Effective Date: 29 July, 2026
Hyundai Autoever (hereinafter referred to as “Hyundai Autoever”, “Autoever”, “us”, or “our”) strictly complies with all applicable privacy laws and regulations to securely process personal information we collect.
Autoever’s Privacy Policy (hereinafter, “Privacy Policy”) describes how we collect, use, and share your personal information through the following service (“Service”).
| Service Name | URL |
|---|---|
| Partner ID System (“PID, P-ID” or the “Service”) | A business to business (B2B) account management system designed for employees and authorized representatives of partner companies that collaborate with Hyundai Autoever and affiliated Hyundai Motor Group Companies. |
Furthermore, this Privacy Policy also describes, as applicable, your rights to access, delete, opt-out and correct your personal information in compliance with international regulations.
Not Covered by this Policy: This Policy only applies to the Service and not to any other Autoever’s website or online service, unless specifically indicated. It does not apply to any third-party websites even though we may link to these sites.
1. How we collect your personal information
By using our Services, you acknowledge that you may provide personal information after being informed of our privacy practices at the time of collection. This Privacy Policy describes Autoever’s collection, use, transfer, and disclosure of such information.
If required by applicable law, we will obtain your explicit consent for certain types of processing, including international transfers in certain circumstances. You may withdraw your consent at any time, but this will not affect the lawfulness of any processing carried out prior to the withdrawal.
IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY POLICY OR OUR TERMS, THEN PLEASE REFRAIN FROM PROVIDING PERSONAL INFORMATION TO US OR USING THE SERVICE OR SITE.
When you sign up and use Autoever’s services, we may collect your personal information from several sources: directly from you, from third parties, and automatically through your use of the Service and interactions with us.
For example, we collect personal information that you provide directly by completing one of the forms on the Service.
We may also receive personal information about you from the following third-party sources, when you are registered or granted access through these channels:
- KIA PBV Conversion Portal: When a partner company’s users are registered through this channel, we receive the following information: company identifier code, company name, company region (country), ID, name, and email.
- HMG Single Sign-On(HMG-SSO): When Hyundai Motor Group employees access the Service through the HMG integrated sign-on system, we receive account information from Hyundai Motor Group’s SSO infrastructure.
- Authorized agent: An authorized agent(representative) acting on behalf of your partner company may register or manage your account. In this case, we receive personal information provided by the agent on your behalf.
We automatically collect usage data (e.g., log files) when you use the Service. We use strictly necessary cookies for login and session management, and we may use third-party tools that collect data through cookies for performance and analytics purposes. However, we do not use cookies or other tracking technologies for advertising. For more details, please refer to Section 9.
2. Categories of Personal Information Collected and Sources of that Personal Information
While the actual information we collect varies depending upon the circumstances, generally we may collect the following categories of personal information.
| Category | Items | Source |
|---|---|---|
| Account Information (Direct Registration) |
|
|
| Account Information (via integrated system) |
|
|
| Account information (via HMG-SSO) |
|
|
| Account information (via Authorized Agent) |
|
|
| Website or mobile application data |
|
|
3. Lawful reasons for use of personal information
We use your personal information to provide you the Service. To the extent permitted by applicable law, we also use your personal information for our wider business interests.
Legal basis for processing
We process that information on the basis of one more of the following so-called “legal bases” depending on the circumstances (where such concept is recognized and required by applicable law).
- Performance of a contract: If you register or receive services provided from us, our main legal basis for using for your personal information is contractual necessity.
- Consent from data subject: Where we seek explicit consent for certain types of data processing, our legal basis will be consent. If you are a data subject based in Korea, we will seek your consent for international transfers of your personal data, in order to comply with Korea’s Personal Information Protection Act (PIPA). If you are a data subject based in Canada, we will process your personal information on the basis of your consent (which may be express or implied), except as otherwise permitted or required by law.
- Legitimate Interests: If you are using Autoever’s services but someone else in your party or family entered into a contract with us to use our services, our legal basis is our legitimate interests in providing services to you and administering your accounts.
- Complying with legal requests and obligations: We also process your personal information to comply with the law or in connection with legal proceedings. For example, we may use information in response to subpoenas, court orders, and other lawful requests by regulators and law enforcement, including responding to national security or law enforcement disclosure requirements. If we do so, we process your personal information in accordance with GDPR and other applicable privacy laws.
Purpose and lawful basis
The table below sets out in more detail how we use your information and our lawful bases.
| Purpose/Activity | Types of Personal Data | Legal basis |
|---|---|---|
| Providing products and services |
|
|
| Management of our internal systems, businesses and processes |
|
|
| Compliance with applicable laws |
|
|
| Data provision to the third- party |
|
|
| Data recipient from the third-party |
|
|
Despite the lawful basis identified above, if you are a data subject accessing the Services from Canada, we process your personal information based on consent (which may be express or implied), except as otherwise permitted or required by applicable law.
4. Retention and Use Period
We will also take reasonable and practical measures to ensure that unnecessary personal information is not collected. Information will be retained for retention periods consistent with the purposes set out above. For example, account information will be retained until account deletion request. For inactive accounts (no login for 1 year), data will be masked after a one-year grace period and retained for five years. In such cases, the data will be stored separately and masked in accordance with applicable laws.
5. Disclosure of Personal Information
We disclose personal information to third parties to provide and improve our Service; to reach you with more relevant information and offersand to honor your consent or authorization. We also disclose personal information to the entities listed and for the purposes set out below:
- We may share your personal information with the following partner entities to provide and support our services. Data is shared with the minimum necessary scope, based on the data subject's consent for third-party provision.
- Hyundai Motor Company (Services: HMMA Supplier Portal, HDPM, HMG Admin Partner, DXP): ID, Name, Email, Company code, Company name — until account deletion
- KIA Corporation (Services: KMX Supplier Portal, KIA PBV Conversion Support Portal, KaGA Supplier Portal): ID, Name, Email, Company code, Company name — until account deletion
- Hyundai Wia (Services: ISIR, GQMS, AONE): ID, Name, Email, Company code, Company name — until account deletion
- Other service operators utilizing the Service: We may disclose personal information to service operators who utilize the Service for authentication and login. This may include their own services, such as websites, applications, etc., that are implemented with the Service.
- Service providers and suppliers: We may disclose personal information to our vendors, service providers, suppliers, contractors, or agents who use such data in order to perform functions on our behalf. These entities are contractually required to use the personal information we disclose exclusively to provide their respective services, and not for their own independent purposes.
- Business transfers: We may disclose and transfer personal information to prospective or actual buyers, merging partners, and acquiring entities as part of any merger, acquisition, financing, sale of company assets or interests in the company listed above, or in the case of insolvency, bankruptcy, or receivership, including during negotiations related to such business transfers.
- Protecting rights and interests: We may disclose your information to relevant third parties, including courts, government agencies, law enforcement authorities, legal advisors, and parties to legal proceedings, to protect or defend the safety, rights, property, or security of Autoever, third parties, or the general public, including to protect the services, to detect, prevent, or otherwise address fraud, security, technical issues, or other activity which we, in our sole discretion, consider to be, or to pose a risk of being, illegal, unethical, or legally actionable activity. We may also use personal information as evidence in litigation in which we are involved, and as necessary to enforce this Privacy Policy, our Terms of Conditions, and other applicable agreements with you.
- Legal compliance and lawful requests: We may disclose your information to competent authorities, including courts, tribunals, regulatory bodies, law enforcement agencies, and other government entities, in accordance with applicable law to comply with applicable legal or regulatory obligations, including as part of a judicial proceeding, in response to a subpoena, warrant, court order, or other legal process, or to cooperate with investigations or lawful requests, whether formal or informal, from law enforcement or government entities.
- Other recipients, with notice and your consent: We may disclose categories of personal information for any other purposes disclosed to you at the time we collect the information or pursuant to your consent.
The following categories of personal information may be shared with Hyundai Motor Company, KIA Corporation, Hyundai Wia and Hyundai Auto Canada Corp:
- Account Information (ID, Name, Email, Company code, Company name)
Subject to applicable law, you have the right to opt-out of having your personal information shared with Hyundai Motor Company, KIA Corporation, and Hyundai Wia. To exercise this right, please contact us at privacy@hyundai-autoever.com.
Where Mexican data protection law applies to our services: We ensure that any third parties and entities receiving your personal data are informed of the terms governing its processing, as set forth in this privacy policy.
Please note that opting out may limit your access to certain integrated services and benefits across Hyundai Motor Company, KIA Corporation, and Hyundai Wia.
6. International Data Transfers and Protection Measures
Your personal data may be transferred outside your country of residence as the Data Controller (Autoever) is located in the Republic of Korea. Also, personal data transferred to Korea may be subject to onward transfer to the country where the third party’s linked system, accessed via your P-ID account, is located. Such onward transfer is executed based on a contract with the third-party as the linked system provider.
Please refer to the items outlined below. We take reasonable measures to ensure that, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws, your personal data is protected with appropriate safeguards during and after the overseas transfer. Please note, however, that in some cases, your personal data may be transferred to destination countries that may afford a lower level of legal protection for personal information than the jurisdiction in which you reside.
1. Hyundai Autoever
| Purpose of Transfer | Destination Country | Personal data transferred |
|---|---|---|
| Providing Partner ID service | Republic of Korea | - Account Information - Website or mobile application data |
2-1. Entrusted Company (Processor) for providing Services in KR
| Company | Purpose of Transfer | Destination Country | Personal data transferred |
|---|---|---|---|
| SOLOMONTECH Co., Ltd. | Hyundai Autoever Partner Account System operation | Republic of Korea | - Account Information |
| Hyundai Motor Corporation | Email authentication mail delivery via HMG-Notification | Republic of Korea | - Account Information (ID, Name, Email) |
3. Third Party (Controller)
| Company | Purpose of Transfer | Destination Country | Personal data transferred | Retention Period |
|---|---|---|---|---|
| Hyundai Motor Company, KIA Corporation, Hyundai Wia | Partner account system service provision | Republic of Korea | - Account Information | Until account deletion or withdrawal of consent |
| Hyundai Auto Canada Corporation (HACC) | Partner account system service provision | Canada | - Account Information | Until account deletion or withdrawal of consent |
| Hyundai Motor de Mexico, S.A. de C.V. KIA Mexico, S.A. de C.V. Kia Georgia, Inc. (USA) |
Partner account system service provision | Mexico, United States of America | - Account Information (ID, Name, Email, Company code, Company name, Company region/country) |
Until account deletion |
※ When providing data to the aforementioned third parties, such provision is carried out based on the data subject's consent obtained for cross-border transfer or third-party provision
- Timing and method of transfer: Data is transferred in real time via electronic transmission when you register for a partner account or use the relevant service.
- Level of protection in the destination country: The Republic of Korea is recognized by the European Commission and the UK Government as offering an adequate level of personal data protection through an adequacy decision.
- Safeguards applied: The transfer is based on the European Commission’s adequacy decision or privacy compliance of related countries. Where required, additional safeguards such as Standard Contractual Clauses (“SCCs”), Data Sharing Agreements (“DSAs”), etc. may be implemented.
* For international data transfers to the United States, we rely on SCCs and DSAs to legitimize the transfers. - Technical and organizational measures: We apply appropriate technical and organizational measures, including encryption and access controls, to ensure the security of your personal data during and after the transfer.
If you have any questions, require further information, or would like to see a copy of the documents that legitimize international data transfers of your personal data, please feel free to contact us.
7. Security of Your Information
We use security policies, procedures, and tools which are reasonably designed to safeguard the personal information we collect. However, the security of information transmitted through the Internet can never be guaranteed regardless of the level of security. We are not responsible for any interception or interruption of any communications through the Internet or for changes to or losses of data. Users of our Service are responsible for maintaining the security of any password, user ID, or other form of authentication involved in obtaining access to password-protected or secure areas of any of our Service. In order to protect you and your data, we may suspend your use of any of the Service, without notice, pending an investigation, if any security issue arises. Access to and use of password-protected and/or secure areas of any of the Service, if any, are restricted to authorized users only. Unauthorized access to such areas is prohibited and may lead to criminal prosecution or civil action.
8. Your Rights and Choices
Depending on the applicable data protection law(s), you may have the following rights regarding your personal information:
- Access: You may request access to the personal information we hold about you. We accommodate such requests in accordance with applicable laws and provide access within the required timeframe.
- Right to Know: You have the right to request information about how your personal information has been processed including the purposes for which it has been used and the categories of or specific third parties with which we have disclosed your personal information.
- Correction & Update: You may request correction or update of any inaccurate or incomplete personal information. We do not limit this right and ensure that all corrections are made promptly and accurately.
- Deletion: You may request the deletion of certain personal information that we have or collected from you, subject to exceptions provided by law.
- Data Portability: You may request to receive your personal information in a structured, commonly used, and machine-readable format.
- Restriction of Processing: You may request the restriction of processing under certain circumstances and in certain jurisdictions. We support this right and facilitate the transfer of data where technically feasible.
- Object to Processing: You may object to the processing of your personal information in certain jurisdictions, subject to any limitations under applicable law.
- Withdraw Consent: Where processing is based on your consent, you may withdraw your consent easily at any time.
For residents of France, your legal representatives can send us specific instructions regarding the use of your data after your death.
Please be aware that these rights are not absolute and subject to applicable law. There may be situations where they cannot be exercised or they are not relevant to you or your personal information.
The P-ID System operates through your partner company’s account hierarchy. Correction, deletion, and consent withdrawal cannot be performed through direct self-modification. These actions must be initiated through your company’s administrator within the Partner ID system.
To exercise any of these rights, please contact us at privacy@hyundai-autoever.com. We will endeavor to respond to those requests in the time periods required by applicable laws. We may request certain information from you to verify your identity before responding to a request.
We offer these options to you as general rights, but you may have further specific rights that are outlined in our jurisdiction-specific sections below (for example, residents of US, Canada, the European Union, and the United Kingdom should refer to jurisdiction-specific sections within this Privacy Policy).
9. Cookies and Similar Technologies
For more information about our use of cookies, pixels, and similar technologies (collectively, “cookies”), please refer to our Cookies Policy.
10. Links to Third Party Sites
We may offer links to or from our Service to other websites within the Hyundai group of companies as well as to websites, services, and resources operated by third parties. We may offer links to third-party websites so that you can conveniently visit our vendors and advertisers or locate other content likely to be of interest to you. If you access third-party services through the Services, these third-party services may be able to collect information about you. We are not responsible for the privacy practices, content, or policies of websites operated by third parties and recommend that you understand their privacy and information-sharing practices before providing any personal information. In the event that you provide personal information to any third-party website or service, you understand that Autoever is not responsible for such third parties’ use or misuse of your personal information. You further acknowledge and agree that Autoever shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with use of or reliance on any such content, goods or services available on or through any such third-party website, service, or resource.
11. Changes to this Privacy Policy
Autoever reserves the right to change this Privacy Policy at any time. When we update the Privacy Policy, we will revise the “Effective Date” date above. Autoever will use, share, and disclose all personal and other user information in accordance with the Privacy Policy in effect at the time the information is collected. We will post any changes to this Privacy Policy on this page so that you can easily check what information we collect, how we use it, and under what circumstances we may disclose it. Please check the latest version of the Privacy Policy to understand how we process your personal data.
12. How to Contact Us
The data subject may exercise their rights to access, rectify, delete, suspend processing, withdraw consent, and request transfer of personal information related to Hyundai AutoEver at any time. Please direct any related requests to the contact information below.
Privacy / Data Protection Team (General Inquiries)
| Field | Details |
|---|---|
| Organization | Hyundai Autoever Co., Ltd. — Privacy Security Team |
| Email (General) | privacy@hyundai-autoever.com |
| Email (PID Account) | hmg-partnerid@hyundai-autoever.com |
| Phone | +82-2-6296-6000 |
| Address | 06179, 510 Teheran-ro, Gangnam-gu, Seoul, Republic of Korea |
Chief Privacy Officer (CPO) / Data Protection Officer (DPO)
| Field | Details |
|---|---|
| Name | Won-hyuk Choi |
| Title / Department | Chief Privacy officer (CPO), Chief Information Security Officer (CISO) / Cyber Security Division |
| privacy@hyundai-autoever.com |
In order to make a request, you will need to provide us with your name, email address, telephone number, and mailing address. Please note that we may require additional information from you in order to verify your request.
Authorized agents may submit requests to us at privacy@hyundai-autoever.com. If you are submitting a request through an authorized agent, the authorized agent must confirm their relationship with you. We may also request that any authorized agents verify their identity, including by providing information about themselves, such as their name, email, phone number, and address. We may reach out to you directly to confirm your own identity or that you have provided the agent with your permission to submit the request on your behalf.
There may be circumstances where we will not be able to honor your request. For example, if you request deletion, we may need to retain certain personal information to comply with our legal obligations or other permitted purposes. However, we will only use personal information provided in a verifiable format.
If you are not satisfied with the response that you receive or have any complaints or questions about this privacy policy and information practices, you may reach out to privacy@hyundai-autoever.com.
If you are a resident of the European Economic Area (“EEA”) and United Kingdom (“UK”), please reach out to the following contact point.
| Field | Details |
|---|---|
| EEA Representative | Hyundai Autoever Europe GmbH |
| Address | Kaiserleistraße 8A, 63067 Offenbach am Main, Germany |
| Department | Legal Department |
| legal@hyundai-autoever.eu |
Also, you have the right to lodge a complaint with the supervisory authority of the country in which you reside. If you are a resident of the United Kingdom, you can submit a complaint to the Information Commissioner Office (see https://ico.org.uk/make-a-complaint/). If you are a resident of Brazil, you have the right to lodge a complaint directly with the Brazilian National Data Protection Authority (ANPD) via their official website (gov.br/anpd). However, we encourage you to first contact us with any questions or concerns.
13. Regional Privacy Disclosure
13.1 Additional Information For US Residents
This section provides supplemental information for U.S residents about their rights regarding their personal information. Please see the body of our privacy policy for information about the categories of personal information we collect (and have collected over the prior 12 months) and the business purposes for which each category of personal information is used, and the third parties with which each category of personal information is disclosed.
Depending on where you reside, and subject to applicable laws and exceptions, you may be entitled to the following rights with respect to your personal information:
- Right to Know: You may have the right to request the personal information we process about you and information about our processing practices, including, depending on your jurisdiction, information about the categories of or specific third parties with which we have disclosed your personal information.
- Right to Delete: You may have the right to request deletion of your personal information that we have collected about you about you in some circumstances.
- Right to Correct: You may have the right to request to correct or modify inaccurate personal information that we have collected.
- Right to Opt Out (“Do Not Sell or Share”): Depending on the state in which you reside, you may have the right to opt-out of our sale of your personal information or sharing or processing of your personal information to show you ads based on your online activities over time and across third-party sites and services (“cross-context behavioral advertising”). Autoever does not sell your personal information for monetary consideration, and we do not share your personal information with third parties for cross-context behavioral advertising purposes.
Right to Non-Discrimination or -Non-Retaliation: We will not retaliate or discriminate against you for exercising your data subject rights under data protection law, except as permitted by law.
- Right To Limit the Use and Disclosure of Sensitive Personal Information: California residents have the right to limit the use or disclosure of sensitive personal information for purposes other than those specified in the CCPA. We do not offer this right since we do not use or disclose sensitive personal information for such other purposes or for inferring characteristics about individuals.
Sale.
As noted above, Autoever does not sell your personal information for monetary consideration, and we do not share your personal information with third parties for cross-context behavioral advertising purposes. However, we may share your identifiers, customer records, commercial information, Internet or other electronic network usage data, and profiles and inferences to affiliates, analytics providers, and other third parties to receive certain services or benefits from them—for example, when we allow third-party tags to collect information such as browsing history on our Service to improve and measure our ad campaigns. These entities are contractually required to use the personal information we disclose exclusively to provide their respective services, and not for their own independent purposes.
Children’s Personal Information.
We do not consider users under the age of 13 as a primary customer segment and do not collect their personal information.
13.2 Additional Information for Canadian Residents
Depending on where you reside, you may possess the right to cease dissemination and de-index pursuant to Law25, situations in which to exercise such rights do not exist due to the inherent nature of the Services provided by the Company.
Personal Information May Be Located Outside of Canada.
Third-party service providers to whom we disclose personal information pursuant to this Privacy Policy may be located outside of Canada. The data protection laws of these jurisdictions may differ from Canadian laws. Subject to applicable laws in such other jurisdictions, we will ensure that appropriate protections are in place to require the processor of personal information in that country to maintain protections with respect to such information that are equivalent to those that apply in Canada.
Additionally, if our service provider is located in a foreign jurisdiction, they are bound by the laws of the country in which they are located. As a result, they may be required to disclose your personal information in response to authorized demands from government authorities, law enforcement, or courts of their jurisdictions.
13.3 Additional Information for Republic of Korean Residents Only
Children’s Personal Information.
We do not consider users under the age of 14 as a primary customer segment and do not collect their personal information.
13.4 Additional Information for Mexican Residents Only
ARCO Rights and Exercise Procedure
Mexico's data protection law grants you the following rights: access, rectification, cancellation, and objection to the processing of your personal data.
| Right | Description |
|---|---|
| Access (Acceso) | Know what personal data we hold, the purposes, and conditions of processing |
| Rectification (Rectificación) | Request correction of inaccurate, incomplete, or outdated data |
| Cancellation (Cancelación) | Request deletion, subject to applicable legal retention |
| Objection (Oposición) | Object to processing for specific purposes |
If you have any inquiries or want to exercise your any rights, please email to privacy@hyundai-autoever.com and your request must also contain:
- Documents that prove your identity and, where applicable, your status as legal representative
- Clear description of the right(s) to exercise and the data concerned
- Any information facilitating location of your data; (d) if via representative: notarized power of attorney + representative's ID copy.
We will respond to your request within 20 (twenty) business days following the date it is received.
If your request is appropriate, we will make it effective within 15 (fifteen) business days following the date on which we communicate the response.
If your application is incomplete or incorrect, we will ask you to complete or correct it, and you will have 10 (ten) business days to do so.
13.5 Additional Information for Brazilian Residents Only
Your rights as a personal data subject
Pursuant to the Brazilian General Data Protection Law (LGPD), you possess specific rights regarding your personal data, such as:
- Confirmation of Processing: By using our services, your data is already being processed and securely stored. However, you retain the right to request formal confirmation of this processing.
- Anonymization, Blocking, or Deletion: While we strive to collect only the data necessary to provide our services, you have the right to request the anonymization, blocking, or deletion of any data you believe is unnecessary, excessive, or processed in non-compliance with the LGPD
- Revocation of Consent & Information on Consequences: If you have given your consent to the processing of your personal data, you can request the revocation of this authorization. The revocation of consent may result in the impossibility of using some features of the application, or even in the termination of the services provided, but does not prevent the use of (i) anonymized data; and (ii) data whose processing is based on another legal hypothesis provided for in the LGPD
- Right to Petition the ANPD: If you believe your data protection rights have not been adequately addressed by us, you have the right to lodge a complaint directly with the Brazilian National Data Protection Authority (ANPD) via their official website: gov.br/anpd.
※ Please note that other data subject rights common to privacy laws of other jurisdictions have been omitted from this section. For those general rights, please refer to Section 8.