en 
ko
Pumyang E&C Co., Ltd. (hereinafter referred to as the “Company”) legally processes and safely manages personal information in compliance with the Personal Information Protection Act and related laws and regulations to protect the freedom and rights of the sata subjects. Accordingly, in accordance with Article 30 of the Personal Information Protection Act, the Company establishes and discloses the following privacy policy to protect the personal information of the information subject and to promptly and smoothly handle complaints related thereto.
Privacy Policy Labeling
The company is making efforts to provide an easily understandable privacy policy in order to actively protect users' rights, and provides relevant information in an easily understandable labeling manner in order to actively protect users' rights (right to self-determination of personal information).
 Collection items Purpose of processing Retention period |  Processing consignment Provision to Third Parties Complaints handling |
Privacy Policy
- Enacted 2019.08.01. (No. 2019-01)
- Revised 2024.07.01. (No. 2024-01)
Index
- Purpose of processing personal information
- Processing and retention period of personal information
- Provision of personal information to third parties
- Entrustment of personal information processing
- Rights, obligations and exercise methods of data subjects and legal representatives
- Personal information items processed
- Methods of collecting personal information
- The company processes personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
- General Inquiry: Collecting customer information to answer and provide guidance to customer inquiries
- Ethics Hotline: Internal corruption reporting and grievance consultation: Collecting information from whistleblowers to report unfair demands and unfair practices by employees and staff, and grievance handling
- The company processes and retains personal information within the retention and use period of personal information stipulated by law or within the retention and use period of personal information agreed upon by the data subject when collecting personal information.
- The processing and retention periods for each personal information are as follows.
- General Inquiry: Destroyed after processing inquiry
- Ethics Hotline : 3 years after receiving or processing a report
- The company processes the personal information of the data subject only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases corresponding to Articles 17 and 18 of the Personal Information Protection Act, such as consent from the data subject or special provisions of the law. In other cases, the company does not provide the personal information of the data subject to third parties.
Recipient (Third Party) | Purpose of provision | Items provided | Retention and Use Period |
|---|---|---|---|
| HANARO Medical Foundation | Physical examination | Name, date of birth | Until the recruitment process is completed |
- In order to process personal information smoothly, the company entrusts the processing of personal information as follows.
Company entrusted | Purpose of entrustment | Consignment Items | Retention and Use Period |
|---|---|---|---|
| NCERP Co., Ltd. | System Administration | DB system consignment operation (computer outsourcing) | Until the end of the consignment contract |
- When concluding a consignment contract, the company states in a contract or other document matters related to responsibilities such as prohibition of processing personal information for purposes other than the performance of the consigned work, technical and administrative protection measures, restrictions on re-consignment, management and supervision of the consignee, and compensation for damages in accordance with Article 26 of the Personal Information Protection Act, and supervises whether the consignee safely processes personal information.
- When concluding a consignment contract, the company will disclose without delay through this personal information processing policy if the content of the consignment work or the company entrusted changes other than the purpose of the consignment work in accordance with Article 26 of the Personal Information Protection Act.
- The data subject may exercise the following personal information protection rights against the company at any time.
- Request to access personal information
- Request for correction in case of errors, etc.
- Request for erasure
- Request for suspension of processing
- Request to withdraw consent
- The rights under Article 1 may be exercised against the Company through writing, e-mail, facsimile transmission (FAX), etc., and the Company will take action without delay.
- If the data subject requests correction or erasure of personal information due to errors, etc., the company will not use or provide the personal information until correction or erasure is completed.
- The exercise of rights under Article 1 may be done through a proxy, such as the data subject's legal representative or an authorized person. In this case, a power of attorney in the format of Appendix 11 of the Enforcement Regulations of the Personal Information Protection Act must be submitted.
- The data subject shall not infringe upon the personal information or privacy of the data subject or others that the company is processing in violation of the Personal Information Protection Act or other related laws.
- The company destroys personal information without delay when the personal information becomes unnecessary, such as when the retention period for personal information expires or the processing purpose is achieved.
- In cases where the retention period for personal information agreed upon by the data subject has expired or the processing purpose has been achieved, but personal information must be retained in accordance with other laws and regulations, the personal information is transferred to a separate database (DB) or stored in a different location.
- The procedures and methods for destroying personal information are as follows:
- Destruction Procedure
- The company selects personal information for which a reason for destruction has arisen and destroys the personal information after receiving approval from the company's personal information protection (management) manager.
- Destruction Method
- The company destroys personal information recorded and stored in electronic file formats by using methods such as low-level formatting to render the records unrecoverable, and destroys personal information recorded and stored in paper documents by shredding or incineration.
- Destruction Procedure
- The company is taking the following measures to ensure the security of personal information.
- Administrative measures: Establishment and implementation of internal management plan, regular employee training, etc.
- Technical measures: Management of access rights to personal information processing systems, installation of security programs, etc.
- Physical measures: Access control to computer rooms, archives, etc.
- The company is responsible for overall management of personal information processing, and has designated a privacy officer as follows to handle complaints and provide remedies for damages from data subjects related to personal information processing.
- ▶ Privacy Officer
- Name: Lee Min Young
- Position: Head of Management Support Office
- ※ You will be connected to the personal information protection department.
- ▶ Privacy Protection Department
- Department Name: Management Support Office
- Contact Person: Seo Soon Ki
- Contact: 82-2-799-6515, skseo@pyenc.co.kr
- The data subject may inquire about all personal information protection-related matters, such as inquiries, complaints, and redress that arise while using the company's services (or business) to the privacy officer and the department in charge. The company will respond to and process the date subject's inquiries without delay.
- The data subject may inquire with the following organizations for redress, consultation, or other inquiries regarding personal information infringement.
- ▶ Department in charge of receiving and processing personal information access requests
- Department Name: Management Support Office
- Contact Person: Seo Soon-ki
- Contact: 02-799-6515, skseo@pyenc.co.kr
- ※ Working hours: Weekdays 08:00~17:00
- ※ Closed on Saturdays, Sundays, and public holidays.
- Data subjects may inquire about remedies for damages caused by personal information infringement or for consultation to the following organizations.
- ▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
- Responsibilities: Reporting personal information infringement, requesting consultation
- Homepage : privacy.kisa.or.kr
- TEL : 82-2-405-5118
- Address: (58324) Korea Internet & Security Agency (KISA) 9 Jinheung-gil, Naju, Jeollanam-do, Republic of Korea
- ▶ Personal Information Dispute Mediation Committee
- Responsibilities: Personal information dispute mediation application, collective dispute mediation (civil resolution)
- Homepage : www.kopico.go.kr
- TEL : 82-2-1833-6972
- Address: (03171) 12th floor, Government Seoul Building, 209 Sejong-daero, Jongno-gu, Seoul
- ▶ Supreme Prosecutors' Office : Telephone : (82) 1301 ( www.spo.go.kr )
- ▶ National Police Agency: Telephone : (82) 182 ( ecrm.cyber.go.kr )
- The company installs and operates visual data processing devices as follows.
- Installation basis and purpose of visual data processing devices
- Facility Safety · Fire Prevention
- Customer safety, business protection, and crime prevention such as theft
- Preventing illegal intrusion by outsiders
- Number of installations, installation location, shooting range
- The company installs and operates visual data processing devices in the following locations after reviewing their feasibility in accordance with relevant laws.
- Places and areas that require security for public safety and protection of trade secrets, such as company entrances and lobbies
- Department in charge and manager/operator
Division | Business place | Purpose of filming | Manager |
|---|---|---|---|
| Head office | Headquarters building | For security and crime prevention | Management Support Office, 02-799-6532 |
| Factory | Boeun Factory | For security and crime prevention | Heavy Equipment Support Center, 043-544-7452 |
| Site | Field Offices | For security and crime prevention | Site Manager |
- visual data recording time, storage period, storage location, and processing method
- Shooting time: 24 hours shooting
- Storage period: 30 days from the time of shooting
- Storage location and processing method: Stored and processed in the visual data processing devices control room
- How and where to check visual data
- You can check by visiting the location after contacting the person in charge of visual data management in advance.
- Actions taken in response to requests from data subjects to view visual data, etc.
- You must apply by submitting a request for viewing/confirmation of existence of personal visual data, and viewing is permitted only when the subject of the information was filmed or when it is clearly necessary for the life, body, or property interests of the subject of the information.
- When a data subject requests to view or erases personal visual data, the company will take immediate action, except in the cases of refusal listed below.
- You must apply by submitting a request for viewing/confirming the existence of personal visual data, and viewing is permitted only when the subject of the information was filmed or when it is clearly necessary for the life, body, or property interests of the subject of the information.
- When a data subject requests to view or erases personal visual data, the company will take immediate action, except in the cases of refusal listed below.
- Technical, administrative and physical measures to protect visual data
- We protect your information by establishing an internal management plan, controlling access and restricting access rights, applying technology to safely store and transmit visual data, keeping processing records and preventing forgery and falsification, establishing storage facilities, and installing locking devices.