LDCARBON Co., Ltd. (hereinafter referred to as the “Company”) lawfully processes and securely manages personal information in compliance with the Personal Information Protection Act and other applicable laws and regulations in order to protect the freedoms and rights of data subjects. Accordingly, pursuant to Article 30 of the Personal Information Protection Act, the Company hereby establishes and publishes this Privacy Policy to inform data subjects of the procedures and standards governing the processing and protection of personal information and to facilitate the prompt and effective handling of related complaints.
Article 1. Purposes of Processing, Categories of Personal Information Processed, and Retention and Use Periods
The Company collects only the minimum personal information necessary for the following purposes. Pursuant to Article 18 of the Personal Information Protection Act, personal information will not be used for any purpose other than those specified below unless separate consent is obtained or otherwise specifically permitted by law.
However, where requested by an investigative authority, the Company may provide personal information pursuant to applicable law (Article 18(2)2 of the Personal Information Protection Act).
| Category | Personal Information Collected | Purpose of Collection and Use | Retention and Use Period |
|---|---|---|---|
| Online inquiries submitted through the official website | Name, contact information, email address | Responding to user inquiries | Until the purpose of the consultation has been fulfilled (Records relating to consumer disputes are retained for three years pursuant to the Act on the Consumer Protection in Electronic Commerce of the Republic of Korea and other applicable laws and regulations) |
| Grievance Handling and Whistleblower Reports (Optional) | Name, contact information, email address | Handling complaints; responding to disciplinary and criminal proceedings; providing notice of receipt and processing results | Until the purpose of complaint handling or consultation has been fulfilled, or, where legal proceedings such as a dispute or investigation are ongoing, until such proceedings have concluded |
Article 2. Procedures and Methods for Destruction of Personal Information
The Company destroys personal information without delay when it is no longer necessary, such as upon expiration of the retention period or achievement of the processing purpose.
Where personal information must continue to be retained under other applicable laws and regulations even after the retention period consented to by the data subject has expired or the processing purpose has been achieved, such personal information will be transferred to a separate database (DB) or stored in a separate location.
The procedures and methods for destroying personal information are as follows.
1. Destruction Procedures
The Company identifies personal information subject to destruction and destroys it with the approval of the Company’s Chief Privacy Officer.
2. Destruction Methods
Personal information recorded and stored in electronic file format is destroyed using methods that prevent the records from being recovered. Personal information recorded and stored in paper documents is destroyed by shredding or incineration.
Article 3. Measures to Ensure the Security of Personal Information
The Company implements the following measures to ensure the security of personal information.
1. Administrative measures: Establishment and implementation of an internal personal information management plan; regular employee training
2. Technical measures: Management of access rights to personal information processing systems; installation of access control systems and implementation of other related safeguards; encryption of personal information; retention and review of access logs
3. Physical measures: Access control for computer rooms; storage of documents and removable storage media in secure, locked locations; safeguards against disasters and emergencies
Article 4. Rights and Obligations of Data Subjects and Their Legal Representatives, and Methods of Exercise
A data subject may at any time request access to, transmission, correction, deletion, or suspension of the processing of their personal information, or withdraw consent (collectively, the “Exercise of Rights”). Pursuant to Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, rights may be exercised with the Company in writing or by telephone, email, fax, internet, or other means, and the Company will take action without delay.
Rights may also be exercised through a representative, such as the data subject’s legal representative or an authorized agent. In such case, a power of attorney in the form prescribed in Appendix Form No. 11 of the “Public Notice on Methods of Processing Personal Information” must be submitted.
A data subject’s right to request access to or suspension of the processing of personal information may be restricted pursuant to Article 35(4) and Article 37(2) of the Personal Information Protection Act. In addition, deletion may not be requested where other applicable laws and regulations expressly require the collection of such personal information.
A data subject may exercise their rights through the department specified below. The Company will respond within 10 days from the date it receives a request to exercise rights (or without delay in the case of a request for transmission).
□ Department Responsible for Receiving and Processing Requests to Exercise Personal Information Rights
■ Department: HR Planning Office
■ Address: Room 921, Gangnam Ace Tower, 174-10 Jagok-ro, Gangnam-gu, Seoul 06373, Republic of Korea
■ Contact: Tel. +82-2-6953-6978 / mh.lee@ldcarbon.co.kr / Fax. +82-2-6953-6980
Article 5. Chief Privacy Officer and Department Responsible for Personal Information Protection
The Company has designated the following Chief Privacy Officer to oversee and assume responsibility for matters concerning the processing of personal information and to handle complaints and provide remedies in connection with such processing.
□ Chief Privacy Officer
■ Name: Yongkyung Hwang
■ Title: Chief Executive Officer
■ Contact: Tel. +82-2-6953-6978 / info@ldcarbon.co.kr / Fax. +82-2-6953-6980
□ Department Responsible for Personal Information Protection
■ Department: HR Planning Office
■ Contact: Tel. +82-2-6953-6978 / mh.lee@ldcarbon.co.kr / Fax. +82-2-6953-6980
A data subject may contact the Chief Privacy Officer or the department responsible for personal information protection regarding any inquiry, complaint, or request for remedy relating to personal information protection arising from the use of the Company’s services. The Company will respond to and handle such inquiries without delay.
Article 6. Remedies for Infringement of Rights
A data subject may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, or other relevant bodies to obtain relief for an infringement of personal information rights. For other reports or consultations concerning personal information infringement, please contact the organizations listed below.
1. Personal Information Dispute Mediation Committee: 1833-6972 (no area code) (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (no area code) (privacy.kisa.or.kr)
3. Korean National Police Agency: 182 (no area code) (ecrm.police.go.kr)
Article 7. Changes to this Privacy Policy
This Privacy Policy is effective as of January 1, 2026.
Previous versions of the Privacy Policy are available below.
□ Effective from January 1, 2025 to December 31, 2025