ALCHERA Inc. Privacy Policy

ALCHERA Inc. (hereafter referred to as the “company”) establishes and opens its privacy policy as follows, in order to protect the personal information of the information owner and to process related difficulties quickly and smoothly in accordance with Article 30 of the Personal Information Protection Act.


Article 1. Purpose of processing personal information

1. The company processes personal information for the following purposes.
Free trial

- Required items: Name, email, contact information, company name, job position
- Optional items: Number of employees, location
- Purpose of processing: Collection of basic information for service delivery

Contact sales

- Required items: Name, email, contact information, company name, job title, number of employees, location
- Purpose of processing: Collection of basic information for replying to inquiries and suggestions

Contact support

- Required items: Name, email, contact information, company name, job title, number of employees, location
- Purpose of processing: Collection of basic information for replying to inquiries and suggestions

Newsletter

- Required items: e-mail
Purpose of processing: Provision and management of newsletter subscription feedback

The following cookie information may be created and collected automatically when using web site services.

- Collection items: User activity log, information based on the user's IP address
- Purpose of processing: Using for e-mail marketing, such as company solution launches, events, and newsletters

2. The processing of personal data will not be used for other than the purpose intended. If the use purpose needs to be changed, necessary actions will be taken in accordance with “Article 18of the Personal Information Protection Act”, such as receiving separate consent.

3. Method of personal information collection
The company collects users' personal information in the following ways.
- Collection from the web site, written form, fax, phone, or e-mail
※ Users have the right to refuse consent to the collection of essential information but should be aware that there are disadvantages incurred due to said refusal. Users have the right to refuse consent to the collection of optional information other than required information. However, users may not be able to access the services provided on the website if they do not consent.

Article 2. Period of personal information processing and retention

The company processes and retains personal information within the period of personal information retention and use according to the laws and regulations or within the agreed upon period when collecting personal information from the information owner. The personal information processing and retention periods are as follows.

Free trial

- Processing and retention period: Retained for 3 years from the date of entering personal information

Contact Sales

- Processing and retention period: Retained for 3 years from the date of entering personal information

Contact support

- Processing and retention period: Retained for 3 years from the date of entering personal information

Newsletter

- Processing and retention period: Retained for 3 years from the date of entering personal information However, where applicable, personal information shall be retained until the following matters are settled
1) If a violation of the relevant laws and regulations is being investigated, then until the investigation is completed. 2) If a claim-obligation relationship is established due to the use of the website, then until the relationship is cleared.

Article 3. Matters regarding entrusting personal information processing

The company entrusts personal information processing as follows for service improvements and stipulates any necessary matters (prohibition of personal information processing for the purpose other than performing entrusted work, restriction of re-entrustment, measures to secure stability, etc.) so that the personal information can be managed safely in accordance with the related laws when signing an agreement for entrustment. If the trustee is changed, the company shall provide notification of said change through this privacy policy immediately. Matters related to the rights and obligations, and exercising methods of the information owner and legal representative

pipedrive

- Entrusted work and purpose: Information management and analysis, campaign management, user account creation on Salesforce.com - Personal information items: All personal information collected while providing the service - Personal information retention and use period: Retaining until the destruction of personal information is requested or the expiration date

Article 4. Rights and obligations of the information subject, and exercise methods

1. The information owner can exercise the following rights related to personal information protection against the company at any time.
1) Request to view personal information
2) Correction request if an error is found
3) Deletion request
4) Request to stop processing

2. The customer may exercise the rights specified in Paragraph 1 against the company, using a written document, phone, e-mail, or fax transmission. Upon receipt of the request, the company shall take measures without delay.

3. If the information owner requests an error correction or deletion of personal information, the company shall not use or provide the personal information in question until the information is corrected or deleted.

4. Rights specified in Paragraph 1 can be exercised by the legal representative or delegated person of the information subject. In this case, a letter of attorney should be submitted in accordance with Addendum No. 11, enforcement regulations of the Personal Information Protection Act.

5. The information owner should not violate the personal information and privacy of said information owner or that of others that are processed by the company in violation of any relevant Act and subordinate statute such as the Personal Information Protection Act.

Article 5. Disposal of personal information

1. As a rule, the company shall destroy the personal information without delay when the personal information is not needed any more (e.g., expiration of the retention period, achievement of the intended personal information processing purpose).

2. If the personal information should be retained continuously in accordance with other laws, even though the personal information retention period agreed upon by the information owner has expired or the processing purpose has been achieved, the personal information in question shall be moved to a separate database or kept in a different storage location.

3. The procedure and method of personal information disposal are as follows.
1) Disposal procedure: The company shall select the personal information to be destroyed and do so after obtaining approval from the company privacy manager.
2) Disposal method: The company shall destroy the personal information recorded and saved in an electronic file form using low level format and destroy or burn the personal information recorded and saved in a paper document using a shredder.

Article 6. Measures to secure the personal data

The company shall take the following measures to ensure the security of personal information.

1. Administrative measures: Setting-up/Implementation of the internal management plan, regular employee training, etc.

2. Technical measures: Access right management of a personal information processing system, installation of an access control system, encryption of a uniquely identifiable information, and installation of a security program

3. Physical measures: Access control of the computer room, data storage room, etc.

Article 7. Installation/Operation and refusal of an automatic personal information collecting device

1. The company uses a “cookie” to save and retrieve the user’s information frequently in order to provide a personalized and customized service to users.

2. The cookie is a small quantity of information sent by the server (HTTP), which is used to run the web site, to the computer browser of the user and is saved on the user’s PC hard disk.
1) Purpose of using the cookie: The cookie is used to provide optimized information to the user, by understanding the services visited by users, patterns of visiting and using services and web sites, popular search words, and secure connection status.
2) Installing and operating and refusing the cookie: Users can refuse to save cookies by setting options in the Tools > Internet Options > Privacy menu at the top of the web browser.
3) If the user refuses to store cookies, the user may have difficulty using customized services.

Article 8. Privacy manager

1. The company shall appoint a privacy manager as follows, who will be responsible for overall personal information
processing, and handle information owner's complaints with regard to personal information processing and damage relief. 1) The privacy manager Name : Daeho Jung job position: Lead contact: <+82-31-697-8961<, alchera@alcherainc.com

2. Privacy management team Department: Management Support Name:Yongwoo Kwon Contact: <+82-31-697-8961<, alchera@alcherainc.com
The information owner can ask questions of the privacy manager or department in charge, regarding all personal information protection issues that may have occurred while using the company service (or business), complaint processing, and damage relief. The company shall answer the information subject's question without delay and respond appropriately.

Article 9. Privacy Personal information retrieval request

The information owner can request the retrieval of personal information of the following department in accordance with Article 35 of the Personal information Protection Act. The company shall process the personal information retrieval request of the information owner quickly.

Receives and manages personal information retrieval requests

Department: Server team Name: Kang Jaehyeok, Contact: <+82-31-697-8961>, alchera@alcherainc.com

Article 10. Method of rectifying any infringement on rights and interests

The information owner can inquire about damage relief and receive consultation about personal information breaches from the following organizations. <Users can contact the following external organizations if they are not satisfied with the company's personal information complaint handling or damage relief results or if they need more detailed information or help.>

Personal Information Violation Report Center (operated by Korea Internet & Security Agency)

1) Managing duties: Application for reporting or consulting on a personal information infringement
2) Website: privacy.kisa.or.kr
3) Phone: 118 (without a telephone exchange number)

Personal Information Dispute Mediation Committee

1) Managing duties: Application for personal information dispute mediation and collective dispute mediation
2) Website: www.kopico.go.kr
3) Phone: 1833-6972 (without a telephone exchange number)
Cyber investment department of the Supreme Prosecutors' Office 1301 (www.spo.go.kr)
Korean National Police Agency Cyber Bureau 182 (ecrm.cyber.go.kr/minwon/main)

Article 11. Revision of the privacy policy

This privacy policy shall take effect from December 14, 2021.

...

...