[Indication of Major Personal Information Processing]
General Personal Information Collection
※ For detailed items, please refer to the main text of the privacy policy.
Sensitive Information Collection
※ For detailed items, please refer to the main text of the privacy policy.
Personal Information Retention Period
※ If there is a legal obligation to retain information, it will be stored for the required duration.
Purposes of Personal Information Processing
※ For detailed items, please refer to the main text of the privacy policy.
Destruction of Personal Information
Personal Information Grievance-Handling Department
- Ha Joo-hyung (Executive Director)
- h.ha@haesungds.net
Article 1 (Purpose and Items of Personal Information Processing)
① The company collects and processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those stated below. In the event of a change in the purpose of processing, necessary measures such as obtaining separate consent in accordance with relevant laws will be taken.
Category | Mandatory/Optional | Processing Purpose | Category | Retention/Usage Period |
---|---|---|---|---|
Membership registration for the electronic purchasing system and new vendor registration | Mandatory | Use of the electronic purchasing system, identity verification, and personal identification, prevention of fraudulent use by problematic members and unauthorized use, confirmation of intent to join, checking membership status and frequency, record retention for future dispute resolution, handling complaints and other customer service issues, and delivery of notifications. | Name of the representative, date of birth, phone number, email, address | Until completion of use of the electronic purchasing system or achievement of processing purposes. |
Job Applications | Mandatory | Conducting the recruitment process, contacting applicants, and managing potential future hiring resources. | Photo, name, date of birth, phone number, email, educational background, certification information, language skills, awards, veteran information. | Until completion of the recruitment process or achievement of processing purposes. |
Process in accordance with the company's hiring confirmation. | Mandatory | Personnel management, including salary payment, provision of benefits, support for various tasks, and performance evaluations. | Photo, name, date of birth, gender, nationality, address, phone number, email, bank account number, residence type, military service and discharge information, veteran information, marital status and marriage date, emergency contact. | Until the achievement of processing purposes |
Article 2 (Processing and Retention Period of Personal Information)
① he company processes personal information within the period of retention and use for which consent has been obtained from the information subject when collecting personal information.
② The retention and processing periods for each type of personal information are as specified in Article 1. However, personal information will be retained until the end of the relevant reason in the following cases.
Article 3 (Provision of Personal Information to Third Parties)
Article 4 (Outsourcing of Personal Information Processing)
① The company outsources the processing of personal information as follows to facilitate smooth personal information management.
Outsourcee (Trustee) | Consigned task | Retention and Use Period |
---|---|---|
Chaeumsoft | Website operation and management | Until the end of the website operation contract |
KCS | Server and database management | Until the end of the server management contract. |
② In accordance with the Personal Information Protection Act, the company includes the following in contracts and other documents: prohibition of personal information processing beyond the purpose of performing outsourced work, implementation of technical and managerial protective measures, restrictions on subcontracting, management and supervision of the trustee, and liability for damages. The company also monitors the trustee to ensure the safe processing of personal information.
③ In the event of changes to the content of the outsourced work or the trustee, the company will promptly disclose this through the personal information processing policy.
Article 5 (Destruction of Personal Information)
① The company shall promptly destroy personal information when it is no longer necessary due to the expiration of the retention period or the achievement of the purpose of processing.
② If the retention period for personal information agreed upon by the data subject has expired or the purpose of processing has been achieved, but the company is required to retain the personal information in accordance with other laws, the relevant personal information will be transferred to a separate database (DB) or stored in a different location.
③ The procedures and methods for the destruction of personal information are as follows:
Article 6 (Rights, Obligations, and Methods of Exercise by the Data Subject)
① The data subject may exercise the following rights related to personal information protection against the company at any time:
② The exercise of rights as stated in paragraph 1 can be made to the company via written communication, telephone, email, or fax. The company will take the necessary action within 10 days from the date of exercising the rights unless there is a justifiable reason for the delay. If there are grounds for rejection or limitation, the company will inform you of those reasons and how to appeal within 5 days.
③ The exercise of rights as stated in paragraph 1 can be done through a representative, such as the legal representative of the data subject or a person who has been delegated authority. In such cases, one must submit a power of attorney in accordance with the format specified in Annex 11 of the "Notification on Methods of Handling Personal Information”.
④ If the data subject requests correction or deletion due to personal information errors, the company will not use or provide such personal information until the correction or deletion is completed.
⑤ Requests for access, correction, deletion, cessation of processing, and withdrawal of consent regarding personal data may be restricted in accordance with relevant laws and regulations.
⑥ The company verifies whether the request to exercise the rights is made by the data subject themselves or by a legitimate representative.
Article 7 (Measures to Ensure the Security of Personal Information)
Article 8 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)
① The company uses "cookies" to store and retrieve usage information to provide users with individualized personalized services.
② Cookies are small amounts of information sent from the server (http) that operates the website to the user's computer browser, and they may be stored on the hard disk of the user's PC.
Article 9 (Collection, Use, and Refusal of Behavioral Information)
① The company collects and uses behavioral information for the improvement and development of services, user analysis, and the provision of customized services.
② The company collects behavioral information as follows.
Items of behavioral information collected | Methods of collecting behavioral information | Purpose of collecting behavioral information | Retention and use period, and subsequent information processing methods |
---|---|---|---|
Browser type and OS of the user, visit records (IP Address, access time) | Automatically collected when users visit the website | Improvement and development of services, user analysis, and provision of customized services. | Retention and disposal after 3 years from the date of collection. |
③ Behavioral information is automatically collected and stored during the service usage process.
④ The company collects only the minimum necessary behavioral information and does not collect sensitive behavioral information that may significantly infringe upon individual rights, interests, or privacy. Furthermore, it does not use behavioral information in a form that can identify individuals when combined with personal information.
⑤ Users can collectively block or allow the collection of behavioral information by changing cookie settings as outlined in Article 8, Paragraph 2, Item 2.
Article 10 (Personal Information Protection Manager)
① The company takes overall responsibility for personal information processing and has appointed a personal information protection manager and department to handle inquiries, complaints, and remedies of data subjects related to personal information processing, as follows.
② Data subjects may contact the personal information protection manager and department regarding any inquiries, complaints, or remedies related to personal information protection arising from their use of the company’s services. The company will respond to and address inquiries from data subjects without delay.
Article 11 (Remedies for Infringement of Data Subject Rights)
Article 12 (Changes to the Privacy Policy)
① This Privacy Policy is effective from November 24, 2023.
② Previous versions of the Privacy Policy can be viewed by clicking on this link.