EndoRobotics, Co., Ltd. (the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act (PIPA) of the Republic of Korea to protect the personal information of data subjects and to promptly address related concerns. This Privacy Policy covers all personal information processed by the Company in the course of its business operations, including but not limited to information collected through this website.
1. Personal Information Collected and Purpose of Collection
The Company collects and uses personal information for the following purposes.
| Category | Items Collected | Purpose |
|---|---|---|
| Business Partners | Name, title, contact, affiliation | Contract performance, business communication |
| Healthcare Professionals (HCP) | Name, affiliation, title, contact, specialty | Academic cooperation, product training, advisory |
| Website Visitors | Name, email, contact, affiliation, inquiry details | Inquiry response, newsletter, product information |
| Job Applicants | Name, contact, education, career history, cover letter | Recruitment process |
| On-site Visitors | Name, affiliation, contact, vehicle no. (optional), entry time (auto) | Access management, facility security, regulatory compliance |
| CCTV | Video footage | Facility safety, crime prevention |
* Employee personal information is managed under the Company's internal Personal Information Protection Policy.
2. Retention Period
| Information | Period | Legal Basis |
|---|---|---|
| Job applicant records | 180 days after recruitment | Fair Hiring Act |
| Transaction records | 5 years | Commercial Act |
| Website / marketing data | Up to 3 years or as specified at collection | PIPA |
| Visitor access records | 1 year from visit | Facility security / regulatory |
| CCTV footage | 30 days from recording | PIPA |
3. Provision to Third Parties
The Company does not provide personal information to third parties without the data subject's consent, except as required by law. There are currently no third-party provision arrangements.
4. Outsourcing of Personal Information Processing
The Company outsources certain personal information processing tasks as follows.
| Service Provider | Task | Country | Note |
|---|---|---|---|
| (Payroll provider) | Payroll, social insurance | Korea | |
| (Tax firm) | Tax filing | Korea | |
| Dropbox Inc. | File storage and sharing | USA | Cross-border transfer |
| Microsoft Corp. | Email, collaboration (MS365) | USA | Cross-border transfer |
| Google LLC | Map display (Google Maps embed — loaded only with your consent) | USA | Cross-border transfer |
| Vercel Inc. | Website hosting and deployment | USA | Cross-border transfer |
| Supabase Inc. | Storage of cookie-consent records | Korea | Stored in the Seoul region; erased after 1 year |
| (IT maintenance) | Server / network maintenance | Korea |
* Cross-border transfers are made for the purpose of contract performance under Article 28-8(1)(3) of PIPA and are disclosed through this Privacy Policy in lieu of separate consent.
5. Cross-Border Transfer of Personal Information
| Recipient | Contact | Country | Items | Purpose | Retention |
|---|---|---|---|---|---|
| Dropbox Inc. | dropbox.com/support | USA | Personal info in documents | File storage | Duration of service |
| Microsoft Corp. | support.microsoft.com | USA | Email, document data | Email, collaboration | Duration of service |
| Google LLC | support.google.com | USA | Cookie IDs, IP, pages visited | Website analytics | 26 months |
* Transfers may cease if the Company transitions to domestic cloud services.
6. Destruction of Personal Information
- Personal information is destroyed without delay once the purpose of collection is achieved.
- Electronic files: permanently deleted using irreversible methods.
- Paper documents: shredded or incinerated.
7. Rights of Data Subjects
- Data subjects may request access, correction, deletion, suspension of processing, or withdrawal of consent regarding their personal information.
- Requests may be submitted in writing or by email and will be processed within 10 days.
- Rights may also be exercised through an authorized representative.
8. Security Measures
- Administrative: Internal management plan, access control, regular training
- Technical: Access authentication, encryption, log management, security software
- Physical: Locked document storage, access-controlled areas
9. CCTV Operation
| Locations | Office, R&D center, manufacturing plant |
|---|---|
| Purpose | Facility safety, crime prevention, worker safety |
| Coverage | Building entrances, corridors, key facilities (excluding private areas) |
| Retention | 30 days from recording |
| Access requests | Available upon CPO approval |
10. Cookies and Automatic Data Collection
The Company uses cookies and Google Analytics for website traffic analysis. Data collected through cookies is transferred to Google LLC (USA) for processing.
You may refuse cookies through your browser settings. However, some website features may not function properly if cookies are disabled.
- Chrome: Settings → Privacy and Security → Cookies and other site data
- Edge: Settings → Cookies and site permissions → Manage and delete cookies
- Safari: Preferences → Privacy → Manage website data
11. Chief Privacy Officer (CPO)
| Title | CPO (Chief Privacy Officer) |
|---|---|
| Name | Sung-Chan Ki |
| Team | HR & General Affairs Team |
| Phone | 070-4131-0122 |
| privacy@endorobo.com | |
| Hours | Weekdays 10:00–12:30, 13:30–19:00 (excluding holidays) |
12. Remedies for Rights Infringement
Data subjects may file complaints with the following organizations:
- Personal Information Infringement Report Center — privacy.kisa.or.kr / 118
- Personal Information Dispute Mediation Committee — www.kopico.go.kr / 1833-6972
- Supreme Prosecutors' Office Cyber Investigation — www.spo.go.kr / 1301
- National Police Agency Cyber Bureau — ecrm.police.go.kr / 182
13. Changes to This Policy
This Privacy Policy may be amended due to changes in laws, policies, or security practices. Any changes will be announced on our website.
Announcement Date: June 1, 2026 · Effective Date: June 1, 2026
