CHANGSHIN (the “Company”) complies with the “Personal Information Protection Act” and related laws and regulations to protect the freedom and rights of data subjects, and processes personal information lawfully and manages it securely.
In accordance with Article 30 of the “Personal Information Protection Act,” the Company establishes and discloses this Privacy Policy as follows to inform data subjects of the procedures and standards for processing and protecting personal information and to handle any related grievances promptly and smoothly.
1. Purpose and Items of Personal Information Processing
The Company does not provide any function through which users directly enter personal information, such as website membership registration, inquiry submission, or payment.
However, during website use, the following information may be automatically generated and collected for service improvement and usage statistics analysis.
Items collected (automatically generated information or behavioral information)
- IP address (may be processed in the course of transmission)
- Cookies
- Service usage records
- Date and time of access
- Visit history
- Pages visited
- Click data
- Browser type
- Operating system (OS)
- Device information, etc
Purpose of processing
- Analysis of visitor numbers and usage statistics using Google Analytics (GA4)
- Analysis of usage behavior, such as menu click-through rates
- Website quality improvement and service operation
Processing and Retention Period of Personal Information
The Company processes automatically generated and collected information only to the extent necessary for service improvement and usage statistics analysis.
Data collected through Google Analytics is managed in accordance with the Company’s data retention setting (14 months), and data whose retention period has expired is automatically deleted.
Provision of Personal Information to Third Parties
The Company does not sell or provide data subjects’ personal information to third parties.
However, the Company uses the Google Analytics service to analyze website usage statistics, and matters relating thereto are governed by “4. Cross-Border Transfer of Personal Information” below.
Outsourcing and Cross-Border Transfer of Personal Information (Use of Google Analytics)
The Company uses the Google Analytics service to analyze website usage statistics and improve its services, and outsources personal information processing to Google LLC for usage statistics analysis. In this process, some automatically generated information or behavioral information may be transferred overseas.
| Category | Description |
|---|---|
| Recipient | Google LLC |
| Location | 1600 Amphitheatre Parkway, Mountain View, California, USA |
| Items transferred | Cookies, IP address (may be processed in the course of transmission), website visit history, usage records, click data, etc |
| Destination country | United States |
| Timing and method of transfer | Information is transmitted over the network on an ongoing basis during website use |
| Purpose of transfer | Analysis of website usage statistics and service improvement through Google Analytics |
| Retention and use period | In accordance with the Google Analytics data retention policy and the Company’s retention period setting (14 months) |
Users may restrict the collection of behavioral information by changing their cookie settings as described in Section 5 below or by using the Google Analytics opt-out feature.
5. Installation, Operation, and Refusal of Devices That Automatically Collect Personal Information, Such as Internet Access Information Files
The Company uses cookies to provide users with better services.
A cookie is a small piece of information that the server operating the website stores in the user’s browser. Both session cookies, which are deleted when the browser is closed, and persistent cookies, which are retained for a set period, may be used.
Purpose of using cookies
- Analysis of website usage
- Analysis of visitor usage patterns
- Service improvement and operation
How to refuse cookies
Users may refuse cookie storage through their web browser settings.
- Chrome: Settings → Privacy and security → Cookies and other site data
- Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data
In addition, users may install the Google Analytics Opt-out Browser Add-on provided by Google to be excluded from statistical analysis.
6. Procedures and Methods for Destroying Personal Information
The Company destroys personal information without delay after the retention period has expired or the purpose of processing has been achieved.
The Company securely deletes personal information it holds directly in a manner that makes recovery or reproduction impossible, and data processed through Google Analytics is automatically deleted in accordance with Google’s data retention policy and the Company’s settings.
7. Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them
Data subjects may exercise the following rights against the Company at any time.
- Request access to personal information
- Request correction or deletion of personal information
- Request suspension of processing of personal information
Rights may be exercised by means such as written request or email, and the Company will take action without delay in accordance with applicable laws and regulations.
8. Measures to Ensure the Security of Personal Information
The Company implements the following protective measures to ensure the security of personal information.
Technical measures
- Encrypted communication via TLS (including SSL)
- Operation of security programs to guard against hacking and malicious code
Administrative measures
- Designation of personnel responsible for handling personal information
- Minimization of access rights to personal information
9. Chief Privacy Officer
The Company designates a Chief Privacy Officer as follows to take overall charge of personal information processing and to handle complaints and provide remedies related to personal information processing.
Chief Privacy Officer
- Officer: Kyunghee Oh, Vice President
- Department: Corporate Communications Group
- Phone: 051-200 4214
- Email: kyunghee.oh@changshininc.com
10. 10. Remedies for Infringement of Rights
Data subjects may contact the following organizations for consultation or remedies related to personal nformation infringement.
- Personal Information Infringement Report Center
- Personal Information Dispute Mediation Committee
- Cyber Investigation Division, Supreme Prosecutors’ Office
- Korean National Police Agency Electronic Cybercrime Report & Management System (ECRM)
The above organizations are independent of the Company and may be contacted by data subjects who are not satisfied with the outcome of the Company’s own handling of personal information or who need more detailed assistance.
11. Changes to the Privacy Policy
This Privacy Policy applies from October 1, 2026.