이브리즈(EVRIZ) Privacy Policy

The Company processes personal information for the following purposes and does not use it for any purpose other than those listed below.

• Responding to online inquiries related to security services such as penetration testing, vulnerability assessment, information security consulting, security training, and phishing simulation.
• Responding to online inquiries related to security products such as LF-WAAP and PhishSense.
• Responding to other online inquiries.
• Identifying and contacting inquirers, verifying, retaining, and managing consultation details, and responding with estimates or proposals.

Unless the Company is required by applicable law to retain personal information, it retains and uses the personal information of data subjects only until the purpose of processing has been achieved, and destroys it without delay once that purpose has been fulfilled.

The Company does not provide personal information to third parties unless it has obtained separate consent from the data subject or is otherwise permitted under applicable laws, including the Personal Information Protection Act.

In principle, the Company does not entrust personal information processing to external parties or provide personal information externally without the prior consent of users.

However, when part of the work necessary for providing services is entrusted to an external vendor, the Company stipulates the necessary matters to ensure that the vendor processes personal information safely, supervises and manages such vendor, and provides notice of the details of the entrustment in accordance with applicable laws.

Data subjects may exercise the following rights related to the protection of personal information with respect to the Company at any time.

• Request access to personal information.
• Request correction if there are errors in personal information.
• Request deletion.
• Request suspension of processing.

The Company processes the following categories of personal information through the Contact page.

• Required items: Company name, contact name, email, inquiry category, how you heard about us, and inquiry details.
• Optional items: Title / role and phone number.

When personal information becomes unnecessary due to the expiration of the retention period or the achievement of the processing purpose, the Company destroys such personal information without delay.

• Electronic files: deleted by a method that makes recovery or restoration impossible.
• Paper documents: shredded or incinerated.

The Company takes the following measures to ensure the security of personal information.

• Administrative measures: establishment and implementation of internal management plans and training for personnel handling personal information.
• Technical measures: access control, installation of security programs, and encryption of personal information when necessary.
• Physical measures: locking storage locations and access control for places where personal information is stored or kept.

The Company designates the following Chief Privacy Officer to take overall responsibility for personal information processing and to handle complaints and remedy damages related to personal information processing.

• Chief Privacy Officer: Yein Min
• Email: privacy@evriz.co.kr