Privacy Policy

1. Purposes of Processing

The Company processes personal information for the following purposes:

1. Receiving website inquiries and identifying requesters
2. Reviewing inquiries, providing consultation, and responding to questions about products and business activities
3. Managing inquiry records and related operations
4. Preventing duplicate, repetitive, or abnormal submissions and maintaining website security

If the purposes of processing change, the Company will follow the procedures required by applicable law.

2. Information Processed and Collection Methods

The Company processes the following information through its website inquiry form:

• Required: Name or company name, email address, inquiry subject, and inquiry details
• Optional: Telephone number
• Collection method: Information submitted directly through the website inquiry form with consent to the collection and use of personal information

The Company may temporarily process the IP address associated with an incoming request and submission timestamps to prevent duplicate or excessive submissions. This information is processed in application memory and is not stored as a separate field in the inquiry database.

The current public inquiry form does not collect file attachments.

Please avoid submitting unnecessary sensitive information or another person's personal information.

3. Retention Period

Personal information submitted through website inquiries is retained for one year from the date of submission and then destroyed.

Where applicable law requires a longer retention period, the Company separately retains only the information necessary for the period required by that law and destroys it afterward.

The Company also reviews previously received inquiries to determine their applicable retention periods and any legal retention requirements.

4. Provision to Third Parties

The Company does not provide personal information to third parties unless the data subject consents or the disclosure is authorized or required by applicable law.

Information concerning service providers entrusted with processing activities is described in Section 5.

5. Processing Entrusted to Service Providers

The Company entrusts the following processing activities to a service provider for website operation.

The Company oversees entrusted processing to ensure that personal information is protected and processed only for the entrusted purposes.

Changes to service providers or entrusted activities will be disclosed as required by applicable law.

6. Destruction of Personal Information

The Company destroys personal information in accordance with applicable law when the retention period expires or the information is no longer necessary for its processing purpose.

• Procedure: The Company reviews applicable retention periods and destroys expired information that is not subject to a legal retention obligation.
• Electronic records: Information is deleted from the relevant database or storage, with appropriate safeguards.
• Paper records: Where paper records exist, they are shredded or incinerated.

The standard retention period for website inquiry information is one year from the date of submission.

Information subject to a statutory retention obligation is separately retained and destroyed when the required retention period ends.

7. Data Subject Rights

Subject to applicable law, data subjects may request access to, correction or deletion of, or suspension of processing of their personal information, or withdraw consent.

Requests may be submitted through the contact information in Section 9. The Company may verify the requester's identity before responding in accordance with applicable law.

Certain requests may be restricted where a legal retention obligation applies.

8. Cookies and Automatically Generated Information

The Company may process the following information in connection with website operations.

① Session Information

Session functions are used to maintain language preferences, protect inquiry submissions, and support administrator authentication and session management.

The configured server session timeout is 30 minutes.

② Duplicate Submission Prevention

The IP address associated with an incoming request and submission timestamps are temporarily processed in application memory to limit repetitive or duplicate inquiry submissions.

③ Access Logs

Website operations may generate access logs containing information such as IP addresses, request timestamps, requested resources, and browser-related information for security and troubleshooting.

Access logs retained and managed by the Company are kept for one year and then destroyed.

Logs generated and managed separately by the hosting provider may be subject to that provider's applicable operating arrangements and contractual terms.

④ Cookies and User Controls

The current website does not separately implement cookies for its own advertising or behavioral-tracking purposes.

Users may block or delete cookies through their browser settings. Restricting cookies or session functions may affect language preferences, form security, and administrator sign-in.

Cookies and other processing associated with externally provided content may vary depending on the services used and the browser environment.

9. Privacy Contact

Data subjects may contact the following person regarding personal information, complaints, and requests to exercise their rights.

Privacy Contact

유정근, Representative

Telephone

042-935-2554

Email

info@cruxell.com

Address

대전광역시 유성구 테크노1로 75, 미건테크노월드2차 405호 (용산동 533-1)

The Company responds to such requests in accordance with applicable law.

10. Safeguards

The Company applies safeguards required by applicable law to protect personal information against loss, theft, unauthorized disclosure, alteration, or damage.

The website uses administrator authentication and access controls to restrict access to inquiry records and protect administrator account credentials.

The Company reviews these safeguards in light of its processing activities and operating environment.

11. External Services

Certain website pages may use the following external services:

• jsDelivr: Delivery of certain font and icon resources
• Google Maps: Company location information
• YouTube: Embedded videos where included in product guides

When these resources are loaded, the visitor's browser may communicate directly with the external provider. Technical request information, including IP addresses and browser-related information, may be processed as part of that communication.

Cookies and other personal information processing by these providers may vary depending on the services and their configuration. Users should consult the relevant provider's privacy policy for details.

12. Changes to This Policy

The Company will disclose changes to this Privacy Policy on the website in accordance with applicable law and provide additional notice where required.