<Infinity Works Co., Ltd.> ('http://www.inworks.co.kr', hereinafter 'inworks') protects the personal information of information subjects in accordance with Article 30 of the 「Personal Information Protection Act」, and grievances related thereto We establish and disclose the personal information processing policy as follows in order to process the information quickly and smoothly.
Article 1 (Purpose of processing personal information)
<Infinity Works Co., Ltd. > ('http://www.inworks.co.kr', hereinafter 'inworks') processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent in accordance with Article 18 of the 「Personal Information Protection Act」 will be implemented.
1. Handling civil complaints
Personal information is processed for the purpose of verifying the identity of the complainant, confirming the complaint, contacting and notifying for fact-finding, and notifying the processing result.
2. Provision of goods or services
Personal information is processed for the purpose of delivering goods, providing services, and sending contracts and bills.
Article 2 (Processing and Retention Period of Personal Information)
① <Infinity Works Co., Ltd.> processes and retains personal information within the period of retention and use of personal information in accordance with laws and regulations or within the period of retention and use of personal information agreed upon when collecting personal information from the information subject.
② Each personal information processing and retention period is as follows.
1.<Processing of civil complaints>
Personal information related to <handling of civil complaints> is retained and used for the above purposes from the date of consent for collection and use to <quasi-permanent>.
Basis of retention: Provision of maintenance for our products and services
Relevant laws: 1) Records on consumer complaints or dispute handling: 3 years
2) Records on payment and supply of goods: 5 years
Article 3 (Rights and Duties of Information Subjects and Legal Representatives and Method of Exercising them)
① The information subject can exercise the right to view, correct, delete, and suspend processing of personal information at any time with respect to Infinity Works Co., Ltd.
② The exercise of the rights pursuant to Paragraph 1 may be done in writing, e-mail, fax, etc. in accordance with Article 41 (1) of the Enforcement Decree of the 「Personal Information Protection Act」 for Infinity Works Co., Ltd., and Infinity Works Co., Ltd. () will take action without delay.
③ The exercise of rights pursuant to Paragraph 1 may be done through a legal representative of the information subject or an agent such as a person who has been delegated. In this case, “Personal Information Handling Method Notice (No. A power of attorney must be submitted.
④ The rights of the information subject may be restricted in accordance with Articles 35 (4) and 37 (2) of the 「Personal Information Protection Act」.
⑤ Request for correction and deletion of personal information cannot be requested if the personal information is specified as a collection target in other laws.
⑥ Infinity Works Co., Ltd. confirms whether the person who made the request, such as a request for reading, correction/deletion, or request for suspension of processing, is the person or a legitimate agent according to the rights of the information subject.
Article 4 (Creating items of personal information to be processed)
① <Infinity Works Co., Ltd.> processes the following personal information items.
1< Handling civil complaints >
Required items: email, mobile phone number, name, company phone number, company name
Article 5 (Destruction of personal information)
① <Infinity Works Co., Ltd.> destroys the personal information without delay when the personal information becomes unnecessary, such as the expiration of the personal information retention period or achievement of the purpose of processing.
② If the personal information retention period agreed by the information subject has elapsed or the purpose of processing has been achieved, if it is necessary to continue to preserve the personal information in accordance with other laws, move the personal information to a separate database (DB) or change the storage location Conserve otherwise.
1. Legal basis:
2. Items of personal information to be preserved: account information, transaction date
③ The procedure and method of personal information destruction are as follows.
1. Destruction procedure
< Infinity Works Co., Ltd. > selects the personal information for which the reason for destruction has occurred, and destroys the personal information with the approval of the personal information protection officer of < Infinity Works Co., Ltd. >.
2. Destruction method
Information in the form of electronic files uses a technical method that cannot reproduce records.
Personal information printed on paper is shredded with a shredder or destroyed through incineration.
Article 6 (Measures to ensure the safety of personal information)
< Infinity Works Co., Ltd. > is taking the following measures to ensure the safety of personal information.
1. Conduct regular self-audits
To ensure the stability of personal information handling, we conduct regular (quarterly) self-audits.
2. Minimization and training of personnel handling personal information
We are implementing measures to manage personal information by designating employees who handle personal information and limiting them to the person in charge.
3. Establishment and implementation of internal management plan
We have established and implemented an internal management plan for safe handling of personal information.
4. Technical measures against hacking, etc.
<Infinity Works Co., Ltd.> ('inworks') installs a security program to prevent leakage and damage of personal information caused by hacking or computer viruses, and periodically updates and checks, and installs the system in an area where access is controlled from outside. and technical/physical monitoring and blocking.
5. Encryption of personal information
The user's personal information is stored and managed with an encrypted password, so only the user can know it. For important data, a separate security function is used, such as encrypting files and transmission data or using a file lock function.
6. Storage of access records and prevention of forgery
The records of access to the personal information processing system are kept and managed for at least 6 months, and security functions are used to prevent forgery, theft, or loss of access records.
7. Restricting access to personal information
We take necessary measures to control access to personal information by granting, changing, and canceling access rights to the database system that processes personal information, and use an intrusion prevention system to control unauthorized access from outside.
Article 7 (Matters regarding installation, operation and rejection of automatic personal information collection devices)
Infinity Works Co., Ltd. does not use 'cookies' that store and retrieve the usage information of the information subject from time to time.
Article 8 (Personal Information Protection Officer)
① Infinity Works Co., Ltd. is responsible for the handling of personal information, and designates a person in charge of personal information protection as follows for complaint handling and damage relief of information subjects related to personal information processing.
▶ Person in charge of personal information protection
Name: Jae-Yeop Lee
Contact : +8224684665, email@example.com, +824694665
※ You will be connected to the department in charge of personal information protection.
▶ Department in charge of personal information protection
Department Name: Management Support Department
Contact Person: Recruiter
② The information subject may inquire about all personal information protection related inquiries, complaint handling, damage relief, etc. that occurred while using the service (or business) of Infinity Works Co., Ltd. to the person in charge of personal information protection and the department in charge. Infinity Works Co., Ltd. will answer and handle inquiries from the information subject without delay.
Article 9 (Request for viewing personal information)
The information subject may file a request for access to personal information pursuant to Article 35 of the Personal Information Protection Act to the following departments.
<Infinity Works Co., Ltd.> will make every effort to promptly process the personal information access request of the information subject.
▶ Reception and processing department of personal information access request
Department Name: Management Support Department
Contact Person: Recruiter
Article 10 (Method of Remedy for Infringement of Rights)
The information subject may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency Personal Information Infringement Report Center in order to receive relief from personal information infringement. In addition, for other personal information infringement reports and consultations, please contact the following organizations.
1. Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)
4. National Police Agency: (without area code) 182 (cyberbureau.police.go.kr)
The head of a public institution responds to a request under Article 35 (Perusal of Personal Information), Article 36 (Correction/Deletion of Personal Information), and Article 37 (Suspension of Personal Information Processing, etc.) of the 「Personal Information Protection Act」 A person whose rights or interests have been infringed due to a disposition or omission taken may file an administrative appeal in accordance with the Administrative Appeals Act.
※ Please refer to the website of the Central Administrative Adjudication Committee (www.simpan.go.kr) for more information on administrative adjudication.
① This personal information processing policy will be applied from January 1, 2021.