Press 2023.10.30

두원공고 도제기업 홍보영상(씨와이오토텍)

Privacy Policy

CY Autotech Co., Ltd. (hereinafter the "Company") complies with the Personal Information Protection Act and other applicable laws, and establishes and discloses this Privacy Policy to protect the personal information of data subjects and to promptly and smoothly handle related grievances. Through this policy, the Company informs data subjects of the purposes for which their personal information is collected and used, and the measures taken to protect it.

Article 1 (Items of Personal Information Collected and Collection Methods)

With the data subject's consent, the Company collects the following items to provide its services. All items are collected through direct input by the data subject when using the relevant service. 1. Online Inquiry - Required: name, email, inquiry content - Optional: company name, country, contact number, area of interest - Automatically collected: access IP, access date/time 2. Job Application - Required: name, email, resume file (PDF) - Optional: contact number, application message - Automatically collected: access IP, application date/time 3. Applicant Pre-Screening Account - Required: mobile phone number, date of birth (used as login password), name, email, pre-screening survey answers - Automatically collected: access date/time, last login date/time 4. Training (Startup Lab) Registration - Required: name, contact number, email, affiliation - Optional: registration message, course - Automatically collected: access IP, registration date/time The Company does not collect sensitive information such as race, ideology, or political views, and does not collect personal information of children under the age of 14.

Article 2 (Purposes of Collection and Use of Personal Information)

The Company uses the collected personal information only for the following purposes. If the purpose changes, consent will be obtained in advance. - Online Inquiry: confirming and responding to inquiries, business consultation and replies - Job Application: conducting the recruitment process, identifying and verifying applicants, notifying selection results - Applicant Pre-Screening Account: applicant identity verification and login, conducting pre-screening surveys, notifying screening results, arranging interview schedules - Training Registration: receiving and confirming registrations, schedule notifications, operational management - Common: prevention of fraudulent use, dispute resolution, fulfillment of legal obligations

Article 3 (Retention and Use Period of Personal Information)

In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved. However, the following information is retained for the specified periods. - Online Inquiry: 1 year after the inquiry is resolved - Job Application / Pre-Screening Account / Survey Answers: 1 year after the recruitment process ends (including unsuccessful applicants). If the data subject consents to future recruitment notifications, a separate consent period applies - Training Registration: 1 year after the training ends Where retention is required by applicable laws, the information is retained for the corresponding period. - Records on labeling/advertising: 6 months (Act on Consumer Protection in Electronic Commerce) - Records on contracts or withdrawal of subscription: 5 years (same Act) - Records on consumer complaints or dispute resolution: 3 years (same Act) - Website visit (access) logs: 3 months (Protection of Communications Secrets Act)

Article 4 (Provision of Personal Information to Third Parties)

The Company processes personal information only within the scope of the collection and use purposes set out in Article 1, and does not provide it to third parties without the data subject's prior consent. Exceptions are as follows. - When the data subject has given prior consent - When required by specific provisions of law, or when an investigative agency requests it in accordance with procedures and methods prescribed by law

Article 5 (Outsourcing of Personal Information Processing)

Where necessary for the smooth provision of services, the Company may outsource personal information processing tasks. In such cases, the Company specifies the matters necessary for the safe management of personal information through outsourcing contracts and supervises the outsourcing. - Email delivery: [Email delivery provider name] — sending notification emails such as results and interview invitations - Server/hosting operation: [Hosting provider name] — data storage and system operation If the content of the outsourced work or the trustee changes, it will be disclosed through this policy. (Where the Company operates its own servers, the relevant outsourcing items may not apply.)

Article 6 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)

The data subject may exercise the following rights at any time. - Request to access personal information - Request to correct in case of errors - Request to delete - Request to suspend processing Rights may be exercised in writing, by email, etc., to the Personal Information Protection Officer in Article 8, and the Company will act without delay. If a data subject requests correction of an error, the Company will not use or provide the relevant personal information until the correction is completed. Rights may also be exercised through a legal representative or an authorized agent, in which case a power of attorney must be submitted. Data subjects must not infringe upon the personal information or privacy of others in violation of applicable laws.

Article 7 (Procedures and Methods of Destroying Personal Information)

When personal information becomes unnecessary, such as upon the expiration of the retention period or achievement of the processing purpose, the Company destroys it without delay. - Destruction procedure: Personal information whose purpose has been achieved is stored for a certain period in accordance with internal policies and applicable laws, and then destroyed. Personal information transferred to a separate database is not used for any purpose other than the retention purpose required by law. - Destruction method: Information in electronic file form is permanently deleted using technical methods that prevent recovery or reproduction, and personal information recorded on paper documents is destroyed by shredding or incineration.

Article 8 (Measures to Ensure the Security of Personal Information)

The Company takes the following technical and administrative measures to ensure the security of personal information. - Encrypted storage: Key personal information—such as applicants' names, mobile numbers, emails, and survey answers, and training registrants' names, contact numbers, emails, and affiliations—is encrypted and stored using AES-256-GCM (authenticated encryption). - Password protection: Account passwords are stored as one-way hashes (password hash); the original text is not retained. - Identifier protection: For mobile-number login lookups, an irreversible HMAC index is used instead of the original number. - Access control: Access to personal information processing systems is restricted to the minimum number of personnel, with administrator authentication and access logging. - Prevention of unauthorized access: Measures such as CSRF token verification, rate limiting, and login-failure-count management are applied to prevent unauthorized access. - Transmission protection: Encrypted communication (HTTPS) is applied when transmitting and receiving personal information.

Article 9 (Personal Information Protection Officer)

The Company designates the following Personal Information Protection Officer to take overall responsibility for personal information processing and to handle data subjects' complaints and provide remedies in relation to personal information processing. - Personal Information Protection Officer: Mr. Choi - Position: Manager - Contact: +82-31-227-7030 / admin@cyautotech.com - Address: 65-15, Deokwoo-gongdan 1-gil, Bongdam-eup, Hwaseong-si, Gyeonggi-do, CY Autotech Co., Ltd. Data subjects may contact the above officer regarding any inquiries, complaints, or remedies related to personal information protection arising from the use of the Company's services, and the Company will respond and act without delay.

Article 10 (Remedies for Infringement of Rights)

To obtain relief for personal information infringement, data subjects may apply for dispute resolution or counseling to the following agencies. - Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr) - Privacy Infringement Report Center: 118 (privacy.kisa.or.kr) - Cyber Investigation Division, Supreme Prosecutors' Office: 1301 (www.spo.go.kr) - Cyber Bureau, National Police Agency: 182 (ecrm.cyber.go.kr)

Article 11 (Changes to the Privacy Policy and Duty of Notification)

This Privacy Policy takes effect on its effective date. In the event of any additions, deletions, or corrections of changes pursuant to laws and policies, the Company will give notice through the website's announcements from 7 days before the change takes effect. However, in the case of significant changes, such as changes to the items of personal information collected or the purposes of use, notice will be given at least 30 days in advance. - Date of announcement: [2026.06.11] - Effective date: [2026.06.11]
Website Terms of Service

These Terms of Service ("Terms") govern the rights, obligations, and responsibilities between CY Autotech Co., Ltd. ("Company") and users in connection with the use of the website operated by the Company (cyautotech.co.kr and related services provided by the Company, the "Site"). These Terms follow the standard structure for a general corporate website.

Article 1 (Purpose)

The purpose of these Terms is to set forth the conditions and procedures for using the services provided on the Site operated by CY Autotech Co., Ltd. (the "Company") (the "Service"), as well as the rights, obligations, and responsibilities of the Company and users, and other necessary matters.

Article 2 (Definitions)

The terms used in these Terms are defined as follows: - "Site" means the website operated by the Company for the provision of information and services (cyautotech.co.kr and related subdomains operated by the Company). - "Service" means all functions provided by the Company through the Site, including company, product, and technology information, access to materials, inquiries, and job applications. - "User" means any person who accesses the Site and uses the Service provided by the Company in accordance with these Terms. - "Content" means all information posted, registered, or transmitted to the Site by a User in the course of using the Service, including inquiries, attachments, text, and images. Any term not defined in these Terms shall follow the relevant statutes and general practice.

Article 3 (Effect and Amendment of the Terms)

1. These Terms take effect upon being posted on the Site. 2. The Company may amend these Terms within the scope not in violation of relevant statutes, including the Act on the Regulation of Terms and Conditions. 3. If the Company amends these Terms, it shall announce the effective date and reason for the amendment on the Site at least 7 days before the effective date (at least 30 days in advance for changes unfavorable or material to Users). 4. A User who does not agree to the amended Terms may discontinue use of the Service. If a User continues to use the Service after the effective date of the amended Terms, the User is deemed to have agreed to the amended Terms.

Article 4 (Provision and Modification of the Service)

1. The Company provides services through the Site, including the provision of company, product, and technology information, access to materials, receipt of online inquiries, and receipt of job applications. 2. The Service is, in principle, provided 24 hours a day, year-round. However, the Company may temporarily suspend all or part of the Service for unavoidable reasons such as system maintenance, repair or replacement of equipment, communication failures, or force majeure, in which case the Company shall give notice of the reason before or after the suspension. 3. The Company may modify or discontinue the content of the Service as required for operational or technical reasons, and shall not be liable for any damage incurred by Users as a result, except as provided in these Terms and relevant statutes.

Article 5 (Obligations and Prohibited Acts of Users)

Users shall not engage in any of the following acts when using the Service: - Misappropriating another person's information or registering false information. - Infringing the intellectual property, portrait, or other rights of the Company or third parties. - Intentionally interfering with the operation of the Site or impairing normal Service. - Compromising the stability of the information and communications network, including hacking, distributing malicious code, gaining abnormal access, or causing server overload. - Reproducing, distributing, processing, or using information from the Site for commercial purposes, or collecting it by automated means (crawling, scraping, etc.), without the Company's prior consent. - Posting or transmitting information contrary to public order and morals, such as obscene, violent, or discriminatory content. - Other acts in violation of relevant statutes or these Terms. If a User violates the above obligations, the Company may take measures such as deleting content, restricting use, or blocking access.

Article 6 (Content and Intellectual Property Rights)

1. Copyright and other intellectual property rights to the content posted on the Site, including information, text, images, designs, logos, trademarks, videos, and software, belong to the Company or the legitimate rights holder. 2. Users may not use the content under Paragraph 1 for commercial or non-commercial purposes, including reproducing, transmitting, publishing, distributing, or broadcasting it, or allowing third parties to use it, without the Company's prior written consent. 3. The rights and responsibility for Content posted on the Site by a User (inquiries, attached materials, etc.) belong to the User who posted it. However, the Company may use such Content to the extent necessary for the operation and improvement of the Service and the handling of inquiries. 4. If the Company determines that a User's Content constitutes a prohibited act under Article 5 or violates relevant statutes, the Company may delete or relocate the Content, or refuse its posting, without prior notice.

Article 7 (Disclaimer)

1. The Company shall not be liable where it is unable to provide the Service due to force majeure such as natural disaster, war, power outage, or communication service failure. 2. The Company shall not be liable for any failure to use the Service attributable to the User. 3. The Company endeavors to ensure the accuracy, completeness, and reliability of information posted on the Site; however, such information is provided for general informational purposes and shall not be construed as a warranty for any decision regarding a specific transaction, contract, or investment. The Company shall not be liable for any judgment made by a User in reliance on information on the Site or for the resulting consequences. 4. The Company has no obligation to intervene in any dispute arising through the Service between Users or between a User and a third party, and shall not be liable to compensate for any resulting damage. 5. The Company shall not be liable for any damage arising from information and services provided by external sites linked from the Site (including affiliates and related portals).

Article 8 (Indemnification)

1. If a User causes damage to the Company or a third party by violating these Terms, the User shall be liable to compensate for such damage. 2. If the Company receives any claim for damages or is subject to litigation from a third party due to an unlawful act or a violation of these Terms committed by a User in using the Service, the User shall indemnify and hold the Company harmless at the User's own responsibility and expense, and if the Company is not so held harmless, the User shall compensate for all resulting damage. 3. If a User suffers damage due to the Company's intent or gross negligence, the Company shall compensate for such damage in accordance with relevant statutes.

Article 9 (Governing Law and Jurisdiction)

1. The laws of the Republic of Korea shall be the governing law for these Terms and any dispute between the Company and a User. 2. In the event of a dispute between the Company and a User in connection with use of the Service, both parties shall consult in good faith to resolve the dispute. 3. If a lawsuit is filed because no agreement is reached, the court having jurisdiction over the location of the Company's head office shall be the court of first instance.

Article 10 (Contact)

Inquiries regarding these Terms and use of the Service may be directed to the contact below. - Company: CY Autotech Co., Ltd. - Representative: Cho Jun-sang - Address: 65-15, Deokugongdan 1-gil, Bongdam-eup, Hwaseong-si, Gyeonggi-do, Republic of Korea - Tel: +82-31-227-7030 / Fax: +82-31-227-8728 - Website: cyautotech.co.kr (cyautotech.com)

Addendum (Effective Date)

These Terms take effect on June 11, 2026.