America
America
America
Privacy Policy
In order to protect the user’s personal information and rights in accordance with the Personal Information Protection Act and to address user complaints related to personal information, <company name> (hereunder “company”) applies the policy it established as described below. “company” notifies updates of the Privacy Policy, if any, through the noticeboard of its website (or personal notification).
ο This policy is effective as of January 1, 2021.
1. Purpose of Personal Information Processing
“company” utilizes the personal information collected for the purposes described below. Personal information that is handled is not used for purposes other than those stated below. If there is any change to the purpose of use, prior consent will be sought.
-
A. Website membership management
Identification, authentication for service provision, membership maintenance, identification in accordance with the limited verification of identity system, and prevention of illegal use of service. -
B. Handling of civil applications
Personal information may be used for the purpose of identifying applicants, checking application details, contacting for fact checking, and notifying the results. -
C. Provision of materials or services
Personal information may be used for service provision purposes. -
D. Use for marketing and advertisement
Personal information may be used for the purpose of checking of validity of services, grasping of access frequency, and statistical reference of members’ service use.
2. Present status of personal information files
- Personal information file name: Personal information
- Personal information items: E-mail, mobile phone no., company telephone no., title, department, company name, access log, access IP info., and legal representative’s name
- How to collect info.: Website
- Reason for retention: Agreement to personal information use
- Retention period: 3
- Related laws: Records regarding the collection, processing, and use of credit information: 3 years; Records of consumer complaints or dispute settlements: 3 years; Records of contracts or application withdrawal: 5
3. Period of personal information processing and retention
- “company” processes and retains personal information during the designated period of use as agreed upon with the information object and according to laws concerning the retention and use period of personal information.
-
The period of personal information processing and retention depending on the service type is as follows:
- <Civic service>
- Personal information related to <civic service provision> is retained and used for the aforesaid purposes for 3 years from the date of agreement to the collection and use of personal information.
- Reason for retention: Agreement to personal information use
- Related laws: (1) Records of consumer complaints or dispute settlements: 3 years; (2) Records of contracts or application withdrawal: 5
- Reason for exception: (if any)
4. Provision of personal information to a third party
- “company” may provide a third party with personal information only when the personal information object agrees to it and such is in accordance with specific laws or regulations such as Articles 17 and 18 of the Personal Information Protection Act.
-
“company” may provide personal information to a third party in the following cases:
- Those who are provided with personal information: “company”
- Purpose of the receiver’s use of personal information: E-mail, mobile phone no., company telephone no., title, department, company name, and legal representative’s name
- Purpose of the receiver’s retention and use of personal information: 3
5. Rights and duties of the information object and legal representative as well as how to exercise the rights
As a personal information object, a user may exercise the following rights:
- An information object may exercise the right to request “company” for opening, correction, deletion, and suspension of use of personal information anytime.
- The act of exercising the rights may be implemented in writing or via e-mail or fax. In response, “company” will take measures accordingly without delay.
- The rights may be exercised through a legal representative or an entrusted individual. In this case, the user shall submit a letter of attorney using the required form.
- The right to request opening or suspension of use may be restricted in accordance with relevant articles of the Personal Information Protection Act.
- Deletion requests may not be accepted where relevant law specifies items as a basic requirement.
6. Personal information items to be handled
“company” handles the following personal information items:
- <Civic service>
- Required items: E-mail, mobile phone no., company telephone no., title, department, company name, and legal representative’s name and mobile phone no.
- Optional items: (if any)
7. Disposal of Personal Information
Once the purpose of handling personal information is fulfilled, “company” destroys the personal information without delay, in principle. Personal information is deleted using the following procedure and method:
- Deletion Procedures: Information entered by a user is transferred to a separate DB once its purpose is fulfilled and then destroyed after the designated period in accordance with internal directions or related laws.
- Information Disposal: Personal information is destroyed within 5 days of the final date of retention if the retention period expires and within 5 days when it becomes unnecessary (service termination, completion of business, etc.).
- Disposal Method: Electronic files are deleted by a technical method that makes opening the file impossible.
8. Installation, operation, and denial of devices automatically collecting personal information
“company” does not use “cookies” that save and frequently load an information object’s use logs.
9. Person in charge of protecting personal information
-
In order to manage duties regarding personal information as well as handle complaints and remedies,
“company” designates the following person in charge of protecting personal information:
- Name:
- Title:
- Position:
- Contact Info.:
- An information object may inquire with the personal information protection manager and responsible department. “company” will provide an answer without delay.
10. Change to privacy policy
The present privacy policy comes into effect on the enforcement date. When there is any addition, deletion, or correction of a provision according to related laws or regulations, such shall be notified at least 7 days before its application.
11. Measures for personal information security
According to Article 29 of the Personal Information Protection Act, “company” takes technical, managerial, and physical measures for information security as follows:
- “company” designates the minimal number of employees in charge of handling personal information.
- Technical measures for hacking, etc.: security programs are installed/updated/checked; restricted-area security is supervised technically and physically.
- Personal information encryption: passwords are encrypted; additional security functions (encryption/file locking) are applied where needed.
- Retention of access logs and forgery prevention: logs are kept for at least 6 months; security functions prevent forgery/leak/loss.
- Control of unauthorized individuals’ access: personal information is kept in a physically separate place; access control procedures are established and operated.