FUST Lab Co., Ltd.
Privacy Policy
FUST Lab Co., Ltd. (the “Company”) complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws. The Company establishes and publishes this Privacy Policy to process personal information securely and address related complaints promptly and effectively.
Article 1 Purposes of Processing Personal Information
The Company processes personal information for the following purposes. The information will not be used for purposes other than those stated below. If a purpose changes, the Company will take the measures required by applicable law, including obtaining separate consent where necessary.
- Receiving and reviewing inquiries about products, technologies, services and business matters
- Reviewing and following up on requests for quotations, technical consultations, sample tests and business collaboration proposals
- Reviewing and responding to consultation requests received through the website and LinkedIn advertising lead forms
- Handling complaints and disputes arising in the course of responding to inquiries
The Company does not use collected personal information to send newsletters or separate advertising messages.
Article 2 Categories of Personal Information Processed and Collection Methods
| Collection Channel | Information Collected | Collection Method |
|---|---|---|
| Website inquiries | Required: inquiry type, company name, contact person's name, email address, contact number, country and inquiry details Optional: attachments and personal information contained in files |
Entered directly by the data subject in the website inquiry form |
| LinkedIn advertising lead forms | Name, email address, company name, company website, contact number and country | Entered directly by the data subject in a LinkedIn lead form |
| Email and telephone inquiries | Name, company name, email address, contact number and information provided during the inquiry | Collected through email, telephone or consultations |
When services are used, information such as IP addresses, cookies, access dates and times, visit records, and device and browser information may be generated and collected automatically.
Article 3 Processing and Retention Periods
The Company retains and uses inquiry information collected through website inquiries, LinkedIn advertising lead forms and other channels for one year from the date of collection, then destroys it without delay. Where retention is required by applicable law, only the prescribed information is stored separately for the prescribed period. If additional retention of contract or transaction information is necessary, the legal basis and retention period will be established and communicated separately. Retention periods for website analytics information and access logs will be specified separately after the actual service settings and operating standards have been checked. The retention period for website analytics information (GA4) is 14 months; retention periods for other system access logs follow applicable laws and operating standards.
Article 4 Personal Information of Children Under 14
As a rule, the Company does not provide services to or collect personal information from children under 14. Where consent is required to process a child's personal information, the Company verifies the consent of the child's legal representative. Information collected without a lawful basis is destroyed without delay.
Article 5 Disclosure to Third Parties
The Company processes personal information only within the purposes stated in Article 1 and does not disclose it to third parties unless the data subject consents or applicable law specifically permits such disclosure.
Article 6 Outsourcing of Personal Information Processing
| Service Provider | Outsourced Tasks | Retention and Use Period |
|---|---|---|
| Dawon | Website and server maintenance | For the period necessary to perform the outsourced tasks. Information is returned or destroyed when the contract ends or the processing purpose is fulfilled. The period will be finalized after checking the actual contract and the Company's retention standards. |
When outsourcing personal information processing, the Company specifies in writing matters such as prohibition of processing for other purposes, security measures, supervision and liability, and supervises the service provider. Changes to outsourced tasks or service providers will be disclosed in this Privacy Policy.
Article 7 Cross Border Transfers of Personal Information
(1) The Company uses external services to analyze website usage, secure inquiry forms and prevent spam, and receive inquiries through LinkedIn advertising. Where personal information is processed or stored outside the Republic of Korea, the Company complies with the requirements and procedures prescribed by applicable law.
(2) Details of cross-border transfers for each service are as follows.
| Recipient | Google LLC Service: Google Analytics 4 (GA4) Privacy contact: googlekrsupport@google.com |
|---|---|
| Personal Information Transferred | Cookies and online identifiers, device and browser information, page views and website usage information |
| Destination Countries | The United States and countries where Google or its subprocessors have data-processing facilities |
| Transfer Timing and Method | Transmitted over the network when the GA4 analytics tag runs during website use |
| Purpose of Use | Website visitor statistics and usage analysis; website improvement |
| Personal Information Retention and Use Period | User and event data are retained for the 14-month retention period configured in GA4 and then automatically deleted. |
| Official Reference Materials | Google Analytics data retention guidance and Google Ads Data Processing Terms |
| Legal Basis for Cross Border Transfers | If separate consent is used: the data subject's separate consent to cross-border transfers under Article 28-8(1)(1) of the Personal Information Protection Act of the Republic of Korea. Publish after confirming the actual consent procedure and applicable legal basis. |
| Recipient | LinkedIn Corporation Service: LinkedIn advertising lead forms Privacy inquiries: https://www.linkedin.com/legal/privacy-policy (Section 5.5) |
|---|---|
| Personal Information Transferred | Name, email address, company name, company website, contact number and country |
| Destination Countries | The United States and other countries where LinkedIn processes personal information |
| Transfer Timing and Method | Transmitted over the network to, and stored in, LinkedIn systems when the user submits a lead form |
| Purpose of Use | Receiving product, technology and business inquiries through advertising lead forms; storing inquiry information and providing it to the Company |
| Personal Information Retention and Use Period | LinkedIn advertising lead data: 365 days from submission. Inquiry information received and retained by the Company: one year from initial collection. |
| Official Reference Materials | LinkedIn Privacy Policy and official Lead Gen Forms help documentation |
| Legal Basis for Cross Border Transfers | If separate consent is used: the data subject's separate consent to cross-border transfers under Article 28-8(1)(1) of the Personal Information Protection Act of the Republic of Korea. Publish after confirming the actual consent procedure and applicable legal basis. |
| Recipient | Google LLC Service: Google reCAPTCHA Privacy inquiries: https://support.google.com/cloud/contact/dpo |
|---|---|
| Personal Information Transferred | Cookie, browser, device, network and usage information used to identify automated requests and spam |
| Destination Countries | The United States and other countries where Google or its subprocessors have data-processing facilities |
| Transfer Timing and Method | Transmitted over the network when reCAPTCHA runs on the website |
| Purpose of Use | Preventing automated requests and spam in the website inquiry form; maintaining service security |
| Personal Information Retention and Use Period | Customer personal data covered by the Google Cloud Data Processing Addendum: processed and stored during the service provision period. Data are deleted within a maximum of 180 days of the Company's deletion instruction. When the contract ends, data are deleted within a maximum of 180 days after a recovery period of up to 30 days. Where there is a legal retention obligation or another continuing contract applicable to the same data, the data are deleted under the applicable terms after that basis ends. |
| Official Reference Materials | Official Google reCAPTCHA FAQ and Google Cloud Data Processing Addendum |
| Legal Basis for Cross Border Transfers | If separate consent is used: the data subject's separate consent to cross-border transfers under Article 28-8(1)(1) of the Personal Information Protection Act of the Republic of Korea. Publish after confirming the actual consent procedure and applicable legal basis. |
(3) Data subjects may contact the Business Division at sales@fustlab.com or 070-4132-1501 to inquire about cross-border transfers or request to exercise rights, including withdrawal of consent or suspension of processing. The Company reviews requests under applicable law and communicates the outcome.
(4) Methods of refusing transfers and the resulting effects for each service are as follows.
- GA4: In supported browsers, you may use the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout?hl=ko). Within its supported scope, the add-on can prevent usage information from being sent to Google Analytics.
- LinkedIn advertising lead forms: You may contact sales@fustlab.com directly instead of submitting a lead form. In that case, you will not use the lead-form submission channel. For information already submitted, you may exercise your rights through the contact details above.
- Google reCAPTCHA: Refusal may restrict submission through the website inquiry form. You may instead contact sales@fustlab.com.
Article 8 Procedures and Methods for Destroying Personal Information
The Company destroys personal information without delay when it is no longer necessary, including when the retention period expires or the processing purpose has been fulfilled.
- Personal information in electronic files is securely deleted so that it cannot be recovered or reproduced.
- Personal information recorded on paper is destroyed by shredding or incineration.
- Where applicable law requires retention for a specified period, the information is stored separately from other personal information and destroyed when that period expires.
Article 9 Rights of Data Subjects and Legal Representatives and How to Exercise Them
Data subjects may request access to, correction or deletion of their personal information, suspension of processing, and withdrawal of consent. Requests for transmission of personal information may be made within the scope and conditions prescribed by applicable law. Requests may be submitted in writing, by email or by telephone. The Company takes action without delay in accordance with applicable law.
Where a legal representative or authorized person exercises these rights, the Company may verify their authority. Requests for access or suspension of processing may be restricted under applicable law. Deletion may be restricted for information that other laws expressly require to be collected.
Article 10 Installation and Operation of Automatic Collection Tools and Opt Out Methods
Users may restrict cookie storage or delete stored cookies through their browser's cookie and site-data settings. GA4 uses first-party cookies, so blocking third-party cookies alone does not stop all analytics collection. Users may also use the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout). If the website provides a function for refusing analytics cookies, instructions for accessing that function will be provided separately.
- Chrome: Use the privacy or cookies and site-data menu in browser settings to delete stored cookies or restrict cookie storage.
- Microsoft Edge: Use the privacy or cookies and site-data menu in browser settings to delete stored cookies or restrict cookie storage.
- Safari: Use the privacy or cookies and site-data menu in browser settings to delete stored cookies or restrict cookie storage.
Article 11 Measures to Protect Personal Information
The Company implements necessary administrative, technical and physical safeguards to prevent loss, theft, disclosure, forgery, alteration or damage to personal information. These include managing access permissions, access controls, security software, limiting and training personnel who handle personal information, and securely storing documents and storage media containing personal information.
Article 12 Department Responsible for Personal Information Protection and Contact Details
Data subjects may submit inquiries, complaints, requests for redress and requests to exercise their rights regarding personal information processing through the following contact point.
| Category | Details |
|---|---|
| Responsible Department | Business Division |
| sales@fustlab.com | |
| Telephone | 070-4132-1501 |
For advice or redress concerning personal information infringements, you may contact the relevant Korean authorities, including the Personal Information Infringement Report Center (118 without an area code), the Personal Information Dispute Mediation Committee (1833-6972), or the Korean National Police Agency (182 without an area code).
