TGS complies with the personal information protection act and relevant laws and regulations to protect the freedom and rights of data subjects, processing personal information lawfully and managing it securely. Pursuant to Article 30 of the Personal Information Protection Act, we establish and disclose this Personal Information Processing Policy to guide data subjects on the procedures and standards for processing personal information and to handle related complaints promptly and smoothly. [ Major Personal Information Processing Labels ] • Collection of general personal information • Collection of 2 sensitive informations • Retention period of personal information • Purpose of processing personal information • Provision of personal information • Complaint handling department Table of Contents • Purpose of processing personal information • Items of personal information processed • Provision of personal information to third parties • Overseas transfer of personal information • Measures regarding the destruction of personal information of non-users • Measures to ensure the safety of personal information • Matters concerning the collection, use, and refusal of behavioral information • Processing of pseudonymized information • Designation of domestic representative • Remedies for infringement of rights and interests • Changes to the personal information processing policy • Processing and retention period of personal information • Personal information processing of children under 14 • Entrustment of personal information processing • Procedures and methods for destruction of personal information • Rights and obligations of data subjects and legal representatives and how to exercise them • Matters regarding the installation, operation, and refusal of automatic personal information collection devices • Judgment criteria for additional use/provision • Personal information protection officer • Request for inspection of personal information • Installation and operation of image information processing equipment Purpose of Processing Personal Information TGS processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent will be implemented in accordance with Article 18 of the Personal Information Protection Act. 1. Registration and Management In the case of membership services, personal information is processed for the purpose of identifying and authenticating the person according to the intention to join, maintaining and managing qualifications, preventing unauthorized use of services, verifying minors, verifying legal representative's consent when collecting personal information of children under 14, preventing illegal and unauthorized use by bad customers, restricting registration, managing customer purchase and service history, preserving records for dispute resolution, handling complaints, delivering notices, providing benefits and guidance. In the case of in-person services, information necessary for the service is collected and processed at the time the service is provided. 2. Provision of Goods or Services TGS uses the collected personal information to provide online/offline services to users. Such services include, for example, the following, and may include the provision of customized service information using user information. • Provision of services such as warranty and repair: Reservation and provision of A/S services requested by customers, such as purchase history, warranty period confirmation, repair and data backup execution, and service history management. • Provision of customer consultation services: Online/offline consultation/customer inquiry handling and reservation management/guidance Processing and Retention Period of Personal Information 1. TGS processes and retains personal information within the personal information retention/use period according to laws and regulations or within the personal information retention/use period consented to when collecting personal information from the data subject. 2. The processing and retention period for each piece of personal information is as follows. 1. Registration and Management: Until withdrawal from the business/organization (end of contract) However, in cases matching the following reasons, until the end of the corresponding reason: 1) If an investigation, inspection, etc. according to relevant laws is in progress, until the end of the corresponding investigation/inspection. 2) If a credit/debt relationship remains due to service use, until the final settlement of the corresponding credit/debt relationship. 2. Provision of Goods or Services: Until the completion of the supply of goods/services and the completion of cost payment/settlement. However, in cases matching the following reasons, until the end of the corresponding period: 1) Records related to transactions such as labeling/advertising, contract contents and performance according to the 「Act on Consumer Protection in Electronic Commerce, etc.」 - Records on contracts or cancellation of subscription, payment of price, supply of goods, etc.: 5 years - Records on consumer complaints or dispute handling: 3 years 2) Retention of communication facts confirmation data according to the 「Protection of Communications Secrets Act」 - Subscriber's telecommunication date/time, start/end time, counterpart subscriber number, frequency of use, originating base station, location tracking data: 12 months - Computer communication, internet log records, access point tracking data: 3 months - Other communication fact confirmation data: 12 months 3) Personal information included in commercial account books and important documents related to business - Personal information included in slips or similar documents: 5 years (Commercial Act) - Customer's name, phone number, address, payment details (billed amount, received amount, date/time of receipt, payment method, etc.), and other books related to transactions: 5 years from the day after the statutory deadline for filing relevant national taxes (Framework Act on National Taxes) - Records on the collection, processing, and use of credit information: 3 years (Use and Protection of Credit Information Act) - Records on cash receipt payment details: 1 year (Restriction of Special Taxation Act) 3. Retention period of personal information kept according to internal company policy 1). In case of individual consent from the user: Period of consent 2). Information required for fraudulent subscription and use cases (ID, device information, service use log and collection items, withdrawal history, reason for withdrawal): Until relevant disputes are resolved 3). In case of disputes such as complaints or lawsuits between the company and the user, if the dispute is not resolved within the retention period: Until the dispute is resolved 4). Service use log: 7 years from the date of collection 5). Consultation contents through chatbot chat service: 7 years from the date of collection 6). Personal information collected during A/S receipt/consultation through phone, homepage, and chatbot service: 7 years from the date of collection 7). If user fees (including other transaction fees) have not been paid without a deposit or intermediate payment: Until the fees are fully paid 8). Personal information collected during service processing such as A/S receipt, repair, courier, exchange, refund, damage, etc.: 7 years from the date of collection 9). Personal information collected through email inquiries and 1:1 inquiries: 7 years from the date of collection 10). Sensitive information collected for the convenience of using the call center for visually or hearing-impaired customers during A/S receipt/consultation/repair: 7 years from the date of collection ※ Besides personal information, the company keeps some of the A/S and consultation contents, device information, and log information in a form that cannot identify individuals for statistical and service improvement purposes. Items of Personal Information Processed TGS processes the following items. 1. Information collected during service use/inquiry, consultation, and reservation (General) ① Mandatory items: Name, mobile phone number (contact), address (for on-site A/S), consultation details Product identification and registration information (model name, model number, production number, product S/N, manufacturing date) Service use log, A/S history/product information/status/usage history and operation information (energy information, operation history, diagnosis information, error information, happening/abnormal information, etc.) ② Optional items: Purchase details to confirm product purchase date 2. Smart terminal (for education) services (including Soton-talk) • Mandatory items: Name of Education Office, school name • Optional items: Student name, class, number Matters regarding personal information processing of children under 14 ① TGS collects the minimum personal information necessary to perform the service after obtaining the consent of the legal representative when collecting personal information for children under 14. • Mandatory items: Name of legal representative, relationship, contact information ② In addition, when collecting personal information of children for the promotion of services and products at TGS, separate consent is obtained from the legal representative. ③ When TGS collects personal information of children under 14, it may request minimum information such as the name and contact information of the legal representative from the child, and confirms whether the legitimate legal representative has consented by one of the following methods: • Letting the legal representative indicate consent on an internet site where the contents of consent are posted, and notifying the legal representative through a mobile phone text message that the personal information processor has confirmed the indicator of consent • Sending an e-mail containing the contents of consent and receiving an e-mail from the legal representative containing an indication of consent • Notifying the legal representative of the contents of consent over the phone and obtaining consent or guiding the legal representative on how to check the contents of consent, such as an internet address, and re-obtaining consent through a phone call • Other methods of notifying the legal representative of the contents of consent and confirming the indication of intention for consent in the same way as above. Provision of Personal Information to Third Parties TGS processes the following items. ① TGS processes the data subject's personal information only within the scope specified in the purpose of processing personal information, and provides personal information to third parties only in cases matching Articles 17 and 18 of the Personal Information Protection Act, such as the data subject's consent and special provisions of the law. Otherwise, TGS does not provide the data subject's personal information to third parties. ② TGS provides personal information only within the minimum necessary scope after obtaining the data subject's consent in the following cases for smooth service provision:
| Recipient | Purpose of Provision | Items Provided | Retention and Use Period |
|---|---|---|---|
| Product brand company |
Service for products History lookup and material supply details |
Name, address, phone number, email address | Within 7 years |
| Recipient | Product brand company |
|---|---|
| Purpose of Provision |
Service for products History lookup and material supply details |
| Items Provided | Name, address, phone number, email address |
| Retention and Use Period | Within 7 years |
③ TGS may provide personal information to relevant agencies without the data subject's consent in case of emergency situations such as incidents, accidents, or imminent property loss. Entrustment of Personal Information Processing For smooth service provision, TGS entrusts some personal information processing tasks to the following external professional companies. Entrustment of personal information processing is performed only when necessary for the performance of each individual service. When concluding an entrustment contract, TGS specifies relevant contents to comply with personal information protection laws and regulations and performs regular management/supervision. - Task content: A/S service agency - Consignees can be checked in the "Consignee Status." Overseas transfer of personal information TGS does not entrust to overseas corporations. Procedures and Methods for Destruction of Personal Information ① TGS destroys the relevant personal information without delay when it becomes unnecessary, such as when the personal information retention period has elapsed or the purpose of processing has been achieved. ② In cases where personal information must be continuously preserved according to other laws despite the expiration of the personal information retention period consented to by the data subject or the achievement of the purpose of processing, the personal information is moved to a separate database (DB) or stored in a different location. ③ The procedures and methods for destroying personal information are as follows: 1. Destruction procedure TGS identifies personal information for which the reason for destruction has occurred and destroys the personal information after obtaining the approval of TGS's personal information protection officer. It can be approved after daily automatic system destruction. 2. Destruction method TGS destroys personal information recorded and stored in an electronic file format so that the records cannot be reproduced, and personal information recorded and stored in paper documents is destroyed by shredding with a shredder or incineration. Destruction of personal information of non-users ① TGS destroys the information of users who have not used the service for 7 years. However, it may be stored and managed separately from the personal information of other users until the retention period specified in other laws has elapsed. Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them ① Data subjects may exercise their rights to request inspection, correction, deletion, or suspension of processing of personal information against TGS at any time. ※ Requests for inspection, etc., regarding personal information of children under 14 must be made by their legal representative directly, and data subjects who are minors aged 14 or older may exercise their rights themselves or through their legal representative. ② Exercising rights can be done through writing, e-mail, or facsimile (FAX) pursuant to Article 41(5)(2) of the Enforcement Decree of the Personal Information Protection Act, and TGS will take action without delay. ③ Rights can also be exercised through an agent, such as a legal representative of the data subject or a person who has been delegated. In this case, you must submit a power of attorney in accordance with Form No. 11 of the "Notification on Personal Information Processing Method (No. 2020-7)." ④ Requests for inspection and suspension of processing of personal information may restrict the rights of data subjects in accordance with Article 35(4) and Article 37(2) of the Personal Information Protection Act. ⑤ Requests for correction or deletion of personal information cannot be made if other laws specify that the personal information is a collection target. TGS verifies whether the person who made the request for inspection, correction/deletion, or suspension of processing according to the rights of the data subject is themselves or a legitimate agent. Measures to Ensure the Safety of Personal Information TGS is taking the following measures to ensure the safety of personal information: 1. Administrative measures: Establishment and implementation of an internal management plan, operation of a dedicated organization, regular employee training 2. Technical measures: Management of access rights to personal information processing systems, etc., installation of access control systems, encryption of personal information, installation and update of security programs 3. Physical measures: Access control to computer rooms, clouds, data storage rooms, etc. Matters regarding high-level installation, operation, and refusal of automatic personal information collection devices ① TGS uses 'cookies' that store information and recall it frequently to provide individualized customized services to users of web services. ② A cookie is a small amount of information sent by the server (http) used to operate a website to the user's computer browser and may be stored on the hard disk of the users' PC computer. ③ Purpose of using cookies: Used to identify the visitation and usage patterns of each service and website visited by users, popular search terms, secure connection status, etc., to provide optimized information to users. - Installation, operation, and refusal of cookies: You can refuse to store cookies through the option setting in the Tools > Internet Options > Personal Information menu at the top of the web browser. - If you refuse to store cookies, difficulty may occur in utilizing customized services. Matters regarding the collection, use, and refusal of behavioral information 1) TGS collects and uses behavioral information to provide optimized customized services and benefits to data subjects in the process of service use. 2) TGS collects behavioral information as follows:
| Items of behavioral information collected | Collection method of behavioral information | Purpose of collecting behavioral information |
Retention and use period and subsequent information processing method |
|---|---|---|---|
|
ㆍWebsite/app service Visit history, search history, purchase history |
ㆍUser's website and app Automatic collection during visit/execution |
ㆍProviding personalized services based on user's interests and tendencies |
Destroyed after 90 days from collection |
| Items of behavioral information collected |
ㆍWebsite/app service Visit history, search history, purchase history |
|---|---|
| Collection method of behavioral information |
ㆍUser's website and app Automatic collection during visit/execution |
| Purpose of collecting behavioral information |
ㆍProviding personalized services based on user's interests and tendencies |
|
Retention and use period and subsequent information processing method |
Destroyed after 90 days from collection |
3) TGS does not collect behavioral information for customized advertising purposes from online services mainly used by children known to be under 14 years of age or children under 14 years of age, and does not provide customized advertisements to children known to be under 14 years of age. 4) TGS does not collect or use advertising identifiers for online customized advertising on mobile apps. 5) Data subjects may inquire about behavioral information, exercise their right to refuse, and report damage to the following contact information: ㆍ Personal information protection department: Business Operations Team. Manager: Bae Gwang-yeol Contact: 1588-4336, cs_support@tgsvc.co.kr Criteria for Additional Use/Provision ① TGS may additionally use and provide personal information without the data subject's consent, considering the matters according to Article 14-2 of the Enforcement Decree of the Personal Information Protection Act in accordance with Article 15(3) and Article 17(4) of the Personal Information Protection Act. ㆍItems: Name, contact information, address ㆍPurpose of use/provision: Sending additional information related to product services provided regularly ㆍRetention and use period: Destroyed immediately upon achievement of purpose ② Accordingly, TGS considered the following points to make additional use/provision without the data subject's consent: ㆍWhether the purpose of additionally using/providing personal information is related to the original purpose of collection ㆍWhether there was predictability for additional use/provision in light of the circumstances or processing practices at the time personal information was collected ㆍWhether additional use/provision of personal information unfairly infringes on the interests of the data subject Personal Information Protection Officer 6) TGS is in overall charge of tasks related to personal information processing and designates a personal information protection officer as follows to handle complaints and remedy damages of data subjects related to personal information processing: ㆍPersonal Information Protection Officer Name: Jeong Dong-hun Position: CEO Contact: 1588-4336, cs_support@tgsvc.co.kr Connecting to the personal information protection department. ㆍPersonal Information Protection Department Name: Business Operations Team Manager: Bae Gwang-yeol Contact: 1588-4336, cs_support@tgsvc.co.kr ② Data subjects may inquire about all personal information protection-related inquiries, complaint handling, damage relief, etc., that occur while using TGS's services (or business) to the personal information protection officer and relevant department. TGS will answer and process data subjects' inquiries without delay. Request for Inspection of Personal Information Data subjects may make a request for inspection of personal information in accordance with Article 35 of the Personal Information Protection Act to the following department. TGS will strive to process data subjects' requests for personal information inspection quickly: ㆍ Receipt/processing of request for personal information inspection ㆍ Business Operations Team manager: Bae Gwang-yeol ㆍ Contact: 1588-4336. Cs_support@tgsvc.co.kr Remedies for Infringement of Rights and Interests Installation and Operation of Image Information Processing Equipment Changes to the Personal Information Processing Policy ① This Personal Information Processing Policy applies from Nov 01, 2024.