Privacy Policy

Privacy Policy

KNIC Co., Ltd. (hereinafter the "Company") complies with the Personal Information Protection Act and related laws and regulations to protect the freedom and rights of data subjects, and lawfully processes and securely manages personal information. In accordance with Article 30 of the Personal Information Protection Act, the Company hereby establishes and publishes this Privacy Policy to inform data subjects of the procedures and standards for the processing and protection of personal information and to handle related complaints promptly and smoothly.

Article 1 Purposes of Collecting and Using Personal Information

The Company collects the minimum amount of personal information for the following purposes. The collected personal information will not be used for any purpose other than the following, and if the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with relevant laws.

• ① Handling customer inquiries and consultations: To verify name, company name, contact information, and email for inquiries about adopting ERP (K-System), MES, POM/PLM, and SCM solutions and consultations on smart factory implementation
• ② Service provision and contract performance: To identify individuals for entering into IT consulting and system maintenance contracts and providing enhancement and implementation services

Article 2 Items of Personal Information Collected and Collection Methods

The Company collects the following personal information to receive website inquiries and service applications.

※ Legal basis by collected item: Article 15(1)(4) of the Personal Information Protection Act

Category	Collected Items	Collection Method
Required Items	Name, company name, contact (phone number), email address	Website online inquiry form, telephone application
Automatically Collected Items	IP address, cookies, visit date and time, service usage records	Generated and collected in the course of using the website
Analytics Tool Collected Items	Page views, time on page, referral path, device and browser information, access region (country/city level)	Automatically collected through Google Analytics (GA4) cookies (de-identified information)

The Company uses Google Analytics 4 (hereinafter 'GA4'), a web log analysis tool provided by Google LLC, to analyze website usage and improve its services. In this process, the analytics tool collected items in the table above are transferred to Google LLC in the United States. The transfer method is real-time transmission via cookies when accessing the website, and the retention and use period of the recipient (Google LLC) follows Google's privacy policy (https://policies.google.com/privacy). Only de-identified information that does not personally identify users is collected, and users can refuse information collection by the above analytics tool by installing the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout) or through their web browser's cookie settings. However, refusal may limit the use of some website features.

Article 3 Retention and Use Period of Personal Information

The Company processes and retains personal information within the retention and use period prescribed by law or the period agreed to by the data subject at the time of collection.

① Website inquiry and consultation customer information: Retained for 1 year after the inquiry is resolved (however, if a contract is concluded, until the contract ends)

② Retention under relevant laws:

• Records on consumer complaints or dispute handling: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• Records on contracts or withdrawal of subscription: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• Records on payment and supply of goods: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• Commercial books and important business documents: 10 years (Commercial Act)

Article 4 Procedures and Methods for Destroying Personal Information

In principle, the Company destroys personal information without delay once the purpose of processing has been achieved. The destruction procedures and methods are as follows.

 

① Destruction Procedure: Information entered by users is stored for a certain period in accordance with internal policies and other relevant laws after the purpose is achieved, or destroyed immediately.

② Destruction Method: Personal information recorded and stored in electronic files is permanently deleted using technical methods so that the records cannot be reproduced, and personal information printed on paper is destroyed by shredding or incineration.

Article 5 Rights and Obligations of Data Subjects and How to Exercise Them

① Data subjects may exercise rights such as requesting access, correction, deletion, or suspension of processing of their personal information at any time.

② Rights under paragraph 1 may be exercised in writing, by telephone, email, or fax, and the Company will take action without delay.

③ If a data subject requests correction or deletion of errors in personal information, the Company will not use or provide the personal information until the correction or deletion is completed.

Article 6 Measures to Ensure the Security of Personal Information

In handling customers' personal information, the Company takes the following technical and administrative measures to ensure safety against loss, theft, leakage, alteration, or damage.

① Technical Measures: Managing access rights to personal information processing systems and storing passwords with one-way encryption, controlling external threats through a firewall (UTM) and network traffic monitoring, and applying encrypted communication (SSL, etc.) to secure data transmission over the network

② Administrative Measures: Minimizing staff who handle personal information and conducting regular security training

Article 7 Changes to the Privacy Policy and Notice

This Privacy Policy applies from the effective date, and if there are additions, deletions, or amendments in accordance with laws and policies, the Company will give notice through the website announcements from 7 days before the changes take effect.

① Announcement date: July 1, 2026

② Effective date: July 8, 2026

Article 8 Chief Privacy Officer and Consultation Information

The Company is responsible for overseeing the processing of personal information and has designated a Chief Privacy Officer as below to handle data subjects' complaints and provide remedies related to personal information processing.

• ① Chief Privacy Officer: Lee Jang-gi, Executive Director
• ② Responsible Department: KNIC Co., Ltd. Customer Satisfaction Team, SE Part
• ③ Contact: Phone 070-4260-0226 | Email pwc@kninc.co.kr | Fax 055-293-8249
• ④ Address: Narae Building 2F, 15-13 Bongam Industrial Complex 13-gil, Masanhoewon-gu, Changwon-si, Gyeongnam

Article 9 Remedies for Infringement of Rights

Data subjects who wish to seek remedies such as dispute resolution or consultation for personal information infringement may file a report or request consultation with the following organizations.

• ① Personal Information Dispute Mediation Committee: (No area code) 1833-6972 (www.kopico.go.kr)
• ② Personal Information Infringement Report Center: (No area code) 118 (privacy.kisa.or.kr)
• ③ Korean National Police Agency: (No area code) 182 (ecrm.police.go.kr)