개인정보처리방침

<div class="policy_idx_wrap" data-policy-year="2022"> <div class="policy_idx_header"> <p class="policy_notice"> Samsung C&T Corporation (hereinafter referred to as “Company”) establishes and discloses the Personal Information Management Policy(also referred to as “Privacy Policy”) as below to protect the personal information of data subjects and resolve any relevant inquiries or complaints in a swift and smooth manner pursuant to Article 30 of the Personal Information Protection Act. </p> </div> <div class="policy_idx"> <ul> <li> <a href="#EN-2022-id01"> <dl> <dt>Article 1.</dt> <dd>Purposes of Processing of Personal Information</dd> </dl> </a> </li> <li> <a href="#EN-2022-id02"> <dl> <dt>Article 2.</dt> <dd>Processing of Personal Information and Period of Retention</dd> </dl> </a> </li> <li> <a href="#EN-2022-id03"> <dl> <dt>Article 3.</dt> <dd>Provision of Personal Information to Third Party</dd> </dl> </a> </li> <li> <a href="#EN-2022-id04"> <dl> <dt>Article 4.</dt> <dd>Outsourcing and Overseas Transfer of Personal Information Processing</dd> </dl> </a> </li> <li> <a href="#EN-2022-id05"> <dl> <dt>Article 5.</dt> <dd>Rights and Obligations of Data Subjects and<br>Legal Representatives and Exercising thereof</dd> </dl> </a> </li> <li> <a href="#EN-2022-id06"> <dl> <dt>Article 6.</dt> <dd>Processed Personal Information and Processing Method</dd> </dl> </a> </li> <li> <a href="#EN-2022-id07"> <dl> <dt>Article 7.</dt> <dd>Destruction of Personal Information</dd> </dl> </a> </li> <li> <a href="#EN-2022-id08"> <dl> <dt>Article 8.</dt> <dd>Measures to Ensure Safety of Personal Information</dd> </dl> </a> </li> <li> <a href="#EN-2022-id09"> <dl> <dt>Article 9.</dt> <dd>Installation and Operation of Automatic Personal Information Collection Tool Rejection thereof</dd> </dl> </a> </li> <li> <a href="#EN-2022-id10"> <dl> <dt>Article 10.</dt> <dd>Personal Information Protection Manager</dd> </dl> </a> </li> <li> <a href="#EN-2022-id11"> <dl> <dt>Article 11.</dt> <dd>Request for Access to Personal Information</dd> </dl> </a> </li> <li> <a href="#EN-2022-id12"> <dl> <dt>Article 12.</dt> <dd>Remedial Procedure for Infringement of Rights</dd> </dl> </a> </li> <li> <a href="#EN-2022-id13"> <dl> <dt>Article 13.</dt> <dd>Revision of Personal Information Management Policy</dd> </dl> </a> </li> </ul> </div> </div> <div class="policy_wrap" data-policy-year="2022"> <dl id="EN-2022-id01"> <dt> <h3 class="__sub-headline2"> <em>Article 1.</em> Purposes of Processing of Personal Information </h3> </dt> <dd> <p>The Company collects and processes minimal information for the following purposes. The personal information that is processed is only used for purposes that are specified below, and the Company is to take necessary measures if the purposes of use are revised, such as obtaining additional consent as per Article 18 of the Personal Information Protection Act.</p> <p class="txt-indent-custom"><span>①</span>Processing of customer inquiries : Personal information is processed to identify the inquiring customer, check the information in the inquiry, contact/notify the customer for fact finding, notify the customer of the result, etc.</p> <p class="txt-indent-custom"><span>②</span>Handling a report on violation of a law : Personal information is processed to handle a complaint about violation of a law and notify the complainant of the result.</p> </dd> </dl> <dl id="EN-2022-id02"> <dt> <h3 class="__sub-headline2"> <em>Article 2.</em> Processing of Personal Information and Period of Retention </h3> </dt> <dd> <p class="txt-indent-custom"><span>①</span>The Company processes and retains personal information for the period of retention/use of personal information as specified in the Company’s policy or agreed upon by the data subjects when collecting the personal information.</p> <div class='sub_info'> <p class="txt-indent-custom"><span>②</span>The periods of processing and retention for each purpose are as below.</p> <ul> <li> <p class="txt-indent-custom"><span>1.</span>Customer inquiry: retained until one (1) year after the customer inquiry is processed or immediately upon the customer’s request</p> </li> <li> <p class="txt-indent-custom"><span>2.</span>Report on violation of a law: retained until one (1) year after the complaint about violation of a law has been handled or immediately upon the customer’s request</p> </li> <li> <p class="txt-indent-custom"><span>3.</span>For the period of time specified below for the following purpose</p> <ul> <li> <p class="txt-indent-custom"><span>1)</span>Retention of the communication confirmation data pursuant to the Protection of Communications Secrets Act</p> </li> <li> <p>- Computer communications, Internet log records and data on tracing a location of connectors: three (3) months</p> </li> </ul> </li> </ul> </div> </dd> </dl> <dl id="EN-2022-id03"> <dt> <h3 class="__sub-headline2"><em>Article 3. </em>Provision of Personal Information to Third Party</h3> </dt> <dd> <p>The Company processes the personal information of data subjects only for the purposes stipulated in Article 1 (Purposes of Processing of Personal Information), and provides personal information to a third party only when applicable to Article 17 and 18 of the Personal Information Protection Act, such as where the consent is obtained from the data subjects, where special provisions exist, etc.</p> </dd> </dl> <dl id="EN-2022-id04"> <dt> <h3 class="__sub-headline2"> <em>Article 4. </em> Outsourcing and Overseas Transfer of Personal Information Processing </h3> </dt> <dd> <p class="txt-indent-custom"><span>①</span>The Company outsources the processing of personal information as below for smooth job performance.</p> <div class='tbl_wap'> <table> <colgroup> <col style='width: 50%;'> <col style='width: 50%;'> </colgroup> <thead> <tr> <th>Outsourced company</th> <th>Outsourced task</th> </tr> </thead> <tbody> <tr> <td>Does Interactive</td> <td>Website maintenance and management</td> </tr> <tr> <td>Samsung SDS</td> <td>Database maintenance and management</td> </tr> <tr> <td>Google LLC</td> <td>Website user activity analysis</td> </tr> <tr> <td>IR Kudos</td> <td>Operation, maintenance, and management of IR services solution</td> </tr> </tbody> </table> </div> <p class="txt-indent-custom"><span>②</span>Pursuant to Article 26 of the Personal Information Protection Act, the Company states the following responsibilities in documents, such as contracts, and monitors if the outsourced company processes personal information in a safe manner: prevention of personal information processing for other purposes than the outsourced purpose; technical and managerial safeguards; limitation to secondary outsourcing; management and supervision for the outsourced company; compensation of damage, etc.</p> <p class="txt-indent-custom"><span>③</span>To provide the website’s services and enhance user convenience, some personal information may be transferred to and retained by an overseas company.</p> <div class="sub_info"> <div class="sub_item"> <dl> <dt>• Company name/contact information: Google LLC(https://analytics.google.com/)</dt> <dd> <p>- Country: United States of America</p> <p>- Timing and method of transfer: Transmitted via electronic network upon visitors’ use of the website’s services</p> <p>- Information transferred: Cookies, device/browser-related data, IP address, site/app activity information (personally identifiable information not included)</p> <p class="txt-indent-custom"> <span>-</span> Purpose, period of retention/use: Collected information is used to generate statistics on user interactions within the website (IP addresses are transferred in secure manner, and used to identify country of access). Such user/event information is retained for 38 months </p> </dd> </dl> </div> </div> <p class="txt-indent-custom"><span>④</span>Changes in the outsourced task or outsourced company will be immediately disclosed through the Personal Protection Management Policy. </p> </dd> </dl> <dl id="EN-2022-id05"> <dt> <h3 class="__sub-headline2"> <em>Article 5.</em> Rights and Obligations of Data Subjects and Legal Representatives and Exercising thereof </h3> </dt> <dd> <p class="txt-indent-custom"><span>①</span>Data subjects may exercise their rights, such as access to, revision or deletion of personal information and request for suspension of processing, against the Company at any time.</p> <p class="txt-indent-custom"><span>②</span>Data subjects may exercise their rights stipulated in Paragraph 1 by submitting a writing, e-mail, etc. to the Company pursuant to Article 41-1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action immediately.</p> <p class="txt-indent-custom"><span>③</span>The rights stipulated in Paragraph 1 may also be exercised by the legal representatives of data subjects, those delegated by the data subjects, or other representatives. In such case, a power of attorney shall be submitted in the form of Attachment No. 11 of the Public Notice on Processing of Personal Information (No. 2020-7).</p> <p class="txt-indent-custom"><span>④</span>The rights of data subjects to have access to the personal information or request the suspension of processing may be restricted pursuant to Article 35-4 and Article 37-2 of the Personal Information Protection Act.</p> <p class="txt-indent-custom"><span>⑤</span>As for the edit or deletion of personal information, deletion cannot be performed if the piece of personal information is stated as an item to be collected in other laws.</p> <p class="txt-indent-custom"><span>⑥</span>In case of a request to have access to, edit, delete, or suspend the processing of personal information based on the rights of data subjects, the Company identifies if the requester is a data subject or a legitimate representative.</p> </dd> </dl> <dl id="EN-2022-id06"> <dt> <h3 class="__sub-headline2"> <em>Article 6. </em> Processed Personal Information and Processing Method </h3> </dt> <dd> <p class='exp'>The Company processes the following personal information..</p> <p class="txt-indent-custom"><span>1.</span>Processed personal information</p> <div class='tbl_wap'> <table> <colgroup> <col style="width: 33.333%;"> <col style="width: 33.333%;"> <col style="width: 33.333%;"> </colgroup> <thead> <tr> <th>Category</th> <th>Required information</th> <th>Optional</th> </tr> </thead> <tbody> <tr> <td>Processing of customer inquiries</td> <td>E-mail</td> <td>N/A</td> </tr> <tr> <td>Handling reports on violation of a law</td> <td>N/A</td> <td>Name, e-mail and contact number</td> </tr> <tr> <td>Information that is generated and collected while using the service</td> <td colspan="2">IP address, cookies, service use log</td> </tr> <tr> <td>Phone inquiries(IR)</td> <td>Phone/mobile number, recording of call</td> <td>Name</td> </tr> </tbody> </table> </div> <p class="txt-indent-custom"><span>2.</span>Method of collecting personal information</p> <p>- Accessing and using the website via www.samsungcnt.com, news.samsungcnt.com</p> </dd> </dl> <dl id="EN-2022-id07"> <dt> <h3 class="__sub-headline2"> <em>Article 7.</em> Destruction of Personal Information </h3> </dt> <dd> <p class="txt-indent-custom"><span>①</span>The Company destroys personal information without delay when the personal information becomes unnecessary owing to the expiry of the retention period, attainment of the purpose of processing, etc.</p> <div class="sub_info"> <p class="txt-indent-custom"><span>②</span>The procedure and method of destroying personal information are as below.</p> <ul> <li> <p class="txt-indent-custom"><span>1.</span>Procedure for destroying : Personal information that has become unnecessary is sorted, and the personal information is destroyed under the responsibility of the personal information protection manager as per the procedure in the internal policy.</p> </li> <li> <p class="txt-indent-custom"><span>2.</span>Method of destroying : The Company destroys electronically recorded or retained personal information in a way that the information is irretrievable. In case the personal information is recorded and retained as a paper document, the Company destroys the document by shredding it with a shredder or burning it.</p> </li> </ul> </div> </dd> </dl> <dl id="EN-2022-id08"> <dt> <h3 class="__sub-headline2"> <em>Article 8.</em>Measures to Ensure Safety of Personal Information </h3> </dt> <dd> <p class='exp'>The Company takes the following measures to ensure the safety of personal information.</p> <p class="txt-indent-custom"><span>1.</span>Managerial measures : establishment and implementation of internal management plans, regular employee training, etc.</p> <p class="txt-indent-custom"><span>2.</span>Technical measures : control on the access to the personal information processing system, etc., installation of an access prohibition system, encryption of personally identifiable information and installation of antivirus software</p> <p class="txt-indent-custom"><span>3.</span>Physical measures : prohibition on the access to the computer room, data storage room, etc.</p> </dd> </dl> <dl id="EN-2022-id09"> <dt> <h3 class="__sub-headline2"> <em>Article 9. </em> Installation and Operation of Automatic Personal Information Collection Tool and Rejection thereof </h3> </dt> <dd> <p class="txt-indent-custom"><span>①</span>The Company uses cookies that store and constantly bring usage information to provide tailored services to the users.<p> <div class="sub_info"> <p class="txt-indent-custom"><span>②</span>Cookies are small text files that are sent from the server (http) used in operating the website to the users’ browsers, and can be stored on the hard disk drive of the users’ computers.</p> <p class="txt-indent-custom"><span>③</span> The Company utilizes Google Analytics, a service provided by Google LLC (“Google”), to analyze visitors’ use of the website.<br> Information generated via Google Analytics is subject to the privacy policy of Google, and is transferred to and retained in Google’s servers located in the US. Google, on behalf of the Company, processes the information to evaluate user activity within the website.<br> It generates reports on such activity and provides other services in relation to use of the Internet.<br> While users may reject the collection of cookies for the aforementioned purpose by changing their browser settings, in such a case, they may not be able to fully utilize the functions provided by the website.<br> Users may opt-out of having information on their site activity (such as IP addresses) collected and processed by installing the following browser add-on from tools.google.com/dlpage/gaoptout.<br> For more information on Google’s privacy policy, please visit www.google.com/analytics/learn/privacy.html.</p> <ul> <li> <p class="txt-indent-custom"><span>1.</span>The purpose of using cookies is to provide optimized information to users by identifying patterns in relation to their use of the website and its services, use of secure connections, etc.</p> </li> <li> <p class="txt-indent-custom"><span>2.</span>Users may reject enabling cookies by clicking on Tools > Internet Option > Privacy Option, located on the top of the browser.</p> </li> <li> <p class="txt-indent-custom"><span>3.</span>Users who reject enabling cookies may have difficulties using tailored services.</p> </li> </ul> </div> </dd> </dl> <dl id="EN-2022-id10"> <dt> <h3 class="__sub-headline2"> <em>Article 10. </em> Personal Information Protection Manager </h3> </dt> <dd> <p class="txt-indent-custom"><span>①</span>The Company has a designated personal information protection manager as below to undertake tasks related to processing personal information, address complaints related to personal information of data subjects, provide damage remedies, etc.</p> <div class="sub_info"> <div class="sub_item"> <dl> <dt>· Personal information protection manager</dt> <dd> <p>- Name: Chang Won Lee, Executive Vice President</p> <p>- Position: Head of HR Team (CPO)</p> <p>- Contact: 02-2145-2792</p> <p>-E-mail : cnt.security@samsung.com</p> </dd> </dl> <dl> <dt>· Personal information protection department (customer inquiries)</dt> <dd> <p>- Department name: Communication T/F, Corporate Strategy Office</p> <p>- Responsible person: Joosik Kim, Professional</p> <p>- Contact number: 02-2145-2386</p> <p>- E-mail : scntwebmaster@samsung.com</p> </dd> </dl> <dl> <dt>· Personal information protection department (compliance hotline)</dt> <dd> <p>- Department name: Compliance Team</p> <p>- Responsible person: Geum Chae Lee, Professional</p> <p>- Contact number : 02-3669-0007</p> <p>- E-mail : compliance.h@samsung.com <compliance.h@samsung.com>;</p> </dd> </dl> </div> </div> <p class="txt-indent-custom"><span>②</span>Data subjects may ask any question regarding the protection of personal information or inquire about complaint handling, damage remedies, etc. that have occurred while using the Company’s services (or businesses) to the personal information protection manager or the personal information protection departments. The Company will respond and handle the inquiries of data subjects without delay.</p> </dd> </dl> <dl id="EN-2022-id11"> <dt> <h3 class="__sub-headline2"> <em>Article 11.</em> Request for Access to Personal Information </h3> </dt> <dd> <p>Pursuant to Article 35 of the Personal Information Protection Act, data subjects may request to have an access to personal information to the appropriate designated department depending on the category of the inquiry as stated in Article 10. The Company will put in every effort to swiftly respond to the request for an access to personal information.</p> </dd> </dl> <dl id="EN-2022-id12"> <dt> <h3 class="__sub-headline2"> <em>Article 12.</em> Remedial Procedure for Infringement of Rights </h3> </dt> <dd> <p>Data subjects, to remedy a personal information breach, may request the Personal Information Dispute Mediation Committee, the KISA Personal Information Infringement Report Center, etc., for conflict resolution or consultation, etc. The following institutions may be contacted in the case of reporting or seeking consultation on other matters related to personal information infringement.</p> <div class="sub_info"> <div class="sub_item"> <dl> <dt></dt> <dd> <p>· Personal Information Dispute Mediation Committee : 1833-6972 (www.kopico.go.kr)</p> <p>· Personal Information Infringement Report Center : 118 (privacy.kisa.or.kr)</p> <p>· Supreme Prosecutor’s Office: 1301 (www.spo.go.kr)</p> <p>· National Police Agency: 182 (ecrm.cyber.go.kr)</p> </dd> </dl> </div> <p></p> </div> </dd> </dl> <dl id="EN-2022-id13"> <dt> <h3 class="__sub-headline2"> <em>Article 13.</em> Revision of Personal Information Management Policy </h3> </dt> <dd> <p>This revision of the Personal Information Management Policy takes effect starting December 28, 2023</p> </dd> </dl> </div>