Privacy Policy
Privacy Policy
MUSMA Co., Ltd. (the "Company") establishes and discloses this Privacy Policy as follows, pursuant to Article 30 of the Personal Information Protection Act, in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
1. Purposes of Processing, Items Collected, and Collection Methods
MUSMA Co., Ltd. (the "Company") collects and processes only the minimum personal information necessary for the following purposes. Where a purpose changes, the Company will implement necessary measures, such as obtaining separate consent, pursuant to Article 18 of the Personal Information Protection Act.
| Category | Items Collected | Purpose of Processing | Collection Method |
|---|---|---|---|
| Customer Inquiries | (Required) Name, email (Optional) Company name, phone number, and any information included in the inquiry | Confirming receipt of inquiries, responding to inquiries, and replying with results | Contact Us form on the website |
| Job Applications / Talent Pool Registration | Name, date of birth, address, email, phone number, education, work experience, certifications, ID photo, information included in attached documents (such as resumes), and desired position | Receiving job applications, conducting the recruitment process, recruitment-related communication, and operating the Talent Pool (notifying candidates of suitable positions) | Job application form on the website |
2. Retention and Use Period of Personal Information
The Company retains and uses collected personal information for 5 years from the date of collection, and destroys personal information without delay once the retention period has expired. If a data subject withdraws consent or requests deletion, the information is destroyed without delay even within the retention period.
- Customer inquiry records: 5 years from the date of collection
- Job application documents and Talent Pool registration information: 5 years from the date of collection
3. Provision of Personal Information to Third Parties
The Company processes personal information of data subjects only within the scope of the purposes specified in Section 1, and does not provide personal information to third parties except in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the separate consent of the data subject or under special provisions of law.
4. Entrustment of Personal Information Processing
The Company entrusts personal information processing tasks as follows to ensure smooth business operations.
| Trustee | Entrusted Task |
|---|---|
| Amazon Web Services, Inc. (AWS Seoul Region) | Service infrastructure operations (data storage); sending inquiry and application receipt emails |
| Cloudflare, Inc. | Preventing spam and automated submissions on website forms (security verification) |
When concluding entrustment contracts, the Company stipulates matters concerning responsibility pursuant to Article 26 of the Personal Information Protection Act — including the prohibition of processing personal information for purposes other than the entrusted tasks, technical and managerial safeguards, and restrictions on sub-entrustment — and supervises whether trustees process personal information safely.
5. Procedures and Methods for Destruction of Personal Information
The Company destroys personal information without delay when it becomes unnecessary, such as upon expiration of the retention period or fulfillment of the purpose of processing.
- Electronic files: permanently deleted using methods that make recovery or restoration impossible
- Paper documents: destroyed by shredding or incineration
6. Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them
Data subjects may at any time exercise their rights against the Company, including requests for access to, correction or deletion of, and suspension of processing of their personal information. Such rights may be exercised in writing or by email through the Privacy Officer's contact information in Section 8 below, and the Company will take action without delay.
Rights may also be exercised through an agent, such as the data subject's legal representative or an authorized delegate. In this case, a power of attorney in the form prescribed in Annex Form No. 11 of the Notification on Personal Information Processing Methods must be submitted.
7. Measures to Ensure the Security of Personal Information
The Company takes the following measures to ensure the security of personal information.
- Managerial measures: minimizing the number of personnel handling personal information, and establishing and implementing an internal management plan
- Technical measures: encrypting personal information in transit (HTTPS), managing access rights, and operating security systems
- Physical measures: controlling access to data storage systems
8. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
The Company's website does not operate cookies or other automatic collection devices that collect or analyze users' behavioral information. However, during the security verification (Cloudflare Turnstile) used to prevent spam on inquiry and application forms, browser environment information may be temporarily processed solely for verification purposes.
9. Personal Information of Children Under 14
The Company does not collect personal information from children under the age of 14. If it is confirmed that a child under 14 has submitted personal information, the Company will destroy that information without delay.
10. Privacy Officer
The Company designates a Privacy Officer as follows to take overall responsibility for personal information processing, and to handle data subjects' complaints and provide remedies for damages related to personal information processing.
- Privacy Officer: Junho Jin (Director)
- Phone: 070-8670-0812
- Email: contact@musma.net
For reports or consultations regarding other personal information infringements, you may contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118 without an area code) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).
11. Changes to This Privacy Policy
This Privacy Policy takes effect on August 27, 2026. If its content is added to, deleted, or amended due to changes in laws, regulations, policies, or the Company's internal policies, the changes will be announced on the website at least 7 days before they take effect.
- Enacted on July 1, 2020
- Amended on June 28, 2024
- Amended on August 27, 2026 (current)