Legal module
Data Protection
Last updated: 2025-11-01
1. Data Controller
Retol (operating at retol.digital) is the controller for personal data collected through this website and business inquiries. Contact: [email protected], 1083-4, Pyeongri 3(sam)-dong, Seo-gu, Daegu, Korea.
2. Categories of Data
We may process identity and contact data (name, email, company), communication content, technical data (IP address, browser type), cookie identifiers, and engagement metadata. Operational project data may include anonymized retail performance metrics supplied by clients.
3. Purposes of Processing
Data is used to respond to inquiries, deliver contracted services, improve website security, analyze aggregated site usage when consented, and comply with legal obligations under Korean law including the Personal Information Protection Act (PIPA).
4. Legal Basis
Processing is based on contract performance, legitimate interests in operating a B2B trade marketing business, consent where required (e.g., non-essential cookies), and legal obligations.
5. Retention
Inquiry records are retained up to 24 months unless a longer period is needed for active engagements. Contract records follow statutory commercial retention requirements. Analytics data is retained in aggregated form per our Cookie Preferences policy.
6. Third-Party Sharing
We use infrastructure and analytics providers who process data on our instructions under agreements. We do not sell personal data. Client project data is shared only with personnel and subprocessors necessary to deliver services.
7. International Transfers
Primary processing occurs in Korea. If tools process data abroad, we apply appropriate safeguards such as standard contractual clauses or vendor certifications consistent with PIPA requirements.
8. Security Measures
We implement access controls, encryption in transit, and staff training. No method of transmission is fully secure; clients should avoid sending sensitive consumer PII through the public contact form.
9. Your Rights
Under PIPA and applicable rules, you may request access, correction, deletion, suspension of processing, or withdrawal of consent. Contact [email protected]. You may lodge a complaint with the Personal Information Protection Commission (PIPC).
10. Children and Policy Changes
Our services target business professionals; we do not knowingly collect data from children under 14. We may update this policy with a revised last-updated date. Material changes will be noted on this page.
Contact: [email protected]
1083-4, Pyeongri 3(sam)-dong, Seo-gu, Daegu, Korea · +82 2 563 9879