Privacy Policy
HANSUNG TS ("the Company") establishes this privacy policy in accordance with the Personal Information Protection Act of the Republic of Korea to protect users' personal information and to handle related concerns promptly. This policy applies to the website operated by the Company at https://ai.kernex.co.kr ("the Site").
1. Purposes of Processing Personal Information
The Company processes personal information for the following purposes.
- Responding to inquiries: When a user contacts the Company directly by phone number or email address shown on the Site, the Company processes the contact information and inquiry content the user provides in order to reply and consult.
- Analyzing and improving website usage: The Company analyzes visit language, visit route, page views, and events generated by users (such as contact link clicks, video playback, and screen transitions) to improve the usability of the Site.
The Site does not provide account-based services such as sign-up, login, or payment, and the Site itself does not have any application or inquiry form that collects personal information.
2. Items of Personal Information Processed
Information processed while responding to inquiries
The Site does not have an inquiry form. When a user taps a tel: or mailto: link posted on the Site and contacts the Company through the user's own communication tool (phone app, mail app), the Company receives and processes the name, contact information, and inquiry content that the user voluntarily provides through that call or email. The Site itself does not store or transmit this information to any server.
Information processed through website usage analysis
The Site uses Umami Cloud and Cloudflare Web Analytics, neither of which uses cookies. The items collected are as follows.
- Page view information (visit route, visit language)
- Predefined event types with limited attributes:
contact_click(contact method, placement),video_attempt/video_error(video identifier, playback mode, error code),evidence_play(video identifier, playback source),layer_toggle(layer before/after switching),certificate_open(certificate identifier, placement),architecture_node/architecture_explored(technical node identifier) - Page performance metrics such as Core Web Vitals (Cloudflare Web Analytics)
This process does not collect names, email addresses, phone numbers, original file names, server paths, location coordinates, free-text sentences, or any identifier that could specify an individual user. The connection IP address is received only to serve the request and is not stored in the analytics data.
3. Retention and Use Period of Personal Information
- Contact information and inquiry content that the Company receives while responding to inquiries are destroyed without delay once the purpose of the inquiry has been fulfilled, except where retention is required under applicable law, in which case the information is kept for the period required by that law.
- Website usage analytics data is not stored in a form that can identify a user and is managed according to Umami Cloud's and Cloudflare's own data processing policies.
4. Provision of Personal Information to Third Parties
The Company does not, in principle, provide users' personal information to third parties, except where required by law or requested by an investigative agency in accordance with the procedures and methods set out in applicable law.
5. Outsourcing of Processing and Transfer Abroad
The Company outsources the following tasks for operating the Site and analyzing usage.
| Processor | Outsourced task |
|---|---|
| Cloudflare, Inc. | Website hosting (Cloudflare Workers Static Assets), video and image file storage and delivery (Cloudflare R2), content delivery network operation and access log processing, and cookie-less visit analytics (Cloudflare Web Analytics) |
| Umami Software, Inc. | Cookie-less website usage analytics (Umami Cloud) |
When entering into an outsourcing agreement, the Company also sets out the matters needed to keep personal information secure, and it checks that each processor carries out the outsourced task properly.
Both processors are headquartered outside the Republic of Korea, so information is transferred abroad while the outsourced tasks are carried out. Under Article 28-8 (1) 3 (a) of the Personal Information Protection Act, the Company therefore discloses the matters listed in Article 28-8 (2) in this privacy policy, as set out below.
The Site has no sign-up process and no inquiry form that collects personal information. The information transferred abroad therefore contains no name, email address, phone number, or other data entered by the user, and no account data. What is transferred is limited to the access logs generated while a user reaches the Site and to visit statistics that do not identify the user.
5-1. Cloudflare, Inc.
| Disclosure item | Details |
|---|---|
| Personal information transferred | Access logs received while hosting and delivering content: connection IP address, User-Agent, requested page URL, referring URL, request time, and response code. Visit analytics (Cloudflare Web Analytics) uses no cookies and processes only page view information and performance metrics such as Core Web Vitals; the processor states that it does not log query strings, so that potentially sensitive data is not collected. |
| Country of transfer | Primarily the United States, with processing across Cloudflare's globally distributed edge network. The processor states that it primarily stores personal information in the United States and the European Economic Area and may access that information from other countries in order to run its global operations. |
| Timing and method of transfer | At the moment a user reaches the Site, over an encrypted connection (HTTPS/TLS) between the browser and the processor's servers. Information is not accumulated and sent in batches. |
| Name and contact of the recipient | Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). Privacy enquiries privacyquestions@cloudflare.com; Data Protection Officer dpo@cloudflare.com |
| Purpose of use by the recipient | Website hosting, video and image file storage and delivery, content delivery network operation, blocking security threats, and cookie-less visit analytics and performance measurement |
| Retention and use period at the recipient | For visit analytics, the processor keeps unsampled beacon data for the past 7 days and then reduces it to an aggregated form, and the Company can view statistics for the previous six months. No separate period is published for hosting and content delivery access logs, so those follow the processor's own policy. |
| How to refuse the transfer | Transfers to visit analytics do not occur if the static.cloudflareinsights.com script is blocked through a browser's tracking protection or a blocking extension. Hosting and content delivery, by contrast, are the path the Site is reached through, so the only way to refuse that part is to stop using the Site. Contact the Company at the address in section 9 below and we will explain how to block the script. |
| Effect of refusal | Blocking the visit analytics script leaves every feature of the Site available. Blocking the hosting and content delivery path, however, makes the Site unreachable. |
| Legal basis | Article 28-8 (1) 3 (a) of the Personal Information Protection Act. The transfer is made for outsourced processing and storage, and the matters listed in Article 28-8 (2) are disclosed in this privacy policy. |
5-2. Umami Software, Inc. (Umami Cloud)
| Disclosure item | Details |
|---|---|
| Personal information transferred | Page view information (page URL, page title, referring URL, visit language, screen resolution), browser, operating system, device type, and country of access, together with the predefined event names and attribute values listed in section 2 above. The connection IP address and User-Agent are received by the processor's servers while the request is sent; the processor states that it uses them to determine the country of access and the browser and does not store them in a form that identifies an individual. No cookies are used. |
| Country of transfer | The United States. The Company uses the United States region of Umami Cloud (cloud.umami.is). The processor states that its servers are located in the United States and the European Union, and its published subprocessor list includes infrastructure vendors based in both the United States and Europe. |
| Timing and method of transfer | At the moment a user opens a page or triggers an event defined on the Site, over an encrypted connection (HTTPS/TLS) from the browser to the processor's servers. |
| Name and contact of the recipient | Umami Software, Inc. (doing business as Umami). Privacy enquiries privacy@umami.is |
| Purpose of use by the recipient | Cookie-less website visit analytics and usage analysis |
| Retention and use period at the recipient | The processor does not publish a specific retention period for visit analytics data and states only that it keeps information for as long as necessary for the purposes set out in its privacy notice. The period therefore follows the processor's own policy. |
| How to refuse the transfer | The transfer does not occur if the cloud.umami.is script is blocked through a browser's tracking protection or a blocking extension. Contact the Company at the address in section 9 below and we will explain how to block the script. |
| Effect of refusal | Only visit analytics data goes uncollected; every feature of the Site remains available. |
| Legal basis | Article 28-8 (1) 3 (a) of the Personal Information Protection Act. The transfer is made for outsourced processing and storage, and the matters listed in Article 28-8 (2) are disclosed in this privacy policy. |
6. Rights of Data Subjects and How to Exercise Them
Users may exercise the following rights against the Company at any time.
- The right to request access to personal information
- The right to request correction if there is an error
- The right to request deletion
- The right to request suspension of processing
Requests may be made in writing, by email, or by phone using the contact information under "9. Data Protection Officer" below, and the Company will act on such requests without delay.
7. Measures to Ensure the Safety of Personal Information
The Company takes the following measures to ensure the safety of personal information.
- The Site does not operate a separate account system or inquiry form, so it does not directly collect or store personal information.
- Communication between the Site and users takes place over an encrypted (HTTPS/TLS) connection provided by Cloudflare.
- Website usage analytics processes only minimal, non-identifying information using a cookie-less method.
8. Use of Cookies
The Site itself does not set or read cookies. Both Umami Cloud and Cloudflare Web Analytics, which the Site uses, operate without cookies.
9. Data Protection Officer
The Company designates a Data Protection Officer as shown below, who is responsible for personal information processing overall and for handling users' complaints and remedying damages.
- Position: Chief Executive Officer
- Email: sikoung0129@hansungts.co.kr
- Phone: 02-2106-6760
10. Company Information
- Company name: HANSUNG TS
- Address: 409, 410, Gasan YPP Arsen Tower, 24 Gasan digital 2-ro, Geumcheon-gu, Seoul
11. Changes to This Policy
This privacy policy may be revised to reflect changes in law, policy, or the Site's services, and any changes will be announced through the Site.
12. Public Sources This Policy Relies On
The sources below were checked on 16 September 2026.
- Cloudflare Privacy Policy (storage regions, transfers abroad, privacy contact addresses): https://www.cloudflare.com/privacypolicy/
- Cloudflare Customer Data Processing Addendum (basis for transfers abroad, sub-processor notice procedure): https://www.cloudflare.com/cloudflare-customer-dpa/
- Cloudflare sub-processor list: https://www.cloudflare.com/gdpr/subprocessors/
- Cloudflare Web Analytics FAQ (unsampled data kept for 7 days, six months of viewable statistics, query strings not logged): https://developers.cloudflare.com/web-analytics/faq/
- Cloudflare engineering blog, "Privacy-first Web Analytics" (no cookies or local storage, no user tracking or fingerprinting): https://blog.cloudflare.com/privacy-first-web-analytics/
- Umami Privacy Policy (legal entity name, privacy contact address, retention wording): https://umami.is/privacy
- Umami sub-processor list (updated 24 April 2026; infrastructure vendors in the United States and Europe): https://umami.is/subprocessors
- Umami FAQ (items collected, no cookies in the tracking code): https://docs.umami.is/docs/faq
- Umami Cloud FAQ (servers located in the United States and the European Union): https://docs.umami.is/docs/cloud/faq
- Korea Law Information Center, Personal Information Protection Act Article 28-8 (Transfer of Personal Information Abroad): https://www.law.go.kr/
Effective date: 2026-09-16