'www.sangshinec.com' (hereinafter referred to as Sangshin Elecom) has established the following policy to protect and respect the privacy and rights of users in accordance with the Personal Information Protection Act, and to handle user complaints related to personal information effectively. If Sangshin Elecom revises its privacy policy, it will notify users through website announcements (or individual notices).

 

This policy is effective from October 1, 2018.

 

1.         Purpose of Personal Information Processing

Sangshin Elecom processes personal information for the following purposes. The processed personal information will not be used for any other purpose beyond the scope of the following purposes, and if the purpose of use is changed, prior consent will be obtained.

 

2.        Status of Personal Information Files

Personal information file name: Email address (no separate document) for responding to inquiries

-       Personal information items: Email

-       Collection method: Website

-       Basis for retention: For answering inquiries

-       Retention period: Semi-permanent (for answering inquiry content)

 

3.        Processing and Retention Period of Personal Information

A.       Sangshin Elecom retains and processes personal information within the period specified by law for retaining and using personal information or within the agreed-upon period of retention and use obtained from the information subject when collecting personal information.

B.       The processing and retention periods for each category of personal information are as follows: <Handling of customer inquiries>: Personal information related to handling customer inquiries will be collected and used from the date of consent and will be retained and used for the purpose stated above until it is no longer necessary (until answering the inquiry and providing customer support, if necessary).

 

4.        Provision of Personal Information to Third Parties

Sangshin Elecom does not provide personal information to third parties outside the scope of the "purpose of personal information processing" without the consent of the information subject or special provisions under the law for personal information protection, or other relevant laws and regulations.

 

5.        Outsourcing of Personal Information Processing

Sangshin Elecom does not outsource personal information processing tasks.

 

6.        Rights and Obligations of the Information Subject and Legal Representative, and Methods of Exercising Them Users, as information subjects, have the following rights and may exercise them:

A.       Information subjects may exercise their rights to access, correct, delete, and suspend the processing of personal information at any time with respect to Sangshin Elecom.

B.       The exercise of rights under paragraph 1 may be made in writing, by electronic mail, fax, etc., in accordance with Article 41(1) of the Enforcement Rules of the Personal Information Protection Act, and Sangshin Elecom will take prompt action in response. (Email: hcmoon@sangshine.com, Fax: 044-865-9000)

C.       The exercise of rights under paragraph 1 may be done through a legal representative or a proxy who has been delegated. In this case, the information subject must submit a power of attorney according to the format specified in Annex 11 of the Enforcement Rules of the Personal Information Protection Act.

D.       The right to access and the right to request the suspension of processing under paragraph 1 may be restricted in accordance with Article 35(5) and Article 37(2) of the Personal Information Protection Act.

E.       If the personal information is specified as the collection target by other laws, the request for correction or deletion of personal information cannot be made.

F.        Sangshin Elecom verifies whether the person who made the request, such as request for reading, correction or deletion, or suspension of processing according to the rights of the information subject, is the person or a legitimate agent.

 

7.         Write the items of personal information to be processed
Sangshin Elecom processes only the following e-mail addresses for customer responses as personal information items.

 

8.        Destruction of personal information - In principle, Sangshin Elecom destroys the personal information without delay when the purpose of processing personal information is achieved. The procedure, deadline and method of destruction are as follows.

§   Destruction procedure: After achieving the purpose, the information entered by the user is transferred to the DB (e-mail address book) when necessary (customer management) and stored for a certain period of time or immediately destroyed (deleted) according to internal policies and other related laws. At this time, the personal information transferred to the DB will not be used for any other purpose unless it is required by law.

§   Destruction period: When the personal information of the user becomes unnecessary, such as the achievement of the purpose of processing personal information, the abolition of the relevant service, or the termination of the business, the personal information is destroyed (deleted) as soon as it is recognized that the processing of personal information is unnecessary.

§   Destruction method: E-mail address deletion

 

9.        Matters concerning the installation, operation, and refusal of automatic personal information collection devices. Sangshin Elecom does not use 'cookies' that store and frequently retrieve usage information of information subjects.

 

10.      Personal information protection manager

A.       Sangshin Elecom is responsible for overall handling of personal information, and designates a personal information protection manager as follows for the handling of complaints and damage relief of information subjects related to personal information processing are doing.

Person in charge of personal information protection
Name: Moonkyu Choi
Position: Team leader
Contact: 044-865-9000, hcmoon@sangshinec.com

※ Ask for the person in charge of personal information protection.

 

Department in charge of personal information protection

ü  Department: IT Team

ü  Person in charge: Moonkyu Choi

ü  You can contact the person in charge of personal information protection and the department in charge for all personal information protection related inquiries, complaint handling, damage relief, etc. Sangshin Elecom will answer and process inquiries from information subjects without delay.

 

11.       Change of Privacy Policy

A.       This personal information processing policy is applied from the enforcement date, and if there is an addition, deletion or correction of changes in accordance with laws and policies, it will be notified through notices 7 days before the implementation of the changes.

 

12.      Measures to ensure the safety of personal information Sangshin Elecom takes the following technical/managerial and physical measures necessary to secure safety in accordance with Article 29 of the Personal Information Protection Act.

A.       Regular self-audit

In order to secure stability related to personal information handling, we conduct regular self-audits (once a quarter)

B.       Restriction of access to personal information

We take necessary measures to control access to personal information by granting, changing, or canceling access rights to the database system that handles personal information, and we control unauthorized access from outside by using an intrusion prevention system. (Access to/management of personal information is managed by the person in charge of personal information.)

C.       Access control for unauthorized persons

We set up a separate physical storage location for personal information and establish and operate access control procedures for it.