Privacy & Information Processing Policy items
- Article 1 General provision“Personal information” refers to such information about a living individual that can identify said individual, such as name and resident registration number (including information which alone cannot identify a certain individual, but can be easily combined with other information to be used to identify that individual). “Information principal” refers to a person who can be identified by the processed information and is the principal of that information. The Company posts the privacy policy on the first screen of the website so that it can be viewed easily at all times. Also, In the event that this Privacy Policy is amended, the Company will post announcements on our corporate website (or notify individual customers). Each business division may have its own privacy policy to fit its own business characteristics. In this event, the privacy policy of each business division will take precedence, and you are advised to check the privacy policy posted on the website.
- Article 2 Personal information items collected and the purposes of using themThe Company processes the minimum personal information necessary for service provision.
- Scope of collection
-
- Data to be collected when inquiry is submitted
- Name, email, phone number, fax number
- Data automatically created and collected during use of the website
- Access IP, record of service use, access logs, cookies, MAC address
- Purpose of processing
-
- User identification, response to questions from users, response to suggestions, complaints, request for after-sales service or other support, notifications
- Analysis of how our services are used, including frequency of access and service usage, for more reliable service availability and optimization of user experiences
- Article 3 Processing and retention period of personal informationThe Company will destroy any personal information collected immediately after the purpose of collecting and using the personal information has been achieved. However, the following information will be retained for the following reasons for a specified period of time and, if necessary, the consent of the information principal will be obtained.
- Data to be collected when inquiry is submitted
-
- Period of retention : One year
- Purpose : User identification, response to user inquiries, user support, notifications
- Data automatically created and collected during use of the website
-
- Period of retention : Six months
- Purpose : Understanding of access frequency and collection of statistical data on service use
- Article 4 Destruction of personal informationThe Company will immediately destroy any personal information collected once the personal information retention period expires or else the purpose of processing thereof has been achieved. In the event that personal information needs to be retained pursuant to other laws even if the personal information retention period, to which the information principal consented, has expired, or the purpose of processing thereof has been achieved, the personal information will be moved to a separate database (DB) or storage space. Methods of destroying personal information are as follows:
- Personal information recorded and stored in the form of electronic files must be deleted using a technical method ensuring that the records cannot be reproduced.
- Personal information recorded and stored on paper documents must be shredded on the paper shredder or incinerated.
- Article 5 Provision of personal information to a third partyThe Company will use personal information within the purview of the purposes of collecting personal information, and will not use personal information outside the purview thereof, or provide it to or share it with a third party. However, exceptions will be made in the following events:
- in the event that the consent of the information principal was obtained;
- in the event that there are special provisions in other laws;
- in the event that prior consent cannot be obtained because the information principal or his/her legal guardian cannot express his/her intention, or his/her address is unknown, and it is clearly deemed urgently necessary for the life, body or pecuniary benefit of the information principal or a third party; and
- in the event that it is necessary for statistics and academic research, and personal information is provide in a way that cannot identify individuals
- If no activity as required under other relevant laws can be performed unless personal data is used for other purposes than set out herein or disclosed to a third party, provided that the Protection Committee has reviewed and granted approval.
- If required for provision to a foreign government or an international organization under a treaty or other international agreement.
- If required for investigation of a crime or initiation or maintenance of prosecution
- If required in connection with court-related proceedings
- If required for penalization, protective custody or probation
- Article 6 Consignment of personal information processingThe Company consigns personal information processing as follows for the sake of efficiency, and if a consignment agreement is entered into according to related laws, matters necessary for safe management of personal information are stipulated.
- Website operations
-
- Consignee: Hyosung TNS Inc.
- Details of consignment: homepage maintenance, system management, etc.
- Article 7 Rights and obligations of the information principal and how to exercise these rightsThe information principal may exercise the following rights related to personal information against the Company at any time:
- Demanding to view personal information
- Demanding that errors be corrected if any
- Demanding deletion
- Demanding that processing be stopped
If an information principal demands that errors in personal information be corrected or deleted, the Company will not use or provide that personal information until the correction or deletion has been completed. Information principals may exercise their rights through their agents like legal guardians or consignees. In this event, the power of attorney must be submitted. [Download Form] - Article 8 Measures to ensure the safety of personal informationThe company applies the following measures to ensure the safety of the personal information it retains.
- Administrative measures: establishment and enforcement of internal control plans, regular employee education, etc.
- Technical measures: installation of access control systems, encryption of important information, using vaccine programs to prevent damages from computer viruses, personal information transmission security systems (SSL) on the network based on encryption algorithms, operation of intrusion prevention systems, etc.
- Physical measures: restriction of access to the computer room, data storage room, etc.
- Article 9 Matters concerning the installation and operation of an automatic personal information collection system, and the rejection thereofThe Company uses ‘cookies’ that frequently save and retrieve your information. A cookie is a very small text file that the server, used to operate the Company’s website, sends to your browser. It is saved in the hard disk of your computer.
The Company uses cookies for the following purposes:- Analyzing connection frequencies and visit time to understand users’ preferences and interests and track users’ footprints.
- Carrying out target marketing and providing customized service by checking level of participation in various events and number of visits.
You may reject cookies by selecting an option in your web browser to allow all cookies, going through a confirmation process each time a cookie is saved, or refusing to have all cookies saved.
How to set up (Internet Explorer): Tools > Internet options > Personal information at the top of the web browser If you refused to have cookies installed, however, there may be difficulties with service provision. - Article 10 Chief Privacy OfficerTo protect and process personal information, and deal with complaints related the personal information, the Company has the Chief Privacy Officer and the Department in charge of personal information.
- Chief Privacy Officer
-
- Name: HAN, CHANG-SEOK
- Position: head of department
- Contact info: +82-2--707-7338, hanni@hyosung.com (* You will be connected to the department in charge of personal information.)
- Department in charge of personal information
-
- Department name: PR team
- Person in charge: AHN HYON SIK
- Phone: +82-2--707-7083
- e-mail : cloverkoo@hyosung.com
If you need to report personal information intrusion or need consultation, you may contact the following agencies:- Privacy Invasion Reporting Center ( privacy.kisa.or.kr / 118)
- Personal Information Dispute Mediation Committee ( privacy.kisa.or.kr / 118)
- High-Tech Crime Investigation Division, Supreme Prosecutors’ Office ( www.spo.go.kr / 02-3480-3573)
- Cyber Terror Response Center, National Police Agency ( www.netan.go.kr / 1566-0112)
- Article 11 Change of the privacy policyThis personal information will go into effect on Jun 01, 2018.
