management Officer | Lee Seung Hyun | Manager | 031-794-5085 |
④ Filming Time, Retention Period, Storage Location, and Processing Method
| Filming Time | Retention Period | Storage Location |
|---|---|---|
| 24 hours | 30 days from the date of recording | Video recording storage device |
Processing Method: Matters concerning the use of personal video information for purposes other than its intended purpose, provision to third parties, destruction, and requests for access, etc., are recorded and managed, and the information is permanently deleted in a manner that prevents restoration upon expiration of the retention period.
⑤ Method and Location for Confirming Personal Video Information
- Confirmation Method: You may confirm by contacting the Personal Video Information Management Officer in advance and visiting the Company.
- Confirmation Location: Company office
⑥ Measures Regarding Data Subjects' Requests for Access to Video Information
Data subjects may request the Company at any time to view, confirm the existence of, or delete personal video information. However, this is limited to personal video information in which the data subject is recorded. The Company will take necessary action without delay upon the request of the data subject.
⑦ Measures to Ensure the Security of Personal Video Information
Personal video information processed by the Company is safely managed through secure physical and administrative storage measures, including differentiated access privileges and the installation of locking devices.
12. Personal Information Protection Officer
| Category | Details |
|---|---|
| Personal Information Protection Officer | Name: Lee Seung Hyun Position: Manager Contact: 031-794-5085 Email: hsck013@gmail.com |
| Personal Information Protection Department | Department: Customer service team Contact: 031-794-5085 Email: hsck013@gmail.com |
13. Remedies for Infringement of Data Subjects' Rights
- Personal Information Dispute Mediation Committee: 1833-6972 (no area code required) (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (no area code required) (privacy.kisa.or.kr)
- Supreme Prosecutors' Office Cyber Investigation Division: 1301 (no area code required) (www.spo.go.kr)
- National Police Agency Cyber Crime Reporting System: 182 (no area code required) (ecrm.police.go.kr)
- Central Administrative Appeals Commission: 110 (no area code required) (www.simpan.go.kr)
14. Changes to the Privacy Policy
- This Privacy Policy is effective from May 14, 2026.
- Content may be added, deleted, or modified in accordance with changes in laws, policies, or security technologies, and any changes will be announced through the website.
Announcement Date: May 14, 2026
Effective Date: May 14, 2026
HSC Korea Co., Ltd. Privacy Policy
HSC Korea Co., Ltd. (hereinafter referred to as the "Company") complies with the Personal Information Protection Act and related laws and regulations to protect the freedom and rights of data subjects, processing personal information lawfully and managing it safely. In accordance with Article 30 of the Personal Information Protection Act, the Company hereby establishes and discloses the following Privacy Policy to inform data subjects of the procedures and standards for the processing of personal information and to promptly and smoothly handle related grievances.
- Purposes of Processing Personal Information
- Items of Personal Information Processed
- Processing and Retention Period of Personal Information
- Procedures and Methods for Destruction of Personal Information
- Provision of Personal Information to Third Parties
- Overseas Transfer of Personal Information
- Entrustment of Personal Information Processing Tasks
- Measures to Ensure the Security of Personal Information
- Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
- Rights and Obligations of Data Subjects and Legal Representatives and Methods of Exercising Them
- Operation and Management of Fixed Visual Information Processing Devices
- Personal Information Protection Officer
- Remedies for Infringement of Data Subjects' Rights
- Changes to the Privacy Policy
1. Purposes of Processing Personal Information
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those listed below, and if the purpose of use changes, necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act, will be implemented.
- Responding to Customer Inquiries and Consultations
Personal information is processed to respond to product inquiries, quote requests, technical consultations, and other inquiries submitted through the website inquiry form. - Management of Business Partners and Conclusion and Performance of Contracts
Personal information is processed for business consultations, contract conclusion, and tasks necessary to maintain business relationships, including quotations, orders, delivery, and settlement. - Facility Safety and Prevention of Fire and Crime
Video information is processed through fixed visual information processing devices (CCTV) for the safety management of the interior and exterior of the office and building, as well as the parking lot, and for the prevention of theft, crime, and vehicle damage.
2. Items of Personal Information Processed
The Company collects and uses personal information to the minimum extent necessary for the purpose of processing, as follows.
| Category | Legal Basis | Items Processed | Collection Method |
|---|---|---|---|
| Customer Inquiries and Consultations | Article 15(1)(1) of the Personal Information Protection Act (Consent) | Name, company name, position, contact number (phone number), email, inquiry content | Website inquiry form, email |
| Business Partner Management and Contract Performance | Article 15(1)(4) of the Personal Information Protection Act (Conclusion and Performance of Contracts) | Contact person's name, affiliation (company name/department), position, contact number, email, transaction-related details | Collected during business consultations, contracts, and order/settlement processes |
| Facility Safety Management | Article 25 of the Personal Information Protection Act (Fixed Visual Information Processing Devices), Article 6(1) of the Enforcement Rule of the Parking Lot Act | Video information (persons entering/leaving the interior and exterior of the office and building, parking lot, vehicle license plates, etc.) | Automatic recording via CCTV |
| Automatically Generated During Internet Service Use | Article 15(1)(4) of the Personal Information Protection Act (Conclusion and Performance of Contracts) | IP address, cookies, service usage records, browser type | Automatically collected when accessing the website |
The Company does not process sensitive information such as ideology, beliefs, union or political party membership, political opinions, health, sexual life, or other information that may significantly infringe upon the privacy of data subjects, nor does it process unique identification information (such as resident registration numbers).
3. Processing and Retention Period of Personal Information
The Company processes and retains personal information within the retention and usage period required by law or the period agreed upon when collecting personal information from data subjects.
| Category | Retention Period | Basis |
|---|---|---|
| Customer Inquiry and Consultation Records | 1 year after completion of inquiry response | Internal company policy (dispute prevention and response history management) |
| Business Partner Management Information | Until the end of the transaction (or for the relevant period if preservation is required by applicable laws) | Contract performance, Article 33 of the Commercial Act, Article 85-3 of the Framework Act on National Taxes, etc. |
| CCTV Video Information | 30 days from the date of recording | Internal company policy |
| Internet Access Logs and Other Communication Confirmation Data | 3 months | Article 15-2 of the Protection of Communications Secrets Act |
However, if an investigation or inquiry is in progress due to a violation of relevant laws and regulations, the information will be retained until the conclusion of such investigation or inquiry.
4. Procedures and Methods for Destruction of Personal Information
When personal information becomes unnecessary, such as upon expiration of the retention period or fulfillment of the processing purpose, the Company destroys the relevant personal information without delay.
- Destruction Procedure
The Company identifies personal information for which a reason for destruction has arisen, and destroys the personal information upon approval by the Personal Information Protection Officer. - Destruction Method
Personal information recorded and stored in electronic file format is destroyed using technical methods that prevent the recovery of records (such as permanent deletion), while personal information recorded and stored in paper documents is destroyed by shredding or incineration. CCTV video information is permanently deleted in a manner that prevents restoration upon expiration of the retention period.
5. Provision of Personal Information to Third Parties
The Company processes the personal information of data subjects only within the scope specified in Article 1, and does not provide it to third parties without the prior consent of the data subject. However, the following exceptions apply:
- When the data subject has given separate consent
- When there are special provisions in other laws, such as Article 17(1)(2) and Article 18(2) of the Personal Information Protection Act
- When provided in accordance with the procedures and methods prescribed by law, upon the request of an investigative agency
6. Overseas Transfer of Personal Information
The Company transfers personal information overseas (storage and processing entrustment) for business email/collaboration services and website operation as follows, and provides the following information in accordance with Article 28-8(2) of the Personal Information Protection Act.
6-1. Google Workspace (Email and Collaboration Services)
| Category | Details |
|---|---|
| Legal Basis for Overseas Transfer | Article 28-8(1)(3) of the Personal Information Protection Act (Overseas Processing Entrustment and Storage for Contract Performance) |
| Items of Personal Information Transferred | Send/receive data processed through email, including name, email address, contact number, and inquiry content |
| Recipient | Google LLC Address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA Contact: support.google.com/policies/contact/general_privacy_form |
| Country of Transfer | Countries where Google operates data centers, including the United States (detailed locations can be found at www.google.com/about/datacenters/locations) |
| Timing and Method of Transfer | Automatic transmission via information and communication networks at the time of email send/receive and data storage |
| Purpose of Use | Provision of Google Workspace services (email, document collaboration, etc.) and data storage |
| Retention and Usage Period | During the period the Company uses Google Workspace services (destroyed in accordance with Google's policy when the Company deletes data or terminates the service) |
| Method, Procedure, and Effect of Refusing Transfer | Data subjects may contact the Company by phone or mail instead of email. However, if you do not wish to use the email inquiry service, the use of such service may be restricted. |
6-2. Amazon Web Services (Website Hosting and Server Operation)
| Category | Details |
|---|---|
| Legal Basis for Overseas Transfer | Article 28-8(1)(3) of the Personal Information Protection Act (Overseas Processing Entrustment and Storage for Contract Performance) |
| Items of Personal Information Transferred | Name, company name, position, contact number, email, inquiry content entered via the website inquiry form, and automatically collected information such as IP address and cookies |
| Recipient | Amazon Web Services, Inc. Address: 410 Terry Avenue North, Seattle, WA 98109-5210, USA Contact: aws.amazon.com/contact-us |
| Country of Transfer | Countries where AWS operates data centers (according to the region set by the Company) |
| Timing and Method of Transfer | Automatic transmission via information and communication networks at the time of website access and inquiry submission |
| Purpose of Use | Data storage and processing for website hosting and server operation |
| Retention and Usage Period | During the period the Company uses AWS services (destroyed in accordance with AWS's policy when the Company deletes data or terminates the service) |
| Method, Procedure, and Effect of Refusing Transfer | Data subjects may contact the Company by phone or mail instead of using the website. However, the use of services through the website may be restricted. |
7. Entrustment of Personal Information Processing Tasks
The Company may entrust personal information processing tasks when necessary for smooth handling of personal information operations. When concluding entrustment contracts, the Company specifies necessary matters in the contract and supervises the trustee in accordance with Article 26 of the Personal Information Protection Act.
※ Matters regarding overseas entrustment (Google Workspace, AWS) are described in "6. Overseas Transfer of Personal Information."
※ In the event of any additional domestic entrustment, the Company will promptly disclose such information through this Privacy Policy.
8. Measures to Ensure the Security of Personal Information
- Administrative Measures: Establishment and implementation of an internal management plan, minimizing the number of employees handling personal information, and conducting regular training
- Technical Measures: Access privilege management, installation of access control systems, encryption of personal information, installation and periodic updates/inspections of security programs, retention of access logs, and prevention of forgery and alteration
- Physical Measures: Access control to data storage rooms, and storage of documents and auxiliary storage media in secure locations with locking devices
9. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
- The Company may use "cookies" to provide customized services.
- Cookies are small pieces of information sent by the server to the data subject's browser, which are stored on the device and automatically transmitted when accessing the website.
- Data subjects can set their browser options to allow or refuse cookies. However, if you refuse to allow cookies, there may be restrictions on the use of certain services.
How to Set Cookies in Web Browsers
- Chrome: ⋮ in the top right → Settings → Privacy and Security → Third-party cookies
- Edge: ⋯ in the top right → Settings → Cookies and site permissions → Manage and delete cookies and site data
- Safari (Mac): Safari menu → Settings → Privacy → Cookies and website data
10. Rights and Obligations of Data Subjects and Legal Representatives and Methods of Exercising Them
- Data subjects may request the Company to view, correct, delete, or suspend the processing of their personal information, or withdraw their consent at any time.
- Rights may be exercised in writing, by email, fax, etc., in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.
- Rights may also be exercised through a legal representative or a delegated agent. In this case, a power of attorney must be submitted.
- Requests for access to and suspension of processing of personal information may be restricted under Article 35(4) and Article 37(2) of the Personal Information Protection Act.
- Personal information designated for collection under other laws cannot be requested for deletion.
- When exercising rights, the Company verifies whether the requester is the data subject or a legitimate representative.
11. Operation and Management of Fixed Visual Information Processing Devices
The Company hereby informs you of how personal video information processed by fixed visual information processing devices (CCTV) is used and managed, as follows.
① Basis and Purpose of Installation
The Company installs and operates CCTV for the following purposes in accordance with Article 25(1) of the Personal Information Protection Act and Article 6(1) of the Enforcement Rule of the Parking Lot Act.
- Facility safety and fire prevention
- Theft and crime prevention
- Prevention of vehicle theft and damage
② Number of Installations, Installation Locations, and Filming Range
| Number of Installations | Installation Locations and Filming Range |
|---|---|
| 6 units | Interior of the office and building (entrances, corridors, etc.), exterior of the building (entrances and perimeter), parking lot |
③ Management Officer and Persons with Access Privileges
| Category | Name | Position | Contact |
|---|---|---|---|
| Management Officer | Lee Seung Hyun | Manager | 031-794-5085 |
④ Filming Time, Retention Period, Storage Location, and Processing Method
| Filming Time | Retention Period | Storage Location |
|---|---|---|
| 24 hours | 30 days from the date of recording | Video recording storage device |
Processing Method: Matters concerning the use of personal video information for purposes other than its intended purpose, provision to third parties, destruction, and requests for access, etc., are recorded and managed, and the information is permanently deleted in a manner that prevents restoration upon expiration of the retention period.
⑤ Method and Location for Confirming Personal Video Information
- Confirmation Method: You may confirm by contacting the Personal Video Information Management Officer in advance and visiting the Company.
- Confirmation Location: Company office
⑥ Measures Regarding Data Subjects' Requests for Access to Video Information
Data subjects may request the Company at any time to view, confirm the existence of, or delete personal video information. However, this is limited to personal video information in which the data subject is recorded. The Company will take necessary action without delay upon the request of the data subject.
⑦ Measures to Ensure the Security of Personal Video Information
Personal video information processed by the Company is safely managed through secure physical and administrative storage measures, including differentiated access privileges and the installation of locking devices.
12. Personal Information Protection Officer
| Category | Details |
|---|---|
| Personal Information Protection Officer | Name: Lee Seung Hyun Position: Manager Contact: 031-794-5085 Email: hsck013@gmail.com |
| Personal Information Protection Department | Department: Customer service team Contact: 031-794-5085 Email: hsck013@gmail.com |
13. Remedies for Infringement of Data Subjects' Rights
- Personal Information Dispute Mediation Committee: 1833-6972 (no area code required) (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (no area code required) (privacy.kisa.or.kr)
- Supreme Prosecutors' Office Cyber Investigation Division: 1301 (no area code required) (www.spo.go.kr)
- National Police Agency Cyber Crime Reporting System: 182 (no area code required) (ecrm.police.go.kr)
- Central Administrative Appeals Commission: 110 (no area code required) (www.simpan.go.kr)
14. Changes to the Privacy Policy
- This Privacy Policy is effective from May 14, 2026.
- Content may be added, deleted, or modified in accordance with changes in laws, policies, or security technologies, and any changes will be announced through the website.
Announcement Date: May 14, 2026
Effective Date: May 14, 2026