In processing the personal data of an individual locating in the territory of EEA (hereinafter referred to as the "Data Subject"), SG Holdings Co., Ltd. (hereinafter referred to as the "Company") complies with the General Data Protection Regulation (hereinafter referred to as the "GDPR") and its related laws and regulations, and it so uses the personal data appropriately in line with the Company's service.
This policy applies to the Data Subject who uses our service and is subject to GDPR and its related laws and regulations.
Lawfulness of Processing
The Company handles the personal data 1) based upon the consent of Data Subject to this policy, 2) for performance of a contract, or 3) for the purpose of legitimate interests.
Obtaining Personal Data and Purpose of Use
Company may obtain the personal Data (name, address, telephone number, email-address, payment information, etc.) necessary for the performance of its service.
The Company may also obtain the access history such as IP address and cookie for responses to inquiries and future business improvement.
Storage Period of Personal Data
The Company retains the personal data for a period necessary for the achievement of purposes above for the Data Subject or for a period stipulated by law, and deletes the same promptly after the storage period.
Rights of Data Subject
The Data Subject has a right to withdraw its consent as to the use of its own personal data, and also to access, rectify, erase, restrict to process, data portability and object to process the same. If you have any questions regarding the exercise of such right, please contact the Personal Information Office.
Company processes the personal data by implementing appropriate security with appropriate technical and organizational measures.