Privacy policy

privacy-policy

This is a courtesy translation. The Korean version is the authoritative text; if the two differ, the Korean version prevails.

AoT (“the Company”) treats users' personal data as something to be looked after, and complies with the Personal Information Protection Act and other applicable Korean law. This policy explains how personal data collected through the Company's spatial resource management services, visits to this website, and consultations is handled and protected.

1. Personal data we collect, and how

The Company collects the minimum information needed to provide the service.

  • Identifying information: name, email address, phone number, job title, company name (when an enquiry or service request is submitted)
  • Business and spatial data: energy consumption, operating practices, environmental data for outdoor spatial resources, and other data created or shared in the course of consulting and service use
  • Website usage information: IP address, cookies, browser type, service usage records, visit records and similar (collected automatically by log analysis tools)

2. Why we collect and use it

Information collected is used only for the following purposes.

  • Providing and managing the service: map-based monitoring, remote control, delivery and maintenance of the digital twin solution
  • Communicating with customers: sharing project status, answering enquiries, announcing new features and services
  • Improving the service: optimising the user experience and raising service quality by analysing website usage patterns
  • Meeting legal obligations: retaining records as required by law and preventing security incidents

3. How long we keep it

As a rule, the Company destroys personal data without delay once the purpose of collection and use has been achieved. Where the law requires retention, the following periods apply.

  • Records of contracts and withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce)
  • Records of consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce)
  • Website visit records (logs): 3 months (Protection of Communications Secrets Act)

4. How we destroy it

  • Procedure: data whose purpose has been achieved is moved to a separate database and destroyed once the retention period required by law has passed.
  • Method: electronic files are deleted by technical means that make recovery impossible; paper documents are shredded or incinerated.

5. Disclosure to third parties and processing on our behalf

The Company does not disclose personal data to outside parties without the user's consent. It may, however, engage outside specialists such as IT support and cloud storage providers to process data on its behalf in order to operate the service; where it does, the data is kept safe under strict confidentiality agreements.

6. Your rights, and how to exercise them

You may exercise the following rights at any time.

  • Access your personal data and request correction of errors
  • Request deletion or suspension of processing
  • Withdraw consent to the collection and use of your personal data

You can exercise these rights in writing or by email, and the Company will act on them without delay.

7. Cookies: use and refusal

The Company uses cookies in order to tailor the service to you. You can refuse cookie storage through your browser settings, though parts of the service may then be harder to use.

8. Keeping personal data secure

The Company takes the following measures to keep personal data safe.

  • Administrative: an internal management plan, established and applied, and regular staff training
  • Technical: access control for systems that process personal data, encryption of unique identifiers, installation of security software
  • Physical: access control for data storage rooms and similar areas

9. Data protection officer and contact

Please direct questions about this policy or about how personal data is handled to the contact below.