Privacy Policy
Capacity Co., Ltd. (hereinafter — "Company") processes personal data in accordance with the Personal Information Protection Act (PIPA) and other applicable legislation of the Republic of Korea.
This Policy defines the procedure for the collection, use, storage, transfer and protection of personal data of users of the Company's website.
1. Company information
Legal name: Capacity Co., Ltd.
Business registration number: 239-86-02819
Registered address: 28-11, Yeosul 4-gil, Poseung-eup, Pyeongtaek-si, Gyeonggi-do, 17955, South Korea, Rm. 201
Email: sales@nexkoreatrade.com
2. Types of personal data collected
The Company may collect the following data:
1) Data provided by the user:
- first and last name of the contact person
- company name
- job title
- country
- email address
- phone number
- content of the request
2) Automatically collected data:
- IP address
- date and time of access
- browser and device information
The Company collects only the minimum amount of data necessary for the purposes set out below.
3. Legal basis for processing
Personal data is processed on the following grounds:
- consent of the data subject (when submitting a request form);
- necessity of processing for the preparation and performance of a possible contract;
- compliance with obligations established by the legislation of the Republic of Korea.
4. Purposes of personal data processing
Personal data is processed solely for:
- processing and responding to commercial requests (RFQ);
- preparing proposals and business documentation;
- conducting business communication;
- fulfilling legal requirements;
- ensuring the security and proper operation of the website.
5. Retention period for personal data
Personal data is retained:
- for the period of business interaction;
- for up to 3 years after the last communication, unless otherwise required by law.
Upon achievement of the processing purposes, the data shall be destroyed without undue delay.
6. Procedure for destruction of personal data
Personal data is destroyed as follows:
- electronic files — by permanent deletion using technical means that prevent recovery;
- paper documents — by mechanical destruction (shredding or other means that prevent recovery).
7. Transfer of personal data to third parties
The Company does not transfer personal data to third parties, except when:
- transfer is necessary to fulfil the user's request;
- transfer is required by law;
- there is separate consent of the data subject.
8. Delegation of processing (Outsourcing)
To ensure the operation of the website and business communication, the Company may delegate the processing of personal data to the following categories of contractors:
- hosting provider;
- email service provider;
- IT contractor (technical support).
Transfer is carried out only to the extent necessary to perform the relevant functions, and on the basis of contractual obligations on confidentiality and data protection.
9. Cross-border transfer of data
If personal data is transferred outside the Republic of Korea (for example, when using foreign hosting or email services), such transfer is carried out:
- for the purpose of processing requests and ensuring the operation of the website;
- to the minimum extent of data necessary;
- in compliance with PIPA requirements and data protection measures.
10. Rights of the data subject
The user has the right to:
- request access to their personal data;
- request correction of inaccurate data;
- request deletion of data;
- suspend processing of data;
- withdraw consent.
Requests should be sent by email: privacy@nexkoreatrade.com
The Company considers requests without undue delay.
11. Measures to protect personal data
The Company takes reasonable technical and organisational measures, including:
- restriction of employee access;
- access rights management;
- server protection;
- control of data processing;
- regular updating of security systems.
12. Data protection officer
Data protection officer: privacy@nexkoreatrade.com
13. Complaint procedure
The data subject may apply to:
- the Company's data protection officer;
- the competent authorities of the Republic of Korea, including the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency (KISA).
14. Entry into force
This Policy enters into force from the moment of publication on the website.