. KOLON ENP

Privacy Policy

Policy for Personal Information Processing
and Protection

KOLON Plastic strives our best to protect and manage customers’ personal information.

KOLON Co., Ltd. Personal Information Processing Policy

KOLON Plastic (hereinafter referred to as the "Company") establishes and discloses the following personal information processing policy to protect the personal information of information subjects and to swiftly and smoothly handle related grievances following Article 30 of the 「Personal Information Protection Act」 (hereinafter referred to as the "Act").

Article 1   Purpose of Personal Information Processing

  • The Company processes personal information for the following purposes.
  • Personal information being processed will not be used for purposes other than those listed below, and if the purpose is changed, separate consent will be obtained in accordance with Article 18 of the Act.
    Classification Purpose
    Recruitment inquiries Processing for the purpose of reference for future recruitment.
    Customer inquiries, product inquiries, technical inquiries Processing for the purpose of verifying the identity of the inquirer, confirming the inquiry contents, and notifying the processing results.
    Employee personal information Processing for the purpose of receiving suitable labor provision from employees and improving working conditions.

Article 2   Processing and Retention Period of Personal Information

  • The Company processes and retains personal information within the period specified following laws or the period agreed upon when collecting personal information from the information subject.
  • The processing and retention periods for each category of personal information are as follows.
    Retention Item Reason for Retention Retention Period
    Personal information of job applicants Reference for future recruitment 1 year
    Personal information of customer/product/technical inquiries Verification of inquirer's identity, confirmation of inquiry, and notification of processing results Until the inquiry is processed and completed
    Personal information of employees Article 43 of the Industrial Safety and Health Act and Article 107 of the Enforcement Regulations of the same Act (health examination results) 5 years
    Article 85-3, Paragraph 2 of the National Tax Basic Act (year-end settlement) 5 years from the statutory reporting deadline
    Personal information of retired employees Article 39 of the Labor Standards Act and Article 19 of the Enforcement Decree of the same Act 3 years after retirement

Article 3   Provision of Personal Information to Third Parties

  • The company does not provide the personal information of information subjects to third parties.
  • Notwithstanding the provisions of Paragraph 1, if the company has obtained prior individual consent from the information subject, or if there is a request from investigative agencies following the procedures and methods prescribed by law for investigative purposes, the personal information of the information subject may be provided to third parties.

Article 4   Outsourcing of Personal Information Processing

  • To facilitate smooth personal information processing, the Company outsources the following personal information processing tasks.
    Classification Outsourced Entity (Delegatee) Outsourced Tasks
    ERP System Outsourcing KOLON Benit Co., Ltd. Operation and improvement of the ERP system
  • When entering into outsourcing contracts, the Company specifies matters such as the prohibition of personal information processing beyond the outsourcing purpose, technical∙managerial protective measures, restrictions on re-outsourcing, management∙supervision of delegates, liability for damages, etc., in documents such as contracts following Article 25 of the 「Personal Information Protection Act」. The Company also supervises whether the delegate safely processes personal information.
  • If the content of the outsourced tasks or the delegate is changed, we will promptly disclose it through this Privacy Policy.

Article 5   Rights∙Obligations of Informaion Subjects and Methods of Exercise

  • Information subjects may exercise their rights, such as the right to access·correct·delete or request suspension of personal information processing, against the Company at any time.
    • 1) Request for access to personal information
    • 2) Request for correction in case of errors or more
    • 3) Request for deletion
      However, if the personal information is explicitly specified as a collection target by other laws, deletion cannot be requested.
    • 4) Request for suspension of processing
      However, in any of the following cases, the request for suspension of processing from the information subject may be refused, and in such cases, the reasons must be notified to the information subject within 10 days from the date of the request.
    • When there is a special provision in the law or it is necessary to comply with legal obligations
    • When there is a risk of harming another person's life∙body, or unfairly infringing on another person's property or other benefits
    • When it is difficult to fulfill the contract such as providing the agreed service to the information subject if personal information is not processed, and the information subject has not clearly expressed the intention to terminate the contract.
  • If the information subject requests correction or deletion of personal information, the company will not use or provide the relevant personal information until the correction or deletion is completed.
  • The rights under paragraph 1 may be exercised through a legal representative of the information subject or a delegate appointed by the information subject. In this case, the delegate must submit a power of attorney following the Personal Information Protection Act Enforcement Rules.
  • The information subject shall not violate related laws, including the Personal Information Protection Act, by infringing upon the personal information and privacy of themselves or others that the company is processing.

Article 6   Personal Information Items Being Processed

  • The Company may process the following personal information items.
    Classification Required Items Optional Items
    Recruitment Name, Mobile Number, Email
    Customer Inquiries, Product Inquiries, Technical Inquiries Name, Mobile Number, Email
    Employeee List Name, Gender, Date of Birth, Address, Employment History, Date of Employment, Contract Period, and other employment-related information
    Payroll Ledger Name, Resident Registration Number, Date of Employment, Salary, Work Days, Work Hours, Basic Pay, Allowances, etc.

Article 7   Destruction of Personal Information

  • The Company promptly destroys personal information when it becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose.
  • If personal information must be retained under other laws even after the expiration of the agreed retention period or achievement of the processing purpose, the Company moves such personal information to a separate database (DB) or stores it in a different location.
  • The procedure and method for the destruction of personal information are as follows.
    • 1) Destruction Procedure
      The company selects personal information for disposal when the disposal reason arises and obtains approval from the company's personal information protection manager before disposing of the personal information.
    • 2) Destruction Method
      Personal information recorded and stored in electronic file format is destroyed using methods such as low-level formatting to make the records irretrievable. Personal information recorded and stored in paper documents is shredded or incinerated for disposal.

Article 8   Measures for Ensuring the Security of Personal Information

  • To ensure the security of personal information, the following measures are taken.
    • 1)Administrative Measures: Establishment and implementation of internal management plans, regular employee training, etc.
    • 2)Technical Measures: Access control management of personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs.
    • 3)Physical Measures: Access control of computer rooms and data storage rooms.

Article 9   Personal Information Protection Manager

  • The company is responsible for overseeing tasks related to the processing of personal information and has designated a personal information protection manager to handle complaints and remedies related to the processing of personal information as follows.
    Personal Information Protection Manager Personal Information Protection Department
    Name Seo Jincheol Department HR Team
    Position Division Director of Management Support Contact Person Lee Yungi, Senior Manager
    Contact +82) 2-3677-3612 Contact +82)2-3677-3289
  • Information subjects can contact the personal information protection manager and the responsible department for any inquiries, complaints, or remedies related to personal information protection that arise while using the company's services (or business). The company will promptly respond to and address inquiries from information subjects.

Article 10   Remedies for Violation of Rights

Article 11   Request for Access to Personal Information

  • Information subjects can request access to their personal information following Article 35 of the 「Personal Information Protection Act」 to the department below. The company will make efforts to promptly process information subjects' requests for access to personal information.
    Department for Receiving and Processing Requests for Access to Personal Information
    Department HR Team
    Contact Person Lee Yungi, Senior Manager
    Contact +82)2-3677-3289

Article 12   Changes to the Privacy Policy

  • This Privacy Policy is effective from August 1, 2015.