Hyundai AutoEver Corporation (hereinafter the “Company”) values the processing of customers’ personal
information above all else and is committed to protecting their personal information as actively and
effectively as possible.
1. Personal Information Items Collected and Method of Collection
1. 1. Personal Information Items Collected
① When a customer signs up for membership, the Company collects the following
information to identify members and provide optimized services.
- Required items : Vehicle model, Year, VIN(Vehicle Identification Number),
Device ID, Purchase date and ID(Email).
1. 2. Method and Scope of Collecting Personal Information
② The Company collects personal information in the following ways:
1)Membership registration on the website, consultation board, e-mail
2)Provision from partner companies
3)Tools to collect generated information
③ However, the Company does not collect personal information that may
significantly infringe on customers’ basic human rights, such as race and
ethnicity, ideology and an creed, place of origin and domicile, political
orientation and criminal record, health status and sexual life.
2. Providing and Sharing Personal Information
2. 1. The Company cannot use or provide the customer’s personal information to third
parties beyond the notified scope without the customer’s consent. However, the following cases are exceptions:
① Sale·M&A
When the Company transfers all or part of its business or succeeds the rights
and obligations of the service provider due to merger or inheritance, the
Company shall notify the customer of that fact to guarantee the customer’s
rights pursuant to the privacy policy.
② When it is determined that personal information is required by relevant laws and
regulations (e.g. when a government/investigative agency requests personal
information in accordance with due process)
3. Entrusting Personal Information Processing
3. 1. The Company may entrust the processing of personal information to a specialized
institution for the sake of service improvement, wherein the Company notifies the
customer of that in advance, clearly stipulates the service provider’s compliance
with instructions regarding the processing of personal information, the confidentiality
of personal information, the prohibition of providing personal information to third parties
as well as liability, and the contents of the contract are stored in writing or electronically to
protect the rights and interests of customers.
3. 2. The institution to which the Company entrusts the processing of personal information,
the tasks to be entrusted, and the entrustment period are as follows:
Entrusted Institution |
Tasks Entrusted |
Period of Entrustment |
Pentabreed |
System maintenance |
Until the end of the entrustment contra |
MapMyIndia(India) Vietmap(Vietnam) |
System maintenance/payment |
Until the end of the entrustment contra |
4. Retention Period of Personal Information
4. 1. The Company will destroy any personal information collected immediately after the
purpose of collecting and using the personal information has been achieved. However, the
following information will be retained for the following reason for the specified period of time.
① Retention of personal information for map updates Purpose :
map update Period of retention : 7 years
5. Destroying Personal Information
5. 1. The user may destroy personal information by completing 『Membership Withdrawal』 on
the website, and the Company shall destroy personal information without delay upon the
user’s request.
5. 2. However, users with authentication history cannot leave the membership, and they
can withdraw by following the relevant procedure on the website.
5. 3. The procedure and method of the Company destroying personal information are as
follows:
① Destruction procedure
The personal information that the customer enters for joining membership is transferred
to a separate DB (if paper, to a separate filing cabinet) after the purpose is achieved, and is destroyed after a certain period of time in
accordance with internal policies and relevant laws and regulations (see Period of retention and use of personal information).
This personal information will not
be used for any purpose other than retention unless required by law.
② Destruction method
Personal information printed on paper is destroyed by shredding or incinerating
the paper. If stored in electronic files, it will be deleted in a technical way so that
it cannot be reproduced.
6. Accounts of members who have not been active for more than four years after the map update
is terminated due to vehicle discontinuation will be converted to dormant accounts. For users who
accessed within 2 years after the end of the service, the dormant account is canceled, and if there
is no access for 2 years from the period of access, the account is converted back to dormant
account.
Details are as follows:
① The Company stores and manages the personal information of dormant
accounts in a separate DB for the sake of security and does not use or provide it
to third parties. An email will be sent to users of the account up to 30 days
before switching to an inactive account.
② Once an account is placed in a dormant state, users of that account will not be able to log
in with the personal information of the dormant account and will not
be able to use the member services. However, they can cancel the dormant
status at any time after a separate application and verification process.
6. 1. The Company keeps the personal information of dormant accounts for two years and then
destroys it. Details are as follows:
③ The Company will notify the user of the dormant account of the withdrawal
process and the destruction of personal information (including the serial registered in the account) at least 30 days in advance.
④ Those who want to sign up again after their personal information is destroyed cannot
use the same ID.
7. Technical and Administrative Protection Measures of Personal Information
7. 1. The Company takes the following technical/administrative measures to ensure safety in
handling personal information so that it is not lost, stolen, leaked, altered or damaged.
7. 2 Password Encryption
Since the password of the member ID is stored and managed after encryption, only the
member knows the actual password, which means that only the member himself can check
and change his personal information.
7. 3 Measures against Hacking
The Company is doing its utmost to prevent leakage or damage of personal information of
members by hacking or computer viruses. In order to prevent personal information from being
affected, the Company regularly backups the data. The Company uses the latest anti-virus
software to prevent users’ personal information or data from being leaked or damaged and to
securely transmit personal information on the network through encrypted communication. In
addition, the Company uses a firewall to control unauthorized access from the outside, and
strives to have all possible technical devices to ensure security systematically.
7. 4 Minimizing and Training Handling Staff
The Company’s handling of personal information is limited to the person in charge, and a
separate password is assigned for this purpose and updated regularly. The Company
constantly emphasizes the importance of compliance with the privacy policy through regular
training of the person in charge.
7. 5 However, if the user’s negligence or problems on the Internet cause leakage of personal
information such as ID, password, and resident registration number, the Company
shall not be held responsible at all