G-Marine Service Co., Ltd. (hereinafter referred to as the "Company") complies with the applicable laws and regulations concerning the protection of personal information, including the Personal Information Protection Act of the Republic of Korea.
The Company has established this Privacy Policy in accordance with applicable laws and regulations to protect the personal information and rights of data subjects and makes every effort to prevent unauthorized disclosure of personal information and any resulting damages.
The Company discloses this Privacy Policy on its website so that customers and data subjects can easily access and review it at any time.
The Company processes personal information for the following purposes. Personal information processed by the Company will not be used for any purposes other than those specified below. If the purpose of processing is changed, the Company will take necessary measures, such as obtaining separate consent, as required by applicable laws.
(1) Customer Inquiries through the Website
- Receiving and processing inquiries
- Verifying the identity of the inquirer
- Identifying the inquirer
- Providing responses and notifying the results of inquiries
- Handling complaints
- Verifying facts in the event of disputes
- Managing customer inquiry records
The Company processes and retains personal information within the retention and use period agreed upon when collecting personal information from the data subject or for the period prescribed by applicable laws and regulations.
1. Retention Period Based on Consent
The Company processes and retains personal information within the period agreed upon by the data subject as follows:
(1) Customer Inquiries
- Website customer inquiries: Three (3) years from the date of receipt, after which the information will be destroyed.
2. Retention Required by Applicable Laws
The Company retains personal information for the following periods where required by applicable laws and regulations:
- If an investigation or inquiry is ongoing due to a violation of applicable laws: Until the investigation or inquiry is completed
- If any claims or obligations arising from the use of the website remain outstanding: Until such claims or obligations are settled
- Records related to advertisements and labeling: Six (6) months (Act on the Consumer Protection in Electronic Commerce, etc.)
- Records related to contracts or withdrawal of subscriptions: Five (5) years (Act on the Consumer Protection in Electronic Commerce, etc.)
- Records related to payment and supply of goods, etc.: Five (5) years (Act on the Consumer Protection in Electronic Commerce, etc.)
- Records related to consumer complaints or dispute resolution: Three (3) years (Act on the Consumer Protection in Electronic Commerce, etc.)
- Information included in commercial books and important business documents: Ten (10) years (Commercial Act)
- Information related to transaction records and supporting documents: Five (5) years (Framework Act on National Taxes, Corporate Tax Act)
- Records of subscribers' telecommunications dates and times, start and end times, the other subscriber's number, and usage volume: One (1) year (Protection of Communications Secrets Act)
- Computer communications and Internet log records and access-tracking records: Three (3) months (Protection of Communications Secrets Act)
The Company processes personal information only within the scope specified in Article 2 (Purpose of Processing Personal Information) and does not provide personal information to third parties except in the following cases:
1. Where the Company has obtained separate consent from the data subject;
2. Where specifically provided for by law;
3. Where necessary to protect the urgent life, physical safety, or property interests of the data subject or a third party; or
4. Where permitted pursuant to Articles 17 and 18 of the Personal Information Protection Act.
Currently, the Company does not provide personal information to any third party. If the Company provides personal information to a third party in the future, it will comply with applicable laws and regulations, including disclosing information such as the recipient, purpose of provision, personal information provided, and retention and use period through this Privacy Policy or obtaining the data subject's consent, as applicable.
1. Personal Information Processing Entrustment
The Company entrusts the following personal information processing activities for the efficient operation of its business:
| Entrusted Party | Entrusted Service | Personal Information Provided | Retention and Use Period |
| Hyundai Auto Ever | Server/System Management | Personal information specified in Article 7 | In accordance with the retention period specified for each item in Article 2 |
2. Management and Supervision of Entrusted Parties
When entering into an entrustment agreement, the Company specifies in contracts or other documents matters concerning the prohibition of processing personal information beyond the purpose of the entrusted service, technical, administrative, and physical safeguards, restrictions on re-entrustment, management and supervision of entrusted parties, liability for damages, and other relevant matters.
The Company also supervises entrusted parties to ensure that personal information is safely processed.
3. Changes to Entrusted Services
If the scope of entrusted services or the entrusted party changes, the Company will promptly notify data subjects and disclose the changes through this Privacy Policy.
1. Data subjects may exercise their rights to request access to, correction, deletion, or suspension of processing of their personal information at any time.
2. Requests under Paragraph 1 may be submitted to the Company in writing, by email, fax (FAX), or other applicable means pursuant to Article 41(1) of the Enforcement Decree of the Personal Information Protection Act. The Company will take necessary measures without delay.
3. Such rights may be exercised by a legal representative of the data subject or an authorized representative. In such cases, a power of attorney in the form prescribed by the relevant notification concerning the processing of personal information must be submitted.
4. The right of a data subject to request access to or suspension of processing may be restricted pursuant to Article 35(4) and Article 37(2) of the Personal Information Protection Act.
5. A request for correction or deletion may not be accepted where other laws specifically require the collection of such personal information.
6. When a data subject requests access, correction, deletion, or suspension of processing, the Company will verify whether the requester is the data subject or a duly authorized representative.
7. Pursuant to Article 37-2 of the Personal Information Protection Act, where a decision made through automated processing has a significant impact on the rights or obligations of a data subject, the data subject may request an explanation of such decision or request that the decision be refused or reconsidered, as provided by applicable law.
The Company processes the following categories of personal information:
(1) Customer Inquiries
Required Information: Name, contact information, email address, and inquiry details
The Company collects personal information through the following methods:
1. Online channels, including the website, mobile services, inquiry boards, and email
2. Automatically generated information collected through data collection tools
1. The Company destroys personal information without delay when the retention period has expired or the personal information is no longer necessary due to the achievement of the processing purpose or other reasons.
2. Where personal information must be retained pursuant to other laws even after the agreed retention period has expired or the processing purpose has been achieved, the Company transfers such information to a separate database (DB) or stores it in a separate storage location.
3. The procedures and methods for destroying personal information are as follows:
(1) Destruction Procedure
The Company identifies personal information subject to destruction and destroys such information upon approval by the person responsible for personal information protection.
(2) Destruction Method
Electronic files containing personal information are permanently deleted using methods that prevent restoration or recovery. Personal information recorded on paper documents is destroyed by shredding or incineration.
Pursuant to Article 29 of the Personal Information Protection Act, the Company takes the following administrative, technical, and physical measures necessary to prevent personal information from being lost, stolen, disclosed, altered, or damaged.
1. Establishment and Implementation of an Internal Management Plan
The Company establishes and implements an internal management plan in accordance with applicable laws, regulations, and standards concerning personal information protection.
2. Minimization and Training of Personnel Handling Personal Information
The Company minimizes and designates personnel authorized to handle personal information and provides personal information protection training and implements appropriate management measures.
3. Restriction of Access to Personal Information
The Company implements necessary access control measures by granting, modifying, and revoking access rights to databases and systems that process personal information. The Company also controls unauthorized external access through intrusion prevention and firewall systems.
4. Retention and Prevention of Tampering with Access Records
Records of access to personal information processing systems, including web logs and related information, are retained and managed for at least one (1) year or for the period required by applicable laws. The Company implements security measures to prevent such records from being altered, stolen, or lost.
5. Encryption of Personal Information
Personal information, including passwords, is encrypted and securely stored and managed. Important data is encrypted when stored or transmitted, or protected through additional security measures such as file-locking functions.
6. Technical Measures Against Hacking and Other Threats
To prevent personal information from being disclosed or damaged due to hacking, computer viruses, or other threats, the Company installs security programs and performs regular updates and inspections. Systems are installed in areas with controlled external access and are protected through technical and physical security measures. The Company also monitors network traffic and detects unauthorized attempts to access or alter information.
7. Access Control for Unauthorized Persons
The Company operates separate physical locations for storing personal information systems and establishes and implements access control procedures for such locations. Documents and auxiliary storage media containing personal information are stored in secure locations equipped with locking devices.
The Company does not install or operate devices that automatically collect personal information, such as cookies.
The Company installs and operates video information processing devices as follows:
1. Purpose of Installation and Operation
- Ensuring facility safety and preventing fires
- Ensuring customer safety and preventing theft and other crimes at business premises
- Preventing unauthorized access to business premises
2. Number of Devices, Installation Locations, and Areas of Filming
The Company installs and operates video information processing devices, where necessary, in accordance with applicable laws and after reviewing the appropriateness of installation.
- Main entrances, lobbies, and other areas within business premises where personnel enter and exit, as well as areas requiring security measures for public safety and protection of business secrets
3. Department in Charge and Person Responsible for Management
- Physical Security Officer, Busan Meritz Tower Operation Center, S&I Corp.
- Tel: 051-901-0016
4. Filming Hours, Retention Period, Storage Location, and Processing Method
Video information is recorded continuously, 24 hours a day. The retention period, storage location, processing method, and other matters are governed by the physical security guidelines of the Busan Meritz Tower Operation Center.
5. Methods and Location for Accessing Video Information
Data subjects may access video information by contacting the person responsible for managing video information in advance and visiting the designated location.
6. Measures Regarding Requests for Access to Video Information by Data Subjects
1. Requests for access to or confirmation of the existence of personal video information must be submitted using the Personal Video Information Access and Existence Confirmation Request Form. Access is permitted where the data subject's own image is recorded or where access is clearly necessary to protect the life, physical safety, or property interests of the data subject.
2. G-Marine Service will promptly respond to legitimate requests from data subjects concerning access to, retention, or deletion of personal video information. However, such requests may be denied in the following cases:
- Where the retention period has expired and the video information has already been deleted
- Where access or disclosure may infringe upon the privacy of another person
- Where access or disclosure would seriously impede a criminal investigation, prosecution, or judicial proceedings
- Where there are other legitimate grounds for refusing the data subject's request for access or confirmation
7. Technical, Administrative, and Physical Measures for Protecting Video Information
The Company protects video information by establishing internal management plans, restricting access and access rights, securely storing and transmitting video information, retaining processing records and preventing tampering, and providing secure storage facilities equipped with locking devices.
1. The Company has designated a Person Responsible for Personal Information Protection and persons in charge of personal information protection to oversee personal information processing and to handle customer complaints and remedies related to personal information.
- Name: In-Kyo Jung
- Department: Human Resources Support Team
- Position: Team Leader
- Email: ikjung@gmarineservice.com
- Telephone: 051-330-9380
- Name: Eui-Do Kim
- Department: Human Resources Support Team
- Position: Senior Manager
- Email: euidokim@gmarineservice.com
- Telephone: 051-330-9317
- Name: Chi-Won Choi
- Department: Seafarer Support Team
- Position: Team Leader
- Email: cwchoi@gmarineservice.com
- Telephone: 051-330-9401
- Name: Byung-Deok Choi
- Department: Seafarer Support Team
- Position: Senior Manager
- Email: bdchoi@gmarineservice.com
- Telephone: 051-330-9414
2. Customers and data subjects may submit inquiries, complaints, requests for remedies, requests for access to personal information, and other matters related to personal information protection arising from the use of the Company's services or business activities. The Company will respond to and process such inquiries without delay.
3. Emails unrelated to personal information protection inquiries, complaints, or damage-related matters may not be responded to or processed. Commercial or promotional emails sent without the consent of the relevant recipient may be reported to the appropriate authorities or otherwise handled in accordance with applicable laws and regulations.
Data subjects may apply for dispute resolution or consultation with the Personal Information Infringement Report Center of the Korea Internet & Security Agency (KISA) or the Personal Information
Dispute Mediation Committee to obtain remedies for infringement of personal information.
For reporting or consulting on other personal information infringements, data subjects may contact the following organizations:1. Personal Information Infringement Report Center, Korea Internet & Security Agency (KISA) (www.privacy.kisa.or.kr, ☎ 118)
2. Personal Information Dispute Mediation Committee (www.kopico.go.kr, ☎ 1833-6972)
3. Cyber Investigation Department, Supreme Prosecutors' Office (www.spo.go.kr, ☎ 1301)
4. Cyber Bureau, Korean National Police Agency (ecrm.police.go.kr ☎ 182)
1. When there are additions, deletions, or modifications to this Privacy Policy, the Company will notify data subjects through a banner on its website at least seven (7) days before the effective date of the changes.
2. If any additions, deletions, or modifications are made to this Privacy Policy, the Company will disclose the changes through its website or other appropriate means.
3. In the event of significant changes to this Privacy Policy, the Company will notify data subjects of the changes before the effective date.
1. Date of Announcement / Effective Date: August 15, 2024 / August 19, 2024
2. Date of Announcement / Effective Date: August 3, 2026