CrossAngle Inc. (the “Company") establishes and publicly discloses the following privacy policy to guide the procedures and standards for personal information processing in relation to the use of the Business website (the "Service Site"), pursuant to Article 30 of the Personal Information Protection Act, and to swiftly and efficiently handle any related grievances.
Article 1 (Purpose of Processing Personal Information, Categories of Personal Information to be Processed, Retention and Usage Period)
The Company processes personal information for the following purposes in operating the Service Site:
| Service | Purpose of Processing | Categories | Retention Period |
|---|---|---|---|
| Consultation and Inquiry Service | Responses to consultations and inquiries | • Name | |
| • Company email address | |||
| • Company | |||
| • Company website URL | |||
| • Service of interest | |||
| • Comments | 1 year | ||
| Xangle ERP Free Trial Service | • Membership registration on the site | ||
| • Identity verification within the site | |||
| • Prevention of fraudulent sign-ups and usage | |||
| • Handling complaints and grievances | • Name | ||
| • Company email address | |||
| • Company | |||
| • Company website URL | Until membership withdrawal | ||
| Newsletter subscription service | • Providing newsletters | • Name | |
| • Company email address | Until withdrawal of consent |
Article 2 (Provision of Personal Information to Third Parties)
The Company processes data subjects’ personal information within the scope outlined in Article 1, and provides such personal information to third parties only in the cases set forth in Articles 17 and 18 of the Personal Information Protection Act, such as with the prior consent of the data subject or as allowed by a special regulation.
Article 3 (Matters concerning the Entrustment of Personal Information Processing)
Under Article 26 of the Personal Information Protection Act, the Company stipulates the relevant responsibilities through a document (such as an outsourcing contract), stating the prohibition on processing personal information for purposes other than the outsourced purposes, the technical and administrative safeguards for the personal information, the management and supervision of the outsourcee, and the applicable liabilities, and also supervises the outsourcee’s safe handling of personal information. If the outsourced work or the outsourcee changes, the Company will disclose such through this Privacy Policy without delay.
Article 4 (Procedures and Methods for Destruction of Personal Information)
4.1 The Company destroys personal information without delay when it becomes unnecessary, such as when the personal information retention period has expired or the purpose of processing has been achieved.
4.2 If it is necessary to continue to preserve personal information under other laws, even if the personal information retention period agreed to by the data subject has elapsed or the purpose of processing has been achieved, the Company shall move the personal information to a separate database (DB) or change the storage location.
4.3 The procedure and method of destroying personal information are as follows:
4.3.1 Destruction Procedure
The Company selects the personal information for which the grounds for destruction occurred and destroys it with the approval of its personal information protection officer.
4.3.2 Destruction Method
The Company destroys personal information stored in electronic files by technical methods that allow for no recovery of the information, or uses a paper shredder or incinerator for personal information stored in the form of written documents.