Privacy Policy
Privacy Policy
〈JL Heavy Industry Co., Ltd.〉 establishes and discloses the following personal information processing policy to protect the personal information of data subjects and to handle related grievances quickly and smoothly in accordance with Article 30 of the 「Personal Information Protection Act」
This personal information processing policy is effective from May 2, 2018.
Revision date: May 2, 2018
Article 1 Purpose of Processing Personal Information
JL Heavy Industry Co., Ltd.〉 processes personal information for the following purposes:
The personal information being processed is not used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the “Personal Information Protection Act”.
| Processing purpose: |
|---|
| Security report investigation |
Article 2 Processing and Retention Period of Personal Information
① 〈JL Heavy Industry Co., Ltd.〉 processes and retains personal information within the personal information retention and use period stipulated by law or the personal information retention and use period agreed upon when collecting personal information from the data subject.
② The processing and retention period for each personal information is as follows:
| Processing and retention period | Retention basis |
|---|---|
| 6 months | Reply after processing the report details |
Article 3 Items of Personal Information Processed
〈JL Heavy Industry Co., Ltd.〉 processes the following personal information items:
| Category | Personal Information Items |
|---|---|
| Required items | Name, contact information, email |
| Optional items | None |
Article 4 Provision of Personal Information to Third Parties
JL Heavy Industry Co., Ltd.〉 processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only in cases falling under Articles 17 and 18 of the “Personal Information Protection Act”, such as with the consent of the data subject or special provisions of the law.
Article 5 Outsourcing of Personal Information Processing
① 〈JL Heavy Industry Co., Ltd.〉 outsources personal information processing tasks as follows for smooth personal information business processing:
| Purpose | Trustee (Outsourced party) | Details of outsourced task | Outsourcing period |
|---|---|---|---|
| System operation and maintenance | - | System operation and maintenance | 6 months |
② When concluding an outsourcing contract, 〈JL Heavy Industry Co., Ltd.〉 specifies matters such as prohibition of personal information processing other than for the purpose of performing the outsourced task, technical and managerial protection measures, restrictions on re-outsourcing, management and supervision of the trustee, and liability for damages in documents such as contracts in accordance with Article 26 of the “Personal Information Protection Act”, and supervises whether the trustee processes personal information safely.
③ If the content of the outsourced task or the trustee changes, we will disclose it without delay through this personal information processing policy.
Article 6 Procedures and Methods for Destruction of Personal Information
① 〈JL Heavy Industry Co., Ltd.〉 destroys the relevant personal information without delay when personal information becomes unnecessary, such as the expiration of the personal information retention period or the achievement of the processing purpose.
② Even if the personal information retention period agreed upon by the data subject has elapsed or the processing purpose has been achieved, if it is necessary to continue preserving personal information in accordance with other laws, the relevant personal information will be moved to a separate database (DB) or preserved in a different storage location.
③ The procedures and methods for destroying personal information are as follows:
1. Destruction procedure
〈JL Heavy Industry Co., Ltd.〉 selects personal information for which destruction reasons have occurred and destroys personal information with the approval of ‘s personal information protection officer.
2. Destruction method
For information in electronic file format, technical methods that cannot reproduce the records are used. Personal information printed on paper is destroyed by shredding or incineration.
Article 7 Rights and Obligations of Data Subjects and Legal Representatives and Methods of Exercise
① Data subjects can exercise rights such as personal information access, correction, deletion, and processing suspension requests to 〈JL Heavy Industry Co., Ltd.〉 at any time.
② The exercise of rights under Paragraph 1 can be done in writing, email, fax, etc., to 〈JL Heavy Industry Co., Ltd.〉 in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the “Personal Information Protection Act”, and 〈JL Heavy Industry Co., Ltd.〉 will take action without delay.
③ The exercise of rights under Paragraph 1 can be done through a legal representative of the data subject or a delegated person.
In this case, you must submit a power of attorney according to Form No. 11 of the “Notice on Personal Information Processing Methods (No. 2020-7)”.
④ Requests for personal information access and processing suspension may be restricted by the data subject’s rights under Article 35, Paragraph 4 and Article 37, Paragraph 2 of the “Personal Information Protection Act”.
⑤ Requests for correction and deletion of personal information cannot be made if the personal information is specified as a collection target in other laws.
⑥〈JL Heavy Industry Co., Ltd.〉 verifies whether the person requesting access, correction, deletion, or processing suspension is the person themselves or a legitimate representative.
Article 8 Matters Concerning Personal Information Security Measures
〈JL Heavy Industry Co., Ltd.〉 takes the following measures to ensure the safety of personal information:
① Conduct regular self-audits
We conduct self-audits regularly (once a quarter) to ensure the stability of personal information handling.
② Minimize and educate personal information handling staff
We implement measures to manage personal information by designating employees who handle personal information and limiting it to those in charge.
③ Establish and implement internal management plans
We establish and implement internal management plans for the safe processing of personal information.
④ Technical measures against hacking, etc.
To prevent personal information leakage and damage due to hacking or computer viruses, we install security programs, regularly update and check them, install systems in areas where access from outside is controlled, and technically/physically monitor and block them.
⑤ Encryption of personal information
Users’ personal information passwords are encrypted and stored and managed, so only the user knows them, and important data is encrypted for file and transmission data or uses separate security functions such as file locking.
⑥ Storage and prevention of falsification of access records
We keep and manage access records to the personal information processing system for at least 1 year, and use security functions to prevent access records from being falsified, stolen, or lost.>
⑦ Access restrictions on personal information
We take necessary measures to control access to personal information by granting, changing, and revoking access rights to the database system that processes personal information, and control unauthorized access from outside using an intrusion prevention system.
⑧ Use of locking devices for document security
We store documents and auxiliary storage media containing personal information in a safe place with locking devices.
⑨ Access control for unauthorized persons
We have a separate physical storage location for storing personal information and establish and operate access control procedures for it.
Article 9 Installation, Operation, and Refusal of Devices that Automatically Collect Personal Information
① 〈JL Heavy Industry Co., Ltd.〉 uses ‘cookies’ that store and frequently retrieve usage information to provide individual customized services to users.
② Cookies are small amounts of information sent by the server (http) used to operate the website to the user’s computer browser and may be stored on the hard disk of users’ PC computers.
1.
쿠키의 사용 목적 : 이용자가 방문한 각 서비스와 웹 사이트들에 대한 방문 및 이용형태, 인기 검색어, 보안접속 여부, 등을 파악하여 이용자에게 최적화된 정보 제공을 위해 사용됩니다.
2.
쿠키의 설치·운영 및 거부 : 웹브라우저 상단의 도구>인터넷 옵션>개인정보 메뉴의 옵션 설정을 통해 쿠키 저장을 거부 할 수 있습니다.
3.
쿠키 저장을 거부할 경우 맞춤형 서비스 이용에 어려움이 발생할 수 있습니다.
Article 10 Matters Concerning the Collection, Use, Provision, and Refusal of Behavioral Information
We do not collect, use, or provide behavioral information for online customized advertising, etc.
Article 11 Criteria for Determining Additional Use and Provision
〈JL Heavy Industry Co., Ltd.〉 may additionally use or provide personal information without the consent of the data subject, considering the matters stipulated in Article 14-2 of the “Enforcement Decree of the Personal
Information Protection Act” in accordance with Article 15, Paragraph 3 and Article 17, Paragraph 4 of the “Personal Information Protection Act”.
Accordingly, 〈JL Heavy Industry Co., Ltd.〉 has considered the following matters to make additional use or provision without the consent of the data subject:
① Whether the purpose of additional use or provision of personal information is related to the original purpose of collection
② Whether there is predictability for additional use or provision in light of the circumstances of personal information collection or processing practices
③ Whether the additional use or provision of personal information unfairly infringes on the interests of the data subject
④ Whether necessary measures for security, such as pseudonymization or encryption, have been taken
※ The criteria for determining considerations for additional use or provision are autonomously determined, written, and disclosed by the business operator/organization itself.
Article 12 Matters Concerning the Processing of Pseudonymized Information
〈JL Heavy Industry Co., Ltd.〉 does not process pseudonymized information.
Article 13 Matters Concerning the Personal Information Protection Officer
① 〈JL Heavy Industry Co., Ltd.〉 has designated a personal information protection officer as follows to take overall responsibility for personal information processing and to handle complaints and remedies related to personal information processing:
② Data subjects can inquire about all personal information protection-related inquiries, complaints, and damage relief that occur while using〈JL Heavy Industry Co., Ltd.〉’s services (or business) to the personal information protection officer and the responsible department.
〈JL Heavy Industry Co., Ltd.〉 will respond to and process inquiries from data subjects without delay.
| Personal Information Protection Officer | Personal Information Protection Manager |
|---|---|
|
□ Name: Kwon Yong-bok □ Position: Information Security Team Leader □ Rank: Department Head □ Contact: 055-632-2111 □ Email: ybkwon@jl-hi.co.kr |
□ Department: Information Security Team □ Person in charge: Lee Sang-bin, Manager □ Contact: 055-632-2111 □ Email: sblee@jl-hi.co.kr |
Article 14 Department Receiving and Processing Personal Information Access Requests
Data subjects can request access to personal information in accordance with Article 35 of the “Personal Information Protection Act” to the following department:
〈JL Heavy Industry Co., Ltd.〉 will strive to process personal information access requests from data subjects promptly.
| Department Receiving and Processing Personal Information Access Requests |
|---|
| □ Department: Information Security Team□ Person in charge: Lee Sang-bin, Manager □ Contact: 055-632-2111 □ Email: sblee@jl-hi.co.kr |
Article 15 Remedies for Infringement of Data Subject's Rights and Interests
Data subjects can apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, Korea Internet Security Agency Personal Information Infringement Reporting Center, etc., to receive remedies for personal information infringement.
For other reports and consultations regarding personal information infringement, please contact the following organizations:
1. Personal Information Dispute Mediation Committee: (No area code) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Reporting Center: (No area code) 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors’ Office: (No area code) 1301 (www.spo.go.kr)
4. National Police Agency: (No area code) 182 (ecrm.cyber.go.kr)
Those whose rights or interests have been infringed due to dispositions or inactions taken by the head of a public institution in response to requests under Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information), and Article 37 (Suspension of Processing of Personal Information, etc.) of the “Personal Information Protection Act” may file an administrative appeal in accordance with the Administrative Appeals Act.
※ For more information on administrative appeals, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).
Article 16 Changes to the Personal Information Processing Policy
① This personal information processing policy is effective from May 2, 2018.
