Yoon & Yang (IP) LLC (the “Firm”) has established the following “Privacy Policy” in accordance with relevant Korean laws and regulations to protect data, personal information and interests and to properly handle complaints regarding such personal information.
Article 1 [Items, Purpose Use and Retention Period of Personal Information]
① The items, purpose, use and retention period of personal information collected and processed by the Firm Yang are as follows:
1. Personal Information of Client
- · Items
- · Name, contact information (address, phone number, e-mail, etc.), work information (company name, title and rank, etc.)
- · Any other information generated or provided for in the course of performing services for or relating to clients, or arranging, maintaining,
fulfilling, and managing such client relations. - · Purposes
- · To perform services for clients, to arrange, maintain, fulfill, and manage client relations, to investigate, resolve, and handle any complaints
and disputes, and to comply with legal obligations under applicable laws. - · To send out seminar invitations and company newsletter, and to inform client regarding relevant information.
- · Use & Retention Period
- · Upon accomplishment of above stated purposes or upon withdrawal of consent.
2. Personal Information of Applicants for Professional or General Positions, Practice Training, and Internship.
- · Items
- · Applicants for Professional or General Positions.
- [Mandatory] name, date of birth, contact information (address, phone number, e-mail, etc.), picture, gender, educational background,
military and veteran affairs background, work experience, motivation and introduction of applicants. - [Optional] family background, award history, foreign language skills, licenses or certifications, any other information provided as reference.
- [Mandatory] name, date of birth, contact information (address, phone number, e-mail, etc.), picture, gender, educational background,
- · Applicants for Practical Training and Internships
- [Mandatory] name, date of birth, contact information (address, phone number, e-mail, etc.), picture, gender, educational background,
military and veteran affairs background, work experience, motivation and introduction of applicants. - [Optional] family background, award history, foreign language skills, licenses or certifications, any other information provided as reference,
results of previous practical training or internships. (※Only for selected applications)
- [Mandatory] name, date of birth, contact information (address, phone number, e-mail, etc.), picture, gender, educational background,
- · Purposes
- · Applicants for Professional or General Positions : to verify identity of applicants, to confirm educational background and work experience, to
review, determine, and notify hiring of applicants, to verify intent of applicants for subsequent recruitments. - · Applicants for Practical Training and Internships : to verify identity of applicants, to confirm educational background and work experience,
to review, determine, and notify offer of practical training or internship to applicants, to arrange, maintain, fulfill, and manage relations, to
determine formal hiring of such applicants - · Use & Retention Period
- · Upon accomplishment of the above stated purposes or upon withdrawal of consent.
(Thereafter, personal information will be retained and kept only for resolving and handling of any complaints and disputes, and compliance
with legal obligations under applicable laws)
3. Personal Information of Employees (Professional and General)
- · Items
-
- [Mandatory] : name, identification number (resident registration number), nationality, contact information (address, phone number, email,
etc.), picture, personnel information for the purpose of maintaining labor relations (information provided at the time of employment, such as
personnel record, resident registration certificate, and information later generated and collected for personnel management, such as employee
number, division, duties, performance evaluations, disciplinary actions, retirement/resignation) - [Optional] : family background
- [Mandatory] : name, identification number (resident registration number), nationality, contact information (address, phone number, email,
- · Purposes
- · To contract for and maintain employment relations
- · To handle essential matters related to personnel management such as appointments, evaluations, payments of wage, welfare benefits,
training and education - · To create company directory and operate company messenger software (division, title, name, email, phone number)
- · Use & Retention Period
- · Upon accomplishment of the above stated purposes or withdrawal of consent (Thereafter, personal information will be retained and kept only
for resolution and handling of any complaints and disputes, and compliance with legal obligations under applicable laws)
② In general, the Firm does not collect any sensitive information that carry the risk of invasion of privacy. Nonetheless, the
Firm may collect and use such sensitive information when deemed necessary with prior consent only for the stated purpose of
the said consent, provided, however, that the Firm is required to regularly confirm the accuracy of the sensitive information
provided.
Article 2 [Provision of Personal Information to a Third Party]
① In principle, the Firm uses personal information only for the purposes as described in Article 1 of this Privacy Policy.
Furthermore, the firm does not use or disclose personal information to third parties beyond the original scope of the specified
purposes without prior consent; provided, however, that we may use or disclose personal information to a third party for other
purposes in any of the following cases, unless such use or disclosure would infringe upon the interests of the person the data is
regarding (the “Subject Person”) or a third party:
- 1. When the Subject Person has consented disclosure to a third party;
- 2. When use or disclosure is mandated by applicable laws and regulations or necessary to comply with legal obligations;
- 3. When the prior consent of the Subject Person or their legal representatives cannot be readily obtained for any reason, such as legal incapacity
or unknown address, and use or disclosure is deemed clearly required in an emergency to safeguard life, body, or property interests of a client or
a third party; or - 4. When use or disclosure is necessary for statistical surveys or academic research and provided in a form not individually identifiable.
② The Firm shall inform the Subject Person of the relevant matters set forth below when obtaining consent under Paragraph 1,
Subparagraph 1 of this Article. Additionally, the Firm requires notification and consent of the Subject Person upon any
subsequent changes made to the following matters:
- 1. Name of the recipient;
- 2. Recipient’s purpose of the use of the personal information;
- 3. Specific items of the personal information used or disclosed;
- 4. Recipient’s period of retention and use of the personal information provided; or
- 5. The Subject Person’s right to refuse to consent and possible detriments, if any, as a result of such refusal.
Article 3 [Entrustment of Processing of Personal Information]
| Entrusted Entity | Description of Entrusted Services |
|---|---|
| Digital Associated Group | ERP management (Finance, Accounting, Cases) |
| BizSpring | Mass-emailing services |
① Yoon & Yang, as shown on the above table, entrusts the processing of the personal information of the Subject Person to an entrusted entity. Any changes and modifications to the entrusted entity and entrusted services thereof shall be promptly notified through this Privacy Policy.
② By executing an agreement with the entrusted entity pursuant to relevant laws and regulations, the Firm has obtained agreement on the restriction regarding use of personal information for purposes other than the purpose of providing the entrusted services, technical and administrative measures for protection of the personal information, prohibition of re-assignment, management and oversight of the entrusted entity, and indemnification of damages, and the Firm is supervising the entrusted entity accordingly to safeguard and secure the personal information.
Article 4 [Rights and Obligations of Data Subjects and Means to Exercise]
① The Subject Person may exercise rights pertaining to the protection of personal information against the Firm and demand access to, correction or deletion of, or suspension of processing of the personal information in accordance with relevant laws and regulations, such as the Personal Information Protect Act.
② The rights under Paragraph 1 may be exercised through the Subject Person’s legal representatives or authorized agents; provided, however, that the power of attorney shall be executed in accordance with the Enforcement Rules to the Personal Information Protection Act and submitted to the Firm.
③ The rights under Paragraph 1 may be exercised through the Subject Person’s legal representatives or authorized agents; provided, however, that the power of attorney shall be executed in accordance with the Enforcement Rules to the Personal Information Protection Act and submitted to the Firm.
Article 5 [Disposition of Personal Information]
① As a general rule, the Firm shall destroy all applicable personal information without delay after the purposes for collection and use of the personal information have been accomplished or retention of the personal information is no longer necessary.
② If retention of personal information is mandated by relevant laws and regulations, then applicable personal information shall be kept away from other personal information and managed separately only for the purpose of retention.
③ Applicable personal information subject to and selected for disposition shall be destroyed upon the Chief Privacy Officer’s approval.
④ Personal information recorded in electronic format shall be destroyed using appropriate technological means to render such information irrecoverable, and print-outs, documents, and other personal information recorded on paper form shall be destroyed by shredding or incineration.
Article 6 [Security Measures for Protection of Personal Information]
· The Firm is taking the following security measures for the protection of personal information:
- 1. Administrative Measures : establishment and implementation of internal management policies, provision of education on the protection of personal information for employees on a regular basis, etc.;
- 2. Technical Measures : management and restriction of access to personal information database, installation of file encryption, anti-virus, firewall and other security software, etc.;
- 3. Physical Measures : restriction of personnel access to computer room or server room where personal information is stored
Article 7 [Amendments to the Privacy Policy]
This Privacy Policy may be amended under applicable laws and regulations and the internal policy of Yoon & Yang. Any amendments, including details of amendments and implementation thereof, will be tracked and disclosed on the Firm’s website (ip.hwawoo.com)and the Firm will also provide before-and-after comparison of the Privacy Policy to enhance understanding of the amendments by the Subject Person.
Article 8 [Remedies for Infringements on Rights and Interests]
· In case the reporting or counseling on any infringements or violations of personal information is required, the Subject Person should contact the following agencies and institutions:
- 1. Personal Information Dispute Mediation Committee (privacy.kisa.or.kr / 118)
- 2. Personal Information Infringement Reporting Center of Korean Internet Security Agency (privacy.kisa.or.kr / 118)
- 3. High-Tech Criminal Investigation Department of Supreme Prosecutor’s Office (www.spo.go.kr / 02-3480-3573)
- 4. Cyber Terror Response Center of National Policy Agency (www.netan.go.kr / 1566-0112)
Article 9 [Chief Privacy Officer]
① The Firm has appointed the following Chief Privacy Officer who is in charge of personal information protection:Chief Privacy Officer: Attorney, Kil Dong HyunContact Information: 02-3465-7805
② The Firm has separate personnel in charge of handling requests to access personal information, inquiry regarding protection of personal information, and complaints and remedies regarding processing of personal information:Person-in-charge: Management Information Department, manager, Kil Dong Hyun Contact Information: 02-3465-7805
