Purpose of collection and use of personal information

The Grand Central Building (hereinafter “Grand Central”) complies with 「Personal Information Protection Act」 and 「Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc.」 and has the following handling policy to protect users' personal information and rights and to handle users' complaints related to personal information smoothly. This policy is subject to change based on amendments to laws and regulations and the operating policy of the company.

1. Items of personal information to be collected

1) Items to be collected

Anyone can access this service freely without a separate membership registration process. However, some personal information is collected by the company when inquiring about the lease.

The personal information that Grand Central collects is as follows:

Items of personal information to be collected

Required items	Name, e-mail, contact information

2) Collection method

Grand Central collects personal information through voluntary provision during the process of using the service by the user.

3. Sharing and Provision of Collected Personal Information

Grand Central, in principle, does not provide the personal information of users to the outside. However, an exception will be made if there is a request from the investigative agency based on the provisions of laws and regulations or by the procedures and methods stipulated by laws and regulations for the purpose of investigation.

4. Consignment of personal information handling

Grand Central provides and outsources the following services related to the processing of personal information and stipulates necessary matters so that personal information can be safely managed when providing and concluding the consignment contract in accordance with relevant laws and regulations. Entrusted company, the contents of the entrusted business. We will notify you on the website if there are any changes in the outsourced persons and the contents of the outsourced business in the future.

Consignment of personal information handling

Company	work
Designwid	system development and operation for service provision, system monitoring

5. Period of retention and use of collected personal information

Grand Central will destroy the personal information without delay after the purpose of collecting and using the personal information is achieved. However, the following information will be retained for an explicit period for the reasons below:

1) Reasons for retaining information under relevant laws and regulations

- Website visit history

- Reason for preservation: Communication Secret Protection Act

- Retention period: 3 months

2) Reasons for retaining information under Grand Central's internal policy

- Personal information of users inquiring about the lease

- Reason for preservation: Identification of the user, provision of customized services, and securing a channel for communication

- Retention period: Until consent is withdrawn

6. Procedure and method of destruction of personal information

As a general rule, Grand Central will destroy personal information without delay after the purpose of collection and use of personal information has been achieved.

1) Destruction procedure

This personal information will not be used for any purpose other than being retained unless consent is obtained from the member or by the law.

2) Destruction method

Personal information printed on paper will be destroyed by using a shredder or incinerator, and personal information stored in the form of electronic files will be completely deleted using technical methods so that it cannot be restored. For personal information stored in storage media such as HDD and USB memory, the method of physically shredding the storage media is used.

7. Matters concerning the installation and operation of the automatic collection device for personal information and refusal of it

Grand Central may store cookies in the browser file of the user. A cookie is a small computer file used by a server to analyze a user's Internet usage habits. Cookies cannot collect personal information; they can only collect information about Internet usage habits of the user. The information collected in this way does not identify the user and cannot be used to contact the user. If you want to prohibit the use of cookies, you can disable the function in your browser, but some functions of the provided service may not work.

1) Encryption of personal information

Members' personal information is stored and managed after encryption. In addition, important data is protected by using separate security functions such as encryption at the time of storage and transmission.

2) Minimization of staff handling personal information

The company limits the personnel handling personal information to the person in charge and grants separate password for this and updates it regularly. We also implement administrative measures to comply with the Privacy Policy, such as acquiring new security technologies and conducting regular training on personal information protection obligations.

10. Person in charge of personal information protection or department in charge of personal information

Grand Central has designated the relevant departments and the person in charge of personal information protection to protect users' personal information and handle complaints related to personal information as follows.

Person in charge of personal information protection: Beom-yeong Kim, Team Leader, Grand Central Operation Team

Person in charge of personal information management: Jae-hee Joo, Assistant Manager, Grand Central Operation Team

Email : helpdesk@grandcentral.kr

You can report any complaints related to the protection of personal information that occur when using the services of Grand Central to the person in charge of personal information protection or the department in charge. Grand Central will respond to the user's complaints promptly and fully

If you need to report or consult on other personal information infringement, please contact the following organizations.

– Personal Information Infringement Report Center (privacy.kisa.or.kr/ 118 without area code)

– Cyber Investigation Division, Scientific Investigation Department, Supreme Prosecutors’ Office (cybercid.spo.go.kr/ 1301 without area code)

– National Police Agency Cyber Security Bureau (cyberbureau.police.go.kr/ 182 without area code)

11. Duty of Notice

If there are additions, deletions, or changes to the content in response to changes in government policy or security technology, we will notify you through the website at least 7 days before the revision.

Effective Date: April 13, 2021