TAESAN complies with the Personal Information Protection Act and other applicable laws and regulations in the collection, retention, and processing of personal information. TAESAN lawfully processes and securely manages personal information to ensure the proper performance of its business and to protect the rights and freedoms of data subjects.
In accordance with Article 30 of the Personal Information Protection Act, TAESAN establishes and discloses this Privacy Policy to inform data subjects of the procedures and standards concerning the processing of personal information and to ensure that related complaints are handled promptly and efficiently.
TAESAN collects the minimum amount of personal information necessary for the performance of its business and the handling of inquiries.
Detailed information regarding the purpose of processing and the items of personal information collected is provided through the Privacy Policy applicable to each service, allowing data subjects to review such information.
TAESAN provides personal information to third parties only where the data subject has provided consent or where such provision falls under the circumstances specified in Articles 17 and 18 of the Personal Information Protection Act.
- Where separate consent has been obtained from the data subject.
- Where there are special provisions under other laws.
- Where it is deemed necessary to protect the life, body, or property interests of the data subject or a third party in an imminent situation.
- Where the use of personal information for purposes other than the original purpose or the provision of such information to a third party is necessary to perform duties prescribed by other laws, and such provision has been reviewed and resolved by the Personal Information Protection Commission.
- Where necessary to provide personal information to a foreign government or international organization for the implementation of treaties or other international agreements.
- Where necessary for the investigation of crimes and the institution and maintenance of public prosecution.
- Where necessary for the performance of judicial duties by a court.
- Where necessary for the execution of criminal sentences, protective custody, or protective measures.
- Where urgently necessary for public health, public safety, or public welfare.
Where TAESAN provides personal information to a third party, it will inform the data subject of the following matters and obtain consent where required:
- The recipient of the personal information.
- The purpose of using the personal information.
- The items of personal information to be provided.
- The retention and use period of the personal information.
- The data subject's right to refuse consent and, where applicable, the consequences of refusing consent.
This website does not currently entrust the processing of personal information to any third party.
However, if TAESAN entrusts the processing of personal information to a third party, the details of the entrusted work and the information of the entrusted party, including any re-entrusted party, will be disclosed through the relevant service website.
TAESAN establishes a personal information destruction plan in accordance with its internal policies and applicable laws and regulations.
2. Destruction Procedures and PeriodPersonal information provided by users will be destroyed without delay and within five days after the retention period has expired or the purpose of processing has been achieved.
3. Methods of DestructionWhen destroying personal information processed by TAESAN, the following methods will be used.
- - Electronic files: Permanently deleted using methods that prevent restoration.
- - Records, printed materials, written documents, and other non-electronic media: Shredded or incinerated.
Where personal information must be retained under other laws even after the agreed retention period has expired or the purpose of processing has been achieved, the relevant personal information will be transferred to a separate database or stored in a separate location.
TAESAN promptly destroys personal information when it is no longer necessary due to the expiration of the retention period or achievement of the processing purpose.
- Data subjects may exercise their rights to request access to, correction, deletion, restriction of processing, or withdrawal of consent regarding their personal information from TAESAN at any time. Requests for access to personal information of children under the age of 14 must be made directly by their legal representative. Data subjects aged 14 or older may exercise their rights themselves or through a legal representative.
- Requests may be submitted in writing, by email, fax, or other applicable means in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act. TAESAN will take appropriate action without delay.
- Requests for access to personal information or restriction of processing may be limited pursuant to Article 35(4) and Article 37(2) of the Personal Information Protection Act.
- A request for correction or deletion may not be granted where the relevant personal information is specifically required to be collected under other laws.
- When processing requests for access, correction, deletion, or restriction of processing, TAESAN will verify whether the requester is the data subject or a duly authorized representative.
- Requests for access to personal information may be submitted to the department designated by TAESAN. TAESAN will make every effort to process such requests promptly.
TAESAN takes the following measures to ensure the security of personal information.
1. Establishment and Implementation of Internal Management PlansTAESAN establishes and implements internal management plans in accordance with the Standards for Measures to Ensure the Security of Personal Information.
2. Minimization and Training of Personnel Handling Personal InformationTAESAN minimizes the number of personnel authorized to handle personal information and provides regular training.
3. Restriction of Access to Personal InformationTAESAN controls access to personal information by granting, modifying, and revoking access rights to database systems that process personal information. It also controls unauthorized external access through intrusion prevention and intrusion detection systems.
4. Retention and Prevention of Alteration or Tampering of Access RecordsTAESAN retains and manages access records to personal information processing systems, including web logs and summary information, for at least one year.
However, where a personal information processing system processes the personal information of 50,000 or more data subjects or processes unique identification information or sensitive information, access records are retained and managed for at least two years.
5. Encryption of Personal InformationUsers' personal information is encrypted when stored and managed. Important data is also encrypted when stored or transmitted, and additional security measures are applied where necessary.
6. Technical Measures Against Hacking and Other ThreatsTAESAN installs security programs to prevent the leakage or damage of personal information caused by hacking, computer viruses, and other threats. Such programs are regularly updated and inspected, and systems are installed in areas where external access is restricted and are subject to technical and physical monitoring and protection.
7. Access Control for Unauthorized PersonsTAESAN maintains separate physical locations for storing personal information systems and establishes and operates access control procedures for such locations.
8. Installation, Operation, and Refusal of Devices that Automatically Collect Personal Information- TAESAN may use cookies to collect access statistics and improve its services when operating its website.
-
Cookies are small amounts of information sent by a web server to a user's web browser and may be stored on the user's computer hard drive or mobile device.
- Purpose of using cookies: Cookies are used to analyze user access statistics and improve services.
- Installation, operation, and refusal of cookies: Users may allow, block, or delete cookies through the settings of their web browser.
- - Chrome: Settings > Privacy and security > Delete browsing data
- - Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
- - Whale: Settings > Privacy > Clear browsing data
- - Chrome: Settings > Privacy and security > Delete browsing data
- - Safari: Device Settings > Safari > Advanced > Block All Cookies
- - Samsung Internet: Settings > Browsing data > Delete browsing data
TAESAN designates a Personal Information Protection Officer who has overall responsibility for personal information processing and for handling complaints and providing remedies related to personal information.
Data subjects may contact the Personal Information Protection Officer or the relevant department regarding inquiries, complaints, and remedies concerning personal information that arise while using TAESAN's services. TAESAN will respond to and process such inquiries without delay.
Personal Information Protection Officer- - Name: Taiwon Suh
- - Contact: info@taesancorp.com
Data subjects may apply for dispute resolution or consultation through the relevant personal information protection authorities in Korea in order to obtain remedies for damages caused by infringement of personal information.
For reports, consultations, or other matters concerning personal information infringement, the following organizations may be contacted:
- Personal Information Dispute Mediation Committee: 1833-6972
- Personal Information Infringement Report Center: 118
- Supreme Prosecutors' Office: 1301
- Korean National Police Agency: 182
Where a person's rights or interests have been infringed by an administrative disposition or omission concerning a request made pursuant to Articles 35, 36, or 37 of the Personal Information Protection Act, the person may file an administrative appeal in accordance with the Administrative Appeals Act.
Central Administrative Appeals Commission: 110
This Privacy Policy shall take effect on December 31, 2026.