ID Password

Name
E-mail	@
	If you cannot find your e-mail address, please contact the administrator via e-mail.

ID
Name
E-mail	@
	If you cannot find your e-mail address, please contact the administrator via e-mail.

YYYY-MM-DD
YYYY-MM-DD
YYYY-MM-DD

Kia Studio Privacy Policy

1. General Provisions

Kia Corporation (hereinafter referred to as “Kia” or the “Company”) is committed to protecting customers’ personal information.

Kia complies with applicable personal information protection laws and regulations, including the Personal Information Protection Act of Korea.
Kia transparently discloses information regarding the entire life cycle of personal information, including collection, use, provision, and destruction, through this Privacy Policy.

2. Purpose of Collection and Use of Personal Information, Items Collected, and Retention Period

Kia collects and uses personal information by distinguishing between information essential for service provision and information required for additional features or improved services.

Service Name	Purpose of Collection and Use	Items Collected	Retention Period
Kia Studio	Use of Kia Studio service	Employee ID, Name, Affiliation, Email address, Company name, Country, Business relationship, Related business name, Department, Position	Until membership withdrawal
	Subscription to Kia Studio newsletter	Email address	Until membership withdrawal or withdrawal of consent

The data subject has the right to refuse the above consent; however, refusal to consent will result in the inability to sign up for membership or use Kia Studio services.

The above information includes not only information provided at the time of vehicle purchase or service registration, but also information updated thereafter.
If additional personal information is collected for supplementary services, customized services, or event participation beyond the basic service, Kia will obtain separate consent from the customer.
During the service or business process, information such as IP address, cookies, access date and time, service usage records, records of improper use, unique device identifiers, device operating system, and device model name may be automatically generated and collected.
Some services may provide search services using voice or images, in which case voice or image data may be collected.

Kia may use personal information without customer consent within a scope reasonably related to the original purpose of collection, in accordance with applicable laws, considering the following:

Whether the use is related to the original collection purpose
Whether additional use or provision is reasonably foreseeable based on the circumstances of collection or processing practices
Whether it unreasonably infringes upon customer interests
Whether necessary security measures such as pseudonymization or encryption have been implemented

Kia may pseudonymize and use collected personal information without customer consent for the purposes of statistical compilation, scientific research, or preservation of records for public interest.

“Pseudonymized information” refers to information that cannot identify a specific individual without the use or combination of additional information required to restore it to its original state.
“Pseudonymization” means processing personal information by deleting or replacing part or all of the information so that a specific individual cannot be identified without additional information.
Identifying a specific customer through pseudonymized information is strictly prohibited.
Pseudonymized information and additional information are stored separately, and appropriate technical and administrative safeguards are applied.

Kia may collect and use customer information provided by other organizations for service provision, in which case the responsibility for obtaining customer consent lies with the providing organization.

3. Methods of Personal Information Collection

Kia collects personal information through the following methods, and channels for service subscription may be expanded in the future:

Membership registration via the website
(For employees) Collection through HR information

Kia provides procedures that allow customers to select “Agree” or “Disagree” to the collection and use of personal information.

Customers have the right to refuse consent to the collection and use of personal information, and no disadvantage will result from such refusal.
However, refusal to consent to mandatory items may restrict the use of the service.

4. Use and Retention Period of Personal Information

In principle, Kia destroys personal information without delay upon membership withdrawal (withdrawal of consent) or upon achievement of the purpose of use for service provision.
Kia retains personal information for the relevant period in the following cases and does not use such information for other purposes:

When separate consent has been obtained from customers regarding the retention period, or when laws and regulations require retention for a certain period

Personal information required to be retained under relevant laws and regulations and the retention periods are as follows:

(Protection of Communications Secrets Act) Login records: 3 months
(Commercial Act) Commercial books and important business documents: 10 years
(Commercial Act) Vouchers or similar documents: 5 years
(Framework Act on National Taxes, Corporate Tax Act) Transaction records and supporting documents: 5 years from the day following the statutory filing deadline for the relevant tax period
(Act on Consumer Protection in Electronic Commerce, etc.)
- Records related to contracts or withdrawal of subscription: 5 years
- Records related to payment and supply of goods: 5 years
- Records related to consumer complaints or dispute resolution: 3 years
- Records related to labeling and advertising: 6 months
(Automobile Management Act) Records related to notification of defect recurrence
(Location Information Act) Records confirming collection, use, and provision of personal location information: 6 months (destroyed upon withdrawal of consent)
(Electronic Financial Transactions Act)
- Records of electronic financial transactions exceeding KRW 10,000: 5 years (3 years for electronic financial auxiliary service providers)
- Records of electronic financial transactions of KRW 10,000 or less: 1 year

5. Provision of Personal Information to Third Parties

In principle, Kia does not provide personal information to third parties without prior customer consent.
Kia may provide personal information externally in the following cases, and such information is transmitted securely with technical safeguards:

When separate consent has been obtained from the customer
When required to comply with legal obligations (e.g., warrants or official written requests bearing an authorized seal, provided through lawful procedures)
When permitted by law without customer consent, within a scope reasonably related to the original collection purpose, after considering foreseeability, potential disadvantages to customers, and protective measures

6. Outsourcing of Personal Information Processing

Kia outsources part of its work to external entities to provide better services.

Kia specifies necessary matters in contracts or other documents to ensure that contractors process personal information securely, and supervises their compliance.
The list of contractors may change depending on service changes or contract periods, and such changes will be disclosed through this Privacy Policy.

Service Name	Outsourced Work	Contractor	Subcontractor	Subcontracted Work
Kia Studio	System maintenance / operation	Hyundai AutoEver Co., Ltd.	iPartners	System management
	Statistical data collection / analysis	Innocean	Kantar Korea	Statistical data dashboard provision

7. Procedures and Methods for Destruction of Personal Information

Kia destroys personal information without delay once the purpose of collection and use has been achieved, such as upon withdrawal of consent, membership withdrawal, service termination, or expiration of the retention period.

Personal information recorded in written form is destroyed by shredding or other means making it unreadable.
Personal information stored in electronic file form is deleted using technical methods that prevent recovery or reproduction.

Information required to be retained under applicable laws is stored separately from other personal information upon achievement of the collection and use purpose, and destroyed after the mandatory retention period expires.

8. Rights and Obligations of Data Subjects and Methods of Exercise

Customers may request access to, correction of, deletion of, or suspension of processing of their personal information at any time, and Kia will process such requests unless otherwise specified by law.

Kia may verify whether the requester is the data subject or a legitimate representative (or guardian) through identification documents or a power of attorney.
For children under the age of 14, the legal representative has the right to exercise data subject rights.
(Personal location information) For children under 8 years of age, persons under adult guardianship, or persons with severe disabilities, the guardian has the right to exercise data subject rights.
If a customer requests correction of personal information, Kia will not use or provide the information until the correction is completed, and if the information has already been provided, Kia will notify the relevant third party to make the correction.
If consent to the collection and use of personal information essential for service provision is withdrawn, membership withdrawal or service termination may be unavoidable, which may restrict service use.

Customers may exercise the above rights by one of the following methods, depending on the nature of the service:

Requesting processing by contacting the responsible staff via the phone number or email announced in this Privacy Policy

9. Measures to Ensure the Security of Personal Information

Kia makes every effort to manage customers’ personal information securely and applies protective measures equal to or exceeding the standards required by applicable laws, including the Personal Information Protection Act.

Establishing and implementing internal management plans and operating a personal information protection management system
Restricting access to personal information to authorized personnel only, with access rights granted on a minimum-necessary basis
Operating firewalls and intrusion detection/prevention systems to control access to personal information
Secure transmission and storage of personal information through encryption technologies
Strictly managing pseudonymized personal information to prevent identification of individuals, and storing pseudonymized information separately from additional information
Preventing personal information leakage through malicious software by installing and operating antivirus programs
Installing personal information processing systems in restricted areas and controlling access to authorized personnel only
Enhancing employee awareness through confidentiality agreements and training, and operating internal procedures to monitor compliance
Connected services are provided through voice and data transmission between the service center and customers via telecommunications networks operated by mobile carriers. As such networks are highly complex and inherently subject to security limitations, maintaining the confidentiality of call content and transmitted data under such circumstances falls outside the Company’s responsibility.

10. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

Kia may install and operate cookies or similar technologies to provide efficient services, and customers may choose whether to allow cookies at any time through web browser settings.

Cookies are small text files stored on the customer’s PC via the web browser when visiting the Company’s website.
Kia uses cookies to analyze website usage, identify customer interests and event participation, and provide targeted marketing and personalized services.
Customers may configure their web browser options to allow all cookies, require confirmation each time a cookie is stored, or refuse all cookies.
However, refusing cookies may limit the use of certain features, such as personalized services.
In Internet Explorer, cookie settings can be configured via “Tools > Internet Options > Privacy > Advanced > Settings”.

Kia uses Google Analytics, a log analysis tool provided by Google, to analyze customer use of websites and mobile apps for service improvement. Google Analytics collects behavioral information through cookies, but does not process personally identifiable information. Such non-identifiable behavioral information may be used for online advertising purposes through Google Analytics advertising services.

Customers may opt out of Google Analytics data processing by installing a browser add-on at tools.google.com/dlpage/gaoptout.
Customers may disable Google Analytics advertising features through web browser or mobile device settings.

○ Chrome: “Settings > Manage your Google Account > Data & Privacy > Ad Settings > Turn off Ad Personalization”

○ Android: “Settings > Privacy > Ads > Opt out of Ads Personalization”

○ iPhone: “Settings > Privacy > Apple Advertising > Personalized Ads”

11. Overseas Transfer of Personal Information

In principle, Kia does not transfer personal information to overseas entities without prior customer consent.
Kia may transfer personal information overseas in the following cases, and such information is transmitted securely with technical safeguards:

When separate consent has been obtained from the customer
When overseas transfer is required for outsourcing processing or storage of personal information, and such transfer has been disclosed in this Privacy Policy or notified to the customer via email, written notice, or other means

12. Scope of Application of This Privacy Policy

This Privacy Policy applies to Kia’s vehicle sales, maintenance services, and all online services (including mobile web and apps). Separate privacy policies may apply to certain individual services.

13. Personal Information Protection Officer and Customer Service Department

Kia has designated the following Personal Information Protection Officer and customer service department to handle inquiries and complaints related to personal information:

Service Name	Person in Charge (CPO)	Department	Person in Charge	Department	Contact	Email
Kia Studio	Kang-Gyu Lee, Director	Management Support Office 3	Sejin Hong, Manager	Brand Management Team	82-2-3464-8384	sejin.hong@kia.com

For counseling regarding other personal information infringement issues, customers may contact the following organizations:

Personal Information Infringement Reporting Center (KISA): 118 (privacy.kisa.or.kr)
Personal Information Dispute Mediation Committee: 1833-6972 (kopico.go.kr)
Supreme Prosecutors’ Office Cyber Investigation Division: 82-2-3480-2190 (www.spo.go.kr)
National Police Agency Cyber Bureau: ecrm.police.go.kr (182)

14. Obligation of Prior Notice of Amendments

Kia’s Privacy Policy may be amended due to changes in relevant laws or guidelines, or internal operational policies. In the event of any amendment, the revised contents will be announced to customers through notices on the relevant service.