Personal information processing policy
Gapyeong Flower Garden (hereinafter referred to as the "Company") has established and implemented a personal information processing policy to protect the personal information of the data subject and to handle related grievances quickly and smoothly in accordance with the Personal Information Protection Act.
The company's personal information processing policy includes the following.
1. Purpose of processing personal information
The company processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent under the Personal Information Protection Act.
A. Contact Us – Check and reply to customer inquiries
I. Recruitment Screening – Applicants' Recruitment Process
2. Personal Information Items to Process
go. Contact Us
Category Collection Items
Contact Us name, phone number, email
I. employment screening
Category Collection Items
When submitting a job application
• Personal information: photo, name (in Korean, English), date of birth, gender, e-mail, mobile phone number, address
• Academic background: Period of enrollment, school name, major, graduation/ completion status, degree type, location, rating/full score
• Career: Working period, workplace name, responsible job, position, annual salary, reason for retirement
• Education/awards, extracurricular activities: date (period), content, organization in charge, and other contents
• Language and qualifications: Language, level, test name, score, type of qualification/license, place of issue, date of acquisition
• Other: Military completion status (reasons for exemption), service period, preferential employment requirements
• Personal information related to self-introduction, career description, and other job applications
Human Resources Pool, etcLock (Select) Sangdong
3. Processing and retention period of personal information
① The company holds personal information in accordance with laws and regulations, holds personal information agreed upon when collecting personal information from the data subject, and processes and holds personal information within the period of use.
② The processing and retention period of each personal information is as follows.
A. Contact Us
– Discard immediately (within 5 days) after customer inquiry response is completed
I. employment screening
- Job application submission: immediately (within 5 days) after confirmation of employment
- Talent Pool registration: Retained and destroyed from the date of consent until the end of the year, which is two years old
4. Rights and obligations of the information subject and legal representative and how to exercise them
① The data subject may exercise the right to view, correct, delete, and stop the processing of the company at any time.
② The exercise of rights under paragraph (1) may be conducted in writing, e-mail, fax, etc. in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and the company takes action without delay.
③ The exercise of rights under paragraph (1) may be conducted through a legal representative of the information subject or an agent, such as a person delegated. In this case, "Notification of the method of processing personal information (No. 2020-7)" You have to submit a power of attorney according to attached Form 11.
④ The rights of the data subject may be restricted in accordance with Articles 35 (4) and 37 (2) of the Personal Information Protection Act.
⑤ Requests for correction and deletion of personal information cannot be requested if other laws specify that the personal information is subject to collection.
⑥ The company checks whether it is the person who requested the request, such as a request for access according to the right of the information subject, a request for correction or deletion, or a request for suspension of processing.
5. destruction of personal information
① When personal information becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the purpose of processing, the company destroys the personal information without delay.
② If the personal information period agreed by the data subject has elapsed or the purpose of processing has been achieved, the personal information shall be transferred to a separate database (DB) or stored differently.
③ The procedure and method of destroying personal information are as follows.
A. Procedures for Destruction
- The company selects personal information that has caused the reason for destruction and destroys the personal information with the approval of the company's personal information protection manager.
B. How to destroy it
- Electronic file-type information is destroyed so that records cannot be reproduced, and personal information printed on paper is destroyed by crushing with a shredder or incineration.
6. Measures to ensure the safety of personal information
The company is taking the following measures to ensure the safety of personal information.
A. Management measures: Minimizing and training personnel handling personal information and establishing and implementing internal management plans
I. Technical measures: technical measures to prepare for illegal access to information and communication networks, such as hacking, access control to personal information, and installation of security programs
All. Physical measures: installation of intrusion prevention systems, use of locks for document security, access control for unauthorized persons
7. Matters concerning the installation, operation, and rejection of automatic personal information collection devices
① In order to provide individual customized services to users of the website, the company uses "cookie" that stores usage information and calls it from time to time.
② Cookies are a small amount of information sent by the server (http) used to run the website to the user's computer browser and are also stored on the user's hard disk within the user's PC computer.
A. Purpose of use of cookies
- It is used to improve the website and provide optimal information by identifying user visit records (IP Address, access time) and access method.
B. Installation, operation, and rejection of cookies
- Explorer: You can refuse to save cookies by setting options on the Tools > Internet Options > Privacy menu at the top of your web browser.
- Chrome : You can refuse to save cookies through Chrome customization and control at the top of your web browser > Settings > Options settings on the Privacy and Security menu.
- Edge : Settings at the top of the web browser and other settings on the Cookies and Site Rights menu allow you to refuse to save cookies.
C. Disadvantages if rejected
- Refusing to save cookies may cause difficulties in using customized services.
8. Personal Information Protection Officer
The company is in charge of the work related to the processing of personal information, and designates a person in charge of personal information protection to handle complaints and remedy damages related to the processing of personal information.
Also, we are operating the department in charge of personal information protection as below.
Personal information related to Contact Us Personal information related to recruitment screening
★★★-★★★-★★★★
★★★-★★★-★★★★
9. Request for personal information access
The data subject may request the personal information protection department in 8. above to access personal information under the Personal Information Protection Act.
10. Methods of remedy for infringement of rights and interests
The information subject can report any complaints related to personal information protection that arise while using the company's services to the person in charge of personal information protection or the department in charge. The company will respond quickly to the users' reports.
If you need to report or consult other personal information infringement, please contact the institution below.
- Personal Information Infringement Reporting Center (https://privacy.kisa.or.kr )
- Cyber Investigation Division of the Scientific Investigation Department of the Supreme Prosecutors' Office (https://cybercid.spo.go.kr/, 1301 without a national number)
- Cyber Security Bureau of the National Police Agency (http://cyberbureau.police.go.kr/index.do, 182 without a station number)
11. Change of personal information processing policy
This personal information processing policy will take effect from January 2021.
