KS AEROSPACE INC. (hereinafter referred to as the 'Company') has established and published the following privacy policy in order to protect the personal information of subjects in accordance with Article 30 of the Personal Information Protection Act and to promptly and smoothly handle related grievances.
 

■ Article 1 (Purpose of Personal Information Processing)

The Company processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be implemented. 

1. Membership registration and management of the website
Personal information includes confirmation of intention to sign up for membership, identification and authentication of identity according to the provision of membership service, maintenance of membership, identity confirmation according to enforcement of limited identity confirmation system, prevention of illegal use of services, confirmation of consent of legal representative when processing personal information of children under the age of 14, various notices, notifications, and grievance handling, so personal information is processed for these purposes..

2. Provision of goods or services
Personal information is processed for the purposes of product delivery, service provision, contract and invoice delivery, content provision, customized service provision, identity verification, age verification, payment and settlement, and debt collection.

3. Grievance handling
Personal information is processed for the purposes of verifying the identity of the complainant, verifying complaints, contacting and notifying for fact-finding, and notifying the processing result.

4. Used for marketing and advertising
Personal information is processed for the purpose of delivering advertising information such as events, identifying access frequency, or statistics on member service use.

■ Article 2 (Processing and retention period of personal information)

① The Company processes and retains personal information within the period of retention and use of personal information in accordance with laws and regulations or within the period of retention and use of personal information agreed upon when collecting personal information from the information subject.

② Each personal information processing and retention period is as follows.

1. Membership registration and management of the website: Applied until a business/organization withdraws from the website, but in the following cases, it is applied until the end of the reason.

1) If an investigation or examination due to a violation of related laws is in progress, it is applied until the investigation or examination is completed.

2) If a bond or debt relationship remains due to the use of the website, it is applied until the relevant bond or debt relationship is settled.

2. Provision of goods or services: Applied until the supply of goods or services is completed and payment or settlement of charges is completed. However, in the case of the following reasons, it is applied until the end of the relevant period.

1) Records of transactions such as indications or advertisements, contract details and performance in accordance with the 「Act on Consumer Protection in Electronic Commerce, etc.」

- Records on indications or advertisements: June

- Records on contract or subscription withdrawal, payment, and supply of goods: 5 years

- Records on consumer complaints or dispute resolution: 3 years

2) Storage of communication confirmation data according to Article 41 of 「Protection of Communications Secrets Act」

- Date and time of subscriber telecommunication, start and end time, subscriber number of the other party, frequency of use, location tracking data of sending base station: 1 year

- Computer communication, Internet log record data, access location tracking data: 3 months

■ Article 3 (Consignment of personal information processing)
① The Company entrusts the following personal information processing tasks for smooth personal information processing.
- Consignee (trustee): Cafe24
- Consigned work: shopping mall and system maintenance 

- Consignee (trustee):
- Consigned work: delivery of purchased products

- Consignee (trustee):Paypal
- Consigned work: payment and purchase safety service

② When concluding the consignment contract, the Company specifies in documents such as contracts the contents of responsibilities such as prohibition of personal information processing, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the trustee, and compensation for damages in addition to the purpose of performing consigned work and supervises that personal information is processed safely by the consigner in accordance with Article 25 of the Personal Information Protection Act.

③ If the consignment work or the consignee is changed, the Company will disclose it through this privacy policy without delay.

■ Article 4 (Rights of users and legal representatives and how to exercise them)

① The information subject can exercise the rights related to the protection of personal information in each of the following Paragraphs at any time to the Company.

1. Request for access to personal information

2. Request for correction in case of errors, etc.

3. Request for deletion

4. Request to stop processing

② The exercise of the rights pursuant to Paragraph 1 may be made to the Company in writing, by phone, e-mail, fax, etc. and the Company will take action without delay.

③ If the information subject requests correction or deletion of personal information errors, the Company will not use or provide the personal information until the correction or deletion is completed.

④ The exercise of the rights under Paragraph 1 may be done through the legal representative of the information subject or the person who has been delegated. In this case, a power of attorney shall be submitted in the form of Attachment 11 of the Enforcement Regulations of the Personal Information Protection Act.

⑤ The information subject shall not infringe on the personal information and privacy of the information subject itself or others processed by the Company in violation of related laws such as the Personal Information Protection Act.

■ Article 5 (Items of personal information to be processed)

The Company processes the following personal information items.

1. Membership registration and management of the website

Required items: Name, ID, password, phone number, email address

Optional items: Date of birth, address

2. Provision of goods or services

Required items: Payment information such as name, ID, password, address, phone number, e-mail address, credit card number, bank account information, etc.

Optional items: Past purchases record

3. In the process of using the Internet service, the following personal information items may be automatically created and collected.

IP address, cookie, MAC address, service use record, visit record, bad use record, etc.

■ Article 6 (Destruction of Personal Information)

① The Company destroys the personal information without delay when the personal information becomes unnecessary, such as the expiry of the personal information retention period or achievement of the purpose of processing.

② If the personal information retention period agreed to by the information subject has elapsed or the personal information has to be kept in accordance with other laws despite the achievement of the purpose of processing, move the personal information to a separate database (DB) or keep it in another storage location.

③ The procedure and method of personal information destruction are as follows:

1. Destruction procedure

The Company selects the personal information for which the reason for destruction has occurred, and destroys the personal information with the approval of the Company's personal information protection officer.

2. Destruction method

The Company destroys personal information recorded and stored in the form of electronic files using methods such as low level format so that the records cannot be reproduced, and personal information recorded or stored in paper documents shall be shredded with a shredder or incinerated.

■ Article 7 (Measures to ensure the safety of personal information)

The Company is taking the following measures to ensure the safety of personal information:

1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.

2. Technical measures: Management of access rights of personal information processing systems, etc., installation of access control systems, encryption of unique identification information, etc., installation of security programs

3. Physical measures: Control of access to computer rooms, data storage rooms, etc.

■ Article 8 (Matters concerning the installation, operation and rejection of automatic personal information collection devices)

① The Company stores the used information and uses 'cookies' to retrieve from time to time to provide users with individually customized services.

② Cookies are a small amount of information sent by the server (http) used to operate the website to the user's computer browser and are also stored on the hard disk of the user's PC computer.

A. Purpose of use of cookies: Cookies are used to provide optimized information to users by identifying the types of visits and usage, popular search terms, and security access to each service and website visited by users.

B. Installation, operation and rejection of cookies: Cookie storage may be rejected by setting options in Tools>Internet Options>Personal Information Menu at the top of the web browser.

C. If you refuse to store cookies, you may experience difficulties in using customized services.

■ Article 9 (Person in charge of personal information protection)

① The Company is responsible for overall handling of personal information, and designates the person in charge of personal information protection as follows to handle complaints and relieve damage from information subjects related to personal information processing.

▶ Person in charge of personal information protection

Name: KS AEROSPACE INC.

Contact number: (323)472-1713

Email: cktjjs@gmail.com

② The information subject can inquire about all personal information protection related inquiries, complaint handling, damage relief, etc. that have occurred while using the Company's service (or business) to the person in charge of personal information protection and the department in charge. The Company will respond and handle the inquiries of the information subject without delay.

■ Article 11 (Obligation to notify)

The content of the current privacy policy will be notified through the 'Notice' on the website when additional deletions or modifications are made in accordance with government policies or changes in security technology.

■ Article 12 (Implementation and change of the privacy policy)

This privacy policy will be applied from November 1, 2021.