Privacy Policy
This Privacy Policy will be effective from August 01, 2023.
Hanwha Precision Machinery Co., Ltd. (hereinafter referred to collectively as “we”, “our” or “us”)
HIGHLIGHTS
We respect your privacy. This Privacy Policy applies to the personal data that we collect and use through our website.
For users in the United States and California, please review our additional Regional Privacy Disclosure.
OVERVIEW
In this Privacy Policy, we describe the types of personal data we process, how we may use the data, with whom we may share the data, and the choices available to you with regard to the use of the data and exercising your rights. We also describe the measures we take to safeguard your data and tell you how to contact us if you wish to learn more about our privacy practices. Below you will find a summary of the key messages contained in our Privacy Policy. For more information on how we process your data, please click on the headings or continue to read below.
1. Privacy Principles
We comply with the European General Data Protection Regulation (GDPR-2016/679) Privacy Principles.
Personal data shall be:
- Processed lawfully, fairly and in a transparent manner in relation to the data subject ('Lawfulness, fairness and transparency');
- Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes ('Purpose limitation');
- Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed ('Data minimization');
- Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data are inaccurate, and relevant to the purposes for which they are processed, and that data are erased or rectified without delay ('Accuracy');
- Kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data is processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organizational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject ('Storage limitation');
- Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organizational measures ('Integrity and confidentiality').
2. Purpose of Processing Personal Data
We process personal data for the following purposes in order to provide services according to contractual relationships:
- Registration and management of members:
Confirmation of the intent to sign up for membership; provision of membership services; maintenance and management of membership; various notifications and handling of grievances; identification and authentication. - Customer care:
Identification; confirmation of requests or inquiries; provision of answers; contact for fact-checking; notification of processing results. - Provision of product information:
Provision of product-related information and customized information such as productivity analysis. - Provision of education:
Provision of product-related online lectures. - Marketing and advertising promotion:
Development of new products and services; provision of customized products and services; transmission of event and advertisement information; sending giveaways; surveys and analyses; access frequency analysis; service usage statistics analysis. - Location-based authentication:
Maintenance and management of membership. (For internal employees, check the location of service provision)
We do not sell, share or disclose personal data for commercial purposes. Furthermore, we do not do profiling, which means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a person.
3. Retention Period of Personal Data
We retain personal data for the following period during which the data is processed to provide services:
- Registration and management of members:
Until withdrawal of membership. - Customer care, provision of product information and education, marketing and advertising promotion:
1 year from the date of provision. - Location-based authentication:
Upon completion of authentication
However, in the following cases, personal data will be processed until the end of the reason.
- If an investigation is in progress, until the end of the relevant investigation;
- If a claim-obligation relationship, etc. remains, until the end of the relevant claim-obligation relationship;
- If customer requests or inquiries, etc. are in progress, until the requests or inquiry is processed.
In principle, we destroy the personal data without delay when the agreed-upon retention period has elapsed, the purpose of processing has been achieved, or a legitimate request for destruction has been received. However, when it is necessary to preserve personal data in accordance with applicable laws and regulations (Consumer Protection Act, Tax Act, etc.), the personal data will be transferred to a separate database or stored in a different location. The procedure and method of destroying personal data are as follows:
-
The procedure:
We transfer personal data that needs to be preserved to a separate database or store it a different location, preserve it for the period required by applicable laws and regulations, and then destroy it. At this time, the personal data transferred to the database is not processed for any purpose other than in accordance with the laws and regulations. -
The method:
We destroy personal data recorded and stored in electronic file form so that the data cannot be reproduced, and personal data recorded and stored on paper is destroyed by shredding or incinerating it.
4. Personal Data We Collect
We collect the following personal data from a person directly in connection with services and do not collect personal data from other sources:
4.1. The Data You Provide Directly
-
Registration and management of members:
Name; mobile phone number; e-mail address; company name; ID; password. -
Customer care:
Name; mobile phone number; e-mail address; company name; region. -
Provision of product information and education, marketing and advertising promotion:
Business category; name; mobile phone number; e-mail address; company name; country; contents of inquiry; attachments. -
Location-based authentication:
GPS location data.
4.2. The Data Generated Automatically
In addition to the data you provide, we will collect data about your use of services through our website on your computer or device such as a smartphone, tablet, PC.
-
Service usage data:
Dates and times of service use; data collected from interactions with services (such as search terms, apps and features); data collected through cookies. (For more information on how we use the data collected through cookies, please refer to our Cookie Policy ) -
Log and device data:
Access log; IP address; MAC address; device model; device settings; OS version; nation based on IP address; URL; network type.
5. Provision or Sharing of Personal Data
5.1. Provision or Sharing of Personal Data to a Processor
We share personal data on a limited basis after entering into contracts with processors (a natural or legal person or other body that processes personal data on our behalf) to efficiently provide services. Please refer to the following table for tasks required to provide services.
| Processors | Tasks | Term |
|---|---|---|
| STS Co., Ltd., Koryo ENG Co., Ltd., Instech Co., Ltd., Shinjin Tech Co., Ltd. | Product A/S | 1 year |
| The Weaver Creative Co., Ltd. | Homepage maintenance | 1 year |
The contracts include the prohibition of processing personal data other than for business purposes, measures for technical and managerial protection, restrictions on re-entrustment, management and supervision of processors, compensation for damages, and so on. We carry out supervision to ensure that processors handle personal data securely.
5.2. Provision or Sharing of Personal Data to a Third Party
Under any circumstances, we do not provide personal data to third parties (a natural or legal person, public authority, agency or body other than you, us, or the processors) beyond the scope notified in "1. Purpose of Processing Personal Data". However, in cases where all of our rights and duties are fully succeeded or transferred due to merger and acquisition and so on, we will give you the option to withdraw your consent to personal data processing by notifying you in advance of justifiable reasons and procedures in detail, and then we may provide personal data to third parties. We may provide personal data in a limited manner to third parties in the following cases:
- In case you provide consent for the provision or sharing of your personal data;
- In case you request provision or sharing of your personal data;
- In case it is necessary to comply with laws and regulations;
- In case it is necessary for the conclusion and execution of contracts;
- In case it is clearly necessary for the immediate benefit of the life, body or property of the data subjects or third parties;
- In case it is necessary for the investigation of a crime or the filing and maintenance of a lawsuit;
- When urgently necessary for public safety and well-being, such as public health, and so on; and
- In the case of processing information for statistical records, academic research, or market research, in a form in which a specific individual cannot be identified.
Regarding the provision or sharing of personal data to third parties, we will notify you and obtain your consent regarding the following matters in advance via e-mail or in writing and so on:
- Third parties to whom personal data has been provided;
- Purpose of processing personal data by third parties
- Types of personal data provided;
- Retention period for the personal data; and
- The fact that you have the right to refuse consent and details of disadvantages resulting from refusal of consent.
6. Children’s Personal Data
We do not knowingly collect personal data from children under the age of 16 without consent from a parent or legal guardian.
7. International Transfer of Personal Data
We transfer personal data to the Republic of Korea to provide services. This is based on adequacy decision of the European Commission, as specified in Article 45 of the European General Data Protection Regulation (GDPR-2016/679). The data is transmitted using a remote transmission method through network.
8. Choices
We offer you certain choices regarding your personal data obtained through automated personal data collection devices such as cookies. You can restrict or disable certain types of cookies by visiting www.allaboutcookies.org or by contacting us. You can also restrict the communications we provide you by contacting us. Once you contact us as specified in the Contact Us section of this Privacy Policy, we will take action without delay. In particular, you can unsubscribe from our marketing e-mails at any time by clicking on the "Unsubscribe" link at the bottom of the e-mails. For more information on how we use the data collected through cookies, please refer to our Cookie Policy.
9. Rights and Duties
You are under no obligation to provide your personal data. However, if you do not provide your personal data, we cannot provide services according to the contractual relationship. You shall have the right to request the following: access to your personal data; rectification or erasure of your personal data; restriction of processing or objection to processing, as well as movement. Furthermore, you have the right to lodge a complaint with a supervisory authority. You can also withdraw your consent concerning the processing of your personal data at any time. You can exercise your rights by contacting us. If you contact us as specified in the Contact Us section of this Privacy Policy, we will go through the identity verification process and take action without delay. The rights can be exercised through an agent, such as a legal representative or a person who has been delegated. The rights may be limited by law in relation to the following:
- National security;
- National defense;
- Public security;
- The prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including safeguarding against and preventing threats to public security;
- Other important objectives of general public interest, in particular an important economic or financial interest, including monetary, budgetary and taxation matters, public health and social security;
- The protection of judicial independence and judicial proceedings;
- The prevention, investigation, detection and prosecution of breaches of ethical principles for regulated professions;
- A monitoring, inspection or regulatory function connected, even occasionally, to the exercise of official authority in the cases referred to in points (1), (2), (3), (4), (5) and (7);
- The protection of the data subject or the rights and freedoms of others; and
- The enforcement of civil law claims.
Please prevent inadvertent errors by entering your personal data accurately and ensuring that it is up-to-date. You are responsible for accidents caused by inaccurate data, and if you steal other people's personal data or enter false data, you may lose your membership or be punished by applicable laws and regulations. Along with the right to have your personal data protected, you have the duties to protect your personal data yourself and not infringe on other people's personal data. Be careful not to leak your personal data and not to violate other people's personal data, including posts. If you do not fulfill these duties and damage the privacy and dignity of others, you may be penalized based on applicable laws and regulations.
10. How We Protect Personal Data
We take protection of personal data seriously and maintain safeguards designed to protect the data we collect in connection with services. However, please note that although we take reasonable steps to protect your data, no wired/wireless connection, internet transmission, or computer system is completely secure.
11. Data Protection Officer
We designate a person in charge of personal data protection to oversee and take responsibility for personal data processing, handle complaints from users and manage damage relief related to the processing of personal data. The details are provided below.
| Department | Management Support Office |
| Name | Si-Young Park |
| E-mail address | c02.park@hanwha.com |
12. Contact Us
For more information about our privacy practices, or to exercise any rights you have pursuant to applicable laws and regulations, please contact our Personal Data Management Department at Customer Care. You can also contact us in writing at the following addresses:
| Head Office | 6, Pangyo-ro 319beon-gil, Bundang-gu, Seongnam-si, Gyeonggi-do 13488, Republic of Korea |
| U.S. Branch | 6000 Phyllis Dr. Cypress, CA 90630, United States |
13. Regional Privacy Disclosure
13.1. For Children in The United States
This section supplements our Privacy Policy and applies solely to residents of the United States.
We do not knowingly collect personal data from children under the age of 13 without consent from a parent or legal guardian, and children under the age of 13 are not the primary target of our services related to compliance with COPPA (Children's Online Privacy Protection Act of 1998).
13.2. For California Consumers
This section supplements our Privacy Policy and applies solely to consumers in California.
We process personal data for business purposes to provide services according to contractual relationships. We do not sell, share or disclose personal data to third parties for commercial purposes. (For more information about the purposes for which we process your personal data, please see section 2)
In addition, we collect personal data in connection with services from consumers directly and do not collect your personal data from other sources. (For more information on the personal data we collect, please see section 4 )
You have the right to request the following information about your personal data we collect:
- Your personal data we collect;
- Sources from which we collect your personal data (Only from you);
- Business purposes for which we collect your personal data;
- Processors with whom we share or disclose your personal data.
You also have the right to request information regarding the types of your personal data that we share or disclose to processors and the identity of those processors. In addition, you have the right to request deletion of your personal data that we collected. To request access to or deletion of your personal data, please contact us as specified in the Contact Us section of this Privacy Policy. We will require that you provide us with your e-mail address. When we receive your request, we will review the information that you provide and attempt to use it to verify your identity by comparing it against the information we have on file. You may also have an authorized agent, registered with the California Secretary of State, submit a request on your behalf. When we receive such a request, we will process the request, in line with our standard process for verifying consumer requests. In addition, we may request information that demonstrates the agent’s authority to act on your behalf. To help protect your privacy and maintain security, we take steps to verify your identity before granting you access to your personal data or complying with your request. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.
14. Updates to Our Privacy Policy
This Privacy Policy is applied from the effective date, and may be updated to reflect changes in our personal data practices with respect to services, or changes in the applicable laws and regulations. We will notify you through a notice on the website seven (7) days before we implement the change.