(bycontrols.com) establishes and discloses personal information processing policies as follows to protect the personal information of the data subject and to quickly and smoothly handle related grievances pursuant to Article 30 of the Personal Information Protection Act.
○ This personal information processing policy will take effect from December 1, 2022.

Article 1 (Purpose of processing personal information)
('bycontrols.com' or 'BY Controls, Inc' processes personal information for the following purposes. Personal information being processed is not used for purposes other than the following purposes, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.
1. Membership registration and management on the website.
Not applicable.
2. Handling civil complaints.
Not applicable.
3. Providing goods or services.
Not applicable.
4. Use for marketing and advertising.
Not applicable.
5. Personal video information.
Not applicable.
6. Etc
Personal information is processed for the purpose of checking online inquiries and providing a result reply service for the steel business and RAF business.

Article 2 (Duration of Processing and Retention of Personal Information)
①  processes and holds personal information within the period of possession and use of personal information agreed upon when collecting personal information from the data subject under the Act.
② Each personal information processing and retention period is as follows.

6.
Collecting personal information related to. Retention for the above purpose of use from the date of consent to use to .It's used.
Grounds for retention: statutes and provisions on the basis of the period of retention of personal information.
Retention period: 1 year.
Article 3 (The rights and obligations of the data subject and legal representative, and the method of exercising them)
① The data subject may exercise the right to view, correct, delete, or suspend processing of BY Controls, Inc at any time.
② The exercise of rights under paragraph (1) can be made in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act through e-mail, mock-up remittance (FAX), etc., and BY Controls, Inc will take action without delay.
③ The exercise of rights under paragraph (1) may be made through an agent such as a legal representative of the data subject or a person who has been delegated. In this case, "Notice on how to process personal information (No. 2020-7)"You have to submit a power of attorney in accordance with the attached Form 11
④ The rights of the data subject may be restricted under Articles 35(4) and 37(2) of the Personal Information Protection Act.
⑤ Requests for correction and deletion of personal information cannot be requested if other laws and regulations stipulate that personal information is subject to collection.
⑥ BY Controls, Inc checks whether the person who made the request, such as reading, correction and deletion, or suspension of processing, is himself or a legitimate agent.

Article 4 (Create an item of personal information to be processed)
① < BY Controls, Inc > handles the following personal information items.

6< ETC >
Required items: Company name, Name, Telephone, fax, E-mail
Selection: Address, Homepage, Content, Attached file

Article 5 (destruction of personal information)
①  will destroy the personal information without delay if personal information becomes unnecessary, such as the lapse of the personal information retention period and the achievement of the processing purpose.
② If personal information must be preserved according to other laws and regulations even after the period of personal information retention agreed by the data subject has elapsed or the purpose of processing has been achieved, the personal information will be moved to a separate database (DB) or preserved differently.
③ The procedure and method of destroying personal information are as follows.
1. Destruction procedure.
< BY Controls, Inc > selects personal information that has caused the reason for destruction, and destroys personal information with the approval of < BY Controls, Inc>'s personal information protection manager.
2. How to do it.
Electronic file-type information uses a technical method that cannot play records.

Article 6 (Measures to secure the safety of personal information)
< BY Controls, Inc> is taking the following measures to ensure the safety of personal information.
1. Minimization and training of personal information handling staff.
We are implementing measures to manage personal information by designating employees who handle personal information and minimizing it to those in charge.
2. Establishment and implementation of an internal management plan.
For the safe processing of personal information, we have established and implemented an internal management plan.
3. Technical measures to prepare for hacking.
(BY Controls, Inc) installs security programs to prevent personal information leakage and damage caused by hacking or computer viruses, periodically renews and inspects, and installs systems in externally controlled areas, monitors and blocks them technically/physically.
4. Encryption of personal information.
Users' personal information is encrypted, stored, and managed, so only they can know, and important data uses separate security functions such as encrypting files and transport data or using file lock functions.
5.Storage of access records and prevention of forgery and alteration.
Records of access to the personal information processing system are stored and managed for at least one year, but personal information is added to more than 50,000 information subjects, or unique identification information or sensitive information is stored and managed for more than two years.
In addition, we use security functions to prevent forgery, theft, or loss of access records.

Article 7 (Matters concerning the installation, operation, and rejection of an automatic personal information collection device)
BY Controls, Inc stores the information subject's usage information and does not use ‘cookies’ that are frequently retrieved.

Article 8 (Personal Information Protection Officer)
① BY Controls, Inc is in charge of handling personal information and designates a person in charge of personal information protection as follows for handling complaints and relief of damage related to personal information processing.

▶ Person in charge of personal information protection.
Name : K. I. Kim
Position: General Manager.
Position: General Manager.
TEL : +82 55-345-6110, by@bycontrols.com, FAX +82 55-345-6115
※ It connects to the department in charge of personal information protection.

▶ Department of Personal Information Protection.
Department name: Computer room
Responsible for: K. I. Kim
TEL : +82 55-345-6110, by@bycontrols.com, FAX +82 55-345-6115
 
② The data subject may contact the personal information protection manager and the department in charge for all inquiries, complaints, and damage relief arising from BY Controls, Inc's service (or business). BY Controls, Inc will respond and process inquiries from the data subject without delay.

Article 9 (Request for Access to Personal Information)
The data subject may request the following department to view personal information pursuant to Article 35 of the Personal Information Protection Act.
< BY Controls, Inc > will try to expedite the request for personal information reading by the data subject.

▶ Department of receiving and processing requests for access to personal information.
Department name: Technical Sales Team
Responsible for : K. I. Kim
TEL : +82 55-345-6110, by@bycontrols.com, FAX +82 55-345-6115

Article 10 (Method of remedy for infringement of rights and interests)
In order to receive relief from personal information infringement, the data subject may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee and the Personal Information Infringement Report Center of the Korea Internet & Security Agency. In addition, please contact the institution below for reports and consultations of other personal information infringement.

1. Personal Information Dispute Mediation Committee : +82 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center : +82 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office : +82 1301 (www.spo.go.kr)
4. National Police Agency. : +82 182 (ecrm.cyber.go.kr)

「Any person who has been infringed on rights or interests due to disposition or omission made by the head of a public institution may request an administrative trial as prescribed by the Administrative Appeals Act.

※ For more information on administrative trials, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).

Article 11 (Change of personal information processing policy)
This personal information processing policy will take effect from December 1, 2022.