Privacy Policy

At a glance

Article 1Purposes of processing personal information

We process personal information only for the purposes below and do not use it for any other purpose.

1. Consultation requests: confirming consultation requests, responding to them, and scheduling consultations
2. Inquiries: confirming and responding to inquiries
3. Newsletter: sending the newsletter and managing subscriptions
4. Receipt of marketing information (optional consent): sending advertising information by email, such as newsletters, webinar and event announcements, and news about new resources and services

If we begin processing personal information for a new purpose, such as resource downloads, event registration, or job applications, we will amend this Privacy Policy and give notice before we start.

Article 2Items of personal information processed and retention periods

The items collected through each form and their retention periods are shown in the table below. We destroy personal information without delay once its retention period expires. Where other laws require us to preserve it, we retain it for the period they require.

Scroll sideways to see the full table →

• Once form submissions are connected, we will also record the address of the page from which the form was sent, the referral source, the version of the consent wording, and the time consent was given.
• We reconfirm consent to receive marketing information every two years from the date it was given.[3]

Article 3Personal information processed without the data subject’s consent

For personal information that may be processed without consent, we disclose the items and the legal basis separately from the personal information we process with consent.[1]

Even in these cases, the forms tell you the purposes of processing, the items, and the retention period in advance. We obtain separate consent for receiving marketing information; if you do not give it, your consultation requests and inquiries are not restricted in any way.

Article 4Procedures and methods for destroying personal information

1. Destruction procedure: We destroy personal information without delay once its retention period expires or the purpose of processing has been achieved.
2. Preservation required by other laws: We store such personal information separately from other personal information for the required period. We currently hold no personal information that must be preserved separately under other laws.
3. Destruction method: Electronic files are deleted in a way that makes them impossible to restore or read again, and paper documents are shredded or incinerated.

Article 5Provision of personal information to third parties

We do not provide personal information to third parties. The only exceptions are cases permitted under Articles 17 and 18 of the Personal Information Protection Act, such as where the data subject has given separate consent or where special provisions exist in law.[1]

Article 6Outsourcing of personal information processing

To operate the website and handle email inquiries, we outsource personal information processing tasks as set out below. Because the consultation, inquiry, and newsletter forms are not yet connected to a submission server, we do not receive any personal information through the forms.

If we begin outsourcing additional tasks, such as customer management or newsletter delivery, we will first disclose the details of those tasks and the service provider in the table below.[1]

Article 7Overseas transfer of personal information

Because the website runs on Cloudflare servers around the world, the access information generated when you visit the site may be processed outside Korea as described below. We do not separately receive or store this access information. If we begin storing personal information received through the forms outside Korea, we will first set out the details in this table.[1]

Article 11 explains how font and visual-effect files are loaded from servers outside Korea.

Article 8Rights of data subjects and how to exercise them

1. Data subjects may at any time request access to, correction or deletion of, or suspension of the processing of their personal information.
2. How to make a request: Contact our Chief Privacy Officer (Article 13) by email (info@greenmrv.com) or phone.
3. Identity verification: The Chief Privacy Officer will explain the identity verification procedure separately.
4. Time limit: We will notify you of the outcome within 10 days of receiving your request. If we must delay for a justifiable reason, we will notify you in advance of the reason and the date by which we can process the request.
5. Requests through a representative: A data subject’s legal representative or a person authorized by the data subject may also make a request. In that case, please send a power of attorney together with documents that verify the representative’s identity.[1]
6. Withdrawing consent to receive marketing information: You can withdraw your consent at any time using the “Unsubscribe” link at the bottom of our emails. When you give or withdraw consent, we will notify you of the outcome by email.[2]

Article 9Personal information of children under 14

We do not collect personal information of children under the age of 14. Our consultation, inquiry, and newsletter services are intended for professionals at companies and organizations. If we become aware that we have received personal information of a child under 14, we will destroy it without delay.[1]

Article 10Measures to ensure the security of personal information

We take the following measures to process personal information securely.

• Administrative measures: We keep the number of people who handle personal information to a minimum, and the Chief Privacy Officer regularly reviews how personal information is being processed.
• Technical measures: We encrypt site traffic in transit (HTTPS). Access to accounts that handle personal information is granted only to those who need it, and these accounts are protected by two-factor authentication.
• Physical measures: Paper documents containing personal information are kept in a place secured with a lock.

Article 11Installation, operation, and refusal of devices that automatically collect personal information

1. Cookies: We do not currently use cookies. When we checked the home page, Insights, articles, and legal pages on October 11, 2026, no cookies or browser storage data were left behind, and a second check of the site deployed to Cloudflare on October 25, 2026, gave the same result.
2. Cookie settings record: If you save your choices in Cookie settings, only those choices are stored in your browser. They are not sent to our servers.
3. Files loaded from external servers: Font and visual-effect files are loaded from external servers (jsDelivr, Google Fonts, and cdnjs). Because your browser connects to those servers directly, your IP address and browser information are passed to them.
4. Introducing new tools: If we introduce a tool that uses cookies, such as an analytics tool, we will state the tool’s name, provider, purpose, retention period, and country of storage in this Article and on the Cookie Policy page.
5. How to refuse: You can block cookies or delete stored cookies in your browser settings. Instructions for each browser are on the Cookie Policy page.

Article 12Processing of behavioral information

We do not collect behavioral information for personalized advertising and do not use ad-tracking pixels (checked October 11, 2026). If we introduce advertising cookies, we will use them only with your consent, and we will then state the items processed, the purposes, and the retention period in this Article.

Article 13Chief Privacy Officer

For inquiries, complaints, or requests for redress concerning the processing of personal information, please use the contact details below.

Article 14Remedies for infringement of rights

If you need advice or dispute resolution regarding an infringement of personal information, you may contact the organizations below.[4]

Article 15Changes to this Privacy Policy

This Privacy Policy applies from October 25, 2026. When we change it, we will give notice on this page at least 7 days before the change takes effect (at least 30 days for changes unfavorable to data subjects) and record the effective date and the changes in the revision history below. The full text of previous versions will remain available in the revision history.

Revision history

Legal basis and references

1. [1]
   National Law Information Center · Personal Information Protection Act [effective September 11, 2026] [Act No. 21445, March 10, 2026, partial amendment] · Accessed October 11, 2026law.go.kr (in Korean)
2. [2]
   National Law Information Center · Article 50 of the Act on Promotion of Information and Communications Network Utilization and Information Protection [effective October 2, 2026] [Act No. 21988, September 29, 2026, partial amendment] · Accessed October 11, 2026law.go.kr (in Korean)
3. [3]
   National Law Information Center · Article 62-3 of the Enforcement Decree of the Act on Promotion of Information and Communications Network Utilization and Information Protection [effective October 2, 2026] [Presidential Decree No. 36728, September 29, 2026, amended by another Act] · Accessed October 11, 2026law.go.kr (in Korean)
4. [4]
   Websites of the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, and the Korean National Police Agency Cyber Crime Reporting System · Accessed October 11, 2026https://www.kopico.go.kr/ · https://privacy.kisa.or.kr/ · https://ecrm.police.go.kr/