HanaLoop Privacy Policy

Article 1 (Purpose of Processing Personal Information)

HanaLoop processes personal information for the following purposes. Processed personal information is not used for purposes other than those listed below. If the purpose of use changes, HanaLoop will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

• A. Website membership registration and management: confirmation of intent to join, user identification/authentication, membership maintenance, prevention of unauthorized use, notices, and grievance handling
• B. Service provision: greenhouse gas activity/environmental data processing services, identity verification, payment/settlement, and collaboration infrastructure
• C. Grievance handling: identity verification of complainants, confirmation of complaints, contact/notice for fact-finding, and notification of results
• D. HanaLoop personal information processing tasks: [purpose according to processing task]

Article 2 (Processing and Retention Period)

HanaLoop processes and retains personal information within the retention/use period required by law or agreed by the data subject at the time of collection.

• 1. Website membership registration/management: until account withdrawal (except where investigation is ongoing or claims/debts remain)
• 2. Goods/service provision: until supply and payment settlement are completed
• 3. Records under E-commerce Consumer Protection Act: ads 6 months, contracts/payment/supply 5 years, complaints/disputes 3 years
• 4. Records under Protection of Communications Secrets Act: telecom fact records 1 year, internet log/access trace records 3 months

Article 3 (Provision to Third Parties)

HanaLoop provides personal information to third parties only where permitted under Articles 17 and 18 of the Personal Information Protection Act, including data subject consent or specific legal grounds.

• Example transfer items: name, date of birth, phone number, address

Article 4 (Outsourcing of Processing)

HanaLoop may outsource personal information processing tasks for smooth business operations.

• Identity verification service: Auth0.com

Article 5 (Rights of Data Subjects and Legal Representatives)

• Data subjects may request access, correction, deletion, or suspension of processing at any time.
• Requests may be made in writing or by email, and HanaLoop will act without delay.
• Requests may be made via a legal representative or authorized agent.
• Access/suspension rights may be restricted under applicable law.
• Deletion may be limited if data must be collected under other laws.
• HanaLoop verifies whether the requester is the data subject or a legitimate representative.

Article 6 (Items of Personal Information Processed)

• 1. Website membership registration/management: required (name, ID, password, phone, email), optional (address, interests)
• 2. Service provision: required (name, ID, password, phone, email, credit card, bank account), optional (address, interests)
• 3. Automatically collected during internet use: IP address, cookies, MAC address, usage logs, visit history

Article 7 (Destruction Procedure and Method)

HanaLoop destroys personal information without delay when the processing purpose is achieved, unless retention is required by other laws.

• Electronic records: irreversibly deleted using technical methods
• Paper records: shredded or incinerated

Article 8 (Security Measures)

• Administrative: internal management plan and regular employee training
• Technical: access control, encryption of unique identifiers, security software
• Physical: access control to server/data storage rooms

Article 9 (Automatic Collection Devices and Refusal)

HanaLoop uses cookies to provide personalized services.

• Purpose: analyze visit/usage patterns, popular searches, and secure access status for optimized information
• Users can allow/block cookies in browser settings (Internet Explorer, Edge, Chrome).
• Blocking cookies may cause difficulties in using services.

Article 10 (Chief Privacy Officer)

HanaLoop designates the following person responsible for personal information protection and grievance handling.

• Name: Hyeyeon Kim
• Title: CEO
• Contact: info@hanaloop.com

Article 12 (Domestic Representative)

HanaLoop has designated a domestic representative under Article 39-11 of the Personal Information Protection Act.

• Name: Hyeyeon Kim
• Email: info@hanaloop.com

Article 13 (Criteria for Additional Use/Provision)

When determining whether personal information can be additionally used/provided without consent under applicable law, HanaLoop considers:

• Relevance to original collection purpose
• Predictability based on collection circumstances/practice
• Whether data subject interests are unfairly infringed
• Whether safeguards such as pseudonymization/encryption are in place

Article 14 (Request for Access)

Data subjects may request access to personal information under Article 35 of the Personal Information Protection Act through the department below.

• Department: Development Support Division
• Officer: Hyeyeon Kim
• Contact: info@hanaloop.com

Article 15 (Remedies for Infringement of Rights)

Data subjects may seek dispute resolution or consultation through the following organizations.

• Personal Information Infringement Report Center (KISA): privacy.kisa.or.kr / 118
• Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
• Supreme Prosecutors' Office Cyber Bureau: www.spo.go.kr / 1301
• National Police Agency Cyber Bureau: ecrm.cyber.go.kr / 182
• Central Administrative Appeals Commission: www.simpan.go.kr / 110

Article 16 (Changes to this Policy)

• Effective date: September 1, 2022
• Version: v0.8
• Revision date: September 1, 2022