Privacy Policy
- Home
- Privacy Policy
-
Date of
EnforcementThe Doosan Yonkang Foundation (www.yonkang.org, “Yonkang”) complies with the relevant laws and regulations dealing with personal information protection including the Personal Information Protection Act and the Act on Information Communications Network Use Promotion and Information Protection. Yonkang strives to protect the rights and interests of persons who provide personal information, such as customers, employees, and Website users, through its Privacy and Information Processing Policy and the Privacy and Information Handling Policy. Yonkang will notify you of how and for what purposes Yonkang may use your information and what measures have been taken to protect your personal information through its policies regarding personal data privacy and information processing. In the event of an amendment to any of the provisions of the relevant policies, Yonkang will publically notify you of such amendment by posting a notice on its Website or by informing you individually. The Company’s policy related to personal information consists of the following: 1) the Privacy and Information Processing Policy regarding the personal information protection of all persons who provide their own personal information to Yonkang; 2) the Privacy and Information Handling Policy regarding the personal information protection of this Website’s users; and 3) the Image Information Processing Equipment Operation & Management Policy regarding personal image information protection. However, the privacy and information handling policies related to other Doosan affiliates’ websites are set forth on those websites.
01. General Rules
Personal information is information regarding a living person. That is, personal information refers to any items of information by which a person can be identified, such as their name, resident registration number, and image. This includes information which may not identify a person on its own, but may do so when combined with other items of information. A personal information provider is a person who can be identified by processed information. The Doosan Yonkang Foundation will disclose the Privacy and Information Processing Policy on the first page of each of its Websites (Doosan Yonkang Foundation: www.yonkang.org and Doosan Art Center: www.doosanartcenter.com) so that you can check the policy easily at any time. In the event of an amendment to the policy, Yonkang will publically notify you of such amendment by posting a notice on its Website or by informing you individually.
02. Processed Personal Information and Purpose of Processing
Unless otherwise permitted by the relevant laws and regulations or with the personal information provider’s prior consent, the Doosan Yonkang Foundation will not process any sensitive information or personal identification information issued for the purpose of identifying an individual that may seriously infringe the privacy of the personal information provider.
- A. Processed Information
-
[Concerning business users]
ID, password, records of service use, access log, cookie, access IP information, name, gender, date of birth, resident registration number, passport number, account number, address (home, office), contact point (home, office, mobile phone), e-mail, nationality, company name, family relations, education, awards /experience, theses / authored books, social/volunteer/special activities. -
[Concerning social users]
Name, home address, e-mail, company name, records of service use, access log, cookie, and access IP information. -
[Concerning employment]
Name, resident registration number, photo, password, postal address, telephone number, cell phone number, email, education, military service, foreign language competence, computer competence, license/certificate, family, and work experience, bank account number. - B. Purpose of Processing
-
[Concerning business users]
Fulfillment of the agreement concerning the provision of the service.- Management of members: to confirm the relevant person in relation to the use of the membership service, identify individuals, prevent illegal use by members, prevent unauthorized use, check intention to join membership, handle complaints, and deliver notices.
- Use in statistics: to identify access frequency and create statistics on members’ use of the service.
-
[Concerning social users]
- Manage members and handle complaints
- Conduct online market surveys or opinion polls
- Conduct marketing campaigns or advertisements
- Provide services and settles fees
-
[Concerning employment]
Conduct recruitment screening and contact with applicants
Wage/salary payment, fringe benefits, HR management including various job performance support, and evaluations.
03. Processing and Retention Period of Personal Information
Upon fulfillment of the purpose of the collection and use of personal information, the relevant information will, as a fundamental principle, be destroyed immediately. However, Yonkang will retain the following information during the period specified below and for the reasons specified below, and will obtain the consent of the person who has provided his or her own personal information, as and when necessary.
[Concerning business users]
Retained items: ID, password, name, gender, date of birth, resident registration number, passport number, account number, address (home, office), contact point (home, office, mobile phone), e-mail, nationality, company name, education, awards/experience, theses/authored books, social/volunteer/special activities.
Retention period: One year.
Reason of retention: User inquiries/requests control, user identification, etc.
Retained information: Service usage data, access information, cookies, and IP address.
Retention period: Three years.
Reason of retention: Improvement of service quality through data analysis of the user’s service usage.[Concerning social users]
Retained information: Name, postal address, email, and company name.
Retention period: One year.
Reason of retention: User inquiries/requests control, user identification, etc.
Retained information: Service usage data, access information, cookies, and IP address.
Retention period: Three years.
Reason of retention: Improvement of service quality through data analysis of the user’s service usage.[Concerning employment]
Retained information: name, resident registration number, photo, password, home address, home phone number, mobile phone number, e-mail, education, military service, foreign language proficiency, competence, computer ability, license, family relationship, and experience.
Retention period: Until expiration of the employment relationship.※ However, the personal information of an applicant for employment, who is not subsequently employed, will be retained for 5 years for future employment management purposes with that person’s consent.
Reason for retention: wage/salary payment, fringe benefit, HR management including various job performance supports, and evaluations.How Personal Information is Destroyed
Any personal information saved in an electronic file format will be deleted using a technology that prevents the recovery of the deleted records. Personal information retained on paper (hard copy) will be shredded or burned.
05. Disclosure of Personal Information to a Third Party
The Doosan Yonkang Foundation will collect personal information within the scope of the purpose of its collection, and will not use your personal information beyond the scope of its purpose of collection or offer or disclose it to a third party. However, the following are exceptions to the above rule:
- When consent is given by the person who has provided his or her own personal information;
- When necessary to comply with specific provisions in other relevant laws;
- When a person who has provided his or her own personal information or his/her legal representative is in a state in which his or her opinion/intention cannot be expressed, or when his or her prior consent cannot be obtained due to an invalid address, but where disclosure to a third party is urgently needed for the sake of the data provider or a third party’s life, body, and property; and
- When necessary for statistical purposes and academic studies, where personal information is provided in such a way as not to identify a specific individual.
The Doosan Yonkang Foundation currently offers personal information as follows:
- Institutions receiving personal information : Doosan Dong-A Corporation
- Personal information offered: name, address (home, office), and mobile phone
- Purpose of use: sending publications/print-outs
- Retention and use period : service provision period
06. Commissioning of Personal Information Processing
The Doosan Yonkang Foundation will not commission the processing of your personal information to an outside agency without your consent.
Yonkang commissions personal information processing as follows, and regulates necessary matters/issues so that personal information can be safely managed upon commission of the service as contracted under the relevant laws and regulations:Commissioned agency Details of commissioned service Doosan I&C Management of system and website Chung-gang Delivery of publication/printout CONER Website maintenance (contents management), web programming C’SQUARE Member identity check, delivery of commercial information, website & system management, advance sale of tickets, member information management DLI Yonkang education Doosan I&C HR, wages, recruit system outsourcing Nshaper wage management, welfare etc. Seoul Guarantee Insurance credit guarantee Nshaper group personal accident insurance Chung-Ang University Hospital Care Center Medical check-up service Doosan Credit Union Member subscription Hana Bank Payroll transfer Hana SK Card Issuance and management of corporate card Woori Card Issuance and management of corporate card 07. Rights and Obligations of Persons Providing Their Own Personal Information and Method of Exercising One’s Rights
All persons who provide their personal information may request the inspection, revision, deletion, and cessation of the processing of their personal information. However, the Doosan Yonkang Foundation may reject or restrict such a request in the following cases:
- When specifically required under the law or when necessary to comply with obligations under the relevant laws and regulations;
- When there is cause for concern about harm to another person’s life or body, or when there is cause for concern about an unlawful infringement upon another person’s property and profits;
- In a case where the service contracted with the personal information provider cannot be offered without processing his or her personal information, or when it is difficult to perform the service contracted with the personal information provider, but where he or she does not clearly express his/her intention to terminate the contract.
- Method and Procedure for Exercising One’s Rights
-
- Persons who wish to exercise the above rights regarding their personal information may complete the Read/Inspect, Revise, Delete, and Suspend Processing Form and send it by email or fax to the department in charge of personal information. (See “09. Customer Request Service on Personal Information” concerning the department)
- Unless there is a legitimate reason, the Doosan Yonkang Foundation will take proper action within 10 days of receiving such a request. When there is a legitimate reason for rejecting or restricting the request, Yonkang will inform you of the reason for such and the method of appealing the decision within 5 days of receiving the request.
- When the person concerned or their legal representative makes a request as above, Yonkang may confirm the identity of the person and/or legal representative by checking their identification cards, such as their resident registration card or a recognized electronic signature.
08. Technical, Administrative, and Physical Protection Measures for Personal Information
The Doosan Yonkang Foundation takes the following safeguards in handling personal information to prevent the loss, theft, leakage, modification or damage thereof:
[Technical actions]
- The Doosan Yonkang Foundation complies with the criteria set forth by the laws and regulations for the safe storage and transmission of personal information.
- Yonkang protects personal information against computer viruses by using a vaccine program. The vaccine program is periodically updated, but in the event of the sudden emergence of a new virus, Yonkang will apply the appropriate vaccine as soon as it becomes available in order to prevent infringements of personal information.
- To deal with outside infiltration, including hacking, Yonkang uses an infiltration interruption system and a weakness analysis system.
[Administrative actions]
- The Doosan Yonkang Foundation restricts the right to access personal information to the following persons: those responsible for carrying out sales and marketing activities involving the personal information provider, those engaging in personal information management, and those whose task requires the use of personal information.
- Yonkang conducts regular in-house training and external commissioned training for those employees responsible for handling personal information, and thoroughly manages and supervises them to ensure that they comply with the laws and regulations regarding personal information protection.
[Physical actions]
- To protect personal information, Yonkang limits physical access to such information through the use of locks and similar devices.
- Yonkang controls access to the computer room and archives by designating and operating them as specially protected areas.
09. Customer Request Service for Personal Information
The Doosan Yonkang Foundation has appointed the following department and personal information protection administrator to protect personal information and to process complaints related to personal information :
- A. Department in Charge of Personal Information
-
Department : Management Support Team
Tel : 02-708-5510
Fax : 02-708-5060
Email : [email protected]
Business hours : (Mon.-Fri.) 09:30 – 18:00, closed on Saturdays and Sundays - B. Personal information Protection Administrator
-
Name/Position : Wonjai Rhee, Vice president
Should you need to report a personal information infringement or receive consultation regarding an infringement, please contact the following agencies :KISA Personal Information Infringement Report Center
(http://privacy.kisa.or.kr/118)
e-PRIVACY i-Safe
(http://www.eprivacy.or.kr/02-580-0533~4)
Cybercrime Investigation Department
(http://icic.sppo.go.kr/02-3480-3600)
Cyber Terror Response Center
(http://www.ctrc.go.kr/02-392-0330)
10. Obligation of Public Notification
In the event of an amendment to the current Privacy and Information Processing Policy, Yonkang will post notice thereof on its Website 10 days before such amendment or deletion takes effect.
Date of Public Notification: June 23, 2021
Date of Enforcement: June 23, 202101. General Rules
Personal information is information regarding a living person. That is, personal information refers to any items of information by which a person can be identified, such as their name, resident registration number, and image. This includes information which may not identify a person on its own, but may do so when combined with other items of information. A personal information provider is a person who can be identified by processed information. The Doosan Yonkang Foundation will disclose the Privacy and Information Processing Policy on the first page of each of its Websites (Doosan Yonkang Foundation: www.yonkang.org and Doosan Art Center: www.doosanartcenter.com) so that you can check the policy easily at any time. In the event of an amendment to the policy, Yonkang will publically notify you of such amendment by posting a notice on its Website or by informing you individually.
02. Processed Personal Information and Purpose of Processing
Unless otherwise permitted by the relevant laws and regulations or with the personal information provider’s prior consent, the Doosan Yonkang Foundation will not process any sensitive information or personal identification information issued for the purpose of identifying an individual that may seriously infringe the privacy of the personal information provider.
- A. Processed Information
-
[Concerning business users]
ID, password, records of service use, access log, cookie, access IP information, name, gender, date of birth, resident registration number, passport number, account number, address (home, office), contact point (home, office, mobile phone), e-mail, nationality, company name, family relations, education, awards /experience, theses / authored books, social/volunteer/special activities. -
[Concerning social users]
Name, home address, e-mail, company name, records of service use, access log, cookie, and access IP information. -
[Concerning employment]
Name, resident registration number, photo, password, postal address, telephone number, cell phone number, email, education, military service, foreign language competence, computer competence, license/certificate, family, and work experience, bank account number. - B. Purpose of Processing
-
[Concerning business users]
Fulfillment of the agreement concerning the provision of the service.- Management of members: to confirm the relevant person in relation to the use of the membership service, identify individuals, prevent illegal use by members, prevent unauthorized use, check intention to join membership, handle complaints, and deliver notices.
- Use in statistics: to identify access frequency and create statistics on members’ use of the service.
-
[Concerning social users]
- Manage members and handle complaints
- Conduct online market surveys or opinion polls
- Conduct marketing campaigns or advertisements
- Provide services and settles fees
-
[Concerning employment]
Conduct recruitment screening and contact with applicants
Wage/salary payment, fringe benefits, HR management including various job performance support, and evaluations.
03. Processing and Retention Period of Personal Information
Upon fulfillment of the purpose of the collection and use of personal information, the relevant information will, as a fundamental principle, be destroyed immediately. However, Yonkang will retain the following information during the period specified below and for the reasons specified below, and will obtain the consent of the person who has provided his or her own personal information, as and when necessary.
[Concerning business users]
Retained items: ID, password, name, gender, date of birth, resident registration number, passport number, account number, address (home, office), contact point (home, office, mobile phone), e-mail, nationality, company name, education, awards/experience, theses/authored books, social/volunteer/special activities.
Retention period: One year.
Reason of retention: User inquiries/requests control, user identification, etc.
Retained information: Service usage data, access information, cookies, and IP address.
Retention period: Three years.
Reason of retention: Improvement of service quality through data analysis of the user’s service usage.[Concerning social users]
Retained information: Name, postal address, email, and company name.
Retention period: One year.
Reason of retention: User inquiries/requests control, user identification, etc.
Retained information: Service usage data, access information, cookies, and IP address.
Retention period: Three years.
Reason of retention: Improvement of service quality through data analysis of the user’s service usage.[Concerning employment]
Retained information: name, resident registration number, photo, password, home address, home phone number, mobile phone number, e-mail, education, military service, foreign language proficiency, competence, computer ability, license, family relationship, and experience.
Retention period: Until expiration of the employment relationship.※ However, the personal information of an applicant for employment, who is not subsequently employed, will be retained for 5 years for future employment management purposes with that person’s consent.
Reason for retention: wage/salary payment, fringe benefit, HR management including various job performance supports, and evaluations.How Personal Information is Destroyed
Any personal information saved in an electronic file format will be deleted using a technology that prevents the recovery of the deleted records. Personal information retained on paper (hard copy) will be shredded or burned.
05. Disclosure of Personal Information to a Third Party
The Doosan Yonkang Foundation will collect personal information within the scope of the purpose of its collection, and will not use your personal information beyond the scope of its purpose of collection or offer or disclose it to a third party. However, the following are exceptions to the above rule:
- When consent is given by the person who has provided his or her own personal information;
- When necessary to comply with specific provisions in other relevant laws;
- When a person who has provided his or her own personal information or his/her legal representative is in a state in which his or her opinion/intention cannot be expressed, or when his or her prior consent cannot be obtained due to an invalid address, but where disclosure to a third party is urgently needed for the sake of the data provider or a third party’s life, body, and property; and
- When necessary for statistical purposes and academic studies, where personal information is provided in such a way as not to identify a specific individual.
The Doosan Yonkang Foundation currently offers personal information as follows:
- Institutions receiving personal information : Doosan Dong-A Corporation
- Personal information offered: name, address (home, office), and mobile phone
- Purpose of use: sending publications/print-outs
- Retention and use period : service provision period
06. Commissioning of Personal Information Processing
The Doosan Yonkang Foundation will not commission the processing of your personal information to an outside agency without your consent.
Yonkang commissions personal information processing as follows, and regulates necessary matters/issues so that personal information can be safely managed upon commission of the service as contracted under the relevant laws and regulations:Commissioned agency Details of commissioned service Doosan I&C Management of system and website Chung-gang Delivery of publication/printout CONER Website maintenance (contents management), web programming C’SQUARE Member identity check, delivery of commercial information, website & system management, advance sale of tickets, member information management DLI Yonkang education Doosan I&C HR, wages, recruit system outsourcing Nshaper wage management, welfare etc. Seoul Guarantee Insurance credit guarantee Nshaper group personal accident insurance Chung-Ang University Hospital Care Center Medical check-up service Doosan Credit Union Member subscription Hana Bank Payroll transfer Hana SK Card Issuance and management of corporate card Woori Card Issuance and management of corporate card 07. Rights and Obligations of Persons Providing Their Own Personal Information and Method of Exercising One’s Rights
All persons who provide their personal information may request the inspection, revision, deletion, and cessation of the processing of their personal information. However, the Doosan Yonkang Foundation may reject or restrict such a request in the following cases:
- When specifically required under the law or when necessary to comply with obligations under the relevant laws and regulations;
- When there is cause for concern about harm to another person’s life or body, or when there is cause for concern about an unlawful infringement upon another person’s property and profits;
- In a case where the service contracted with the personal information provider cannot be offered without processing his or her personal information, or when it is difficult to perform the service contracted with the personal information provider, but where he or she does not clearly express his/her intention to terminate the contract.
- Method and Procedure for Exercising One’s Rights
-
- Persons who wish to exercise the above rights regarding their personal information may complete the Read/Inspect, Revise, Delete, and Suspend Processing Form and send it by email or fax to the department in charge of personal information. (See “09. Customer Request Service on Personal Information” concerning the department)
- Unless there is a legitimate reason, the Doosan Yonkang Foundation will take proper action within 10 days of receiving such a request. When there is a legitimate reason for rejecting or restricting the request, Yonkang will inform you of the reason for such and the method of appealing the decision within 5 days of receiving the request.
- When the person concerned or their legal representative makes a request as above, Yonkang may confirm the identity of the person and/or legal representative by checking their identification cards, such as their resident registration card or a recognized electronic signature.
08. Technical, Administrative, and Physical Protection Measures for Personal Information
The Doosan Yonkang Foundation takes the following safeguards in handling personal information to prevent the loss, theft, leakage, modification or damage thereof:
[Technical actions]
- The Doosan Yonkang Foundation complies with the criteria set forth by the laws and regulations for the safe storage and transmission of personal information.
- Yonkang protects personal information against computer viruses by using a vaccine program. The vaccine program is periodically updated, but in the event of the sudden emergence of a new virus, Yonkang will apply the appropriate vaccine as soon as it becomes available in order to prevent infringements of personal information.
- To deal with outside infiltration, including hacking, Yonkang uses an infiltration interruption system and a weakness analysis system.
[Administrative actions]
- The Doosan Yonkang Foundation restricts the right to access personal information to the following persons: those responsible for carrying out sales and marketing activities involving the personal information provider, those engaging in personal information management, and those whose task requires the use of personal information.
- Yonkang conducts regular in-house training and external commissioned training for those employees responsible for handling personal information, and thoroughly manages and supervises them to ensure that they comply with the laws and regulations regarding personal information protection.
[Physical actions]
- To protect personal information, Yonkang limits physical access to such information through the use of locks and similar devices.
- Yonkang controls access to the computer room and archives by designating and operating them as specially protected areas.
09. Customer Request Service for Personal Information
The Doosan Yonkang Foundation has appointed the following department and personal information protection administrator to protect personal information and to process complaints related to personal information :
- A. Department in Charge of Personal Information
-
Department : Management Support Team
Tel : 02-766-7620
Fax : 02-745-9896
Email : [email protected]
Business hours : (Mon.-Fri.) 09:30 – 18:00, closed on Saturdays and Sundays - B. Personal information Protection Administrator
-
Name/Position : Kwang-sik Lee, General Manager
Tel : 02-766-7620
Email : [email protected]
Should you need to report a personal information infringement or receive consultation regarding an infringement, please contact the following agencies :KISA Personal Information Infringement Report Center
(http://privacy.kisa.or.kr/118)
e-PRIVACY i-Safe
(http://www.eprivacy.or.kr/02-580-0533~4)
Cybercrime Investigation Department
(http://icic.sppo.go.kr/02-3480-3600)
Cyber Terror Response Center
(http://www.ctrc.go.kr/02-392-0330)
10. Obligation of Public Notification
In the event of an amendment to the current Privacy and Information Processing Policy, Yonkang will post notice thereof on its Website 10 days before such amendment or deletion takes effect.
Date of Public Notification: September 30, 2011
Date of Enforcement: September 30, 2011