Hana High Metal Policy
Privacy Policy
("www.hana-metal.com" hereinafter referred to as "Hana High Metal") protects the personal information of the data subject pursuant to Article 30 of the Personal Information Protection Act, and any related difficulties;
In order to process it quickly and smoothly, we establish and disclose the personal information processing policy as follows.

○ This personal information processing policy will be applied from January 1, 2022.

- Article 1 (Purpose of processing personal information)

('www.hana-metal.com' hereinafter referred to as 'Hana High Metal') processes personal information for the following purposes. The personal information being processed is not used for any purpose other than the following purposes, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. Membership registration and management of the homepage
Process personal information for the purpose of preventing fraudulent use of services.

2. Handling of civil complaints
Personal information is processed for the purpose of identifying the complainant, confirming the complaint, contacting and notifying the result of the fact-finding, and notification.

3. Providing goods or services
Process personal information for the purpose of providing services.

- Article 2 (Processing and Retention Period of Personal Information)

means within the period of possession and use of personal information under Acts and subordinate statutes or within the period of retention and use of personal information agreed upon when collecting personal information from the data subject
We process and keep personal information.

② Each personal information processing and retention period is as follows.

- Article 3 (Item of personal information to be processed)

is processing the following personal information items.

1
Required items: Email, mobile phone number

- Article 4 (Matters concerning the provision of personal information to a third party)

processes personal information only within the scope specified in Article 1 (for the purpose of processing personal information), consent of the data subject, special provisions of the law, etc
Personal information is provided to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act.

provides personal information to third parties as follows.

- Article 5 (Matters concerning entrustment of personal information processing)

entrusts personal information processing as follows for smooth personal information processing.

② In accordance with Article 26 of the Personal Information Protection Act, stipulates in the contract documents responsible for prohibiting personal information processing, technical and management protection measures, re-entrustment restrictions, and supervises whether the trustee handles personal information safely.

③ If the details of the entrusted work or the trustee changes, we will disclose it through this personal information processing policy without delay.

- Article 6 (Procedure and method of destruction of personal information)

destroys personal information without delay when personal information becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the purpose of processing.

② Where the retention period of personal information agreed by the data subject has elapsed or the purpose of processing has been achieved, the personal information must be preserved in accordance with other statutes;
Move the personal information to a separate database (DB) or preserve it in a different storage location.
1. Legal basis:
2. Personal information items to be preserved: account information, transaction date

③ The procedure and method of destroying personal information are as follows.
1. Destruction procedure
selects personal information that has occurred due to destruction, and destroys personal information with the approval of the personal information protection manager of .

2. Destruction method

Electronic file types of information use a technical method that does not allow recording to be played back

- Article 7 (Matters concerning the rights and obligations of the information subject and legal representative, and the method of exercise thereof)

① The information subject may exercise the right to view, correct, delete, and request suspension of processing of personal information at any time for Hana High Metal Co., Ltd.

② The exercise of rights under paragraph (1) may be conducted by Hana High Metal Co., Ltd. in writing, e-mail, fax, etc. pursuant to Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act
Hana High Metal Co., Ltd. will take action without delay.

③ The exercise of rights under paragraph (1) may be conducted through a legal representative of the data subject or an agent, such as a delegated person.In this case, "How do I process my personal information?"
Notice (No. 2020-7)" You must submit a power of attorney in accordance with attached Form 11.

④ The rights of the data subject may be limited pursuant to Articles 35 (4) and 37 (2) of the Personal Information Protection Act for the requesting suspension of personal information access and processing.

⑤ A request for correction and deletion of personal information cannot be requested to delete personal information if it is specified in other laws and regulations.

⑥ Hana High Metal Co., Ltd. determines whether the person who made the request for perusal, correction or deletion in accordance with the right of the data subject, or access to the request for suspension of processing is himself or his legitimate agent
Check it out.

- Article 8 (Matters concerning measures to ensure the safety of personal information)

is taking the following measures to ensure the safety of personal information.

1. Conduct regular self-audit
In order to ensure stability related to personal information handling, self-audit is conducted regularly (once a quarter).

2. Minimize and train personnel handling personal information
We are implementing measures to manage personal information by designating employees who handle personal information and minimizing them by limiting them to those in charge.

3. Establishment and implementation of an internal management plan
An internal management plan is established and implemented for safe processing of personal information.

4. Encryption of personal information
The user's personal information is stored and managed by encryption, so only the user can know, and important data are encrypted or files are locked
You are using separate security features, such as using features.

5. Restrictions on access to personal information
Measures necessary for controlling access to personal information are taken through granting, changing, or canceling access to the database system that processes personal information
It uses an intrusion prevention system to control unauthorized access from outside.

6. Use of locks for document security
Documents containing personal information and auxiliary storage media are stored in a safe place with a lock.

- Article 9 (Matters concerning the installation and operation of devices that automatically collect personal information and refusal thereof)

Hana High Metal Co., Ltd. does not use 'cookie' that stores information on the use of the information subject and calls it from time to time.

- Article 10 (Matters concerning the collection, use, provision, refusal, etc. of behavioral information)

Matters concerning the collection, use, provision, refusal, etc. of behavioral information;
does not collect, use, or provide behavioral information for online customized advertisements.

- Article 11 (Criteria for determining additional use and provision)

Considering matters under Article 14-2 of the Enforcement Decree of the Personal Information Protection Act pursuant to Articles 15(3) and 17(4) of the Personal Information Protection Act,
Personal information can be additionally used and provided without the consent of the information subject.
Accordingly, in order for to additionally use and provide the following matters without the consent of the information subject, the following matters were considered.
▶ Whether the purpose of using and providing additional personal information is related to the original purpose of collection

▶ Whether there is a predictability of additional use and provision in light of the circumstances or processing practices in which personal information is collected

▶ Whether additional use and provision of personal information unfairly infringes on the interests of the data subject

▶ Whether measures necessary for securing safety, such as pseudonym processing or encryption, have been taken

※ Criteria for judging considerations when additional use and provision are prepared and disclosed by business operators/organizations themselves

▶ Matters concerning measures to ensure the safety of pseudonym information under Article 28-4 (Obligation to take safety measures for pseudonym information, etc.) of the Act;

- Article 13 (Matters concerning the person in charge of personal information protection)

① Hana High Metal Co., Ltd. is responsible for the overall handling of personal information, and to handle complaints and remedy damages of information subjects related to personal information processing, etc
The person in charge of personal information protection is designated as follows.

▶ Person in charge of personal information protection
Name: Choi Ho-hyun
Position: Management Support Team
Position: Officer
Contact information: 01049923214, chlghgus3@hotmail.com, 0325733697
※ You will be directed to the Privacy Department.

▶ Department in charge of personal information protection
② The information subject shall provide information on all personal information protection inquiries, complaint handling, damage relief, etc. arising from the use of Hana High Metal Co., Ltd
You can contact the person in charge of personal information protection and the department in charge. Hana High Metal Co., Ltd. will respond and process your inquiries without delay.

- Article 15 (Department that receives and processes requests for access to personal information)
The information subject may request the following departments to view personal information under Article 35 of the Personal Information Protection Act.
will try to expedite the request for personal information access by the information subject.

▶ Personal information access request reception and processing department
Department name: Management support department
Person in charge: Choi Hohyun
Contact information: 01049923214, chlghgus3@hotmail.com, 0325733697

- Article 16 (Method of remedy for infringement of rights and interests of data subjects)
In order to receive relief from personal information infringement, the information subject may resolve disputes or consult with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Report Center, etc
You can apply. In addition, please contact the institution below for reports and counseling of other personal information violations.

1. Personal Information Dispute Mediation Committee: (Without National Number) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
4. Police Department: 182 (ecrm.cyber.go.kr)

Requests under Article 35 (View of Personal Information), Article 36 (Correction and Deletion of Personal Information), and Article 37 (Suspension of Processing of Personal Information, etc.) of the Personal Information Protection Act;
A person who has been infringed on his or her rights or interests due to a disposition or omission by the head of a public institution may request an administrative trial as prescribed by the Administrative Appeals Act.

※ For more information on administrative trials, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).

- Article 17 (Change of Personal Information Processing Policy)

① This personal information processing policy will be applied from January 1, 2022.