SPP Co., Ltd. (hereinafter the “Company”) establishes and discloses the following privacy policy in accordance with Article 30 of the Personal Information Protection Act, in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
The Company processes personal information for the following purposes and does not use it for any purpose other than those stated below. If the purpose of use changes, the Company will take the necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
The Company collects the following personal information through the inquiry forms on its website. The Company does not accept membership registration on the website and does not collect payment information.
The Company processes and retains personal information within the retention and use period prescribed by law, or the retention and use period consented to by the data subject at the time of collection.
The Company processes the personal information of data subjects only within the scope specified in Article 1, and provides it to third parties only where the data subject consents or where Article 17 of the Personal Information Protection Act otherwise applies, such as under special provisions of law. At present, the Company does not provide the personal information of data subjects to any third party.
For the smooth handling of personal information, the Company consigns personal information processing tasks as follows.
When entering into a consignment agreement, the Company specifies in writing, in accordance with Article 26 of the Personal Information Protection Act, matters such as the prohibition of processing personal information for purposes other than performing the consigned task, technical and administrative safeguards, restrictions on re-consignment, management and supervision of the consignee, and liability including damages, and supervises whether the consignee processes personal information safely. If the content of the consigned task or the consignee changes, the Company will disclose this without delay through this policy.
A data subject may exercise the following rights against the Company at any time.
Rights may be exercised in writing, by telephone, by email, or by other means, and the Company will act on such requests without delay. Where a data subject requests the correction or deletion of errors in personal information, the Company will not use or provide the personal information concerned until the correction or deletion is complete. Rights may also be exercised through the data subject's legal representative or a duly authorized agent, in which case a power of attorney in the form of Attached Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
When personal information becomes unnecessary, such as upon the expiry of the retention period or the achievement of the processing purpose, the Company destroys it without delay. Personal information recorded and stored in electronic file form is destroyed in a manner that renders the records irrecoverable, and personal information recorded and stored on paper is destroyed by shredding or incineration.
The Company's website does not use cookies to identify users. However, access records may be logged automatically in the course of operating the web server, and these are used solely to ensure the stability of the service and to prevent misuse.
The Company has designated a personal information protection officer as set out below, who takes overall responsibility for personal information processing and handles complaints and remedies for data subjects in relation to personal information processing.
Data subjects may direct to the personal information protection officer any matters concerning personal information protection arising from their use of the Company's services, including inquiries, complaints and requests for remedy, and the Company will respond and take action without delay.
Data subjects may contact the following bodies for remedies, consultation and other matters concerning infringement of personal information.
This privacy policy takes effect on August 1, 2026. Where content is added, deleted or modified due to changes in laws, policies or security technology, notice will be given through the website from 7 days before the effective date of the change.