Privacy policy

1. What we collect, and how

We receive only the items below. We never receive a resident registration number or any other unique identifier, and we never receive sensitive data — there is no field anywhere on the site that asks for either.

Required

Name, institution, email address, type of institution, and your message

Optional

Role, phone number and timeline — leaving these blank does not stop the form

Collected automatically

The IP address you send from, browser details, and the time of sending

There are two routes: filling in the inquiry form on this site, or writing to the address below. We collect personal data through no other route, and we neither buy it nor receive it from anyone else.

The IP address is used to block automated repeat submissions from one source, and it appears in the notification email so whoever answers can see where an inquiry came from. If a submission is rejected, the address is also written to the server operations record, which is deleted automatically after 30 days.

2. Why we process it

What you send is used to answer inquiries about adoption, quotes and demonstrations, and to carry on the conversation and the review of your installation setting.

We do not send marketing you have not asked for, we do not use your data for anything unrelated to your inquiry, and we do not use it to build profiles or make automated decisions. If the purpose ever changes, we will ask again.

3. How long we keep it

We keep an inquiry for 3 years from the last contact about it, then erase it. Institutional procurement often runs across budget cycles and fiscal years, and this is the period that lets us pick up where we left off rather than asking you everything again.

If you ask us to erase it sooner, we do so without delay. Where another law requires us to keep something, we keep it only for the period that law sets, and erase it when the period ends.

4. Disclosure to third parties

We do not disclose personal data to third parties. We do not sell it and we do not share it for advertising.

The exception is where a law specifically requires it, or where an investigative authority requests it through the procedure a law lays down. Even then we disclose nothing beyond what is asked for.

5. Processing we entrust to others

The work below is carried out on our behalf by the providers named. Each contract carries the data-protection terms the law requires, and we supervise how each provider handles the data.

Google Workspace

Receiving, sending and holding inquiry mail

Firebase Hosting

Serving the website and holding access records

Cloud Run · Cloud Logging

Handling form submissions and holding operations records

A provider may process the data only as far as the entrusted work requires. It may not use the data for its own purposes or pass it on without our instruction. If the work or the provider changes, we will update this policy and say so.

6. Transfer outside Korea

The processing in section 5 takes place on servers outside Korea. Article 28-8(1)3(a) of the Personal Information Protection Act allows an overseas consignment made to perform a contract to be disclosed in this policy instead of consented to separately, and the disclosure follows.

Legal basis

Personal Information Protection Act Article 28-8(1)3(a) — overseas consignment and storage for performance of a contract, disclosed in this policy

Recipients

Google Asia Pacific Pte. Ltd. (Google Workspace) · Google Cloud Korea LLC (Firebase Hosting, Cloud Run, Cloud Logging)

Recipient contact

Google Workspace and Google Cloud support · 70 Pasir Panjang Road, #03-71, Mapletree Business City II, Singapore 117371

Work entrusted

The three items in section 5 — receiving, sending and holding inquiry mail; serving the website; handling form submissions

Items transferred

Everything listed in section 1, the automatically collected items included

Destination countries

Belgium, Canada, Chile, Denmark, Finland, Ireland, Japan, Mexico, the Netherlands, Singapore, Taiwan and the United States

When and how

At the moment you send an inquiry or open a page, over an encrypted connection, and thereafter in storage distributed across those countries

Purpose

Delivering and holding inquiry mail, serving the website, and handling submissions

Retention

The same as section 3 — 3 years from the last contact

How to refuse, and what it costs

See the second paragraph below.

The destination countries are the Data Center Operations entries of Google’s own published subprocessor list, read on 9 September 2026. Google commits to no single country and replicates data across several, so if that list changes this policy changes with it. The original is at workspace.google.com/terms/subprocessors.html.

If you would rather your data did not leave Korea, telephone us on +82-32-715-5978 instead of using the form. Nothing is held against you for refusing. Online submission and a reply by email are simply not available in that case.

7. How we erase it

Once the retention period ends or the purpose is fulfilled, we erase the data without delay.

• Data held as electronic files is permanently deleted by a method that leaves it unrecoverable.
• Anything printed on paper is shredded or incinerated.
• Inquiry mail and the replies to it are erased on the same basis.

8. Your rights, and how to use them

You may exercise any of the following at any time.

• Ask to see the personal data we hold about you
• Ask us to correct anything recorded wrongly
• Ask us to erase it
• Ask us to stop processing it
• Withdraw the consent you gave

Write to the privacy officer in section 12, by letter or email, and we will act without delay and tell you the outcome. You may also act through a legal representative or an agent; if you do, please enclose the authorisation form prescribed as Form 11 of the Notice on Personal Information Processing Methods.

Requests to see, correct, erase or stop processing may be limited under Articles 35(4), 36(1) and 37(2) of the Personal Information Protection Act. Where we limit a request, we will tell you why.

9. Children under 14

The form on this site exists so that staff at an institution can ask about adopting the exhibit. We do not knowingly receive personal data from anyone under 14.

If we learn that data from a child under 14 has reached us, we erase it without delay.

10. Cookies and automatic collection

This site sets no cookies. There are no visitor analytics, no advertising pixels and no social login buttons. Every file a page needs, fonts and video included, is served from this site, so simply reading it sends no request to another company.

There is therefore nothing for you to opt out of in your browser. The access records the web server keeps are used only to run the site and look into faults, and they are never combined with what an inquiry contains.

11. How we keep it safe

The measures in place are these.

• Encryption in transit — the whole site is served over HTTPS only, with HSTS so a browser cannot fall back to plain text.
• Minimal collection — we do not ask for anything an answer does not require.
• Least access — inquiries are read only by the people who answer them.
• Automated-submission controls — repeated automated requests from one source are blocked, and a hidden field filters out scripted submissions.
• No tracking — with no cookies and no analytics, there is no browsing history to protect in the first place.

12. Privacy officer and access requests

For any question, complaint or remedy concerning personal data, please use the details below. Requests to see your data are received and handled at the same address.

Privacy officer

백현만 (Representative Director)

Email

contact@mtechlab.co.kr

Telephone

+82-32-715-5978

Address

B1027, 119 Songdomunhwa-ro, Yeonsu-gu, Incheon, Republic of Korea (Songdo-dong, Incheon Global Campus)

We answer these ourselves rather than routing them elsewhere.

13. Where else you can turn

The bodies below handle dispute mediation, advice and reports. They are independent of us, and they are there for when you are not satisfied with how we have handled something, or want help of your own. The contact details are those published by the Personal Information Protection Commission in its policy-drafting guideline.

개인정보 분쟁조정위원회 · Personal Information Dispute Mediation Committee

1833-6972 · www.kopico.go.kr

개인정보침해 신고센터 · Privacy Infringement Report Centre (KISA)

118 · privacy.kisa.or.kr

경찰청 · Korean National Police Agency

182 · ecrm.police.go.kr

If a public authority’s action or inaction under Articles 35, 36 or 37 of the Act has harmed your rights, you may seek an administrative appeal under the Administrative Appeals Act.

14. Changes to this policy

This policy takes effect on 9 September 2026.

If a change in the law or in our own practice means something has to be added, removed or reworded, we will post the change and the date it takes effect on this page at least seven days beforehand — thirty days beforehand for a change that materially affects your rights.

If you need an earlier version, ask at the address above.