All personal information handled Girin Inc. is collected, retained and processed in compliance with related laws on the protection of personal information, including the Personal Information Protection Act.
Labeling of major items of personal information
-
Items of personal information·Purpose of processing·Period of retention
-
The personal information provided to any third party
-
Entrusted processing of personal information
-
Personal Information Protection Manager and Officer
-
Rights·obligations of information holders, and exercising of rights
-
Destruction of personal information
-
Measures to ensure safety of personal information
-
Matters concerning installation, operation and rejection of automatic personal information collecting device
-
Handling of infringement of rights
-
Change of processing policy
Contents
The privacy policy of Girin Inc. is structured as follows:
※ Click on each item in the table of contents to navigate to the corresponding section.
- 1. Items of personal information·Purpose of processing·Period of retention
Corporation collects and processes personal information for the following purpose. The processed personal information shall not be used for purposes other than the specified purpose, and user consent shall be obtained in the event of a change in purpose.
- 2. The personal information provided to any third party
The personal information collected and processed by the corporation shall not be provided to any third party without user consent, except in cases specified in the following subparagraphs.
- Where separate consent has been obtained from data subjects
- Where it is deemed explicitly necessary to protect, from impending danger, the life, body or property of a data subject or a third party when the data subject or his/her legal representative is incapable of communicating intention or it is impossible to obtain prior consent due to unknown addresses, etc.
- Where personal information is provided in a manner that makes it impossible to identify a specific person, as necessary for compiling statistics, academic research, etc.
- Where it is impracticable to perform relevant duties provided for in other statutes unless personal information is provided for any purpose other than its original purpose or is provided to a third party, with the relevant case having been deliberated on and determined by the Personal Information Protection Commission
- Where it is necessary to provide personal information to a foreign government or an international organization to implement treaties or other international agreements
- Where it is necessary to investigate a crime and to file and undergo prosecution
- Where it is necessary for a court to proceed with a trial
- Where it is necessary to enforce a sentence, custody or protective order that has been imposed
- Where stipulated by law or where necessary to comply with legal obligations
- 3. Entrusted processing of personal information
- The corporation entrusts the processing of personal information as follows to ensure the smooth handling of such information.
- The corporation entrusts the processing of personal information as follows to ensure the smooth handling of such information. Any changes to the recipient or details of entrustment shall be disclosed through this privacy policy.
- 4. Personal Information Protection Manager and Officer
- The corporation appoints a personal information protection manager and an officer to oversee the tasks related to the processing of personal information and to handle complaints and remedies concerning personal information processing.
- Data subjects (users) can contact the personal information protection manager for any inquiries, complaints, or remedies related to the protection of personal information that may arise while using the Corporation services (or business).
- 5. Rights·obligations of information holders, and exercising of rights
Information holders can exercise rights at any time, including requests to view, modify, delete, or suspend processing of personal information provided to the Corporation.
- Personal information can be viewed or modified by contacting the privacy officer and person-in-charge via a written request, e-mail, or fax. Requests shall be promptly addressed after identity verification.
- Personal information shall not be used or provided until corrections requested by information holders have been reflected.
- Information holders may withdraw their consent to the collection and use of personal information, and request deletion or suspension of processing. Such requests shall be promptly addressed by the privacy officer and person-in-charge after identity verification.
- 6. Destruction of personal information
Corporation shall promptly destroy personal information for which the period of retention has expired or the purpose of processing has been achieved. If personal information is to be retained thereafter pursuant to related law, such information shall be transferred to a separate database or stored in a separate location.
- Destruction procedures
- Personal information for which the period of retention has passed shall be promptly destroyed on the end date.
- Personal information files shall be promptly destroyed when the processing of personal information is deemed unnecessary due to attainment of specified purpose, abolishment of related services, or end of business.
- Method of destruction
- Corporation shall use low-level formatting to prevent restoration of personal information stored in electronic form, and shred or burn personal information stored as paper documents.
- 7. Measures to ensure safety of personal information
Girin takes the necessary measures, as provided below, to ensure safety when processing personal information.
- Managerial measures : Establishment and implementation of internal management plans, regular education on privacy protection of members, etc.
- Technical measures : Management of access rights to personal information processing system, encryption, installation of security program, etc.
- Physical measures : Access control to places where personal information is stored, such as computer room and archives
- 8. Matters concerning installation, operation and rejection of automatic personal information collecting device
Girin uses cookies to save and read information on use of the website by information holders. Cookies are small blocks of information sent by the server (HTTP) to users’ web browsers and stored in their hard drives.
- Purpose of cookies
Cookies are used to analyze frequency and time of visit, determine interests of information holders, and track user activity.
- How to block cookies
- Information holders have the right to choose whether or not to allow cookies. Web browsers can be set to allow all cookies, to ask every time when accepting cookies, or to block all cookies.
- Browser settings
- (Edge browser) : At the top, click Settings > Cookies and site data > Allow sites to save and read cookie data (recommended)
- (Chrome browser) : At the top right, click More > Settings > Advanced > Privacy and security > Site settings > Cookies > Allow sites to save and read cookie data (recommended)
- 9. Handling of infringement of rights
Information holders may request dispute resolution or counseling to the Personal Information Dispute Mediation Committee or KISA Personal Information Infringement Report Center to seek remedy for damages caused by privacy infringement.
- Personal Information Dispute Mediation Committee : 1833-6972, (www.kopico.go.kr)
- Personal Information Infringement Report Center : (Without country code) 118, (privacy.kisa.or.kr)
- Cybercrime Investigation Division, Prosecution Service : (Without country code) 1301, (www.spo.go.kr)
- Cyber Investigation Bureau, Korea National Police Agency : (Without country code) 182, (cyberbureau.police.go.kr)
- 10. Change of processing policy
- This privacy policy will take effect from August 16, 2023.