Rock Korea Co., Ltd. ("Rock Korea", "we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit our website or submit inquiries through our online forms.
1. Information We Collect
We may collect the following categories of personal information:
- Contact Information: Name, company name, job title, email address, phone number
- Business Information: Industry, company size, country/region
- Inquiry Details: Information provided through contact or inquiry forms
- Marketing Preferences: Preferred communication methods
- Technical Information: IP address, browser type, device information, and website usage data (via cookies or similar technologies)
2. Purpose of Collection and Use
We use personal information for the following purposes:
- To respond to inquiries and requests
- To provide consulting, assessment, training, and related services
- To communicate regarding services, updates, or relevant information (subject to your preferences)
- To improve website functionality and user experience
- To comply with applicable legal or regulatory obligations
3. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Your consent
- Performance of a contract or pre-contractual measures
- Compliance with legal obligations
- Legitimate business interests, where applicable and not overridden by your rights
4. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
CRA Vulnerability Analyzer enquiries
- Collected: name, email, company (required), job title (optional)
- Purpose: answering questions about your result and CRA compliance consulting (required consent)
- Marketing information: training, seminar and service news (optional consent; the analyzer works without it)
- Retention: one year from collection, then deleted automatically. Marketing messages stop as soon as you ask.
- Not stored: your SBOM file is processed in your browser and never sent to Rock Korea. Your IP address is kept only as a one-way hash to prevent repeated submissions.
- External lookup services: to check vulnerabilities and end-of-life status, component names and versions are sent directly from your browser to OSV.dev, endoflife.date and, if you choose, NVD. Those services can see connection details such as your IP address; Rock Korea does not collect these lookups.
- Withdrawal, access or deletion: info@rock-korea.com
5. Data Sharing and Disclosure
We do not sell or rent personal data.
We may share personal information only in the following circumstances:
- With trusted service providers supporting website or business operations
- When required by law, regulation, or legal process
- To protect the rights, safety, or property of Rock Korea or others
All third parties are required to protect personal data in accordance with applicable laws.
6. International Data Transfers
Personal data may be transferred to and processed in countries outside your jurisdiction. In such cases, Rock Korea ensures appropriate safeguards are in place in accordance with applicable data protection laws.
7. Cookies and Tracking Technologies
We may use cookies or similar technologies to enhance website functionality and analyze usage. You may control cookie preferences through your browser settings.
8. Your Rights
Depending on applicable laws, you may have the right to:
- Access your personal data
- Request correction or deletion
- Object to or restrict processing
- Withdraw consent at any time
Requests can be submitted using the contact information below.
9. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
11. Contact Information
For questions or requests related to this Privacy Policy, please contact:
Rock Korea Co., Ltd.
Email: info@rock-korea.com