Personal information processing policy

Jinyoung Industrial Co., Ltd. (hereinafter referred to as the “Company”) processes and safely manages personal information in compliance with the Personal Information Protection Act and related statutes for the protection of freedom and rights of data subjects. In accordance with Article 30 of the Personal Information Protection Act, the personal information processing policy shall be established and disclosed as follows in order to guide the data subject on procedures and standards for processing personal information and to promptly and smoothly process the related grievances.

Article 1 (Purpose of Processing Personal Information)
The company will not use the collected personal information for any purpose other than the following purposes, and if the purpose of use changes, we will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
1. Access Management : For the purpose of corporate facilities and security management
2. Report: The purpose of preventing internal corruption and processing reports

Article 2 (Period of Processing and Retention of Personal Information)
1. The company collects and uses personal information to the minimum extent necessary to provide services in accordance with the Personal Information Protection Act.

1) Personal information items processed with the consent of the data subject
The company provides the following personal information items in accordance with Article 15 (1) 1 and Article 22 (1) 7 of the Personal Information Protection Act
We are processing it with the consent of the subject.
Holding and period of use of classified collection items
Access management (required) Name, mobile phone, and company name (optional) One year after the end of access to the vehicle number is destroyed
(Video information: Discard after 30 days)
Report (Optional) Immediately after achieving the purpose of the name, mobile phone, and e-mail

Article 3 (Providing Personal Information to a Third Party)
In principle, the company does not provide personal information to the outside world. However, it may be provided only in accordance with the law or at the request of the relevant agency.

Article 4 (Consignment processing of personal information)
The company does not entrust matters related to personal information.

Article 5 (Rights, Duties, and Methods of Exercise of Data Subjects)
1. A user may exercise his/her right to view, correct, delete, or suspend processing of personal information at any time. However, as prescribed by the relevant statutes, such as Articles 35 (4), 36 (1) and 37 (2) of the Personal Information Protection Act, the exercise of the right to read, correct, delete, or suspend processing of personal information may be restricted.
2. In accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, users’ rights can be exercised through e-mail, written documents, faxes, etc., and the company will take action without delay.
3. The exercise of rights under paragraph (1) may be done through an agent, such as a legal representative of a user or a person who has been delegated. In such cases, a power of attorney under attached Form 11 of the “Notice on the Method of Processing Personal Information” shall be submitted.
4. When requesting correction or deletion of personal information, if the personal information is specified as a collection target in other laws and regulations, the deletion cannot be requested.
5. The company verifies whether the person who made the request for access, correction or deletion, or access according to the user’s right is the person or a legitimate agent.

Article 6 (Destruction of Personal Information)
1. When personal information becomes unnecessary, such as the expiration of the retention period of personal information and the achievement of the purpose of processing, the company is aware of the situation
Destroy your personal information without a sieve.
2. Even though the period of retention of personal information agreed by the data subject has elapsed or the purpose of processing has been achieved
Where it is necessary to continue to preserve personal information pursuant to other statutes, the relevant personal information shall be separately stored in a database
Move to the DB or save it with a different storage location.
3. The procedures and methods for destroying personal information are as follows.
① Procedure for destruction: The company selects personal information in which the reason for destruction occurred, and the person in charge of personal information protection of the company
Destroy your personal information with approval.
② Method of destruction: The company shall destroy personal information recorded and stored in the form of electronic files so that the records cannot be reproduced
Then, the personal information recorded and stored in the paper document is shredded or incinerated with a grinder to destroy it.

Article 7 (Measures to ensure the safety of personal information)
The company takes the following measures to ensure the safety of personal information. However, the company is not responsible for any problems caused by the leakage of personal information due to the user’s own carelessness or internet or communication problems.
1. administrative measures
– An internal management plan has been established and implemented for the safe management of personal information handled by the company
– The Company shall limit personal information handlers to the minimum necessary for the performance of their duties, and shall regularly perform related personnel
We recognize the importance of personal information protection through administrative measures such as security education.
2. technical measures
– To prevent personal information from being leaked or damaged by hacking or computer viruses, etc.
We are doing our best (using the latest vaccine program, introducing information protection system equipment and solutions, and more)
Implementation of technical protection measures to ensure systematic security)
3. physical measures
– In order to prevent leakage and damage of personal information, the company establishes an access control system in the control area and controls access
We are establishing and operating procedures.