Samyang Corporation safely manages personal information by complying with relevant statutes and regulations, such as the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection, to protect the said information.
Samyang Corporation notifies users about the purpose and method of using the personal information provided and the measures taken to protect personal information.
-
Collection of General
Personal Information- Collection of General Personal Information
-
Required fields: name, email, contact number, country, company, position, address, postal code, job title, industry
* Please refer to the detailed information in the Privacy Policy below.
Optional fields: consent to receive marketing information
-
Personal Information Processing Policy
- Personal Information Processing Policy
-
Inquiries and requests related to products, samples, partnerships, and services
* Please refer to the detailed information in the Privacy Policy below.
Establishing smooth communication channels for inquiries and complaints handling
Information and benefits related to products, webinars, exhibitions, etc.
Providing webinar-related information and access to replay videos
Website quality analysis and enhancement, service provision
(When agreeing to marketing communications) Information and benefits related to products, webinars, etc.
-
Personal Information Retention Period
- Personal Information Retention Period
-
Personal information will be destroyed immediately after the purpose of collection and use has been achieved.
* Please refer to the detailed information in the Privacy Policy below.
However, some personal information may be kept for the retention period specified by relevant laws and regulations, depending on the type.
-
Provision of Personal Information to Third Parties
- Provision of Personal Information to Third Parties
-
No external provision.
* Please refer to the detailed information in the Privacy Policy below.
However, in accordance with legal regulations or legal proceedings, information will be provided exceptionally if required by the relevant authorities.
-
Entrustment of Data Processing
- Entrustment of Data Processing
-
If necessary for service improvement, personal information may be outsourced to external professional agencies. (Until the end of the outsourcing contract)
* Please refer to the detailed information in the Privacy Policy below.
-
Complaint Handling Department
- Complaint Handling Department
-
Position/Title: Team Leader
* Please refer to the detailed information in the Privacy Policy below.
Department: WS PU
Email : trilite@samyang.com
Phone: +82-2-740-7736
Fax: +82-2-740-7790
- 01. General Provisions
- 02. Purpose of Processing Personal Information, Items Collected, Retention and Use Period
- 03. Provision of Personal Information to Third Parties
- 04. Matters Regarding the Outsourcing of Personal Information
- 05. Procedures and Methods for Destruction of Personal Information
- 06. Rights of Users and Legal Guardians and How to Exercise Them
- 07. Measures for Ensuring the Security of Personal Information
- 08. Complaint Services Related to Personal Information
- 09. Notification of Personal Information Processing Policy
- 10. Installation and Operation of Fixed Video Information Processing Devices
- 11. Information Regarding the Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
01. General Provisions
-
① Personal information means information about a living individual which can identify the individual by items such as their name and resident registration number (This includes information that alone may not identify a specific individual, but can easily be used to identify when combined with other information).
-
② Samyang Corporation ("www.samyangspecialty.com"hereinafter referred to as the “Company”) places great importance on the protection of users’ personal information and complies with relevant legal regulations on personal information protection, including the Act on the Promotion of Information and Communications Network Utilization and Information Protection and the Personal Information Protection Act, which must be observed by providers of information and communication services. Through this privacy policy, we inform users about how the personal information they provide is used and in what manner, as well as the measures taken to protect personal information.
-
③ The Company makes the privacy policy easily accessible to users by disclosing it on the first page of the website.
-
④ The Company has established procedures for amending the privacy policy to ensure continuous improvement and reserves the right to change the privacy policy to meet the needs of the Company and societal changes. In addition, when amending the privacy policy, the Company assigns a version number or other indicator to make it easy for users to identify the revised information.
02. Purpose of Processing Personal Information, Items Collected, Retention and Use Period
-
1. The Company collects personal information through the following methods. The Company does not use personal information for purposes other than those stated below, and takes necessary measures such as obtaining separate consent if the purpose of the service provided by the Company changes.
-
2. The rights and responsibilities regarding personal information and posts voluntarily disclosed by the user during the use of services provided by the Company are the responsibility of the user. Voluntarily disclosed information is difficult to protect and may be collected or processed unauthorized by others. Please be mindful that any loss or issues arising from this are solely the responsibility of the user.
① Information Collected during use of service
Legal basis |
Category |
Purpose of collection |
Items collected |
Retention and use period |
---|---|---|---|---|
Personal Information Protection Act |
Customer inquiries |
1. Inquiries and requests related to products, samples, partnerships, and services 2. Establishing smooth communication channels for inquiries and complaints handling |
Required fields: name, email, contact number, country, company, position, address, postal code |
3 years after the inquiry |
Personal Information Protection Act |
Interested Customer Registration |
Information and benefits related to products, webinars, exhibitions, etc. |
Required fields: email, name, contact number, country, company, position |
Interested Customer Registration |
Personal Information Protection Act |
Webinar |
Providing webinar-related information and access to replay videos |
+ Required fields: company, position, name, email, country |
Destruction within 5 days after requesting to unsubscribe from the webinar |
Personal Information Protection Act |
Download data |
1. Website quality analysis and enhancement, service provision 2. (When agreeing to marketing communications) Information and benefits related to products, webinars, etc. |
1. Download data: Library, Technical documents, Information collected through pop-up when requesting download + Required fields: email, name, country, company, job title, industry + Optional fields: consent to receive marketing information |
3 years after the inquiry |
We use cookie information for user convenience. Please refer to Article 11 of the Privacy Policy for related information
03. Provision of Personal Information to Third Parties
The Company shall process the user’s personal information within the scope clarified in the Personal Information Processing Policy; the personal information shall not be provided to a third party except in the following cases:
-
1. When the user has consented to the processing
-
2. When falling under special regulations according to the law, such as Articles 17 and 18 of the Personal Information Protection Act
-
3. Personal information may be provided to relevant institutes without the consent of the data subject in emergencies, such as disasters, infectious diseases, accidents, and incidents that cause urgent risks to lives and the body and urgent loss of properties, according to the Personal Information Processing and Protection Guidelines in Emergencies jointly announced by relevant government departments
04. Matters Regarding the Consignment of Personal Information
The user’s personal information is managed by the following external company through consignment.
Trustee |
Entrusted tasks |
Data subject |
Commissioned information |
Retention and use period |
---|---|---|---|---|
Samyang Data System |
Operation outsourcing of IT infrastructure including databases |
All data subjects |
All information items |
Until customer consent withdrawal or termination of consignment contract |
The Uber Creative |
Website operation agency |
All data subjects |
All information items |
Until customer consent withdrawal or termination of consignment contract |
Direct Send |
SMS messaging |
Name, phone number |
Name, phone number |
Until customer consent withdrawal or termination of consignment contract |
Amazon Web |
Data retention |
All data subjects |
All information items |
Until customer consent withdrawal or termination of consignment contract |
Salesforce |
Customer information analysis and management |
Service users for customer inquiries |
Company, position, name, country, email, contact number, country, other information entered by the customer |
Until customer consent withdrawal or termination of consignment contract |
05. Procedures and Methods for the Destruction of Personal Information
-
① The Company shall destroy the personal information without delay when it is no longer necessary due to the expiration of the retention period for personal information or the achievement of the processing purpose.
-
② If the personal information holding period agreed upon by the user has expired or the processing purpose has been achieved, but it is necessary to continue retaining the personal information according to other laws, the Company will transfer the relevant personal information to a separate database (DB) or to a separate table within the DB (in the case of paper, separate document storage) and retain it in a different storage location.
* The items of personal information retained and the basis for retention in accordance with other laws can be found in “2. Purpose of Processing Personal Information, Items Collected, Retention and Use Period” -
③ The procedures and methods for the destruction of personal information are as follows:
-
1. Destruction process
The Company selects personal information for destruction when the reason for destruction arises, and with the approval of the Company’s data protection officer, the personal information is destroyed. -
2. Method of destruction
The Company destroys personal information recorded or stored in electronic file format in a manner that makes it impossible to regenerate the record, and personal information recorded or stored on paper documents is shredded using a shredder or incinerated for destruction.
-
06. Rights of Users and Legal Guardians and How to Exercise Them
-
① Rights of Data Subjects and How to Exercise Them
-
1. Users have the right to exercise their rights (hereinafter referred to as “Exercising Rights”) to access, correct, delete, stop processing, withdraw consent, refuse automated decisions, or request an explanation from the Company at any time.
* Requests for access to personal information of children under 14 years of age must be made directly by their legal guardian. If the data subject is a minor over 14 years of age, the minor can exercise the rights regarding their personal information, or the rights can be exercised through their legal guardian. -
2. You can exercise your rights towards the Company through writing, email, fax, or other means in accordance with Article 41
(1) of the Enforcement Decree of the Personal Information Protection Act, and the Compan will promptly respond to your request. -
- Users can always request refusal of automated decisions and explanations through the ‘Contact Us’ section on the website.
-
-
② Obligations of Data Subjects and How to Exercise Them
1. Exercising rights can also be done through a legal guardian or a representative who has been delegated by the user.
In this case, you must submit a power of attorney form according to Annex No. 11 of the “Guidelines for Personal Information Processing Methods.”2. The right of users to request access to personal information and stop processing may be limited under Article 35 (4) and Article 37 (2) of the Personal Information Protection Act.
3. If the personal information is specified as a subject of collection in other laws, you cannot request the deletion of such personal information.
4. If the data subject has consented to automated decision-making or has been notified in advance through a contract, and if there are clear legal provisions, refusal of automated decisions may not be accepted, and only requests for explanation and review are allowed.
- Also, refusal or request for an explanation regarding automated decisions may be denied if there are legitimate reasons, such as concerns about unjustly infringing on another person’s life, body, property, or other benefits.
5. The Company verifies whether the person exercising the rights is the individual oneself or a legitimate representative.
6. Rights can be exercised at the following departments within the Company. The Company will make efforts to ensure that the rights of data subjects are promptly processed.
-
• Department for receiving and processing requests for access to personal information
- Department Name: Material Marketing Team
- Address: 295 Pangyo-ro, Bundang-gu, Seongnam-si, Gyeonggi-do, Korea
07. Measures for Ensuring the Security of Personal Information
-
The Company has implemented the following technical and managerial measures to ensure the security of personal information in processing to prevent loss, theft, leakage, alteration, or damage of personal information.
-
① Technical measures
- When storing personal information, we encrypt it using reliable encryption algorithms to prevent unauthorized leakage.
- When transmitting personal information over the network, we secure the transmission by encrypting it with SSL.
- The Company utilizes antivirus programs to prevent damages caused by computer viruses. The antivirus program is regularly updated, and in case of sudden emergence of a virus, the Company provides immediate updates to prevent any infringement of personal information.
- The Company has installed intrusion prevention systems and intrusion detection systems to protect the system against external intrusions such as hacking.
- The Company retains and manages access records to the personal information processing system for at least 1 year, ensuring that access records are not tampered with, stolen, or lost.
-
② Administrative measures
- The Company has established and implemented an internal management plan for the secure handling of personal information.
- The Company restricts access to users’ personal information to processors within the personal information processing department.
- The Company conducts regular in-house training and external training for employees who handle personal information to acquire new security technologies and fulfill obligations for personal information protection.
- The handover of duties related to personal information by processors is strictly conducted under secure conditions, and responsibilities for personal information incidents are clearly defined upon employment and departure.
- The Company does not take responsibility for incidents resulting from the user’s mistakes or the inherent risks of the internet. Each member is responsible for appropriately managing their personal information to protect it and must take responsibility for it.
- In the event of loss, leakage, alteration, or damage of personal information due to the mistakes of internal administrators or incidents in technical management, the Company will immediately inform users of the facts and take appropriate measures and compensation.
-
③ Physical measures
- The Company has designated data processing rooms and data storage rooms as special protected areas and controls access to them.
- The Company complies with the Personal Information Protection Act, its enforcement decree, enforcement rules, standards for ensuring the security of personal information, and other relevant laws and regulations.
08. Complaint Services Related to Personal Information
-
① The Company oversees the overall tasks related to personal information processing, takes responsibility, and has designated a person in charge of personal information protection to handle user complaints, damage relief, and other matters related to personal information processing.
-
• Data Protection Officer
- Name: Yoon Jae-min
- Position: Team Leader
- Contact: <Tel. +82-2-2157-9523>, <Email. jaemin.yoon@samyang.com>, <+82-2-2157-9057> -
• Personal Information Protection Department
- Department Name: Material Marketing Team
- Contact: <Tel. +82-2-2157-9521>, <Email. youngeun.lee@samyang.com>, <Fax. +82-2-2157-9057>
-
② Users can contact the Data Protection Officer and the responsible department for any inquiries, complaints, damage relief, or other matters related to personal information protection arising from the use of the Company’s services. Phone consultations are available on weekdays from 09:00 to 18:00, and inquiries via email, fax, or mail will be promptly responded to and processed within 24 hours of receipt. If you need professional consultation or to report a privacy breach regarding personal information, please contact the following agency.
-
-
• Personal Information Infringement Report Center (Korea Internet & Security Agency)
- Phone: +82-118 (without area code)
- Website:: http://privacy.kisa.or.kr -
• Cyber Investigation Department, Supreme Prosecutors’ Office
- Phone: +82-1301 (without area code)
- Website: http://www.spo.go.kr -
• Cyber Safety Guardian, Korean National Police Agency
- Phone: +82-182 (without area code)
- Website: https://www.police.go.kr/www/security/cyber.jsp
-
09. Notification of Personal Information Processing Policy
If there are any additions, deletions, or modifications to the current privacy policy due to changes in government policies or security technologies, we will notify you through the website at least 7 days in advance.
-
- Date of change to the privacy policy: 2024-09-12
- Effective date of the privacy policy: 2024-09-19
10. Installation and Operation of Fixed Video Information Processing Devices
The Company operates and manages video information processing devices as follows.
① Basis and purpose of installation of fixed video information processing devices
-
: The Company installs and operates fixed video information processing devices for the following purposes in accordance with Article 25 (1) of the Personal Information Protection Act.
- Facility safety and management, fire prevention
- Crime prevention for customer safety
- Prevention of vehicle theft and damage
※ Installation and operation are permitted based on Article 6 (1) of the Enforcement Regulations of the Parking Lot Act for facilities with more than 30 parking spaces.
-
② Installation location, recording distance
- Installation location: Main entrance of the business premises, lobby, outer perimeter of the fence, etc., external entry and exit areas inside and outside the business premises
- Recording distance: range of the movement of people entering and exiting
- Number of units: 255 units (Discovery Center)
-
③ Manager in charge, responsible department, and authorized personnel for access to video information
- Please contact the video information manager at each business location (Refer to the CCTV guide board for each business location).
-
- Manager contact information
Name: Choi Jeong-mun
Position: Department Manager
Affiliation: Building Management Team
Contact: +82-2-2157-9588
-
④ Video recording time, retention period
- Recording time: 24-hour recording
- Retention period: 30 days from the time of recording
-
⑤ torage location and processing method
- Storage location: Central Monitoring Room of B1 floor of Discovery Center
- Processing method: Record and manage matters related to the use of personal video information for purposes other than its intended use, provision to third parties, destruction, and requests for viewing. Permanently delete in a manner that cannot be recovered when the retention period expires (shredding or incinerating for hard copies).
-
⑥ The Company outsources the installation, operation, and management of video information processing devices as follows: In accordance with relevant laws and regulations, the necessary matters are stipulated in the outsourcing contract to ensure the safe management of personal information.
-
- Service Provider: Honeywell Korea
Department: Service Team 2
Manager and Contact: Director Kim Jong-ho (+82-10-2478-7770)
-
-
⑦ Measures for requests to access video information
- If a user wishes to view recorded video information or confirm the existence of video information, access or confirmation will be permitted only in cases where it is clearly necessary for the benefit of the user’s life, body, or property. This is limited to the personal video information in which you are recorded.
-
⑧ Information on how to confirm personal video information and the location:
- Method of confirmation: contact the manager in charge of personal video information in advance and visit our organization for confirmation.
- Confirmation location: Samyang Corporation Management Support Team
-
⑨ Technical, managerial, and physical measures for the protection of video information
- Access control and access restriction, application of secure storage and transmission technologies for video information, storage of processing records and prevention of tampering, establishment of storage facilities, and installation of locking devices
-
⑩ Regarding Changes to the Policy on the Operation and Management of Fixed Video Information Processing Devices
- This policy on the operation and management of fixed video information processing devices was established on September 12, 2024. Any additions, deletions, or modifications to the content due to changes in laws, policies, or security technologies will be announced on the organization’s website at least 7 days prior to implementation.
- Date of Notification: Sep. 12, 2024 / Effective Date: Sep. 19, 2024
11. Information Regarding the Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
< Automatic personal information collection devices installed and operated >
1. The Company uses "cookies" to store and periodically retrieve user information in order to provide individualized services and convenience.
2. Cookies are small pieces of information sent by the server (http) of a website to the user’s browser and stored on the data subject’s PC or mobile device.
3. Users can allow or block cookies by configuring their web browser settings. However, if you refuse to store cookies, it may cause difficulties in using personalized services.
-
▶ Allowing/Blocking Cookies in a Web Browser
- Chrome: Web browser Settings > Privacy and Security > Clear browsing data
- Edge: Web browser Settings > Cookies and site permissions > Manage and delete cookies and site data
-
▶ Allowing/Blocking Cookies in Mobile Browsers
- Chrome: Mobile browser Settings > Privacy and Security > Clear browsing data
- Safari: Mobile device Settings > Safari > Advanced > Block All Cookies
- Samsung Internet: Mobile browser Settings > Internet usage records > Clear browsing data
< Information on the collection, use, provision, refusal of behavioral information, etc. >
1. In order to provide users with optimized personalized services, benefits, and targeted online advertisements during the service usage process, the Company collects and utilizes behavioral information through cookies without identifying individuals.
-
2. The Company collects behavioral information on the website it operates as follows.
Legal basis |
Items of behavioral information collected |
Methods of collecting behavioral information |
Purpose of collecting behavioral information |
Retention and usage period |
---|---|---|---|---|
Article 15 (1) 1 of the Personal Information Protection Act |
Logging of website visits and key actions |
Automatically collected using Google Analytics when users visit the website, a web analysis tool provided by Google. |
Utilized for website service management, statistics, and analysis of user behavior. |
Up to 38 months |
-
3. Information subjects can inquire about matters related to behavioral information, exercise their right to refuse, and report damages through the following contact information.
-
• Personal Information Protection Department
- Department Name: Material Marketing Team
- Position/Title: Material Marketing Team Leader
- Contact: <Tel. +82-2-2157-9523>, <Email. jaemin.yoon @samyang.com>, <Fax. +82-2-2157-9057>
-
- 01. General Provisions
- 02. Items for Collection and How to Collect Them
- 03. Purpose for Collection and Use of Personal Information
- 04. Retention and Period of Use
- 05. Entrustment of Personal Information
- 06. Item Destruction and Means
- 07. Rights of Users and Legal Representatives and Exercise thereof
- 08. Securing Safety of Personal Information
- 09. International Transfer of Your Personal Data
- 10. Complaints Regarding Personal Information
- 11. Notice of Personal Information Processing Policy
- 12. Installation and Use of Image Processing Equipment
- 13. Installation, Use, and Refusal of Automatic Collection Device
01. General Provisions
① Personal information is defined as information about a living individual, and information that can identify the individual by name, resident registration number, etc. (including those who can be identified by combining said information).
② Samyang Corporation ("samyangspecialty.com" hereafter referred to as "the Company") attaches great importance to the protection of users' personal information, and will comply with personal information protection regulations of information and communication service providers such as the Act on Promotion of Information and Communications Network Utilization and Information Protection, Personal Information Protection Act, etc. The Company will inform users of the purpose and means of using personal information provided by the users and what measures are being taken to protect said information.
③ The Company will disclose the Personal Information Policy on the first page of its homepage so that users can have an easy access at any time.
④ The Company has established the procedures necessary to revise the Personal Information Policy for ongoing improvement and may change it to suit the needs of the Company or due to social changes. In addition, when revising the Personal Information Policy, a version number is given so that users can easily recognize the revised information.
02. Items for Collection and How to Collect Them
Company collects and processes the following items:
-
• Customer inquiries: Collected through customer support's inquiry page
- Required items: name, e-mail, contact number, country, company, Job Title, address, zip code, city
-
• Interested customer registration
- Required items: e-mail, name, contact number, country, company, Job Title
-
• Webinar subscription
- Required items: e-mail, name, contact number, country, company, Job Title
※ cookies are utilized due to the convenience of users. The details can be found from our privacy policy.(clause 13)
-
• Data download : Collected through pop-up when data download is requested.
- Required item : email, name, country, company, Job Title, industry
- Optional item : Agree to receive marketing information
※ cookies are utilized due to the convenience of users. The details can be found from our privacy policy.(clause 13)
03. Purpose of collection and Use of Personal Information
The company collects and processes personal information for the following purposes.
-
• Customer Inquiry
- Information on product, sample, and partnership service-related inquiries and request results
- Securing smooth communication channels such as handling inquiries and complaints
-
• Interested Customer Registration
- Information and benefits related to products, webinars, exhibitions, etc.
-
• Webinar Application/Subscription
- Provides webinar related information guide and replay
-
• Data Download
- Provides services for website quality analysis and improvement
- (When agreed to receive marketing information) Information and benefits related to products, webinars, exhibitions, etc.
04. Retention and Period of Use
The Company will process and retain personal information within the period of use of personal information in accordance with laws and regulations or within the period of use of personal information agreed upon when collecting personal information from the users. Said information will be destroyed once the retention period has ceased.
-
① Each personal information processing and retention period is as follows:
Personal information related to collection and use of personal information is destroyed after retention and use for the period specified below, from the date of consent until the purpose is carried out.-
• Customer inquiry information
-
- Retention period: 3 years after customer inquiry
-
- Retention Basis : Records on consumer complaints or dispute handlings
-
-
• Information on registration of interested customer
-
- Retention Period : Destroy within 5 days after cancellation of interested customer registration application
-
- Retention Basis : Sending a newsletter
-
-
• Webinar Subscription/Application Information
-
- Retention Period : Destroy within 5 days of requesting to cancel the webinar subscription
-
- Retention Basis : Webinar related information guide and replay
-
-
• Data Download
-
- Retention Period : 3 years after requesting data download
-
-
-
② Exceptions to personal information retention
If there is a need to retain information for a certain period of time for reasons such as confirmation of rights and obligations related to transactions as follows, even if the purpose of collection or provision has been carried out, all or part of personal information collected for a certain period of time may be retained in accordance with the provisions of relevant laws and regulations.- Retention period in the case it is necessary to retain records ergarding contract of subscription cancellation, according to provisions of laws and regulations is 5 years
※ Article 85-3 of the Framework Act on National Taxes
A. A taxpayer must faithfully prepare and retain books and evidential documents related to all transactions in accordance with the provisions of each tax law.
-
B. Books and evidential documents falling under paragraph (1) shall be preserved for five years from the date when the statutory filing deadline has passed for the relevant taxable period to which the transaction belongs.
- Records for consumer complaints and dispute resolutions : 3 years
- In the case of individually obtaining customer's consent
- In the case of obtaining customer consent through notification of or specifying the retention period to the customer in advance in due process
05. Entrustment of Personal Information
Users' personal information is entrusted as follows:
Entrusted Entity |
Entrusted Task |
Subject of Information |
Entrusted Information |
---|---|---|---|
Samyang Data Systems |
IT infrastructure operation agency + database |
All data subjects |
All information items |
The Uber Creative |
Website operation agency |
All data subjects |
All information items |
DirectSend |
Message delivery |
Name, phone number |
Name, phone number |
Amazon Web Service Inc. |
Data storage |
All data subjects |
All information items |
Salesforce |
Customer information analysis and management |
Customer inquiry infromation |
Company, job name, email, phone number, country, other contents entered by the individual |
06. Item Destruction and Means
-
① Procedure of destruction
- Collected personal information is transferred to a separate database or a separate table within the database (in the case of paper, a separate filing cabinet) when the information subject requests withdrawal or deletion, and is stored for the retention period, then destroyed.
- Personal information will not be used for any other purpose than being retained for, unless it is required by law.
-
② Means of destruction
- Personal information printed on paper is shredded with a shredder or destroyed through incineration.
- Personal information stored in the form of an electronic file is deleted using a method that makes it impossible to reproduce.
07. Rights of Users and Legal Representatives and Exercise thereof
-
① Rights of subjects of information and method of exercise thereof
- Users may request to view, alter, or destroy their personal information. In the case of a bulletin board inquiry, contact the person in charge of personal information management or any other person in charge, and an action will be taken without delay.
- If a user requests correction of errors in personal information, the personal information will not be used or provided until the correction is completed.
-
② Duties of Users and means of exercise thereof
- Users have the right to protect their personal information as well as the obligation to protect themselves, and not to infringe the information of others. Caution is advised to not leak your personal information and to not damage other people's personal information, including posts. If you violate the information and dignity of others, you may be punished according to the relevant laws.
- It is requested to prevent unexpected accidents by entering one's accurate and up-to-date personal information. Users are responsible for incidents caused by inaccurate information.
08. Securing Safety of Personal Information
The Company will take the following technical and managerial measures to ensure safety from loss, theft, leaking, alteration, or damage of personal information in processing.
-
① Technical measures
- When storing one's resident registration number or other such unique identification information, it is encrypted using a reliable encryption algorithm to prevent unauthorized leakage.
- When personal information is transmitted over the network, it is transmitted safely with SSL encryption.
- The Company uses an anti-virus program to protect the system from potential damage.
- The Company keeps and manages records of access to the personal information processing system for at least one year. Access records are managed to prevent alteration, theft, or loss.
-
② Administrative measures
- The Company has established and implemented an internal management plan for the safe handling of personal information.
- The Company restricts the access rights to users' personal information to those within the personal information processing department.
- The Company conducts regular in-house training and outsourced training for employees who handle personal information on acquisition of new security technologies and duties to protect personal information.
- The handover of the personal information-related processor is thoroughly carried out in a state of maintained security. Responsibilities for personal information accidents after joining or leaving the company are clearly distinguished.
- The Company controls access by setting the computer room and data storage room as areas of special protection.
- The Company is not responsible for the user's personal mistakes or for any incidents that occur due to inherent risks in the internet. In order to protect their personal information, each member must properly manage their information and take responsibility for it.
- In the event that personal information is lost, leaked, altered, or damaged due to a mistake of an internal manager or an accident in technical management, the Company will immediately notify the users and take appropriate counter-measures and consider compensation.
③ Various standards for measures to ensure safety of personal information such as the Personal Information Protection Act, enforcement ordinances, enforcement rules, etc. shall be complied with.
09. International Transfer of Your Personal Data
We may transmit your personal data to third parties with whom we have contracted to subcontract services in order to carry out activities or functions relating to the processing in relation to your personal data described above. Our third parties have a contractual obligation to comply with applicable laws or regulations, including the obligation to have a valid mechanism for the cross-border transfer of personal data within the EU in place to receive the personal data from the EU. For more information on our cross-border transfers of your personal data, please contact us using the contact details provided in the "Contacting Us" section below.
10. Complaints Regarding Personal Information
The Company has designated a person in charge of personal information protection to handle related complaints.
-
• Data Protection Officer
- Position/Role : Head of Specialty Ingredients Digital Marketing
- Affiliated department : Ingredients marketing team
- E-mail : youngeun.lee@samyang.com
- Phone number : +82-2-2157-9521
- Fax number : +82-2-2157-9057
-
• Personal Information Management
- Position/Role : Head of Global New Ingredients
- Affiliated department : Ingredients marketing team
- E-mail : sanghoon.seo@samyang.com
- Phone number : +82-2-2157-9571
- Fax number : +82-2-2157-9057
Telephone consultation is available from 09:00 to 18:00 on weekdays, and consultations using e-mail, fax, or mail will be responded to within 24 hours of its receipt. In the case of other personal information-related professional consultation or infringement reports, please submit inquiries to the following organizations.
-
• Personal Information Infringement Report Center (Korea Internet and Security Agency)
- Phone number : (no area code) +82-118
- Website : http://privacy.kisa.or.kr
-
• Supreme Prosecutor's Office Cyber Investigation Division
- Phone number : (no area code) +82-1301
- Website : http://www.spo.go.kr
-
• National Police Agency Cyber Security Guard
- Phone number : (no area code) +82-182
- Website : https://www.police.go.kr/www/security/cyber.jsp
11. Notice of Personal Information Processing Policy
If due to changes in government policy or security technology there is any deletion or modification of the contents of the current Personal Information Policy, a notice will be sent out through the website at least 7 days in advance.
- Personal Information Policy Change Date: 24-01-02
- Personal Information Policy Enforcement Date: 24-01-08
12. Installation and Use of Image Processing Equipment
The Company has installed and operates image information processing equipment accross the country at each business site as follows:
① Reason and purpose of installation: Safety of the Company's facilities and fire prevention
-
② Installation location and range of photography
- Installation location: Interior and exterior of business site, outside access areas, main entrance, lobby, fence perimeter, etc.
- Range of shooting: Range of movement of people going in and out
-
③ The person and department in charge of management and the person with rights to access video information
- Submit inquiries to the person in charge of video information management for each business site (refer to the CCTV information board for each business site)
- Management contact number: Samyang Corporation Management Support Team (+82-2-740-7132)
-
④ Video information recording time, storage period, storage location, and processing method
- Shooting time: 24 hours
- Storage period: 90 days from time of shooting
- Storage location and processing method: Submit inquiries to the person in charge of video information management for each business site (refer to the CCTV information board for each business site)
-
⑤ Storage location and processing method: Submit inquiries to the person in charge of video information management for each business site (refer to the CCTV information board for each business site)
- Submit inquiries to the person in charge of video information management for each business site (refer to the CCTV information board for each business site)
-
⑥ Measures for video information viewing requests, etc.
- If the user wants to view recorded video information or to confirm the existence of video information, this is allowed only if it is clearly necessary for the benefit of the user's life, body, and property.
-
⑦ Technical, administrative, and physical measures to protect video information
- Access control and access authority restrictions, safe storage of image information and transmission technology application, processing records storage and forgery and falsification prevention measures, provision of storage facilities and installation of locks, etc.
13. Installation, Use, and Refusal of Automatic Collection Device
-
① Definition of Cookies
- The Company may install and operate devices such as cookies or access information files that automatically collect personal information to provide users with a convenience service environment. -
② Purpose for use of cookies
-
- It is utilized as a measure of target marketing and service reform by analyzing users' frequency of access and visit time and identifying their preference and interest.
-
- When requesting/downloading webinars, users are provided convenience function by the system which remembers the users' information and automatically customizes the default setting. (※ After storing one month from the date of input, the data are updated each time of new input)
-
-
③ Decline
- Users have the right to accept or decline cookies. Therefore, the user can accept all cookies in the device settings or options, confirm every time a cookie is saved, or refuse to save all cookies. However, if the user refuses to store all cookies, service provision may be restricted or unavailable.
* Example of how to set cookies
[For Internet Explorer: 'Tools' at the top of the web browser > Internet Options > Personal Information > Personal Information Processing Level Settings]
- 01. General Provisions
- 02. Items for Collection and How to Collect Them
- 03. Purpose for Collection and Use of Personal Information
- 04. Retention and Period of Use
- 05. Entrustment of Personal Information
- 06. Item Destruction and Means
- 07. Rights of Users and Legal Representatives and Exercise thereof
- 08. Securing Safety of Personal Information
- 09. International Transfer of Your Personal Data
- 10. Complaints Regarding Personal Information
- 11. Notice of Personal Information Processing Policy
- 12. Installation and Use of Image Processing Equipment
- 13. Installation, Use, and Refusal of Automatic Collection Device
01. General Provisions
① Personal information is defined as information about a living individual, and information that can identify the individual by name, resident registration number, etc. (including those who can be identified by combining said information).
② Samyang Corporation ("samyangspecialty.com" hereafter referred to as "the Company") attaches great importance to the protection of users' personal information, and will comply with personal information protection regulations of information and communication service providers such as the Act on Promotion of Information and Communications Network Utilization and Information Protection, Personal Information Protection Act, etc. The Company will inform users of the purpose and means of using personal information provided by the users and what measures are being taken to protect said information.
③ The Company will disclose the Personal Information Policy on the first page of its homepage so that users can have an easy access at any time.
④ The Company has established the procedures necessary to revise the Personal Information Policy for ongoing improvement and may change it to suit the needs of the Company or due to social changes. In addition, when revising the Personal Information Policy, a version number is given so that users can easily recognize the revised information.
02. Items for Collection and How to Collect Them
Company collects and processes the following items:
-
• Customer inquiries: Collected through customer support's inquiry page
- Required items: name, e-mail, contact number, country, company, Job Title, address, zip code, city
-
• Interested customer registration
- Required items: e-mail, name, contact number, country, company, Job Title
-
• Webinar subscription
- Required items: e-mail, name, contact number, country, company, Job Title
※ cookies are utilized due to the convenience of users. The details can be found from our privacy policy.(clause 13)
-
• Data download : Collected through pop-up when data download is requested.
- Required item : email, name, country, company, Job Title, industry
- Optional item : Agree to receive marketing information
※ cookies are utilized due to the convenience of users. The details can be found from our privacy policy.(clause 13)
03. Purpose of collection and Use of Personal Information
The company collects and processes personal information for the following purposes.
-
• Customer Inquiry
- Information on product, sample, and partnership service-related inquiries and request results
- Securing smooth communication channels such as handling inquiries and complaints
-
• Interested Customer Registration
- Information and benefits related to products, webinars, exhibitions, etc.
-
• Webinar Application/Subscription
- Provides webinar related information guide and replay
-
• Data Download
- Provides services for website quality analysis and improvement
- (When agreed to receive marketing information) Information and benefits related to products, webinars, exhibitions, etc.
04. Retention and Period of Use
The Company will process and retain personal information within the period of use of personal information in accordance with laws and regulations or within the period of use of personal information agreed upon when collecting personal information from the users. Said information will be destroyed once the retention period has ceased.
-
① Each personal information processing and retention period is as follows:
Personal information related to collection and use of personal information is destroyed after retention and use for the period specified below, from the date of consent until the purpose is carried out.-
• Customer inquiry information
-
- Retention period: 3 years after customer inquiry
-
- Retention Basis : Records on consumer complaints or dispute handlings
-
-
• Information on registration of interested customer
-
- Retention Period : Destroy within 5 days after cancellation of interested customer registration application
-
- Retention Basis : Sending a newsletter
-
-
• Webinar Subscription/Application Information
-
- Retention Period : Destroy within 5 days of requesting to cancel the webinar subscription
-
- Retention Basis : Webinar related information guide and replay
-
-
• Data Download
-
- Retention Period : 3 years after requesting data download
-
-
-
② Exceptions to personal information retention
If there is a need to retain information for a certain period of time for reasons such as confirmation of rights and obligations related to transactions as follows, even if the purpose of collection or provision has been carried out, all or part of personal information collected for a certain period of time may be retained in accordance with the provisions of relevant laws and regulations.- Retention period in the case it is necessary to retain records ergarding contract of subscription cancellation, according to provisions of laws and regulations is 5 years
※ Article 85-3 of the Framework Act on National Taxes
A. A taxpayer must faithfully prepare and retain books and evidential documents related to all transactions in accordance with the provisions of each tax law.
-
B. Books and evidential documents falling under paragraph (1) shall be preserved for five years from the date when the statutory filing deadline has passed for the relevant taxable period to which the transaction belongs.
- Records for consumer complaints and dispute resolutions : 3 years
- In the case of individually obtaining customer's consent
- In the case of obtaining customer consent through notification of or specifying the retention period to the customer in advance in due process
05. Entrustment of Personal Information
Users' personal information is entrusted as follows:
Entrusted Entity |
Entrusted Task |
Subject of Information |
Entrusted Information |
---|---|---|---|
Samyang Data Systems |
IT infrastructure operation agency + database |
All data subjects |
All information items |
The Uber Creative |
Website operation agency |
All data subjects |
All information items |
DirectSend |
Message delivery |
Name, phone number |
Name, phone number |
Amazon Web Service Inc. |
Data storage |
All data subjects |
All information items |
06. Item Destruction and Means
-
① Procedure of destruction
- Collected personal information is transferred to a separate database or a separate table within the database (in the case of paper, a separate filing cabinet) when the information subject requests withdrawal or deletion, and is stored for the retention period, then destroyed.
- Personal information will not be used for any other purpose than being retained for, unless it is required by law.
-
② Means of destruction
- Personal information printed on paper is shredded with a shredder or destroyed through incineration.
- Personal information stored in the form of an electronic file is deleted using a method that makes it impossible to reproduce.
07. Rights of Users and Legal Representatives and Exercise thereof
-
① Rights of subjects of information and method of exercise thereof
- Users may request to view, alter, or destroy their personal information. In the case of a bulletin board inquiry, contact the person in charge of personal information management or any other person in charge, and an action will be taken without delay.
- If a user requests correction of errors in personal information, the personal information will not be used or provided until the correction is completed.
-
② Duties of Users and means of exercise thereof
- Users have the right to protect their personal information as well as the obligation to protect themselves, and not to infringe the information of others. Caution is advised to not leak your personal information and to not damage other people's personal information, including posts. If you violate the information and dignity of others, you may be punished according to the relevant laws.
- It is requested to prevent unexpected accidents by entering one's accurate and up-to-date personal information. Users are responsible for incidents caused by inaccurate information.
08. Securing Safety of Personal Information
The Company will take the following technical and managerial measures to ensure safety from loss, theft, leaking, alteration, or damage of personal information in processing.
-
① Technical measures
- When storing one's resident registration number or other such unique identification information, it is encrypted using a reliable encryption algorithm to prevent unauthorized leakage.
- When personal information is transmitted over the network, it is transmitted safely with SSL encryption.
- The Company uses an anti-virus program to protect the system from potential damage.
- The Company keeps and manages records of access to the personal information processing system for at least one year. Access records are managed to prevent alteration, theft, or loss.
-
② Administrative measures
- The Company has established and implemented an internal management plan for the safe handling of personal information.
- The Company restricts the access rights to users' personal information to those within the personal information processing department.
- The Company conducts regular in-house training and outsourced training for employees who handle personal information on acquisition of new security technologies and duties to protect personal information.
- The handover of the personal information-related processor is thoroughly carried out in a state of maintained security. Responsibilities for personal information accidents after joining or leaving the company are clearly distinguished.
- The Company controls access by setting the computer room and data storage room as areas of special protection.
- The Company is not responsible for the user's personal mistakes or for any incidents that occur due to inherent risks in the internet. In order to protect their personal information, each member must properly manage their information and take responsibility for it.
- In the event that personal information is lost, leaked, altered, or damaged due to a mistake of an internal manager or an accident in technical management, the Company will immediately notify the users and take appropriate counter-measures and consider compensation.
③ Various standards for measures to ensure safety of personal information such as the Personal Information Protection Act, enforcement ordinances, enforcement rules, etc. shall be complied with.
09. International Transfer of Your Personal Data
We may transmit your personal data to third parties with whom we have contracted to subcontract services in order to carry out activities or functions relating to the processing in relation to your personal data described above. Our third parties have a contractual obligation to comply with applicable laws or regulations, including the obligation to have a valid mechanism for the cross-border transfer of personal data within the EU in place to receive the personal data from the EU. For more information on our cross-border transfers of your personal data, please contact us using the contact details provided in the "Contacting Us" section below.
10. Complaints Regarding Personal Information
The Company has designated a person in charge of personal information protection to handle related complaints.
-
• Data Protection Officer
- Position/Role : Ingredients marketing team leader
- Affiliated department : Ingredients marketing team
- E-mail : yonghoon.lim@samyang.com
- Phone number : +82-2-2157-9523
- Fax number : +82-2-2157-9057
-
• Personal Information Management
- Position/Role : Head of Global New Ingredients
- Affiliated department : Ingredients marketing team
- E-mail : sanghoon.seo@samyang.com
- Phone number : +82-2-2157-9571
- Fax number : +82-2-2157-9057
Telephone consultation is available from 09:00 to 18:00 on weekdays, and consultations using e-mail, fax, or mail will be responded to within 24 hours of its receipt. In the case of other personal information-related professional consultation or infringement reports, please submit inquiries to the following organizations.
-
• Personal Information Infringement Report Center (Korea Internet and Security Agency)
- Phone number : (no area code) +82-118
- Website : http://privacy.kisa.or.kr
-
• Supreme Prosecutor's Office Cyber Investigation Division
- Phone number : (no area code) +82-1301
- Website : http://www.spo.go.kr
-
• National Police Agency Cyber Security Guard
- Phone number : (no area code) +82-182
- Website : https://www.police.go.kr/www/security/cyber.jsp
11. Notice of Personal Information Processing Policy
If due to changes in government policy or security technology there is any deletion or modification of the contents of the current Personal Information Policy, a notice will be sent out through the website at least 7 days in advance.
- Personal Information Policy Change Date: 21-12-01
- Personal Information Policy Enforcement Date: 21-12-08
12. Installation and Use of Image Processing Equipment
The Company has installed and operates image information processing equipment accross the country at each business site as follows:
① Reason and purpose of installation: Safety of the Company's facilities and fire prevention
-
② Installation location and range of photography
- Installation location: Interior and exterior of business site, outside access areas, main entrance, lobby, fence perimeter, etc.
- Range of shooting: Range of movement of people going in and out
-
③ The person and department in charge of management and the person with rights to access video information
- Submit inquiries to the person in charge of video information management for each business site (refer to the CCTV information board for each business site)
- Management contact number: Samyang Corporation Management Support Team (+82-2-740-7132)
-
④ Video information recording time, storage period, storage location, and processing method
- Shooting time: 24 hours
- Storage period: 90 days from time of shooting
- Storage location and processing method: Submit inquiries to the person in charge of video information management for each business site (refer to the CCTV information board for each business site)
-
⑤ Storage location and processing method: Submit inquiries to the person in charge of video information management for each business site (refer to the CCTV information board for each business site)
- Submit inquiries to the person in charge of video information management for each business site (refer to the CCTV information board for each business site)
-
⑥ Measures for video information viewing requests, etc.
- If the user wants to view recorded video information or to confirm the existence of video information, this is allowed only if it is clearly necessary for the benefit of the user's life, body, and property.
-
⑦ Technical, administrative, and physical measures to protect video information
- Access control and access authority restrictions, safe storage of image information and transmission technology application, processing records storage and forgery and falsification prevention measures, provision of storage facilities and installation of locks, etc.
13. Installation, Use, and Refusal of Automatic Collection Device
-
① Definition of Cookies
- The Company may install and operate devices such as cookies or access information files that automatically collect personal information to provide users with a convenience service environment. -
② Purpose for use of cookies
-
- It is utilized as a measure of target marketing and service reform by analyzing users' frequency of access and visit time and identifying their preference and interest.
-
- When requesting/downloading webinars, users are provided convenience function by the system which remembers the users' information and automatically customizes the default setting. (※ After storing one month from the date of input, the data are updated each time of new input)
-
-
③ Decline
- Users have the right to accept or decline cookies. Therefore, the user can accept all cookies in the device settings or options, confirm every time a cookie is saved, or refuse to save all cookies. However, if the user refuses to store all cookies, service provision may be restricted or unavailable.
* Example of how to set cookies
[For Internet Explorer: 'Tools' at the top of the web browser > Internet Options > Personal Information > Personal Information Processing Level Settings]