Privacy Policy

"S-Core Co., Ltd." (hereinafter referred to as "S-Core") complies with the relevant laws, regulations and guidelines of the Republic of Korea that the information and communication service providers must comply with in order to protect the user's valuable personal information. S-Core will disclose the purpose of personal information provided by users through the personal information processing policy, purposes and methods of uses, and what measures are taken to protect user’s personal information.

S-Core's privacy policy contains the following information.

Personal information items to be collected and collection methods
Purposes of collection and use of personal information
Sharing and provision of collected personal information
Retention of collected personal information
Procedures and methods of destroying personal information
Measures to ensure the safety of personal information
User's rights and exercising methods
Affiliation of personal information manager and person in charge - name and contact information
Duty of notification

This policy will be effective from May 17, 2018.

Personal information items to be collected and collection methods
- Collection item
  The Company collects the following personal information for management of company inquiries, participation registration service and wrong reporting.
  
  Contact us
  
  - Required information: Name, Contact, Email
  - Optional information: Company name
  - The right to refuse consent and the disadvantage of refusing consent:
  You have the right to deny consent to the collection of required information.
  In addition to the required information, you have the right to deny consent to the collection of optional information.
  If you do not agree, ‘contact us’ service may be restricted.
  
  Download resource materials (white papers, briefs, videos, etc.)
  
  - Required information: Email
  - The right to refuse consent and the disadvantage of refusing consent:
  You have the right to deny consent to the collection of required information.
  If you do not consent, downloading of resource materials may be restricted.
  
  Subscribe to newsletter
  
  - Required information: Email
  - The right to refuse consent and the disadvantage of refusing consent:
  You have the right to deny consent to the collection of required information.
  If you do not agree, the service for answering your inquiry may be restricted.
  
  Reporting Wrongful Practices
  
  - Required information: None
  - Optional Information: Name, Email, Contact
  - The right to refuse consent and the disadvantage of refusing consent:
  You have the right to refuse consent to the collection of optional information.
  You have the right to refuse consent to the collection of information, and there is no restriction on the entry of wrong reporting even if you disagree. (Anonymously reporting available)
  However, if you do not agree, the service for responding to the complaint may be restricted.
- Purposes of collection and use of personal information
S-Core uses the collected personal information for the following purposes.

S-Core uses the collected personal information for the following purposes.
- Providing answers to customer inquiries and manage status
- Providing resource materials
- Notifying results of wrong reporting and complaints
- Providing and managing newsletter subscription feedback
Sharing and provision of collected personal information

In principle, the Company does not provide the user's personal information to outside. However, S-Core provides personal information to third parties in the following cases.
- If the users have agreed in advance:
- (a) in accordance with relevant laws, including laws other than the country of residence, (b) in accordance with the provisions of the Act, or in accordance with the procedures and methods prescribed by the Act for investigation purposes, (c) at the request of public institutions and government agencies, including those outside the country of residence, for the purpose of national security and/or law enforcement, personal information may be used or disclosed.
In addition, in the event of restructuring, mergers, sales, joint ventures, hand over, transfers or other disposals of the company (including those related to bankruptcy or similar procedures), the company may transfer its personal information to a third party in accordance with the relevant laws.
- S-Core using Internet-related services provided by the S-Core representative site (www.s-core.co.kr) When it is necessary to promote smooth communication and communication between employees of domestic / overseas business sites
Retention of collected personal information

After the purpose of collecting and using personal information is achieved, S-Core discards the information without delay. However, we may retain that information for a period of time for the following reasons:

Holding information according to company policy

- Items: Collection items in paragraph (1)
- Reason: User activity history management
- Period: One year from the last time the user accessed the website

Retention of information in accordance with relevant laws and regulations

If the Company is in the process of conducting investigations in violation of relevant laws and regulations, the Company shall retain the information for a certain period of time pursuant to the applicable laws and regulations until the investigation ends.
Procedures and methods of destroying personal information

S-Core will, in principle, destroy information without delay when it achieves the purpose of collecting and using personal information or after its retention period has expired. The procedure and method of destruction are as follows.

Destruction procedure

After the purpose of collecting personal information is achieved or the retention period has expired, we will destroy the information without delay.
However, the information that should be kept in accordance with this Handling Policy and related laws and regulations shall be preserved and destroyed for the period prescribed by the law. In this case, the collected personal information will not be used for other purposes unless it is under the law.

Destruction methods

Personal information printed on paper is shredded with shredder or destroyed through incineration, and personal information stored in electronic file format is deleted using technical methods that cannot bring back the records.
Measures to ensure the safety of personal information

S-Core has the following technical, administrative and physical measures to ensure safety.

Establishment and enforcement of internal management plan

We establish internal management plan of the company and carry out to protect the personal information.

Minimization and training of personal information processing staff

We have designated and minimized the person in charge of handling personal information and implemented measures to manage the personal information.

Restricting access to personal information

We take necessary measures to control access to personal information through granting, modifying, and deleting access rights to the database system that handles personal information. We also control unauthorized access from outside by using an intrusion prevention systems.

Avoiding archiving and forgery of connection logs

We maintain and manage records (web logs, summary information, etc.) connected to the personal information processing system for at least six months and we use security features to prevent forgery, theft and loss of access records.

Technical measures against hacking

S-Core installs a security program, periodically updates and inspects, installs the system in an area controlled from outside, and technically / physically monitors and blocks it to prevent the personal information from being leaked or damaged by hacking or computer viruses. We also monitor network traffic as well as detecting illegal attempts to change information.
User's rights and exercising methods

Users and legal representatives can view or correct the personal information of registered users at any time. Requests such as viewing, correcting, and deleting personal information can be made by requesting the person in charge of personal information management by phone or e-mail.
If the user requests correction of errors in personal information, we will not use or provide the personal information until we have completed the revision. Also, if wrong personal information is already provided to a third party, we will notify the third party without delay and revise accordingly.
The Company shall treat the personal information that has been terminated or deleted at the request of the user or legal representative as described in the "Period of Retention and Use of Personal Information Collected by the Company" and is prohibited from being viewed or accessed for any other purpose.
Affiliation of personal information manager and person in charge - name and contact information

In order to protect the user’s personal information and handle complaints related to personal information, S-Core has designated the related department and personal information manager as follows.

Personal Information Security Manager in Charge

- Name: Team Leader Minsig Kim

Personal Information Security Manager

- Name: Senior Professional SuYoung Jun
- Phone: +82-2-6411-4010
- Email: soo.j@samsung.com

The user can report all personal information related complaints that occur to the person in charge of personal information protection or department when using the S-Core service. S-Core will respond quickly and adequately to user complaints.
If you need to report or consult about other personal information infringement, please contact the following organizations.
- Privacy Infringement Notification Center (privacy.kisa.or.kr)
- Personal Information Dispute Resolution Committee (www.kopico.go.kr)
- Information Protection Mark Certification Committee (www.eprivacy.or.kr)
- Advanced Criminal Investigation Division of Supreme Prosecutors' Office (www.spo.go.kr)
- Cyber Security Bureau of the National Police Agency (www.ctrc.go.kr)
Duty of notification

If the user adds, deletes or modifies the contents of the current personal information processing policy, we will immediately notify the user through the bulletin board on the homepage. In the event of a security breach due to a hacking or computer virus, the Company will notify all victims immediately.

Privacy Policy Version Number: V.1.6
Privacy Policy Enforcement Date: May 9, 2018
Privacy Policy Last Modified Date: May 17, 2018