The crissit Inc. official website (www.crissit.com) collects and uses personal information only when the user directly enters the information, such as when applying for the free AI adoption consulting. However, in the course of accessing and using the website, generated information may be collected through automatic collection devices such as cookies and Google Analytics 4 (GA4), as set out in Section 7.

crissit Inc. collects and uses the minimum personal information necessary to provide its services. The personal information processed is as follows.

① We do not provide personal information to third parties.

① In principle, crissit Inc. does not outsource the processing of personal information to external parties.

However, for the purpose of analyzing website usage statistics and improving services, crissit Inc. may outsource the operation of analytics tools as follows.

① When personal information becomes unnecessary, such as upon expiration of the retention period or achievement of the processing purpose, crissit Inc. destroys the relevant personal information without delay.

① The data subject may exercise rights such as requesting access to, correction of, deletion of, or suspension of processing of their personal information against crissit Inc. at any time.

② The exercise of rights under paragraph 1 may be made to crissit Inc. in writing, by email, etc. pursuant to Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and crissit Inc. will act on it without delay.

③ The exercise of rights under paragraph 1 may be made through a legal representative or a duly authorized agent of the data subject. In this case, you must submit a power of attorney in the form of Attachment No. 11 of the "Notice on Methods of Personal Information Processing (No. 2020-7)".

④ Requests for access to and suspension of processing of personal information may be restricted under Article 35(4) and Article 37(2) of the Personal Information Protection Act.

⑤ Requests for correction or deletion of personal information cannot be made where the collection of such personal information is specified as mandatory by other statutes.

⑥ When responding to a request for access, correction/deletion, or suspension of processing in accordance with the data subject’s rights, crissit Inc. verifies whether the person making the request is the data subject in person or a legitimate representative.

crissit Inc. takes the following measures to ensure the security of personal information.

① crissit Inc. may use cookies and similar technologies to provide better services to users and to analyze website usage, and may use Google Analytics 4 (GA4).

② Cookies are small pieces of information sent by the server operating the website or a third-party analytics tool to the user’s browser, and are stored on the user’s computer or mobile device.

③ In the course of using GA4, information such as cookie identifiers, client ID, IP address, browser type, device information, operating system, language settings, visit date and time, pages accessed, referral path, and in-page interaction events may be collected. We use such information for the purposes of website usage statistics analysis and service improvement, and do not use it for the purpose of directly identifying a specific individual.

④ Information collected through GA4 may be transferred to and processed by Google LLC, and may be transmitted to and stored in countries where Google or its affiliates operate data centers, such as the United States. The recipient is Google LLC (Google Privacy Policy: https://policies.google.com/privacy), and the timing and method of transfer is automatic transmission over the network when the user accesses or uses the website. The retention/use period follows Google Analytics’ data retention policy.

⑤ For details on how Google processes information, please refer to Google’s information page (https://policies.google.com/technologies/partner-sites).

⑥ Users may refuse or delete cookies through their web browser settings, and may install the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout) to restrict data collection through GA4. However, if you refuse the storage of cookies, use of some services may be restricted.

① crissit Inc. is overall responsible for tasks concerning the processing of personal information, and designates a Chief Privacy Officer as below to handle complaints and provide remedies for damages from data subjects in relation to personal information processing.

② Data subjects may direct any inquiries, complaints, or requests for remedy relating to personal information protection that arise while using the services of crissit Inc. to the Chief Privacy Officer. crissit Inc. will respond to and process the data subject’s inquiries without delay.

Data subjects may request access to their personal information pursuant to Section 35 of the Personal Information Protection Act.
crissit Inc. strives to process data subjects’ requests for access to personal information promptly, and such requests and related inquiries may be directed to the Chief Privacy Officer in Section 8.

① For consultation regarding personal information infringement, please contact the Chief Privacy Officer in Section 8.

② In order to obtain remedy for personal information infringement, a data subject may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, etc. For other reports and consultations regarding personal information infringement, please contact the agencies below.

③ A person whose rights or interests are infringed by a disposition or omission made by the head of a public institution in response to a request under Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), or Article 37 (Suspension of Processing of Personal Information, etc.) of the Personal Information Protection Act may request an administrative appeal as provided by the Administrative Appeals Act.
※ For details on administrative appeals, please refer to the Central Administrative Appeals Commission (https://www.simpan.go.kr)

① This Privacy Policy is effective from July 9, 2026.