- Article 1 Items of Personal Information to be Processed, Purpose of Processing, and Period of Processing and Retention
- Article 2 Sharing of Personal Information with Third Party
- Article 3 Entrustment of Processing of Personal Information
- Article 4 Rights and Obligations of Data Subjects and Means to Exercise Rights
- Article 5 Destruction of Personal Information
- Article 6 Security Measures for Protection of Personal Information
- Article 8 Remedies for Infringement of Rights and Interests
- Article 9 Chief Privacy Officer
Article 1 [Items of Personal Information to be Processed, Purpose of Processing, and Period of Processing and Retention]
(1) The items of personal information to be processed by Yulchon, purpose of processing, and period of processing and retention of personal
(1) information are as follows:
(2) Yulchon in principle does not collect sensitive information that may likely invade privacy of data subjects. However, if necessary, Yulchon may
(2) collect sensitive information after separately obtaining prior consent of data subjects and use such information for the limited purpose as
(2) consented by data subjects. Yulchon will regularly check the accuracy of, and update, the collected sensitive information.
Article 2 [Sharing of Personal Information with Third Party]
(1) In principle, Yulchon processes personal information of data subjects only for the purposes as specified in Article 1 above. Yulchon does not
(1) process or share personal information with a third party beyond the original scope of purposes without prior consent of data subjects.
(1) However, in any of the following circumstances, Yulchon may use or share personal information with a third party for other purposes, unless
(1) such use or sharing would be likely to unjustly infringe upon the interests of data subjects or a third party:
- Where data subjects have consented to the sharing of personal information with a third party in advance;
- Where there are special provisions in other laws regarding the use or sharing of personal information with a third party;
- Where it is impossible to obtain prior consent of data subjects since data subjects or their legal representatives cannot express their intentions or their addresses are unknown, and the use or sharing of personal information with a third party is deemed clearly and urgently required to protect life, body, or proprietary interests of a client or third party; or
- Where the use or sharing of personal information with a third party is deemed necessary for statistical purpose or academic research, and personal information is provided in a manner the identity cannot be verified.
(2) Upon receipt of consent as set forth in Paragraph (1) above, Yulchon shall inform data subjects of the following items. For any changes to any
(2) of the following items by Yulchon, Yulchon shall also inform data subjects of such change and obtain their consent thereto:
- Name of the recipient of personal information;
- Purpose of the use of personal information (if provided to a third party, the purpose of such third party);
- Items of personal information to be used or provided;
- Period of retention and use of personal information (if provided to a third party, the period of retention and use by recipient); and
- Data subject’s right to refuse to provide consent and any disadvantage, if any, that may result from such refusal.
Article 3 [Entrustment of Processing of Personal Information]
(1) Yulchon, as shown in [click here]entrusts the processing of personal information of data subjects to entrusted entities. Yulchon will notify
(1) through this Policy any changes to the entrusted entities or entrusted services without delay.
(2) At the time of entering into an agreement with the entrusted entity, Yulchon, as required under applicable laws and regulations, specifies, in
(2) the agreement the responsibility of the entrusted entity, including prohibition of processing of personal information for any purpose other than
(2) that of performing the services entrusted, technical and administrative measures for protection of personal information, restriction on re-
(2) entrustment, management and supervision of the entrusted entity, and compensation for damages, and monitors whether the entrusted entity
(2) safely processes personal information.
Article 4 [Rights and Obligations of Data Subjects and Means to Exercise Rights]
(1) Data subjects may exercise their rights pertaining to the protection of personal information towards Yulchon such as request for access to,
(1) correction or deletion of, or suspension of processing of the personal information in accordance with the relevant laws and regulations,
(1) including the Personal Information Protection Act.
(2) Data subjects may exercise their rights under Paragraph (1) above through their legal representatives or authorized persons in which case the
(2) legal representatives or authorized persons will be required to submit the power of attorney in accordance with the Enforcement Rules of the
(2) Personal Information Protection Act.
(3) Yulchon will immediately take actions with respect to the exercise of rights by data subjects in accordance with the applicable laws and
(3) regulation, including the Personal Information Protection Act.
Article 5 [Destruction of Personal Information]
(1) In principle, Yulchon shall destroy all personal information without delay when the retention of personal information is no longer necessary,
(2) e.g., where the purposes of processing personal information have been accomplished.
(2) If Yulchon is required to keep and maintain certain personal information without destroying in accordance with the applicable laws and
(2) regulations, Yulchon will do so by separating such personal information from other personal information.
(3) Yulchon shall select personal information that is subject to destruction and destroy such information with the Chief Privacy Officer’s approval.
(4) If personal information to be destroyed is in the form of electronic files, Yulchon shall permanently delete such files to be un-restorable, and if
(2) such information is in the form of records, print-outs, documents or other recording media, Yulchon shall shred or incinerate them.
Article 6 [Security Measures for Protection of Personal Information]
Yulchon is taking the following security measures for the protection of personal information：
- Administrative measures: Establishment and implementation of internal management plan, and regular education and training of personnel regarding the protection of personal information;
- Technical measures: Management of right to access to personal information processing system, installation of access control system, encryption and installation of security program, etc.
- Physical measures: Access control to computer room or server room where personal information is stored.
This Policy is subject to change according to the applicable laws, regulations and guidelines, and Yulchon’s internal regulations. Yulchon will disclose any amendments to this Policy, including the timing of amendments and implementations and details of amendments, on Yulchon’s website (www.yulchon.com) and provide the comparison of this Policy before and after the amendments so that data subjects may easily review the amendments.
Article 8 [Remedies for Infringement on Rights and Interests]
If you need to report or have consultation regarding any invasion of privacy, please contact the following agencies and institutions：
- Personal Information Dispute Mediation Committee： privacy.kisa.or.kr/118
- Personal Information Infringement Reporting Center of Korean Internet Security Agency： privacy.kisa.or.kr/118
- High-Technology Crime Investigation Division of Supreme Prosecutors’ Office：www.spo.go.kr/02-3480-3573
- Cyber Terror Response Center of National Policy Agency： www.netan.go.kr/1566-0112
Article 9 [Chief Privacy Officer]
(1) Yulchon’s Chief Privacy Officer is as follows：
- Chief Privacy Officer: Attorney, In Bo Song
- Contact Information：02-528-5200, firstname.lastname@example.org
(2) The following person is in charge of handling request for access to personal information, inquiries regarding personal information protection,
(2) complaints and remedies regarding personal information：
- Person-in-charge: Knowledge and Planning Team, Deputy General Manager, Jung Hyun Lee
- Contact Information：02-528-5200, email@example.com