Semicon Cloud

1. The Purpose of Processing Personal Information
<Semicon Cloud Co., Ltd.>(‘semiconcloud.com,’ hereinafter referred to as Semicon Cloud) processes and uses personal information for none other than following purposes;
-	To confirm the intent of the customer to sign up for membership; to identify the customer for the provision of the services; to authenticate; to maintain and manage the member status; to process the payment for the goods or services; to supply or ship the goods or services.

2. The period of processing and holding personal information
①  Semicon Cloud processes and holds the personal information within the holding and using period in accordance with the consent given by the original provider of the personal information or such periods as set forth in the law.

② The specific personal information processing and holding periods are as follows;
☞ Make reference to the following example to provide the information holding period due to the personal information processing; the description of the personal information processing; the related laws and regulations; and the justifications.
(Example) – Member sign-up and management: Until the termination of the service contract or withdrawal from the membership, provided that the period shall continue until the settlement of the credits and debts if there are outstanding credits or debts.
-	The records on the withdrawal of the application for termination of a contract for an electronic commerce contract, payment, or goods: Five years 

3. Items related to the provision of personal information to a third-party
① Semicon Cloud shall be allowed to provide the personal information to a third party only when there is a consent from the original provider of the personal information or otherwise allowed in the law, as set forth in Article 17 and 18 of the Personal Information Protection Act.

② Semicon Cloud provides the following personal information to third-parties.

1. <>
- The party that is provided with the personal information: 
- The purpose of the party that is provided with personal information to use personal information: 
-	The period during which the party that is provided with the personal information holds and  uses personal information.

4. Commissioning the processing of personal information
① For efficient processing of the personal information, Semicon Cloud commissions the processing to a contractor as follows;

1. <>
-	The contractor (the trustee): 
- Description of the contracted services: 
- Contracted service period:

② Semicon Cloud shall, when entering into a contract for hiring a contractor, include provisions that prohibits the processing of the personal information for any other purposes than performing the commissioned services; the provisions on the technical and administrative protection measures; limitation of sub-contracting; management of the contractor; and the responsibilities for management, supervision, and damage liabilities of the contractor and is ensuring that the contractor processes the personal information safely.

③ Any changes in the scope of contracted services or the identity of the contractor will be disclosed through this privacy policy without delay.

5. The Rights and Obligations of the Original Information Providers and Their Legal Representatives; and How to Exercise Them The User may exercise following rights as the original provider of personal information; 

① The original provider of personal information may exercise the rights related to the protection of personal information;
1. To demand access to personal information;
2. To demand the correction of errors in personal information;
3. To demand deletion;
4. To demand to stop the processing; and,




6. To prepare the items of personal information to be processed. 

① Semicon Cloud processes the personal information items for the following;

<To confirm the intent of the customer to sign up for membership; to identify the customer for the provision of the services; to authenticate; to maintain and manage the member status; to process the payment for the goods or services; to supply or ship the goods or services>
-	Required items: e-mail, mobile phone number, password, log-in ID, name, work phone number, company name
- Optional items:

7. Disposal of personal information Semicon Cloud shall dispose of the personal information without delay, once the purpose of processing the personal information is served, in principle. The process, time frame, and method of disposing of the information are as follows;

-	Process of disposal
The information input by the User is moved to a separate DB after the purpose is served (in the case of paper forms, a separate document). Then, in accordance with the internal policies and other related laws, the information will be destroyed after being stored in a certain amount of time. Here, the personal information that is transferred to the DB will not be used for any other purposes, unless otherwise required by the law.

-	The time frame of disposal
The personal information of a User shall, once the storage period of the personal information has elapsed, be destroyed within five days for the end of the storage period, or within five days from the date when the personal information is recognized to be needed no longer due to reasons such as the abolition of the service or termination of the business, etc.

8. Issues Related to the Installation, Operation, and Refusal of the Devices That Gather Personal Information Automatically
① Semicon Cloud uses cookies, which are used to save and load usage information in order to provide customized services. ② A cookie is a small piece of information that the server (http) which is used to operate the economy to the computer browsers of the Users. Sometimes, these cookies are stored in the hard disc of a PC. A. The purpose of using cookies: It is used to understand the services the User visited, the visits he/she made to websites and how he/she used them, popular search keywords, secured access, or other information, in order to provided optimized information to the User. B. Refusal of the installation and operation of cookies: Access Tools>Internet Option>Privacy menu on the top of the web browser to set whether to allow storage of the cookies or not. C. The refusal of having cookies stored may cause difficulties in using customized services.
9. Privacy Officer
① Semicon Cloud has appointed its privacy officer who shall have the overall responsibility for the processing per personal information and respond/address the complaints raised by or damages suffered by the original provider of personal information arising out of the processing of the personal information, as follows;

▶ Privacy Officer 
Name: Gyuseop Kim
Grade: Chief
Contact: 02-6112-7327, ekim@microworks.co.kr
※ This will be connected to the Personal Information Protection Department.

▶ Personal Information Protection Department
Name of the Department: Operation Management Team
The person in charge: Gyuseop Kim
Contact: 02-6112-7327, ekim@microworks.co.kr
② The original providers of personal Information may contact the privacy officer and the responsible department for the inquiries, complaints, or remedies for damages suffered due to the personal information protection issues that you experienced while using our services (or business). Semicon Cloud will not delay in answering the inquiries from the original providers of personal information.

10. Amendment of Privacy Policy
① This privacy policy shall take effect as of the date of implementation. Any addition, alteration, or deletion of the provisions due to the policies or laws will be announced by no later than seven days before the amendment takes effect.

11. Safeguarding the Personal Information Semicon Cloud has implemented the technical, administrative, and physical measures to safeguard the personal information in accordance with Article 29 of the Personal Information Protection Act, as follows;

1. Training of the staffs handling personal information and minimizing the number of such staffs
The staffs who handle personal information are designated and limited to certain individuals in managing personal information.

2. Encryption of personal information
The personal information of the user and his/her password are encrypted as they are stored and managed. Therefore the important data that is private to the User is subject to further protection by means of encrypting the files or the transmitted data or employing locking function to the files.

3. Storing the access logs and protecting them from tampering
We archive the record of accessing the personal information processing system for at least six months and are using security features to prevent tampering, theft, or loss of the access records.

4. Limiting access to personal information
We have implemented the necessary measures to limit the access to the database system that processes personal information by means of imposing the security clearance level requirements or the changes and abolition of such. And, we have an infiltration blockage system to block the unauthorized access attempts from outside.
Privacy Statement
