ESG Report
2021 Pearl Abyss ESG Report
May 4, 2022
Attachments
PA_2021 ESG Report.pdf
Pearl Abyss Corp. (hereinafter referred to as the "company") collects and uses personal information in accordance with Personal Information Protection Act and other relevant laws. This Privacy Policy discloses what personal information the company collects, how they being used, and how the personal information is handled.
This Privacy Policy applies to the Pearl Abyss official website and the image information processing equipment operated and managed by the company.
1. Types of Information Collected and Method of Collection
The company collects required information when you use the official website.
1) Corporate Ethics Report
- Required Information: Password
- Optional Information: Name, phone number, email
※ You can report or receive consultation anonymously for corporate ethics and compliance related issues.
2. Purposes of Handling Personal Information
The company handles personal information for the following purposes and only for those purposes. If the purposes change, the company will follow relevant laws by acquiring permission and taking the necessary steps.
1) Submitting a report or receiving consultation for corporate ethics and compliance related issues
2) Securing clear communication and for sending results about corporate ethics compliance reports and consultations
3. Providing Personal Information to Third Parties
The company only uses personal information as stated under "Purpose of Handling Personal Information." The personal information is not provided to third parties except when permitted by your consent, in accordance with special provision and within the boundaries of relevant laws.
4. Handling Personal Information and Duration of Use
The company retains and uses personal information collected for the duration agreed upon when collecting the personal information. The personal information will be destroyed without delay when the purposes of handling personal information are achieved.
However, certain information that are required by law will be retained for the duration as stated by those laws.
5. Destroying Personal Information
The company will destroy personal information when they exceed the retention period, achieved their purpose, and if the information is no longer required.
If the information is required by relevant laws to be retained for a period past their retention period or their purpose, then the information is moved to a different database or their location is moved for storage. The procedure and method of disposing the information is as follows:
Destroying Procedure: Your personal information will be destroyed without delay after its purpose has been achieved. However, certain information that are required by law will be retained for the duration stated by those laws. The personal information will not be used for any other purpose if it is being kept in accordance with relevant laws.
Destroying Method: Printed personal information will be shredded through a paper shredder or incinerated. If the information is stored as a data file, it will be deleted using technology that makes the data unrecoverable.
6. Your Rights and How to Exercise Your Rights
You reserve the right to view, correct, delete, and request the company to stop handling your registered personal information at any time. In this case, contact the staff in charge of personal information protect o the department in-charge of handling personal information issues by letter, phone, or email. Then your personal information will be destroyed without delay.
7. Installing, Operation, and Rejecting Automated Personal Information Collecting Technology
The company uses "Cookies" to store and use your information on the website. Cookies are small text files that is sent by the website's server to the user's browser and saved within the hard drive. We use cookies for the following purposes:
1) Purpose of Using Cookies and Others Applications
The company employs analytical tools with data on the user's visiting frequency, visiting time, user's field of interest. and records.
The company and other third parties providing analytical service can use cookies, beacons, tags or scripts to track down data. Data is collected for purposes of statistical analysis on website management, trend review, and user's activity in the website. The company may receive aforementioned data in package from third parties that provide analytical services.
2) Settings to Refuse Cookie Saves
Users have a right to choose how cookies are installed. A user may use the web browser settings to either completely allow all cookies, check everytime a cookie is installed, or refuse all cookies. However, users that refuse cookies may experience some inconveniences the our services.
- Internet Explorer: [Tools] → [Internet Options] → [Privacy] → [Advanced]
- Chrome: [⋮] → [Settings] → [View Advanced Settings] → Privacy[Content Settings]
※ Other web browsers may have different methods to change their settings.
The company also uses external web log analyzing tools such as Google Analytics and etc.
- Block Google Analytics: https://tools.google.com/dlpage/gaoptout/
※ Other Web Log Analyzing Tools have different refuse settings.
8. Measures Used to Protect Personal Information
The company takes the following precautions to protect your personal information from getting lost, stolen, exposed, changed, and damaged. However, the company is not liable for situations caused for the carelessness of users such as not keeping their password safe and others, or for situations outside of the company control.
1) Technological Measures
- Files and transmission of data that include personal information are encrypted or locked by a password.
- The company stays vigilant to protect against hackers, computer viruses, and other possible threats to your personal information. Additionally, the company constantly backs up data just in case and uses antivirus programs, firewalls, and other various methods to protect the company devices.
- The company has taken measures to ensure the safety of the systematically configured database system to handle personal information.
2) Managerial Measures
- The company has limited and minimized the number of staff that has access to personal information
- The company provides regular training to personal information service personnel and trustees regarding their privacy obligations.
- The company establishes and manages personal information processing guidelines through the department in-charge of personal information protection. The company also makes as effort to check compliance with internal regulations on a regular basis to rectify any problems found.
3) Physical Measures
- The company establishes and operates access control procedures for the separate physical storage of the personal information system where personal information is stored.
- Documents containing personal information, auxiliary storage media, and others are stored in a safe location with a lock.
9. Installation and Operation of Image Information Processing Equipment
The company installs and operates image information processing equipment for the purpose of facility safety and fire prevention, personnel and vehicle access control, crime prevention for the safety of employees and visitors, vehicle theft and damage prevention, and illegal intrusion of outsiders pursuant in accordance with Article 25 (1) for the Personal Information Protection Act.
[Image Information Processing Equipment Status]
| Locations and Recorded Areas | Number Installed |
|---|---|
| Building Lobby | 2 |
| Main Gate | 1 |
| Back Gate | 1 |
| Underground Parking and Storage | 22 |
| Cafe | 2 |
| Outside the building | 17 |
| Total | 45 |
[Image Information Processing Equipment Management and Access]
| Groups | Personnel | Contact Information |
|---|---|---|
| Manager of Image Information Processing Equipment | General Affairs Team Leader in Corporate Affairs Division | 031-476-8583 (Extension: 4) |
| Personnel with access to Image Information Processing Equipment | General Affairs staff in Corporate Affairs Division | |
| Facilities Team Staff in Corporate Affairs Division | ||
| Security Staff |
[Image Information Recording, Retention, Storage Location, and Handling]
The company retains the image information after recording. The data is deleted in a way it cannot be recovered after the retention period is over.
| Recorded | Retention Period | Stored Location | Handling |
|---|---|---|---|
| 24Time | 30 days after recording | Pearl Abyss 1F, Security Room | Records/manages all actions regarding the image information such as usage outside its stated purpose, being provided to third parties, access, etc. and all image information is deleted safely after the retention period expires |
[Image Information Processing Equipment Installation and Management Consignment]
The company entrusts the installation and management of the image information processing equipment to the following companies.
| Companies | Entrusted Duties | Assigned Personnel | Contact Information |
|---|---|---|---|
| S1 | Installation & Maintenance | Deok Hyeon Hong | 1588-3112 |
| Kyobo Realco | Operation & Management | Jung Ju Lee | 02-2290-4053 |
[Measures Regarding Requests to View Image Information, Etc.]
If you desire to view, confirm, or delete your recorded image information, you may request the relevant matter to the company. However, this is limited to personal image information personally recorded and clearly needed for the benefit of your imminent life, body, and assets.
The company will take the appropriate measure without delay once a request to view, confirm, or delete one's personal image information has been made. However, your request may be denied regarding viewing your personal image information in the following cases:
- Causing serious disruption to a criminal investigation, the sustainment of public prosecution, and procession of trial
- If personal image information has been deleted after the expiration of the retention period
- If taking the necessary measures for the request to view the information leads to great concerns of invasion of privacy
- If there are other valid reason to reject your request to view the information
[Image Information Verification Method and Stored Location]
- Verification Method: If you desire to verify your personal information, please contact the head of the department of personal information or image information prior to visiting the company in person.
- Stored Location: Pearl Abyss 1F, Security Room
[Image Information Measures for Safe Procurement]
- The company does not gather image information or recordings for reasons other than those stated in this Privacy Policy, and only those authorized to handle personal information are granted access to gathered/saved image information.
- The company prohibits any type of random perusal and playing of, as well as externally releasing the gathered image information.
- The company is recording/managing all actions regarding the image information such as usage outside its stated purpose, being provided to third parties, access, etc. and all image information is deleted safely after the retention period expires.
10. Personal Information Protection Officer and Personal Information Handling Department
To protect your person information and deal with relevant complaints, the company has assigned an officer responsible for person information protection to oversee your personal information and a channel to submit your opinions and complaints related to person information protection. Please contact the head officer and relevant department with any questions, opinions, or concerns on the infringement of rights and interests regarding your personal information and the company will get back to you without delay.
| Personal Information Protection Officer | Personal Information Handling Department |
|---|---|
| Name: James Heo Title: CPO Phone: 070-4923-6372 E-mail: privacy@pearlabyss.com Fax: 031-476-8584 |
Department: Regulatory Compliance Division Phone: 070-4923-6372 E-mail: privacy@pearlabyss.com Fax: 031-624-5897 |
11. Remedies on Infringement of Rights and Interests
You may contact the following bodies for information on damage relief and consultation regarding infringement of person information.
- Infringement of Personal Information Report Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutors' Office Cybercrime Investigation Division (spo.go.kr / 02-3480-3573)
- Korean Nation Police Agency Cyber Bureau (cyberbureau.police.go.kr / 182)
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
12. Addendum
This policy shall enter into force from September 16, 2020.
Pearl Abyss Corp. (hereinafter referred to as the "company") collects and uses personal information in accordance with Personal Information Protection Act and other relevant laws. This Privacy Policy discloses what personal information the company collects, how they being used, and how the personal information is handled.
This Privacy Policy applies to the Pearl Abyss official website and the image information processing equipment operated and managed by the company.
1. Types of Information Collected and Method of Collection
The company collects required information when you use the official website.
1) Corporate Ethics Report
- Required Information: Password
- Optional Information: Name, phone number, email
※ You can report or receive consultation anonymously for corporate ethics and compliance related issues.
2. Purposes of Handling Personal Information
The company handles personal information for the following purposes and only for those purposes. If the purposes change, the company will follow relevant laws by acquiring permission and taking the necessary steps.
1) Submitting a report or receiving consultation for corporate ethics and compliance related issues
2) Securing clear communication and for sending results about corporate ethics compliance reports and consultations
3. Providing Personal Information to Third Parties
The company only uses personal information as stated under "Purpose of Handling Personal Information." The personal information is not provided to third parties except when permitted by your consent, in accordance with special provision and within the boundaries of relevant laws.
4. Handling Personal Information and Duration of Use
The company retains and uses personal information collected for the duration agreed upon when collecting the personal information. The personal information will be destroyed without delay when the purposes of handling personal information are achieved.
However, certain information that are required by law will be retained for the duration as stated by those laws.
5. Destroying Personal Information
The company will destroy personal information when they exceed the retention period, achieved their purpose, and if the information is no longer required.
If the information is required by relevant laws to be retained for a period past their retention period or their purpose, then the information is moved to a different database or their location is moved for storage. The procedure and method of disposing the information is as follows:
Destroying Procedure: Your personal information will be destroyed without delay after its purpose has been achieved. However, certain information that are required by law will be retained for the duration stated by those laws. The personal information will not be used for any other purpose if it is being kept in accordance with relevant laws.
Destroying Method: Printed personal information will be shredded through a paper shredder or incinerated. If the information is stored as a data file, it will be deleted using technology that makes the data unrecoverable.
6. Your Rights and How to Exercise Your Rights
You reserve the right to view, correct, delete, and request the company to stop handling your registered personal information at any time. In this case, contact the staff in charge of personal information protect o the department in-charge of handling personal information issues by letter, phone, or email. Then your personal information will be destroyed without delay.
7. Installing, Operation, and Rejecting Automated Personal Information Collecting Technology
The company uses "Cookies" to store and use your information on the website. Cookies are small text files that is sent by the website's server to the user's browser and saved within the hard drive. We use cookies for the following purposes:
1) Purpose of Using Cookies and Others Applications
The company employs analytical tools with data on the user's visiting frequency, visiting time, user's field of interest. and records.
The company and other third parties providing analytical service can use cookies, beacons, tags or scripts to track down data. Data is collected for purposes of statistical analysis on website management, trend review, and user's activity in the website. The company may receive aforementioned data in package from third parties that provide analytical services.
2) Settings to Refuse Cookie Saves
Users have a right to choose how cookies are installed. A user may use the web browser settings to either completely allow all cookies, check everytime a cookie is installed, or refuse all cookies. However, users that refuse cookies may experience some inconveniences the our services.
- Internet Explorer: [Tools] → [Internet Options] → [Privacy] → [Advanced]
- Chrome: [⋮] → [Settings] → [View Advanced Settings] → Privacy[Content Settings]
※ Other web browsers may have different methods to change their settings.
The company also uses external web log analyzing tools such as Google Analytics and etc.
- Block Google Analytics: https://tools.google.com/dlpage/gaoptout/
※ Other Web Log Analyzing Tools have different refuse settings.
8. Measures Used to Protect Personal Information
The company takes the following precautions to protect your personal information from getting lost, stolen, exposed, changed, and damaged. However, the company is not liable for situations caused for the carelessness of users such as not keeping their password safe and others, or for situations outside of the company control.
1) Technological Measures
- Files and transmission of data that include personal information are encrypted or locked by a password.
- The company stays vigilant to protect against hackers, computer viruses, and other possible threats to your personal information. Additionally, the company constantly backs up data just in case and uses antivirus programs, firewalls, and other various methods to protect the company devices.
- The company has taken measures to ensure the safety of the systematically configured database system to handle personal information.
2) Managerial Measures
- The company has limited and minimized the number of staff that has access to personal information
- The company provides regular training to personal information service personnel and trustees regarding their privacy obligations.
- The company establishes and manages personal information processing guidelines through the department in-charge of personal information protection. The company also makes as effort to check compliance with internal regulations on a regular basis to rectify any problems found.
3) Physical Measures
- The company establishes and operates access control procedures for the separate physical storage of the personal information system where personal information is stored.
- Documents containing personal information, auxiliary storage media, and others are stored in a safe location with a lock.
9. Installation and Operation of Image Information Processing Equipment
The company installs and operates image information processing equipment for the purpose of facility safety and fire prevention, personnel and vehicle access control, crime prevention for the safety of employees and visitors, vehicle theft and damage prevention, and illegal intrusion of outsiders pursuant in accordance with Article 25 (1) for the Personal Information Protection Act.
[Image Information Processing Equipment Status]
| Locations and Recorded Areas | Number Installed |
|---|---|
| Building Lobby | 2 |
| Main Gate | 1 |
| Back Gate | 1 |
| Underground Parking and Storage | 22 |
| Cafe | 2 |
| Outside the building | 17 |
| Total | 45 |
[Image Information Processing Equipment Management and Access]
| Groups | Personnel | Contact Information |
|---|---|---|
| Manager of Image Information Processing Equipment | General Affairs Team Leader in Corporate Affairs Division | 031-476-8583 (Extension: 4) |
| Personnel with access to Image Information Processing Equipment | General Affairs staff in Corporate Affairs Division | |
| Facilities Team Staff in Corporate Affairs Division | ||
| Security Staff |
[Image Information Recording, Retention, Storage Location, and Handling]
The company retains the image information after recording. The data is deleted in a way it cannot be recovered after the retention period is over.
| Recorded | Retention Period | Stored Location | Handling |
|---|---|---|---|
| 24Time | 30 days after recording | Pearl Abyss 1F, Security Room | Records/manages all actions regarding the image information such as usage outside its stated purpose, being provided to third parties, access, etc. and all image information is deleted safely after the retention period expires |
[Image Information Processing Equipment Installation and Management Consignment]
The company entrusts the installation and management of the image information processing equipment to the following companies.
| Companies | Entrusted Duties |
|---|---|
| S1 | Installation & Maintenance |
| Kyobo Realco | Operation & Management |
[Measures Regarding Requests to View Image Information, Etc.]
If you desire to view, confirm, or delete your recorded image information, you may request the relevant matter to the company. However, this is limited to personal image information personally recorded and clearly needed for the benefit of your imminent life, body, and assets.
The company will take the appropriate measure without delay once a request to view, confirm, or delete one's personal image information has been made. However, your request may be denied regarding viewing your personal image information in the following cases:
- Causing serious disruption to a criminal investigation, the sustainment of public prosecution, and procession of trial
- If personal image information has been deleted after the expiration of the retention period
- If taking the necessary measures for the request to view the information leads to great concerns of invasion of privacy
- If there are other valid reason to reject your request to view the information
[Image Information Verification Method and Stored Location]
- Verification Method: If you desire to verify your personal information, please contact the head of the department of personal information or image information prior to visiting the company in person.
- Stored Location: Pearl Abyss 1F, Security Room
[Image Information Measures for Safe Procurement]
- The company does not gather image information or recordings for reasons other than those stated in this Privacy Policy, and only those authorized to handle personal information are granted access to gathered/saved image information.
- The company prohibits any type of random perusal and playing of, as well as externally releasing the gathered image information.
- The company is recording/managing all actions regarding the image information such as usage outside its stated purpose, being provided to third parties, access, etc. and all image information is deleted safely after the retention period expires.
10. Personal Information Protection Officer and Personal Information Handling Department
To protect your person information and deal with relevant complaints, the company has assigned an officer responsible for person information protection to oversee your personal information and a channel to submit your opinions and complaints related to person information protection. Please contact the head officer and relevant department with any questions, opinions, or concerns on the infringement of rights and interests regarding your personal information and the company will get back to you without delay.
| Personal Information Protection Officer | Personal Information Handling Department |
|---|---|
| Name: James Heo Title: CPO Phone: 070-4923-6372 E-mail: privacy@pearlabyss.com Fax: 031-476-8584 |
Department: Regulatory Compliance Division Phone: 070-4923-6372 E-mail: privacy@pearlabyss.com Fax: 031-624-5897 |
11. Remedies on Infringement of Rights and Interests
You may contact the following bodies for information on damage relief and consultation regarding infringement of person information.
- Infringement of Personal Information Report Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutors' Office Cybercrime Investigation Division (spo.go.kr / 02-3480-3573)
- Korean Nation Police Agency Cyber Bureau (cyberbureau.police.go.kr / 182)
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
12. Addendum
This policy will take effect starting on January 19, 2022.
Pearl Abyss Corp. (hereinafter referred to as the "company") collects and uses personal information in accordance with Personal Information Protection Act and other relevant laws. This Privacy Policy discloses what personal information the company collects, how they being used, and how the personal information is handled.
This Privacy Policy applies to the Pearl Abyss official website and the image information processing equipment operated and managed by the company.
1. Types of Information Collected and Method of Collection
The company collects required information when you use the official website.
1) Corporate Ethics Report
- Required Information: Password
- Optional Information: Name, phone number, email
※ You can report or receive consultation anonymously for corporate ethics and compliance related issues.
2. Purposes of Handling Personal Information
The company handles personal information for the following purposes and only for those purposes. If the purposes change, the company will follow relevant laws by acquiring permission and taking the necessary steps.
1) Submitting a report or receiving consultation for corporate ethics and compliance related issues
2) Securing clear communication and for sending results about corporate ethics compliance reports and consultations
3. Providing Personal Information to Third Parties
The company only uses personal information as stated under "Purpose of Handling Personal Information." The personal information is not provided to third parties except when permitted by your consent, in accordance with special provision and within the boundaries of relevant laws.
4. Handling Personal Information and Duration of Use
The company retains and uses personal information collected for the duration agreed upon when collecting the personal information. The personal information will be destroyed without delay when the purposes of handling personal information are achieved.
However, certain information that are required by law will be retained for the duration as stated by those laws.
5. Destroying Personal Information
The company will destroy personal information when they exceed the retention period, achieved their purpose, and if the information is no longer required.
If the information is required by relevant laws to be retained for a period past their retention period or their purpose, then the information is moved to a different database or their location is moved for storage. The procedure and method of disposing the information is as follows:
Destroying Procedure: Your personal information will be destroyed without delay after its purpose has been achieved. However, certain information that are required by law will be retained for the duration stated by those laws. The personal information will not be used for any other purpose if it is being kept in accordance with relevant laws.
Destroying Method: Printed personal information will be shredded through a paper shredder or incinerated. If the information is stored as a data file, it will be deleted using technology that makes the data unrecoverable.
6. Your Rights and How to Exercise Your Rights
You reserve the right to view, correct, delete, and request the company to stop handling your registered personal information at any time. In this case, contact the staff in charge of personal information protect o the department in-charge of handling personal information issues by letter, phone, or email. Then your personal information will be destroyed without delay.
7. Installing, Operation, and Rejecting Automated Personal Information Collecting Technology
The company uses "Cookies" to store and use your information on the website. Cookies are small text files that is sent by the website's server to the user's browser and saved within the hard drive. We use cookies for the following purposes:
1) Purpose of Using Cookies and Others Applications
The company employs analytical tools with data on the user's visiting frequency, visiting time, user's field of interest. and records.
The company and other third parties providing analytical service can use cookies, beacons, tags or scripts to track down data. Data is collected for purposes of statistical analysis on website management, trend review, and user's activity in the website. The company may receive aforementioned data in package from third parties that provide analytical services.
2) Settings to Refuse Cookie Saves
Users have a right to choose how cookies are installed. A user may use the web browser settings to either completely allow all cookies, check everytime a cookie is installed, or refuse all cookies. However, users that refuse cookies may experience some inconveniences the our services.
- Internet Explorer: [Tools] → [Internet Options] → [Privacy] → [Advanced]
- Chrome: [⋮] → [Settings] → [View Advanced Settings] → Privacy[Content Settings]
※ Other web browsers may have different methods to change their settings.
The company also uses external web log analyzing tools such as Google Analytics and etc.
- Block Google Analytics: https://tools.google.com/dlpage/gaoptout/
※ Other Web Log Analyzing Tools have different refuse settings.
8. Measures Used to Protect Personal Information
The company takes the following precautions to protect your personal information from getting lost, stolen, exposed, changed, and damaged. However, the company is not liable for situations caused for the carelessness of users such as not keeping their password safe and others, or for situations outside of the company control.
1) Technological Measures
- Files and transmission of data that include personal information are encrypted or locked by a password.
- The company stays vigilant to protect against hackers, computer viruses, and other possible threats to your personal information. Additionally, the company constantly backs up data just in case and uses antivirus programs, firewalls, and other various methods to protect the company devices.
- The company has taken measures to ensure the safety of the systematically configured database system to handle personal information.
2) Managerial Measures
- The company has limited and minimized the number of staff that has access to personal information
- The company provides regular training to personal information service personnel and trustees regarding their privacy obligations.
- The company establishes and manages personal information processing guidelines through the department in-charge of personal information protection. The company also makes as effort to check compliance with internal regulations on a regular basis to rectify any problems found.
3) Physical Measures
- The company establishes and operates access control procedures for the separate physical storage of the personal information system where personal information is stored.
- Documents containing personal information, auxiliary storage media, and others are stored in a safe location with a lock.
9. Installation and Operation of Image Information Processing Equipment
The company installs and operates image information processing equipment for the purpose of facility safety and fire prevention, personnel and vehicle access control, crime prevention for the safety of employees and visitors, vehicle theft and damage prevention, and illegal intrusion of outsiders pursuant in accordance with Article 25 (1) for the Personal Information Protection Act.
[Image Information Processing Equipment Status]
| Locations and Recorded Areas | Number Installed |
|---|---|
| Building Lobby | 2 |
| Main Gate | 1 |
| Back Gate | 1 |
| Underground Parking and Storage | 22 |
| Cafe | 2 |
| Outside the building | 17 |
| Total | 45 |
[Image Information Processing Equipment Management and Access]
| Groups | Personnel | Contact Information |
|---|---|---|
| Manager of Image Information Processing Equipment | General Affairs Team Leader in Corporate Affairs Division | 031-476-8583 (Extension: 4) |
| Personnel with access to Image Information Processing Equipment | General Affairs staff in Corporate Affairs Division | |
| Facilities Team Staff in Corporate Affairs Division | ||
| Security Staff |
[Image Information Recording, Retention, Storage Location, and Handling]
The company retains the image information after recording. The data is deleted in a way it cannot be recovered after the retention period is over.
| Recorded | Retention Period | Stored Location | Handling |
|---|---|---|---|
| 24Time | Must be taken within the last 90 days | Pearl Abyss 1F, Security Room | Records/manages all actions regarding the image information such as usage outside its stated purpose, being provided to third parties, access, etc. and all image information is deleted safely after the retention period expires |
[Image Information Processing Equipment Installation and Management Consignment]
The company entrusts the installation and management of the image information processing equipment to the following companies.
| Companies | Entrusted Duties |
|---|---|
| S1 | Installation & Maintenance |
| Kyobo Realco | Operation & Management |
[Measures Regarding Requests to View Image Information, Etc.]
If you desire to view, confirm, or delete your recorded image information, you may request the relevant matter to the company. However, this is limited to personal image information personally recorded and clearly needed for the benefit of your imminent life, body, and assets.
The company will take the appropriate measure without delay once a request to view, confirm, or delete one's personal image information has been made. However, your request may be denied regarding viewing your personal image information in the following cases:
- Causing serious disruption to a criminal investigation, the sustainment of public prosecution, and procession of trial
- If personal image information has been deleted after the expiration of the retention period
- If taking the necessary measures for the request to view the information leads to great concerns of invasion of privacy
- If there are other valid reason to reject your request to view the information
[Image Information Verification Method and Stored Location]
- Verification Method: If you desire to verify your personal information, please contact the head of the department of personal information or image information prior to visiting the company in person.
- Stored Location: Pearl Abyss 1F, Security Room
[Image Information Measures for Safe Procurement]
- The company does not gather image information or recordings for reasons other than those stated in this Privacy Policy, and only those authorized to handle personal information are granted access to gathered/saved image information.
- The company prohibits any type of random perusal and playing of, as well as externally releasing the gathered image information.
- The company is recording/managing all actions regarding the image information such as usage outside its stated purpose, being provided to third parties, access, etc. and all image information is deleted safely after the retention period expires.
10. Personal Information Protection Officer and Personal Information Handling Department
To protect your person information and deal with relevant complaints, the company has assigned an officer responsible for person information protection to oversee your personal information and a channel to submit your opinions and complaints related to person information protection. Please contact the head officer and relevant department with any questions, opinions, or concerns on the infringement of rights and interests regarding your personal information and the company will get back to you without delay.
| Personal Information Protection Officer | Personal Information Handling Department |
|---|---|
| Name: James Heo (CEO) Phone: 070-4923-6372 E-mail: privacy@pearlabyss.com Fax: 031-476-8584 |
Department: Regulatory Compliance Division Phone: 070-4923-6372 E-mail: privacy@pearlabyss.com Fax: 031-624-5897 |
11. Remedies on Infringement of Rights and Interests
You may contact the following bodies for information on damage relief and consultation regarding infringement of person information.
- Infringement of Personal Information Report Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutors' Office Cybercrime Investigation Division (spo.go.kr / 02-3480-3573)
- Korean Nation Police Agency Cyber Bureau (cyberbureau.police.go.kr / 182)
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
12. Addendum
This policy will enter into effect on April 13, 2022.
Pearl Abyss Corp. (hereinafter referred to as the "company") collects and uses personal information in accordance with Personal Information Protection Act and other relevant laws. This Privacy Policy discloses what personal information the company collects, how they being used, and how the personal information is handled.
This Privacy Policy applies to the Pearl Abyss official website and the image information processing equipment operated and managed by the company.
1. Types of Information Collected and Method of Collection
The company collects required information when you use the official website.
1) Corporate Ethics Reporting
- Name, Phone Number, Email, Password
※ You can report or receive consultation anonymously for corporate ethics and compliance related issues.
2. Purposes of Handling Personal Information
The company handles personal information for the following purposes and only for those purposes. If the purposes change, the company will follow relevant laws by acquiring permission and taking the necessary steps.
1) Submitting a report or receiving consultation for corporate ethics and compliance related issues
2) Securing clear communication and for sending results about corporate ethics compliance reports and consultations
3. Providing Personal Information to Third Parties
The company only uses personal information as stated under "Purpose of Handling Personal Information." The personal information is not provided to third parties except when permitted by your consent, in accordance with special provision and within the boundaries of relevant laws.
4. Handling Personal Information and Duration of Use
The company retains and uses personal information collected for the duration agreed upon when collecting the personal information. The personal information will be destroyed without delay when the purposes of handling personal information are achieved.
However, certain information that are required by law will be retained for the duration as stated by those laws.
5. Destroying Personal Information
The company will destroy personal information when they exceed the retention period, achieved their purpose, and if the information is no longer required.
If the information is required by relevant laws to be retained for a period past their retention period or their purpose, then the information is moved to a different database or their location is moved for storage. The procedure and method of disposing the information is as follows:
Destroying Procedure: Your personal information will be destroyed without delay after its purpose has been achieved. However, certain information that are required by law will be retained for the duration stated by those laws. The personal information will not be used for any other purpose if it is being kept in accordance with relevant laws.
Destroying Method: Printed personal information will be shredded through a paper shredder or incinerated. If the information is stored as a data file, it will be deleted using technology that makes the data unrecoverable.
6. Your Rights and How to Exercise Your Rights
You reserve the right to view, correct, delete, and request the company to stop handling your registered personal information at any time. In this case, contact the staff in charge of personal information protect o the department in-charge of handling personal information issues by letter, phone, or email. Then your personal information will be destroyed without delay.
7. Installing, Operation, and Rejecting Automated Personal Information Collecting Technology
The company uses "Cookies" to store and use your information on the website. Cookies are small text files that is sent by the website's server to the user's browser and saved within the hard drive. We use cookies for the following purposes:
1) Purpose of Using Cookies and Others Applications
The company employs analytical tools with data on the user's visiting frequency, visiting time, user's field of interest. and records.
The company and other third parties providing analytical service can use cookies, beacons, tags or scripts to track down data. Data is collected for purposes of statistical analysis on website management, trend review, and user's activity in the website. The company may receive aforementioned data in package from third parties that provide analytical services.
2) Settings to Refuse Cookie Saves
Users have a right to choose how cookies are installed. A user may use the web browser settings to either completely allow all cookies, check everytime a cookie is installed, or refuse all cookies. However, users that refuse cookies may experience some inconveniences the our services.
- Internet Explorer: [Tools] → [Internet Options] → [Privacy] → [Advanced]
- Chrome: [⋮] → [Settings] → [View Advanced Settings] → Privacy[Content Settings]
※ Other web browsers may have different methods to change their settings.
The company also uses external web log analyzing tools such as Google Analytics and etc.
- Block Google Analytics: https://tools.google.com/dlpage/gaoptout/
※ Other Web Log Analyzing Tools have different refuse settings.
8. Measures Used to Protect Personal Information
The company takes the following precautions to protect your personal information from getting lost, stolen, exposed, changed, and damaged. However, the company is not liable for situations caused for the carelessness of users such as not keeping their password safe and others, or for situations outside of the company control.
1) Technological Measures
- Files and transmission of data that include personal information are encrypted or locked by a password.
- The company stays vigilant to protect against hackers, computer viruses, and other possible threats to your personal information. Additionally, the company constantly backs up data just in case and uses antivirus programs, firewalls, and other various methods to protect the company devices.
- The company has taken measures to ensure the safety of the systematically configured database system to handle personal information.
2) Managerial Measures
- The company has limited and minimized the number of staff that has access to personal information
- The company provides regular training to personal information service personnel and trustees regarding their privacy obligations.
- The company establishes and manages personal information processing guidelines through the department in-charge of personal information protection. The company also makes as effort to check compliance with internal regulations on a regular basis to rectify any problems found.
3) Physical Measures
- The company establishes and operates access control procedures for the separate physical storage of the personal information system where personal information is stored.
- Documents containing personal information, auxiliary storage media, and others are stored in a safe location with a lock.
9. Installation and Operation of Image Information Processing Equipment
The company installs and operates image information processing equipment for the purpose of facility safety and fire prevention, personnel and vehicle access control, crime prevention for the safety of employees and visitors, vehicle theft and damage prevention, and illegal intrusion of outsiders pursuant in accordance with Article 25 (1) for the Personal Information Protection Act.
[Image Information Processing Equipment Status]
| Locations and Recorded Areas | Number Installed |
|---|---|
| Building Lobby | 2 |
| Main Gate | 1 |
| Back Gate | 1 |
| Underground Parking and Storage | 22 |
| Cafe | 2 |
| Outside the building | 17 |
| Total | 45 |
[Image Information Processing Equipment Management and Access]
| Groups | Personnel | Contact Information |
|---|---|---|
| Manager of Image Information Processing Equipment | General Affairs Team Leader in Corporate Affairs Division | 031-476-8583 (Extension: 4) |
| Personnel with access to Image Information Processing Equipment | General Affairs staff in Corporate Affairs Division | |
| Facilities Team Staff in Corporate Affairs Division | ||
| Security Staff |
[Image Information Recording, Retention, Storage Location, and Handling]
The company retains the image information after recording. The data is deleted in a way it cannot be recovered after the retention period is over.
| Recorded | Retention Period | Stored Location | Handling |
|---|---|---|---|
| 24Time | Must be taken within the last 90 days | Pearl Abyss 1F, Security Room | Records/manages all actions regarding the image information such as usage outside its stated purpose, being provided to third parties, access, etc. and all image information is deleted safely after the retention period expires |
[Image Information Processing Equipment Installation and Management Consignment]
The company entrusts the installation and management of the image information processing equipment to the following companies.
| Companies | Entrusted Duties |
|---|---|
| S1 | Installation & Maintenance |
| Kyobo Realco | Operation & Management |
[Measures Regarding Requests to View Image Information, Etc.]
If you desire to view, confirm, or delete your recorded image information, you may request the relevant matter to the company. However, this is limited to personal image information personally recorded and clearly needed for the benefit of your imminent life, body, and assets.
The company will take the appropriate measure without delay once a request to view, confirm, or delete one's personal image information has been made. However, your request may be denied regarding viewing your personal image information in the following cases:
- Causing serious disruption to a criminal investigation, the sustainment of public prosecution, and procession of trial
- If personal image information has been deleted after the expiration of the retention period
- If taking the necessary measures for the request to view the information leads to great concerns of invasion of privacy
- If there are other valid reason to reject your request to view the information
[Image Information Verification Method and Stored Location]
- Verification Method: If you desire to verify your personal information, please contact the head of the department of personal information or image information prior to visiting the company in person.
- Stored Location: Pearl Abyss 1F, Security Room
[Image Information Measures for Safe Procurement]
- The company does not gather image information or recordings for reasons other than those stated in this Privacy Policy, and only those authorized to handle personal information are granted access to gathered/saved image information.
- The company prohibits any type of random perusal and playing of, as well as externally releasing the gathered image information.
- The company is recording/managing all actions regarding the image information such as usage outside its stated purpose, being provided to third parties, access, etc. and all image information is deleted safely after the retention period expires.
10. Personal Information Protection Officer and Personal Information Handling Department
To protect your person information and deal with relevant complaints, the company has assigned an officer responsible for person information protection to oversee your personal information and a channel to submit your opinions and complaints related to person information protection. Please contact the head officer and relevant department with any questions, opinions, or concerns on the infringement of rights and interests regarding your personal information and the company will get back to you without delay.
| Personal Information Protection Officer | Personal Information Handling Department |
|---|---|
| Name: James Heo (CEO) Phone: 070-4923-6372 E-mail: privacy@pearlabyss.com Fax: 031-476-8584 |
Department: Regulatory Compliance Division Phone: 070-4923-6372 E-mail: privacy@pearlabyss.com Fax: 031-624-5897 |
11. Remedies on Infringement of Rights and Interests
You may contact the following bodies for information on damage relief and consultation regarding infringement of person information.
- Infringement of Personal Information Report Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutor's Office Cybercrime Investigation Division (spo.go.kr / Tel: 1301)
- Korean National Police Agency Cyber Bureau (ecrm.police.go.kr / Tel: 182)
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
12. Addendum
This policy will enter into effect on May 18, 2022.
Pearl Abyss Corp. (hereinafter referred to as the "company") collects and uses personal information in accordance with Personal Information Protection Act and other relevant laws. This Privacy Policy discloses what personal information the company collects, how they being used, and how the personal information is handled.
This Privacy Policy applies to the Pearl Abyss official website and the image information processing equipment operated and managed by the company.
1. Types of Information Collected and Method of Collection
The company collects required information when you use the official website.
1) Corporate Ethics Reporting
- Name, Phone Number, Email, Password
※ You can report or receive consultation anonymously for corporate ethics and compliance related issues.
2. Purposes of Handling Personal Information
The company handles personal information for the following purposes and only for those purposes. If the purposes change, the company will follow relevant laws by acquiring permission and taking the necessary steps.
1) Submitting a report or receiving consultation for corporate ethics and compliance related issues
2) Securing clear communication and for sending results about corporate ethics compliance reports and consultations
3. Providing Personal Information to Third Parties
The company only uses personal information as stated under "Purpose of Handling Personal Information." The personal information is not provided to third parties except when permitted by your consent, in accordance with special provision and within the boundaries of relevant laws.
4. Handling Personal Information and Duration of Use
The company retains and uses personal information collected for the duration agreed upon when collecting the personal information. The personal information will be destroyed without delay when the purposes of handling personal information are achieved.
However, certain information that are required by law will be retained for the duration as stated by those laws.
5. Destroying Personal Information
The company will destroy personal information when they exceed the retention period, achieved their purpose, and if the information is no longer required.
If the information is required by relevant laws to be retained for a period past their retention period or their purpose, then the information is moved to a different database or their location is moved for storage. The procedure and method of disposing the information is as follows:
Destroying Procedure: Your personal information will be destroyed without delay after its purpose has been achieved. However, certain information that are required by law will be retained for the duration stated by those laws. The personal information will not be used for any other purpose if it is being kept in accordance with relevant laws.
Destroying Method: Printed personal information will be shredded through a paper shredder or incinerated. If the information is stored as a data file, it will be deleted using technology that makes the data unrecoverable.
6. Your Rights and How to Exercise Your Rights
You reserve the right to view, correct, delete, and request the company to stop handling your registered personal information at any time. In this case, contact the staff in charge of personal information protect o the department in-charge of handling personal information issues by letter, phone, or email. Then your personal information will be destroyed without delay.
7. Installing, Operation, and Rejecting Automated Personal Information Collecting Technology
The company uses "Cookies" to store and use your information on the website. Cookies are small text files that is sent by the website's server to the user's browser and saved within the hard drive. We use cookies for the following purposes:
1) Purpose of Using Cookies and Others Applications
The company employs analytical tools with data on the user's visiting frequency, visiting time, user's field of interest. and records.
The company and other third parties providing analytical service can use cookies, beacons, tags or scripts to track down data. Data is collected for purposes of statistical analysis on website management, trend review, and user's activity in the website. The company may receive aforementioned data in package from third parties that provide analytical services.
2) Settings to Refuse Cookie Saves
Users have a right to choose how cookies are installed. A user may use the web browser settings to either completely allow all cookies, check everytime a cookie is installed, or refuse all cookies. However, users that refuse cookies may experience some inconveniences the our services.
- Internet Explorer: [Tools] (top of browser) → [Internet Options] → [Privacy] → [Advanced]
- Chrome: [⋮] (top right of browser) → [Settings] → [Privacy and security] → [Cookies and other site data]
※ Other browsers have their own browser settings.
The company also uses external web log analyzing tools such as Google Analytics and etc.
- Block Google Analytics: https://tools.google.com/dlpage/gaoptout/
※ Other Web Log Analyzing Tools have different refuse settings.
8. Measures Used to Protect Personal Information
The company takes the following precautions to protect your personal information from getting lost, stolen, exposed, changed, and damaged. However, the company is not liable for situations caused for the carelessness of users such as not keeping their password safe and others, or for situations outside of the company control.
1) Technological Measures
- Files and transmission of data that include personal information are encrypted or locked by a password.
- The company stays vigilant to protect against hackers, computer viruses, and other possible threats to your personal information. Additionally, the company constantly backs up data just in case and uses antivirus programs, firewalls, and other various methods to protect the company devices.
- The company has taken measures to ensure the safety of the systematically configured database system to handle personal information.
2) Managerial Measures
- The company has limited and minimized the number of staff that has access to personal information
- The company provides regular training to personal information service personnel and trustees regarding their privacy obligations.
- The company establishes and manages personal information processing guidelines through the department in-charge of personal information protection. The company also makes as effort to check compliance with internal regulations on a regular basis to rectify any problems found.
3) Physical Measures
- The company establishes and operates access control procedures for the separate physical storage of the personal information system where personal information is stored.
- Documents containing personal information, auxiliary storage media, and others are stored in a safe location with a lock.
9. Installation and Operation of Image Information Processing Equipment
The company installs and operates image information processing equipment for the purpose of facility safety and fire prevention, personnel and vehicle access control, crime prevention for the safety of employees and visitors, vehicle theft and damage prevention, and illegal intrusion of outsiders pursuant in accordance with Article 25 (1) for the Personal Information Protection Act.
[Image Information Processing Equipment Status]
| Locations and Recorded Areas | Number Installed |
|---|---|
| Building Lobby | 8 |
| Childcare Center Entrance | 1 |
| Outside the building | 7 |
| Underground Parking | 72 |
| Shuttle Elevator Hall & B1 Corridor | 7 |
| B1 Stairway Entrance(Sunken) | 1 |
| Total | 96 |
[Image Information Processing Equipment Management and Access]
| Groups | Personnel | Contact Information |
|---|---|---|
| Manager of Image Information Processing Equipment | General Affairs Team Leader in Corporate Affairs Division | 02-476-8583 (Ext. 4) |
| Personnel with access to Image Information Processing Equipment | General Affairs staff in Corporate Affairs Division | |
| Security Staff |
[Image Information Recording, Retention, Storage Location, and Handling]
The company retains the image information after recording. The data is deleted in a way it cannot be recovered after the retention period is over.
| Recorded | Retention Period | Stored Location | Handling |
|---|---|---|---|
| 24Time | Must be taken within the last 90 days | Pearl Abyss Home One Main Control Center (B1) |
Records/manages all actions regarding the image information such as usage outside its stated purpose, being provided to third parties, access, etc. and all image information is deleted safely after the retention period expires |
[Image Information Processing Equipment Installation and Management Consignment]
The company entrusts the installation and management of the image information processing equipment to the following companies.
| Companies | Entrusted Duties |
|---|---|
| S&I Corporation | Installation and maintenance of CCTV Devices, Operations and management |
[Measures Regarding Requests to View Image Information, Etc.]
If you desire to view, confirm, or delete your recorded image information, you may request the relevant matter to the company. However, this is limited to personal image information personally recorded and clearly needed for the benefit of your imminent life, body, and assets.
The company will take the appropriate measure without delay once a request to view, confirm, or delete one's personal image information has been made. However, your request may be denied regarding viewing your personal image information in the following cases:
- Causing serious disruption to a criminal investigation, the sustainment of public prosecution, and procession of trial
- If personal image information has been deleted after the expiration of the retention period
- If taking the necessary measures for the request to view the information leads to great concerns of invasion of privacy
- If there are other valid reason to reject your request to view the information
[Image Information Verification Method and Stored Location]
- Verification Method: If you desire to verify your personal information, please contact the head of the department of personal information or image information prior to visiting the company in person.
- Stored Location: Pearl Abyss Home One Main Control Center (B1)
[Image Information Measures for Safe Procurement]
- The company does not gather image information or recordings for reasons other than those stated in this Privacy Policy, and only those authorized to handle personal information are granted access to gathered/saved image information.
- The company prohibits any type of random perusal and playing of, as well as externally releasing the gathered image information.
- The company is recording/managing all actions regarding the image information such as usage outside its stated purpose, being provided to third parties, access, etc. and all image information is deleted safely after the retention period expires.
10. Personal Information Protection Officer and Personal Information Handling Department
To protect your person information and deal with relevant complaints, the company has assigned an officer responsible for person information protection to oversee your personal information and a channel to submit your opinions and complaints related to person information protection. Please contact the head officer and relevant department with any questions, opinions, or concerns on the infringement of rights and interests regarding your personal information and the company will get back to you without delay.
| Personal Information Protection Officer | Personal Information Handling Department |
|---|---|
| Name: Jin-Young Heo (CEO) Phone: 070-4923-6372 E-mail: privacy@pearlabyss.com Fax: 031-624-5897 |
Department: Regulatory Compliance Division Phone: 070-4923-6372 E-mail: privacy@pearlabyss.com Fax: 031-624-5897 |
11. Remedies on Infringement of Rights and Interests
You may contact the following bodies for information on damage relief and consultation regarding infringement of person information.
- Infringement of Personal Information Report Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutor's Office Cybercrime Investigation Division (spo.go.kr / Tel: 1301)
- Korean National Police Agency Cyber Bureau (ecrm.police.go.kr / Tel: 182)
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
12. Addendum
This policy will enter into effect on August 31, 2022.
Pearl Abyss Corp. (hereinafter referred to as the "company") collects and uses personal information in accordance with Personal Information Protection Act and other relevant laws. This Privacy Policy discloses what personal information the company collects, how they being used, and how the personal information is handled.
본 개인정보처리방침은 펄어비스 공식 홈페이지 및 회사가 운영 및 관리하고 있는 건물 및 영상정보처리기기에 적용됩니다.
1. Types of Information Collected and Method of Collection
The company collects required information when you use the official website.
1) Corporate Ethics Reporting
- Name, Phone Number, Email, Password
※ You can report or receive consultation anonymously for corporate ethics and compliance related issues.
3) 펄어비스 본사 방문
- 이름, 소속, 차량번호, 연락처 (선택)이메일
2. Purposes of Handling Personal Information
The company handles personal information for the following purposes and only for those purposes. If the purposes change, the company will follow relevant laws by acquiring permission and taking the necessary steps.
1) Submitting a report or receiving consultation for corporate ethics and compliance related issues
2) Securing clear communication and for sending results about corporate ethics compliance reports and consultations
3. Providing Personal Information to Third Parties
The company only uses personal information as stated under "Purpose of Handling Personal Information." The personal information is not provided to third parties except when permitted by your consent, in accordance with special provision and within the boundaries of relevant laws.
4. Handling Personal Information and Duration of Use
The company retains and uses personal information collected for the duration agreed upon when collecting the personal information. The personal information will be destroyed without delay when the purposes of handling personal information are achieved.
However, certain information that are required by law will be retained for the duration as stated by those laws.
5. Destroying Personal Information
The company will destroy personal information when they exceed the retention period, achieved their purpose, and if the information is no longer required.
If the information is required by relevant laws to be retained for a period past their retention period or their purpose, then the information is moved to a different database or their location is moved for storage. The procedure and method of disposing the information is as follows:
Destroying Procedure: Your personal information will be destroyed without delay after its purpose has been achieved. However, certain information that are required by law will be retained for the duration stated by those laws. The personal information will not be used for any other purpose if it is being kept in accordance with relevant laws.
Destroying Method: Printed personal information will be shredded through a paper shredder or incinerated. If the information is stored as a data file, it will be deleted using technology that makes the data unrecoverable.
6. Your Rights and How to Exercise Your Rights
You reserve the right to view, correct, delete, and request the company to stop handling your registered personal information at any time. In this case, contact the staff in charge of personal information protect o the department in-charge of handling personal information issues by letter, phone, or email. Then your personal information will be destroyed without delay.
7. Installing, Operation, and Rejecting Automated Personal Information Collecting Technology
The company uses "Cookies" to store and use your information on the website. Cookies are small text files that is sent by the website's server to the user's browser and saved within the hard drive. We use cookies for the following purposes:
1) Purpose of Using Cookies and Others Applications
The company employs analytical tools with data on the user's visiting frequency, visiting time, user's field of interest. and records.
The company and other third parties providing analytical service can use cookies, beacons, tags or scripts to track down data. Data is collected for purposes of statistical analysis on website management, trend review, and user's activity in the website. The company may receive aforementioned data in package from third parties that provide analytical services.
2) Settings to Refuse Cookie Saves
Users have a right to choose how cookies are installed. A user may use the web browser settings to either completely allow all cookies, check everytime a cookie is installed, or refuse all cookies. However, users that refuse cookies may experience some inconveniences the our services.
- Chrome: 웹브라우저 우측 상단의 [⋮] → [설정] → [개인정보 및 보안] → [쿠키 및 기타 사이트 데이터]
- Microsoft Edge: 웹브라우저 상단의 […] → [설정] → [쿠키 및 사이트 권한] → [쿠키 및 저장된 데이터]
- Firefox: 웹브라우저 상단의 [≡] → [설정] → [개인 정보 및 보안] → [쿠키 및 사이트 데이터]
※ Other Web Log Analyzing Tools have different refuse settings.
8. Measures Used to Protect Personal Information
The company takes the following precautions to protect your personal information from getting lost, stolen, exposed, changed, and damaged. However, the company is not liable for situations caused for the carelessness of users such as not keeping their password safe and others, or for situations outside of the company control.
1) Technological Measures
- Files and transmission of data that include personal information are encrypted or locked by a password.
- The company stays vigilant to protect against hackers, computer viruses, and other possible threats to your personal information. Additionally, the company constantly backs up data just in case and uses antivirus programs, firewalls, and other various methods to protect the company devices.
- The company has taken measures to ensure the safety of the systematically configured database system to handle personal information.
2) Managerial Measures
- The company has limited and minimized the number of staff that has access to personal information
- The company provides regular training to personal information service personnel and trustees regarding their privacy obligations.
- The company establishes and manages personal information processing guidelines through the department in-charge of personal information protection. The company also makes as effort to check compliance with internal regulations on a regular basis to rectify any problems found.
3) Physical Measures
- The company establishes and operates access control procedures for the separate physical storage of the personal information system where personal information is stored.
- Documents containing personal information, auxiliary storage media, and others are stored in a safe location with a lock.
9. Installation and Operation of Image Information Processing Equipment
The company installs and operates image information processing equipment for the purpose of facility safety and fire prevention, personnel and vehicle access control, crime prevention for the safety of employees and visitors, vehicle theft and damage prevention, and illegal intrusion of outsiders pursuant in accordance with Article 25 (1) for the Personal Information Protection Act.
[Image Information Processing Equipment Status]
| Locations and Recorded Areas | Number Installed |
|---|---|
| Building Lobby | 8 |
| Childcare Center Entrance | 1 |
| Outside the building | 12 |
| Underground Parking | 93 |
| Shuttle Elevator Hall & B1 Corridor | 7 |
| B1 Stairway Entrance(Sunken) | 1 |
| Total | 122 |
[Image Information Processing Equipment Management and Access]
| Groups | Personnel | Contact Information |
|---|---|---|
| Manager of Image Information Processing Equipment | 경영지원실 경영지원1팀장 | 02-476-8583 (Ext. 4) |
| Personnel with access to Image Information Processing Equipment | 경영지원1팀, 시설팀, 보안팀 | |
| Security Staff |
[Image Information Recording, Retention, Storage Location, and Handling]
The company retains the image information after recording. The data is deleted in a way it cannot be recovered after the retention period is over.
| Recorded | Retention Period | Stored Location | Handling |
|---|---|---|---|
| 24Time | Must be taken within the last 90 days | Pearl Abyss Home One Main Control Center (B1) |
Records/manages all actions regarding the image information such as usage outside its stated purpose, being provided to third parties, access, etc. and all image information is deleted safely after the retention period expires |
[Image Information Processing Equipment Installation and Management Consignment]
The company entrusts the installation and management of the image information processing equipment to the following companies.
| Companies | Entrusted Duties |
|---|---|
| (주)에스앤아이코퍼레이션 | Installation and maintenance of CCTV Devices, Operations and management |
[Measures Regarding Requests to View Image Information, Etc.]
If you desire to view, confirm, or delete your recorded image information, you may request the relevant matter to the company. However, this is limited to personal image information personally recorded and clearly needed for the benefit of your imminent life, body, and assets.
The company will take the appropriate measure without delay once a request to view, confirm, or delete one's personal image information has been made. However, your request may be denied regarding viewing your personal image information in the following cases:
- Causing serious disruption to a criminal investigation, the sustainment of public prosecution, and procession of trial
- If personal image information has been deleted after the expiration of the retention period
- If taking the necessary measures for the request to view the information leads to great concerns of invasion of privacy
- If there are other valid reason to reject your request to view the information
[Image Information Verification Method and Stored Location]
- Verification Method: If you desire to verify your personal information, please contact the head of the department of personal information or image information prior to visiting the company in person.
- Stored Location: Pearl Abyss Home One Main Control Center (B1)
[Image Information Measures for Safe Procurement]
- The company does not gather image information or recordings for reasons other than those stated in this Privacy Policy, and only those authorized to handle personal information are granted access to gathered/saved image information.
- The company prohibits any type of random perusal and playing of, as well as externally releasing the gathered image information.
- The company is recording/managing all actions regarding the image information such as usage outside its stated purpose, being provided to third parties, access, etc. and all image information is deleted safely after the retention period expires.
10. Personal Information Protection Officer and Personal Information Handling Department
To protect your person information and deal with relevant complaints, the company has assigned an officer responsible for person information protection to oversee your personal information and a channel to submit your opinions and complaints related to person information protection. Please contact the head officer and relevant department with any questions, opinions, or concerns on the infringement of rights and interests regarding your personal information and the company will get back to you without delay.
| Personal Information Protection Officer | Personal Information Handling Department |
|---|---|
| Name: Jin-Young Heo (CEO) Phone: 070-4923-6372 E-mail: privacy@pearlabyss.com Fax: 031-624-5897 |
Department: Regulatory Compliance Division Phone: 070-4923-6372 E-mail: privacy@pearlabyss.com Fax: 031-624-5897 |
11. Remedies on Infringement of Rights and Interests
You may contact the following bodies for information on damage relief and consultation regarding infringement of person information.
- Infringement of Personal Information Report Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutor's Office Cybercrime Investigation Division (spo.go.kr / Tel: 1301)
- Korean National Police Agency Cyber Bureau (ecrm.police.go.kr / Tel: 182)
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
12. Addendum
본 개인정보처리방침은 2023.12.29 부터 적용됩니다.
(주)펄어비스(이하 '회사')는 귀하의 개인정보보호를 매우 중요시하며 『개인정보보호법』 등 관련 법령의 개인정보보호 규정을 준수하고 있습니다. 개인정보처리방침을 통해 귀하께서 제공하는 개인정보가 어떠한 용도와 방식으로 이용되고 있으며, 개인정보보호를 위해 어떠한 조치가 취해지고 있는지 알려드립니다.
본 개인정보처리방침은 펄어비스 공식 홈페이지 및 회사가 운영 및 관리하고 있는 건물 및 영상정보처리기기에 적용됩니다.
1. 수집하는 개인정보 항목 및 수집방법
회사는 홈페이지 이용 시 필요한 최소한의 개인정보만을 수집하여 처리하고 있습니다.
1) 기업 윤리 제보
- 이름, 전화번호, 이메일 주소, 비밀번호
※ 기업 윤리 관련 상담 및 신고는 익명으로도 가능합니다.
2) 채용
- (입사지원 및 인재풀 운영) 이름(국문, 영문), 사진, 성별, 국적, 생년월일, 연락처, 이메일, 주소, 지원경로, 학력사항, 자기소개, (이하 해당 시) 경력사항, 병력사항, 자격증, 어학, 해외 경험, 수상 경력, 대외 활동, 보유기술, 경력기술서, 기타 첨부파일(포트폴리오), 추천인, 희망 연봉, 보훈정보, 장애정보
- (면접 시) 이름, 생년월일, 연락처, 주소지, 주민등록번호
3) 펄어비스 본사 방문
- 이름, 소속, 차량번호, 연락처, (선택)이메일
2. 개인정보의 처리 목적
회사는 다음의 목적을 위하여 개인정보를 처리합니다. 처리하고 있는 개인정보는 다음의 목적 이외의 용도로는 이용되지 않으며, 이용 목적이 변경되는 경우에는 관계법령에 따라 별도의 동의를 받는 등 필요한 조치를 이행할 예정입니다.
1) 기업 윤리 관련 상담 및 신고 접수
2) 기업 윤리 관련 상담 및 신고 내역 처리 결과 회신 등 원활한 의사소통 경로 확보
3) 채용절차의 진행
4) 진행단계별 결과 등 채용정보 안내
5) 인재풀 구성
6) 건물 출입관리, 방문객 주차관리, CCTV 운영, 무선 네트워크 서비스 제공
7) 기타 소득 신고 등 관련법령 준수
3. 개인정보 제3자 제공
회사는 귀하의 개인정보를 '개인정보의 처리목적'에서 명시한 범위 내에서만 처리하며, 정보주체의 동의, 법률의 특별한 규정 등 관계법령 상 허용된 경우 이외에는 개인정보를 제3자에게 제공하지 않습니다.
4. 개인정보 처리위탁
회사는 향상된 서비스의 제공을 위하여 다음과 같이 귀하의 개인정보를 외부에 위탁하여 처리하고 있습니다. 개인정보 위탁처리업체 및 그 내용은 아래와 같습니다.
| 업체명 | 위탁업무 |
|---|---|
| ㈜사람인 | 온라인 인적성 검사 대행 |
| ㈜그렙 | 온라인 코딩 및 필기 테스트 대행 |
| 슈어엠㈜ | 메시지 발송 시스템 제공 및 관리 |
| ㈜에스앤아이코퍼레이션 | 건물 출입관리, 방문객 주차관리, CCTV 운영 |
| Azure Blob | 클라우드 서비스 이용 |
회사는 위탁계약 체결 시 관계법령에 따라 위탁업무 수행목적 외 개인정보 처리금지, 기술적·관리적 보호조치, 재위탁 제한, 수탁자에 관한 관리·감독, 손해배상 등 책임에 관한 사항을 계약서 등 문서에 명시하고, 수탁자가 개인정보를 안전하게 처리하는지를 감독하고 있습니다. 위탁업무의 내용이나 수탁자가 변경될 경우에는 지체없이 본 개인정보 처리방침을 통하여 공개하도록 하겠습니다.
수탁 업체에 전달된 개인정보는 원칙적으로 개인정보의 수집 및 이용 목적이 달성되면 파기합니다. 다만, 대한민국의 법령에 따라 정보를 보존하여야 하는 경우에는 수탁 업체에서 해당 정보를 보관할 수 있으며 다른 목적으로 사용되지 않습니다.
5. 개인정보의 처리 및 이용기간
회사는 개인정보를 수집시에 동의 받은 보유·이용 기간 내에서 개인정보를 처리 및 보유하며, 원칙적으로 개인정보의 처리목적이 달성되면 지체없이 파기합니다.
1) 기업 윤리 제보
접수된 상담 및 신고 처리일로부터 1년
2) 채용 (입사지원 및 인재풀 운영)
입사지원자의 개인정보는 회사의 인재풀에 3년간 보관되며, 채용이 필요한 경우 해당 인재풀에서 상시채용을 위하여 이용됩니다. 입사지원자가 개인정보의 삭제를 원하는 경우 지체 없이 해당 정보를 삭제합니다.
단, 관계 법령에 따라 특별히 보관해야 하는 개인정보가 수집될 경우, 해당 법령에서 규정한 기간 동안 개인정보를 보관합니다.
3) 펄어비스 본사 방문
12 개월
6. 개인정보의 파기
회사는 원칙적으로 개인정보 보유기간의 경과, 처리목적의 달성 등 개인정보가 불필요하게 되었을 때에는 지체없이 해당정보를 파기합니다.
귀하로부터 동의 받은 개인정보의 보유기간이 경과하거나 처리목적이 달성되었음에도 불구하고 다른 법령에 따라 개인정보를 계속 보존하여야 하는 경우에는, 해당 개인정보를 별도의 DB로 옮기거나 보관장소를 달리하여 보존합니다. 개인정보 파기의 절차 및 방법은 다음과 같습니다.
파기 절차 : 귀하의 개인정보는 목적이 달성된 후 지체없이 파기됩니다. 단, 관계 법령에 의해 보관되어야 하는 개인정보의 경우 별도로 분리되어 보관됩니다. 해당 개인정보는 법률에 의한 경우가 아니고서는 다른 목적으로 이용되지 않습니다.
파기 방법 : 종이에 출력된 개인정보는 분쇄기로 분쇄하거나 소각을 통하여 파기하며, 전자적 파일형태로 저장된 개인정보는 기록을 재생할 수 없는 기술적 방법을 사용하여 삭제합니다.
7. 정보주체의 권리와 그 행사방법
귀하는 언제든지 등록되어 있는 귀하의 개인정보의 열람, 정정, 삭제, 처리정지를 요청하실 수 있습니다. 이 경우, 개인정보보호 책임자 또는 개인정보 고충처리부서에 서면, 전화 또는 이메일로 연락하시면 확인 후 지체없이 조치하겠습니다.
8. 개인정보 자동수집장치의 설치, 운영 및 그 거부에 관한 사항
회사는 귀하의 정보를 수시로 저장하고 찾아내는 '쿠키(cookie)' 등을 운용합니다. 쿠키란 회사의 웹사이트를 운영하는데 이용되는 서버가 이용자의 브라우저에 보내는 아주 작은 텍스트 파일로서 이용자의 컴퓨터 하드디스크에 저장됩니다. 회사는 다음과 같은 목적을 위해 쿠키를 사용합니다.
1) 쿠키 등 사용 목적
이용자의 접속 빈도나 방문 시간 등을 분석, 이용자의 취향과 관심분야를 파악 및 자취 추적, 방문 회수 파악 등을 통한 개인 맞춤 서비스를 제공합니다.
회사 및 회사에 분석 서비스를 제공하는 자는 쿠키나 비컨, 태그나 스크립트 등을 이용한 추적 기술을 사용할 수 있습니다. 이러한 기술은 경향 분석, 웹사이트 관리, 이용자의 웹사이트 이용실태 등 전반적인 회사의 웹사이트 이용자의 통계적 정보 수집의 목적으로 이용됩니다. 회사는 분석 서비스 제공자로부터 해당 기술의 이용하여 수집한 자료를 합계의 형태로 받을 수 있습니다.
2) 쿠키 저장 거부 설정 방법
이용자는 쿠키 설치에 대한 선택권을 가지고 있습니다. 따라서, 이용자는 웹 브라우저에서 옵션을 설정함으로써 모든 쿠키를 허용하거나, 쿠키가 저장될 때마다 확인을 거치거나, 아니면 모든 쿠키의 저장을 거부할 수도 있습니다. 다만, 이용자가 쿠키 저장을 거부할 경우 일부 서비스 제공에 어려움이 있을 수 있습니다.
- Chrome: 웹브라우저 우측 상단의 [⋮] → [설정] → [개인 정보 보호 및 보안] → [서드 파티 쿠키]
- Microsoft Edge: 웹브라우저 상단의 […] → [설정] → [쿠키 및 사이트 권한] → [쿠키 및 저장된 데이터]
- Firefox: 웹브라우저 상단의 [≡] → [설정] → [개인 정보 및 보안] → [쿠키 및 사이트 데이터]
※ 그 외 웹로그 분석 도구의 경우 도구별 거부 방식을 따릅니다.
9. 개인정보 안전성 확보조치
회사는 이용자의 개인정보가 분실, 도난, 누출, 변조 또는 훼손되지 않도록 아래와 같은 개인정보 안전성 확보 대책을 마련하여 이행하고 있습니다. 단, 회사가 개인정보보호 의무를 다하였음에도 불구하고 비밀번호 관리 소홀 등 이용자 본인의 부주의 혹은 회사가 관리하지 않는 영역에서의 사고 등으로 중요 개인정보가 유출되어 발생한 문제에 대해 회사는 일체의 책임을 지지 않습니다.
1) 기술적 대책
- 개인정보가 포함되어 있는 중요한 데이터는 그 파일 및 송신 데이터를 암호화하거나 파일 잠금 기능을 사용하는 등의 보안 기능을 사용하여 보호하고 있습니다.
- 회사는 해킹이나 컴퓨터 바이러스 등에 의하여 이용자의 개인정보가 유출되거나 훼손되는 것을 방지하기 위하여 항상 감시하고 있습니다. 또한 만약의 사태를 대비하여 개인정보를 주기적으로 백업하고 있으며 Anti-Virus 프로그램, Firewall 등 다양한 보안 장비들로 보호하고 있습니다.
- 회사는 개인정보를 처리할 수 있도록 체계적으로 구성된 데이터베이스 시스템에 필요한 안전성 확보 조치를 다하고 있습니다.
2) 관리적 대책
- 회사는 이용자의 개인정보에 대한 접근 권한을 최소한의 인원으로 제한하고 있습니다.
- 회사는 개인정보취급자와 수탁사를 대상으로 개인정보보호 의무 등에 관해 정기적인 교육을 실시하고 있습니다.
- 회사는 개인정보보호 업무를 전담하는 부서에서 개인정보처리지침을 수립하여 관리하고 있습니다. 또한 내부 규정 준수 여부를 정기적으로 확인하여 문제가 발견될 경우, 지체없이 바로잡을 수 있도록 노력하고 있습니다.
3) 물리적 대책
- 회사는 개인정보를 보관하고 있는 개인정보시스템의 물리적 보관 장소를 별도로 두고 이에 대해 출입통제 절차를 수립, 운영하고 있습니다.
- 개인정보가 포함되어 있는 서류, 보조 저장매체 등은 잠금장치가 있는 안전한 장소에 보관하고 있습니다.
10. 영상정보 처리기기의 설치 및 운영
회사는 「개인정보보호법」 제25조 제1항에 따라 시설안전 및 화재예방, 인원 및 차량의 출입관리, 임직원 및 방문객의 안전을 위한 범죄예방, 차량도난 및 파손방지, 외부인 불법침입 방지 등의 목적으로 영상정보처리기기를 설치, 운영하고 있습니다.
[영상정보처리기기 운영현황]
| 설치 대수 | 설치 위치 및 촬영 범위 |
|---|---|
| 8대 | 건물 로비 |
| 1대 | 어린이집 입구 |
| 12대 | 건물외부 |
| 93대 | 지하주차장 |
| 7대 | 셔틀엘베홀 및 지하1층 복도 |
| 1대 | 지하1층 계단입구(선큰) |
| 총 122대 | - |
[영상정보처리기기 관리책임자 및 접근권한자]
| 구분 | 담당자 | 연락처 |
|---|---|---|
| 영상정보처리기기 관리책임자 | 경영지원실 경영지원1팀장 | 02-476-8583 (내선번호 4번) |
| 영상정보처리기기 접근권한자 | 경영지원1팀, 시설팀, 보안팀 | |
| 보안요원 |
[영상정보의 촬영시간, 보관기간, 보관장소 및 처리방법]
회사는 아래와 같이 영상정보를 촬영 후 보관하고 있으며, 보관기간 만료 시 복원이 불가능한 방법으로 영구 삭제하고 있습니다.
| 촬영시간 | 보관기간 | 보관장소 | 처리방법 |
|---|---|---|---|
| 24시간 | 촬영일로부터 60일 |
펄어비스 홈원 지하 1층 방재실 |
개인영상정보의 목적 외 이용, 제3자 제공, 파기, 열람 등 요구에 관한 사항을 기록·관리하고, 보관기간 만료 시 복원이 불가능한 방법으로 영구 삭제 |
[영상정보처리기기 설치 및 관리 등의 위탁에 관한 사항]
회사는 아래와 같이 영상정보처리기기 설치 및 관리 등을 위탁하고 있습니다.
| 업체명 | 위탁업무 |
|---|---|
| ㈜에스앤아이코퍼레이션 | CCTV 설치 및 유지보수, 운영관리 |
[영상정보 열람 등 요구에 대한 조치]
귀하는 촬영된 영상정보에 관하여 열람 또는 존재 확인, 삭제를 원하는 경우 회사에 관련 내용을 요구하실 수 있습니다. 단, 귀하가 촬영된 개인영상정보 및 명백히 귀하의 급박한 생명, 신체, 재산의 이익을 위하여 필요한 개인영상정보에 한정됩니다.
회사는 개인영상정보에 관하여 열람 또는 존재 확인, 삭제 요구가 접수된 경우 지체없이 필요한 조치를 하겠습니다. 그러나 다음의 경우에는 귀하의 개인영상정보 열람 등 요구를 거부할 수 있습니다.
- 범죄수사, 공소유지, 재판수행에 중대한 지장을 초래하는 경우
- 개인영상정보의 보관기간이 경과하여 파기한 경우
- 열람 등 요구에 대하여 필요한 조치를 취함으로써 타인의 사생활이 침해될 우려가 큰 경우
- 기타 귀하의 열람 등 요구를 거부할 만한 정당한 사유가 존재하는 경우
[영상정보의 확인 방법 및 장소에 관한 사항]
- 확인방법: 개인영상정보의 확인을 원하는 경우, 개인정보 담당부서 또는 영상정보관리 책임자에게 미리 연락하고 회사를 방문하시면 확인이 가능합니다.
- 확인장소 : 펄어비스 지하 1층 방재실
[영상정보의 안전성 확보 조치]
- 회사는 본 개인정보처리방침에 명시한 설치 목적 이외의 영상정보를 수집하거나 녹음기능을 사용하지 않으며, 수집·저장된 영상정보는 접근권한을 부여받은 자 이외에는 확인할 수 없도록 조치하고 있습니다.
- 회사는 수집된 영상정보에 대한 임의 열람 및 재생, 외부 반출을 일체 금지하고 있습니다.
- 회사는 영상정보의 목적 외 이용, 제3자 제공, 열람 등 요구 파기에 관한 사항을 기록·관리하고 있으며, 영상정보는 보관기간 만료 시 안전하게 삭제하고 있습니다.
11. 개인정보보호책임자 및 개인정보 고충 처리부서
귀하의 개인정보를 보호하고 개인정보와 관련한 민원을 처리하기 위하여 회사는 개인정보보호 책임자를 두어 귀하의 개인정보를 관리하고 있으며, 개인정보보호와 관련하여 귀하가 의견과 민원을 제기할 수 있는 창구를 개설하고 있습니다. 귀하의 개인정보와 관련한 문의사항 및 의견사항, 또는 정보주체의 권익이 침해될 우려가 있는 사실을 발견하였을 경우에는 개인정보보호 책임자 및 관련부서로 연락주시면 지체없이 조치하여 처리결과를 통보하겠습니다.
| 개인정보보호 책임자 |
|---|
|
성명: 허진영 (대표이사) 이메일: privacy@pearlabyss.com 팩스: 031-624-5897 |
| 개인정보 고충 처리부서 |
|---|
|
부서: 정보보안실 이메일: privacy@pearlabyss.com 팩스: 031-624-5897 |
| 입사지원자 개인정보 고충 처리부서 |
|---|
|
부서: 채용교육팀 전화번호: 02-476-8583 이메일: recruit@pearlabyss.com |
12. 권익침해 구제방법
귀하는 아래의 기관에 대해 개인정보 침해에 대한 피해구제, 상담 등을 문의하실 수 있습니다.
- 개인정보침해신고센터 (privacy.kisa.or.kr / 국번없이 118)
- 대검찰청 사이버수사과 (spo.go.kr / 국번없이 1301)
- 경찰청 사이버범죄 신고시스템(ECRM)(ecrm.police.go.kr / 국번없이 182)
- 개인정보분쟁조정위원회(kopico.go.kr / 국번없이 1833-6972)
13. 부칙
본 개인정보처리방침은 2024.02.08 부터 적용됩니다.
(주)펄어비스(이하 '회사')는 귀하의 개인정보보호를 매우 중요시하며 『개인정보보호법』 등 관련 법령의 개인정보보호 규정을 준수하고 있습니다. 개인정보처리방침을 통해 귀하께서 제공하는 개인정보가 어떠한 용도와 방식으로 이용되고 있으며, 개인정보보호를 위해 어떠한 조치가 취해지고 있는지 알려드립니다.
본 개인정보처리방침은 펄어비스 공식 홈페이지 및 회사가 운영 및 관리하고 있는 건물 및 영상정보처리기기에 적용됩니다.
1. 수집하는 개인정보 항목 및 수집방법
회사는 홈페이지 이용 시 필요한 최소한의 개인정보만을 수집하여 처리하고 있습니다.
1) 기업 윤리 제보
- 이름, 전화번호, 이메일 주소, 비밀번호
※ 기업 윤리 관련 상담 및 신고는 익명으로도 가능합니다.
2) 채용
- (입사지원 및 인재풀 운영) 이름(국문, 영문), 사진, 성별, 국적, 생년월일, 연락처, 이메일, 주소, 지원경로, 학력사항, 자기소개, (이하 해당 시) 경력사항, 병력사항, 자격증, 어학, 해외 경험, 수상 경력, 대외 활동, 보유기술, 경력기술서, 기타 첨부파일(포트폴리오), 추천인, 희망 연봉, 보훈정보, 장애정보
- (면접 시) 이름, 생년월일, 연락처, 주소지, 주민등록번호
3) 펄어비스 본사 방문
- 이름, 소속, 차량번호, 연락처, (선택)이메일
2. 개인정보의 처리 목적
회사는 다음의 목적을 위하여 개인정보를 처리합니다. 처리하고 있는 개인정보는 다음의 목적 이외의 용도로는 이용되지 않으며, 이용 목적이 변경되는 경우에는 관계법령에 따라 별도의 동의를 받는 등 필요한 조치를 이행할 예정입니다.
1) 기업 윤리 관련 상담 및 신고 접수
2) 기업 윤리 관련 상담 및 신고 내역 처리 결과 회신 등 원활한 의사소통 경로 확보
3) 채용절차의 진행
4) 진행단계별 결과 등 채용정보 안내
5) 인재풀 구성
6) 건물 출입관리, 방문객 주차관리, CCTV 운영, 무선 네트워크 서비스 제공
7) 기타 소득 신고 등 관련법령 준수
3. 개인정보 제3자 제공
회사는 귀하의 개인정보를 '개인정보의 처리목적'에서 명시한 범위 내에서만 처리하며, 정보주체의 동의, 법률의 특별한 규정 등 관계법령 상 허용된 경우 이외에는 개인정보를 제3자에게 제공하지 않습니다.
4. 개인정보 처리위탁
회사는 향상된 서비스의 제공을 위하여 다음과 같이 귀하의 개인정보를 외부에 위탁하여 처리하고 있습니다. 개인정보 위탁처리업체 및 그 내용은 아래와 같습니다.
| 업체명 | 위탁업무 |
|---|---|
| ㈜사람인 | 온라인 인적성 검사 대행 |
| ㈜그렙 | 온라인 코딩 및 필기 테스트 대행 |
| 슈어엠㈜ | 메시지 발송 시스템 제공 및 관리 |
| ㈜에스앤아이코퍼레이션 | 건물 출입관리, 방문객 주차관리, CCTV 운영 |
| Azure Blob | 클라우드 서비스 이용 |
회사는 위탁계약 체결 시 관계법령에 따라 위탁업무 수행목적 외 개인정보 처리금지, 기술적·관리적 보호조치, 재위탁 제한, 수탁자에 관한 관리·감독, 손해배상 등 책임에 관한 사항을 계약서 등 문서에 명시하고, 수탁자가 개인정보를 안전하게 처리하는지를 감독하고 있습니다. 위탁업무의 내용이나 수탁자가 변경될 경우에는 지체없이 본 개인정보 처리방침을 통하여 공개하도록 하겠습니다.
수탁 업체에 전달된 개인정보는 원칙적으로 개인정보의 수집 및 이용 목적이 달성되면 파기합니다. 다만, 대한민국의 법령에 따라 정보를 보존하여야 하는 경우에는 수탁 업체에서 해당 정보를 보관할 수 있으며 다른 목적으로 사용되지 않습니다.
5. 개인정보의 처리 및 이용기간
회사는 개인정보를 수집시에 동의 받은 보유·이용 기간 내에서 개인정보를 처리 및 보유하며, 원칙적으로 개인정보의 처리목적이 달성되면 지체없이 파기합니다.
1) 기업 윤리 제보
접수된 상담 및 신고 처리일로부터 1년
2) 채용 (입사지원 및 인재풀 운영)
입사지원자의 개인정보는 회사의 인재풀에 3년간 보관되며, 채용이 필요한 경우 해당 인재풀에서 상시채용을 위하여 이용됩니다. 입사지원자가 개인정보의 삭제를 원하는 경우 지체 없이 해당 정보를 삭제합니다.
단, 관계 법령에 따라 특별히 보관해야 하는 개인정보가 수집될 경우, 해당 법령에서 규정한 기간 동안 개인정보를 보관합니다.
3) 펄어비스 본사 방문
12 개월
6. 개인정보의 파기
회사는 원칙적으로 개인정보 보유기간의 경과, 처리목적의 달성 등 개인정보가 불필요하게 되었을 때에는 지체없이 해당정보를 파기합니다.
귀하로부터 동의 받은 개인정보의 보유기간이 경과하거나 처리목적이 달성되었음에도 불구하고 다른 법령에 따라 개인정보를 계속 보존하여야 하는 경우에는, 해당 개인정보를 별도의 DB로 옮기거나 보관장소를 달리하여 보존합니다. 개인정보 파기의 절차 및 방법은 다음과 같습니다.
파기 절차 : 귀하의 개인정보는 목적이 달성된 후 지체없이 파기됩니다. 단, 관계 법령에 의해 보관되어야 하는 개인정보의 경우 별도로 분리되어 보관됩니다. 해당 개인정보는 법률에 의한 경우가 아니고서는 다른 목적으로 이용되지 않습니다.
파기 방법 : 종이에 출력된 개인정보는 분쇄기로 분쇄하거나 소각을 통하여 파기하며, 전자적 파일형태로 저장된 개인정보는 기록을 재생할 수 없는 기술적 방법을 사용하여 삭제합니다.
7. 정보주체의 권리와 그 행사방법
귀하는 언제든지 등록되어 있는 귀하의 개인정보의 열람, 정정, 삭제, 처리정지를 요청하실 수 있습니다. 이 경우, 개인정보보호 책임자 또는 개인정보 고충처리부서에 서면, 전화 또는 이메일로 연락하시면 확인 후 지체없이 조치하겠습니다.
8. 개인정보 자동수집장치의 설치, 운영 및 그 거부에 관한 사항
회사는 귀하의 정보를 수시로 저장하고 찾아내는 '쿠키(cookie)' 등을 운용합니다. 쿠키란 회사의 웹사이트를 운영하는데 이용되는 서버가 이용자의 브라우저에 보내는 아주 작은 텍스트 파일로서 이용자의 컴퓨터 하드디스크에 저장됩니다. 회사는 다음과 같은 목적을 위해 쿠키를 사용합니다.
1) 쿠키 등 사용 목적
이용자의 접속 빈도나 방문 시간 등을 분석, 이용자의 취향과 관심분야를 파악 및 자취 추적, 방문 회수 파악 등을 통한 개인 맞춤 서비스를 제공합니다.
회사 및 회사에 분석 서비스를 제공하는 자는 쿠키나 비컨, 태그나 스크립트 등을 이용한 추적 기술을 사용할 수 있습니다. 이러한 기술은 경향 분석, 웹사이트 관리, 이용자의 웹사이트 이용실태 등 전반적인 회사의 웹사이트 이용자의 통계적 정보 수집의 목적으로 이용됩니다. 회사는 분석 서비스 제공자로부터 해당 기술의 이용하여 수집한 자료를 합계의 형태로 받을 수 있습니다.
2) 쿠키 저장 거부 설정 방법
이용자는 쿠키 설치에 대한 선택권을 가지고 있습니다. 따라서, 이용자는 웹 브라우저에서 옵션을 설정함으로써 모든 쿠키를 허용하거나, 쿠키가 저장될 때마다 확인을 거치거나, 아니면 모든 쿠키의 저장을 거부할 수도 있습니다. 다만, 이용자가 쿠키 저장을 거부할 경우 일부 서비스 제공에 어려움이 있을 수 있습니다.
- Chrome: 웹브라우저 우측 상단의 [⋮] → [설정] → [개인 정보 보호 및 보안] → [서드 파티 쿠키]
- Microsoft Edge: 웹브라우저 상단의 […] → [설정] → [쿠키 및 사이트 권한] → [쿠키 및 저장된 데이터]
- Firefox: 웹브라우저 상단의 [≡] → [설정] → [개인 정보 및 보안] → [쿠키 및 사이트 데이터]
※ 그 외 웹로그 분석 도구의 경우 도구별 거부 방식을 따릅니다.
9. 개인정보 안전성 확보조치
회사는 이용자의 개인정보가 분실, 도난, 누출, 변조 또는 훼손되지 않도록 아래와 같은 개인정보 안전성 확보 대책을 마련하여 이행하고 있습니다. 단, 회사가 개인정보보호 의무를 다하였음에도 불구하고 비밀번호 관리 소홀 등 이용자 본인의 부주의 혹은 회사가 관리하지 않는 영역에서의 사고 등으로 중요 개인정보가 유출되어 발생한 문제에 대해 회사는 일체의 책임을 지지 않습니다.
1) 기술적 대책
- 개인정보가 포함되어 있는 중요한 데이터는 그 파일 및 송신 데이터를 암호화하거나 파일 잠금 기능을 사용하는 등의 보안 기능을 사용하여 보호하고 있습니다.
- 회사는 해킹이나 컴퓨터 바이러스 등에 의하여 이용자의 개인정보가 유출되거나 훼손되는 것을 방지하기 위하여 항상 감시하고 있습니다. 또한 만약의 사태를 대비하여 개인정보를 주기적으로 백업하고 있으며 Anti-Virus 프로그램, Firewall 등 다양한 보안 장비들로 보호하고 있습니다.
- 회사는 개인정보를 처리할 수 있도록 체계적으로 구성된 데이터베이스 시스템에 필요한 안전성 확보 조치를 다하고 있습니다.
2) 관리적 대책
- 회사는 이용자의 개인정보에 대한 접근 권한을 최소한의 인원으로 제한하고 있습니다.
- 회사는 개인정보취급자와 수탁사를 대상으로 개인정보보호 의무 등에 관해 정기적인 교육을 실시하고 있습니다.
- 회사는 개인정보보호 업무를 전담하는 부서에서 개인정보처리지침을 수립하여 관리하고 있습니다. 또한 내부 규정 준수 여부를 정기적으로 확인하여 문제가 발견될 경우, 지체없이 바로잡을 수 있도록 노력하고 있습니다.
3) 물리적 대책
- 회사는 개인정보를 보관하고 있는 개인정보시스템의 물리적 보관 장소를 별도로 두고 이에 대해 출입통제 절차를 수립, 운영하고 있습니다.
- 개인정보가 포함되어 있는 서류, 보조 저장매체 등은 잠금장치가 있는 안전한 장소에 보관하고 있습니다.
10. 영상정보 처리기기의 설치 및 운영
회사는 「개인정보보호법」 제25조 제1항에 따라 시설안전 및 화재예방, 인원 및 차량의 출입관리, 임직원 및 방문객의 안전을 위한 범죄예방, 차량도난 및 파손방지, 외부인 불법침입 방지 등의 목적으로 영상정보처리기기를 설치, 운영하고 있습니다.
[영상정보처리기기 운영현황]
| 설치 대수 | 설치 위치 및 촬영 범위 |
|---|---|
| 8대 | 건물 로비 |
| 1대 | 어린이집 입구 |
| 14대 | 건물외부 |
| 69대 | 지하주차장 |
| 9대 | 셔틀엘베홀 및 지하1층 복도 |
| 1대 | 지하1층 계단입구(선큰) |
| 총 102대 | - |
[영상정보처리기기 관리책임자 및 접근권한자]
1) 영상정보처리기기 관리책임자
· 담당자 : 경영지원실 경영지원1팀 팀장
· 연락처 : 02-476-8583 (내선번호 4번)
2) 영상정보처리기기 접근권한자
· 관리자 : 경영지원실 경영지원1팀
· 연락처 : 02-476-8583 (내선번호 4번)
· 담당자 : 수탁사 CCTV 운영 담당자(시설팀, 보안팀)
· 연락처 : 02-503-8542
[영상정보의 촬영시간, 보관기간, 보관장소 및 처리방법]
회사는 아래와 같이 영상정보를 촬영 후 보관하고 있으며, 보관기간 만료 시 복원이 불가능한 방법으로 영구 삭제하고 있습니다.
| 촬영시간 | 보관기간 | 보관장소 | 처리방법 |
|---|---|---|---|
| 24시간 | 촬영일로부터 60일 |
펄어비스 홈원 지하 1층 방재실 |
개인영상정보의 목적 외 이용, 제3자 제공, 파기, 열람 등 요구에 관한 사항을 기록·관리하고, 보관기간 만료 시 복원이 불가능한 방법으로 영구 삭제 |
[영상정보처리기기 설치 및 관리 등의 위탁에 관한 사항]
회사는 아래와 같이 영상정보처리기기 설치 및 관리 등을 위탁하고 있습니다.
| 업체명 | 위탁업무 |
|---|---|
| ㈜에스앤아이코퍼레이션 | CCTV 설치 및 유지보수, 운영관리 |
[영상정보 열람 등 요구에 대한 조치]
귀하는 촬영된 영상정보에 관하여 열람 또는 존재 확인, 삭제를 원하는 경우 회사에 관련 내용을 요구하실 수 있습니다. 단, 귀하가 촬영된 개인영상정보 및 명백히 귀하의 급박한 생명, 신체, 재산의 이익을 위하여 필요한 개인영상정보에 한정됩니다.
회사는 개인영상정보에 관하여 열람 또는 존재 확인, 삭제 요구가 접수된 경우 지체없이 필요한 조치를 하겠습니다. 그러나 다음의 경우에는 귀하의 개인영상정보 열람 등 요구를 거부할 수 있습니다.
- 범죄수사, 공소유지, 재판수행에 중대한 지장을 초래하는 경우
- 개인영상정보의 보관기간이 경과하여 파기한 경우
- 열람 등 요구에 대하여 필요한 조치를 취함으로써 타인의 사생활이 침해될 우려가 큰 경우
- 기타 귀하의 열람 등 요구를 거부할 만한 정당한 사유가 존재하는 경우
[영상정보의 확인 방법 및 장소에 관한 사항]
- 확인방법: 개인영상정보의 확인을 원하는 경우, 개인정보 담당부서 또는 영상정보관리 책임자에게 미리 연락하고 회사를 방문하시면 확인이 가능합니다.
- 확인장소 : 펄어비스 지하 1층 방재실
[영상정보의 안전성 확보 조치]
- 회사는 본 개인정보처리방침에 명시한 설치 목적 이외의 영상정보를 수집하거나 녹음기능을 사용하지 않으며, 수집·저장된 영상정보는 접근권한을 부여받은 자 이외에는 확인할 수 없도록 조치하고 있습니다.
- 회사는 수집된 영상정보에 대한 임의 열람 및 재생, 외부 반출을 일체 금지하고 있습니다.
- 회사는 영상정보의 목적 외 이용, 제3자 제공, 열람 등 요구 파기에 관한 사항을 기록·관리하고 있으며, 영상정보는 보관기간 만료 시 안전하게 삭제하고 있습니다.
11. 개인정보보호책임자 및 개인정보 고충 처리부서
귀하의 개인정보를 보호하고 개인정보와 관련한 민원을 처리하기 위하여 회사는 개인정보보호 책임자를 두어 귀하의 개인정보를 관리하고 있으며, 개인정보보호와 관련하여 귀하가 의견과 민원을 제기할 수 있는 창구를 개설하고 있습니다. 귀하의 개인정보와 관련한 문의사항 및 의견사항, 또는 정보주체의 권익이 침해될 우려가 있는 사실을 발견하였을 경우에는 개인정보보호 책임자 및 관련부서로 연락주시면 지체없이 조치하여 처리결과를 통보하겠습니다.
| 개인정보보호 책임자 |
|---|
|
성명: 허진영 (대표이사) 이메일: privacy@pearlabyss.com 팩스: 031-624-5897 |
| 개인정보 고충 처리부서 |
|---|
|
부서: 정보보안실 이메일: privacy@pearlabyss.com 팩스: 031-624-5897 |
| 입사지원자 개인정보 고충 처리부서 |
|---|
|
부서: 채용교육팀 전화번호: 02-476-8583 이메일: recruit@pearlabyss.com |
12. 권익침해 구제방법
귀하는 아래의 기관에 대해 개인정보 침해에 대한 피해구제, 상담 등을 문의하실 수 있습니다.
- 개인정보침해신고센터 (privacy.kisa.or.kr / 국번없이 118)
- 대검찰청 사이버수사과 (spo.go.kr / 국번없이 1301)
- 경찰청 사이버범죄 신고시스템(ECRM)(ecrm.police.go.kr / 국번없이 182)
- 개인정보분쟁조정위원회(kopico.go.kr / 국번없이 1833-6972)
13. 부칙
본 개인정보처리방침은 2024.02.08 부터 적용됩니다.