Privacy policy

The Company processes personal information for the following purposes and does not use it for any other purpose. If a purpose of use changes, the Company will take the necessary measures, such as obtaining separate consent in accordance with Article 18 of PIPA.

1. Handling test and failure analysis requests: receiving and reviewing requests, providing quotations and progress updates, issuing test reports and analysis reports, providing online lookup of submitted requests, and related communication
2. Responding to inquiries: receiving and answering inquiries, sending email notifications of receipt and replies, and related communication
3. Service operation and security: preventing misuse, managing access logs, compiling visitor statistics, and responding to service failures and disputes

① The Company processes the following personal information.

② Legal basis for processing: Information received through website forms is processed based on the data subject’s consent (subparagraph 1 of Article 15(1) of PIPA); information received by email or telephone is processed as a measure necessary to enter into and perform a contract at the data subject’s request (subparagraph 4 of the same paragraph); and automatically generated information and administrator access records are processed based on the Company’s legitimate interest in operating the service securely (subparagraph 6 of the same paragraph). However, information entered by a requester about persons other than the requester, such as a representative or billing contact, is not collected with the consent of those data subjects. The Company therefore processes such information based on its legitimate interest in handling the request, including related communication such as quotations and the issuance of tax invoices (subparagraph 6 of the same paragraph), and only to the extent necessary for that purpose.

③ The Company does not collect unique identification information, such as resident registration numbers, or sensitive information, and does not provide services to children under the age of 14. Please take care not to include such information in requests, inquiries or attachments.

④ If a requester enters the personal information of another person, such as a billing contact or representative, the Company uses that information only for the purpose of handling the request. At the request of that data subject, the Company will promptly notify them of the source of the personal information, the purpose of processing, and their right to request suspension of processing (Article 20 of PIPA).

⑤ For inquiries on the inquiry board that are not registered as private posts, the title, content, attachments and replies are visible to anyone, and the author’s name is partially masked. Email addresses, contact numbers and company/organization names are not made public.

⑥ The AI chatbot is operated so that it does not collect personal information. The chatbot is offered on our Korean site only; it is not offered on the English site and is not available to users in the European Economic Area (EEA), Switzerland and the United Kingdom. Questions entered into the chatbot are not stored on the Company’s servers; they are sent to the Google Gemini API (free tier) of Google LLC to generate answers, and Google may use the transmitted content to improve its services in accordance with its terms. Before transmission, the Company automatically masks strings in the format of email addresses, telephone numbers, resident registration numbers and card numbers. Other personal information, such as names, cannot be masked automatically, so please do not enter it into the chatbot. For inquiries that require personal information, please use the inquiry board, telephone or email.

① The Company processes and retains personal information within the retention and use period prescribed by law or the period consented to by the data subject at the time of collection. The retention period for each category of personal information is as follows.

② Where retention is required under relevant laws, the information is retained for the period prescribed by those laws.

① The Company processes personal information only within the scope of the purposes set out in Article 1 and does not provide personal information to third parties except in cases falling under Articles 17 and 18 of PIPA, such as with the data subject’s consent or where specifically provided by law.

② On the request submission screen and in the test and analysis request guide, the Company gives you the option to select “Do not consent” to the following provision of personal information to third parties, and your choice is stored with the request record.

③ The agency that will conduct these surveys has not yet been selected, so no personal information is currently provided to any third party. Once an agency is selected, the Company will disclose its name and retention and use period in this policy and display the same information on the consent screen before providing any information.

① The Company outsources the processing of personal information as follows to ensure smooth business operations.

② The Company operates its website servers, database and attachment storage itself and does not outsource them to external hosting providers.

③ When entering into an outsourcing contract, the Company specifies in writing, in accordance with Article 26 of PIPA, matters including the prohibition of processing personal information for purposes other than the outsourced tasks, technical and administrative safeguards, restrictions on further outsourcing, management and supervision of the entrusted party, and liability such as compensation for damages. The Company also supervises whether the entrusted party processes personal information securely.

④ Further outsourcing: ECOUNT Inc. stores email data in the Amazon Web Services (AWS) cloud (according to ECOUNT Inc.’s product information). If the outsourced tasks, the entrusted party or any further entrusted party changes, the Company will disclose the change through this policy without delay.

① The Company does not transfer the personal information of data subjects overseas (including provision, access, outsourcing of processing and storage). Paragraphs ② and ③ below are not cases in which the Company transfers personal information overseas; they explain what your own browser sends when it connects directly to an overseas provider.

② Note on the AI chatbot (offered on our Korean site only): To generate answers, questions entered into the chatbot are sent over an encrypted connection (HTTPS) to countries where Google LLC operates data processing facilities, such as the United States, and Google may use them to improve its services in accordance with its terms. The Company does not collect personal information through the chatbot, and it automatically masks strings in the format of email addresses, telephone numbers, resident registration numbers and card numbers before transmission. Please do not enter personal information into the chatbot. You can receive the same information without using the chatbot through the inquiry board, by telephone (+82-42-368-0180) or by email (pileta@pileta.co.kr).

③ Note on the map on the Location page: The Location page displays a Google map. When it does, your browser connects directly to Google and the information below is sent to Google. It does not pass through the Company, and the Company neither collects nor stores it. This is not an overseas transfer of personal information held by the Company; Google collects it directly from you, and Google’s privacy policy (policies.google.com/privacy) applies to that processing.

① Data subjects may at any time request the Company to provide access to, correct, delete or suspend the processing of their personal information, and may withdraw their consent.

② You may exercise these rights by contacting the privacy department specified in Article 11 in writing, by telephone (+82-42-368-0180) or by email (pileta@pileta.co.kr). The Company will notify you of the action taken within 10 days of receiving your request.

③ You can look up your test and failure analysis requests directly on our Korean site using the email address or telephone number and the lookup password entered at submission, and you can view private inquiries using the password set when posting them.

④ You may also exercise these rights through a representative, such as your legal representative or a person you have authorized; in this case, a power of attorney must be submitted.

⑤ Requests for access to personal information and for suspension of processing may be restricted under Article 35(4) and Article 37(2) of PIPA, and deletion cannot be requested for personal information that other laws specify as subject to collection.

⑥ The Company verifies whether the person making a request to exercise these rights is the data subject or a legitimate representative.

① When personal information becomes unnecessary because the retention period has expired or the purpose of processing has been achieved, the Company destroys it without delay.

② Where personal information must continue to be retained under relevant laws, the Company stores it separately.

③ Destruction procedure: The Company identifies personal information for which grounds for destruction have arisen and destroys it with the approval of the Chief Privacy Officer.

④ Destruction method: Information in electronic form (including databases, attachments and emails in the Company’s mailboxes) is deleted using methods that make recovery impossible, and information printed on paper is shredded or incinerated.

The Company takes the following measures to ensure the security of personal information.

1. Password encryption: Passwords for request lookup, private posts and administrator accounts are stored using one-way encryption that cannot be decrypted.
2. Encryption in transit: All communication with the website is encrypted using HTTPS (TLS).
3. Access control: The Company applies administrator authentication and login sessions that expire after a set period, limits the number of login attempts, and uses a server firewall to allow only necessary connections.
4. Protection of attachments: Attachments are kept in storage that cannot be accessed directly from the web and can be downloaded only after access rights have been verified.
5. Prevention of misuse: The Company limits the number of submission and lookup requests and temporarily blocks access to a private post after repeated incorrect password entries.
6. Retention of access records: The Company records and retains the history of administrator logins and post changes.

① Cookies are small pieces of information that a website stores in the user’s browser. The Company does not use cookies for general users and uses only a session cookie to keep administrators logged in.

② For convenience, the Company stores the following information in browser storage (web storage). This information is stored in the user’s browser and can be deleted at any time through the browser settings.

• A visit marker that prevents duplicate counting of visitors (deleted when the tab is closed)
• AI chatbot conversations (deleted when the tab is closed)
• Whether the visitor statistics panel on the home page is expanded or collapsed

③ The Company does not use cookies or tracking tools for advertising or analytics purposes and does not collect users’ behavioral information or use it for targeted advertising.

④ In the features below, however, third-party code runs in your browser, and that third party may set its own cookies or read cookies already stored. The Company does not access those cookies and neither collects nor stores that information.

• Address search in the request forms — Kakao postcode service (Kakao Corp., Republic of Korea)
• The map on the Location page — Google Maps (Google LLC, United States). See Article 6 ③ for the information sent and how to refuse it.

⑤ How to refuse: You can refuse or delete the storage of cookies and site data through the settings menu of your browser. Refusing does not restrict your use of the website; only administrator login and resuming chatbot conversations will be unavailable.

① The Company has designated the following Chief Privacy Officer to take overall responsibility for the processing of personal information and to handle complaints and provide remedies for data subjects in relation to the processing of personal information.

② Data subjects may contact the privacy department (Management Support Office) regarding any matters related to personal information protection, including requests for access to personal information, complaints and remedies for damages. The Company will respond and take action without delay.

To obtain remedies for infringement of their personal information, data subjects may apply for dispute resolution or consultation to the following organizations.

• Personal Information Dispute Mediation Committee: call 1833-6972 (from within Korea), www.kopico.go.kr
• KISA Privacy Infringement Report Center: call 118 (from within Korea), privacy.kisa.or.kr
• Supreme Prosecutors’ Office, Cybercrime Investigation Division: call 1301 (from within Korea), www.spo.go.kr
• Korean National Police Agency, Cyber Bureau: call 182 (from within Korea), ecrm.police.go.kr

① When this policy is changed, the Company discloses the changes and their effective date on the website. Changes that significantly affect the rights of data subjects, such as changes to the items of personal information processed or the purposes of processing, are announced in a website notice before or at the time they take effect, with a comparison of the content before and after the change.

② If the purposes or items of personal information processed with consent change, the Company will obtain consent again in accordance with relevant laws.