Privacy Policy

Information Security Basic Policy

CRECON Group is aware that it is of the utmost importance that information assets of the group and its joint ventures (hereinafter referred to as 'Group Companies') remain secure. We aim to realize our mission of enhancing corporate value by protecting the security of the information assets in our possession against various internal and external threats, by fulfilling our social responsibilities, and by maintaining consistent, stable business operations through the delivery of reliability and assurance to our customers. CRECON Group hereby declares that we have established, and will implement and enhance the following policies as a unified group standard for ensuring information security.

1. Comply with internal regulations and rules when collecting, utilizing, or providing information assets in doing businesses.
2. Take appropriate measures for the prevention and correction of unauthorized access, loss, divulgence, falsification, or destruction of information assets.
3. Comply with codes and other norms applicable to information security.
4. Provide proactive education and training for all officers and personnel who are engaged in our business to ensure they recognize the importance of information security and are fully informed on the proper use of information assets.
5. Inspect, assess, and periodically audit compliance with information security to maintain information security, and based on the results, shall continually review and improve the information security policy.

Please refer to the respective company websites for specific security policies that supplement CRECON Group Information Security Basic Policy

CRECON Group hereby declares that we have established and will implement and enhance the following policies for the protection of personal information in order to comply with laws, regulations and other norms applicable to the protection of personal information acquired and held by Group Companies through business operations:

1. Group Companies collect personal information using legitimate and fair means, identify the purposes of use of specific personal information, and disclose required particulars on their respective websites.
2. Group Companies ensure that officers, personnel (including employees, part-time workers, and temporary staff), contract vendors, and all other relevant persons are thoroughly trained and instructed in handling personal information properly.
3. Group Companies take appropriate information security measures including measures against unauthorized access and computer viruses to prevent loss, destruction, falsification, and divulgence of personal information.
4. Group Companies sufficiently investigate potential third parties to which they are going to outsource work/service that require the provision of personal information, conclude contracts with such third parties, and take other legally required measures.
5. Group Companies use personal information within the scope of the purpose of use, and only personnel with specific authorization may use personal information, and such use will be limited to the extent required to perform their duties..
6. Group Companies confirm data subjects have the right to disclose, correct, suspend the use of, and/or delete their own personal information, and shall respond appropriately to such requests from them after confirming that the requests to take such action have been made by the data subjects in question.