YOON&YANG

Privacy Policy

Yoon & Yang LLC’s (hereinafter “Yoon & Yang”) following privacy policy of is established for the purpose of protecting the personal information of information owners and safeguarding their rights and interests in accordance with relevant laws and regulations, and managing the complaints of information owners related to personal information in an efficient manner.

1. Article 1 Personal Information Items to be Processed, Purpose of Processing, and Processing & Retention Period

   1. ① The personal information items processed by Yoon & Yang, the purpose of personal information processing, and the period of processing and retaining personal information are as follows:

      1. 1. Personal information of client
         Personal information items to be processed include (but are not limited to)

         • Name, contact information (e.g., address, telephone, email), place of work (e.g., company name, job position or grade); and
         • Information generated or received during the course of Yoon & Yang’s performance of services for clients or related to clients and the development, maintenance, performance and management of services or transactional relationships.
         Purpose of processing personal information are

         • Offering services for clients such as:, development, maintenance, performance and management of transactional relationships, investigation of accidents, settlement of disputes, handling of complaints, and performance of other statutory obligations;
         • Sending seminar invitations and newsletters; provision of other information
         Period of processing and retaining personal information

         • Upon achieving the foregoing purpose or upon an information owner’s withdrawal of consent
      2. 2. 2. Personal information of professionals, general personnel, employees under probationary period, and interns
         Personal information items to be processed

         • Job applicants
           [Essential]: Name, date of birth, contact information (e.g., address, telephone, email), photo, gender, educational background, military service history, work experience, purpose of application, and resume/cover letter
           [Optional]: Family relations, awards, foreign language skills & qualifications/licenses, and other information & referrals indicated in the submitted documents
         • Employees under probationary period and interns
           [Essential]: Name, date of birth, contact information (e.g., address, telephone, email), photo, gender, educational background, military service history, work experience, purpose of application, and resume/cover letter
           [Optional]: Family relations, awards, foreign language skills & qualifications/licenses, and other information & referrals indicated in the submitted documents
         Purpose of processing personal information

         • Job applicants: ID verification, confirmation of educational background and work experience, review, decision & notification of recruitment, confirmation of intent to apply upon additional recruitment
         • Employees under probationary period & interns: ID verification, confirmation of educational background and work experience, review, decision & notification of recruitment, and decision on official recruitment (e.g., development, maintenance, performance & management of employment relationship with employees under probationary period and interns)
         Period of processing and retaining personal information

         • Upon achieving the foregoing purpose or upon an information owner’s withdrawal of consent (however, following the satisfaction of the aforementioned purpose, the relevant personal information is kept only for purposes such as dispute resolution, complaints handling and compliance with relevant laws and regulations)
      3. 3. 3. Personal information of executives & employees (e.g., professionals and general personnel)
         Personal information items to be processed

         [Essential]: Name, personal identification number (e.g., resident registration number), nationality, contact information (e.g., address, telephone, email), photo, personnel information for maintenance of employment relationship (e.g., information indicated in the submitted documents during application such as personnel records and abstract of resident registration, employee number, affiliated division, job description, information related to work behavior & assessment, disciplinary action, retirement)
         [Optional]: Family relations

         Purpose of processing personal information

         • Execution and maintenance of labor (employment) agreement
         • Handling affairs necessary for personnel management (e.g., personnel assignment, evaluation, wage payment, welfare & fringe benefits, education & training)
         • Preparation of list of employees, opening group messenger service (e.g., affiliated division, job position, name, email, telephone)
         Period of processing and retaining personal information

         • Upon achieving the foregoing purpose or upon an information owner’s withdrawal of consent (however, following the satisfaction of the aforementioned purpose, the relevant personal information is kept only for purposes such as dispute resolution, complaints management and compliance with relevant laws and regulations)

   2. ② As a matter of principle, Yoon & Yang will not collect sensitive information that may infringe the privacy of the information owner; and if deemed necessary, the relevant information will be collected and used only for limited purposes upon obtaining a separate consent from the information owner: provided, that the sensitive information is accurate and up-to-date shall be checked on a regular basis.

2. Article 2 Provision of Personal Information to Third Party

   1. ① As a matter of principle, Yoon & Yang processes the information owner’s personal information within the scope of purposes stated in Article 1. Yoon & Yang will neither process nor furnish to a third party the relevant personal information exceeding the intended scope without the information owner’s prior consent: provided, in cases of each of the following subparagraphs, unless there are concerns over wrongful infringement of the interests of the information owner or a third party, the relevant personal information shall not be used for purposes other than the intended purpose or provided to a third party

      1. If the information owner has given prior consent to provision of his/her personal information to a third party;
      2. If prescribed in relevant statutes;
      3. If deemed necessary for the benefit of protecting the safety, health and property of a client or a third party, such as where the information owner or his/her legal representative is unable to express intent or prior consent cannot be obtained due to unknown address;
      4. For such purposes as statistical survey and academic research so long as personal information is provided to the extent a specific individual cannot be identified.

   2. ② Upon having obtained consent under the preceding paragraph, Yoon & Yang will notify each of the following matters to the information owner. Even in cases where changes in connection with any one of the following matters occur, Yoon & Yang will notify the same to and obtain consent from the information owner

      1. A party who receives the personal information (“receiving party”);
      2. Purpose of use of personal information (upon provision, referring to the purpose of use by the receiving party);
      3. Items of personal information to be used or provided;
      4. Period of retention and use of personal information (upon provision, referring to the period of retention and use by the receiving party);
      5. Information owner’s right to dissent and disadvantages, if any, upon such expression of dissent.

3. Article 3 Consignment of Personal Information

   Consignee

   Cafe24 Corp.

   Consigned Tasks

   Sending large-volume emails

   1. ① As shown in the table below, Yoon & Yang consigns the processing of the information owner’s personal information. If there are any changes to the consignee and the consigned tasks, Yoon & Yang will disclose the details of the changes pursuant to this Privacy Policy.
   2. ② Upon execution of a consignment agreement with a consignee, Yoon & Yang explicitly provides for matters thereunder related to the prohibition of personal information processing for purposes other than that for undertaking the consigned tasks, development of protective technical & managerial measures, restriction of re-consignment, management & supervision of consignees, and liability for compensation, and is responsible for supervising as to whether a consignee safely processes personal information.
4. Article 4 Rights & Obligations of Information Owner; Method of Exercise of Rights & Obligations
   1. ① An information owner may exercise such rights as the request for perusal, correction, deletion, and suspension of processing personal information against Yoon & Yang.
   2. ② Rights under the preceding paragraph may be exercised through the information owner’s legal representative or a delegated proxy: provided, in this case, the power of attorney (POA) shall be submitted to Yoon & Yang according to the Enforcement Rule of the Personal Information Protection Act.
   3. ③ Yoon & Yang will promptly take measures related to the information owner’s exercise of his/her rights as prescribed by relevant laws and regulations, such as the Personal Information Protection Act.
5. Article 5 Destruction of Personal Information
   1. ① As a matter of principle, if the relevant personal information is no longer needed due to the purpose of processing personal information being achieved, Yoon & Yang will immediately destroy the relevant personal information.
   2. ② If Yoon & Yang needs to continuously retain the personal information pursuant to the laws related to personal information, the relevant personal information will be stored and managed separately from other personal information.
   3. ③ If the personal information to be destroyed is in electronic file format, Yoon & Yang will permanently delete the same to the extent that it cannot be reproduced; and other records, printed materials, written documents will be shredded or burned.
6. Article 6 Measures to Ensure Safety of Personal Information

   Yoon & Yang takes the following measures to ensure the safety of personal information

   1. Managerial measures: Development & implementation of internal management plan and periodic education on personal information protection for employees.
   2. Technical measures: Management of accessibility to personal information processing system, installation of access control system, codification of personal information and installation of security program.
   3. Physical measures: Restriction of access to IT center and data storage room.

7. Article 7 Amendment to Privacy Policy

   This Privacy Policy may be subject to change pursuant to relevant statutes, guidelines, and Yoon & Yang’s internal policy. Upon any amendment to this Privacy Policy, Yoon & Yang continue to post via the website (www.hwawoo.com) information related to the timing of amendment and implementation, as well as details of the amendment. In such case, the details of the amendment will be provided via a comparison table so that the information owner can easily compare the previous and revised versions.
   
   November 22, 2022 - October 31, 2023

8. Article 8 Remedy for Infringement of Rights and Interests

   Information owners may contact the following agencies in order to file a report or receive consultation on personal information infringement.

   1. Personal Information Dispute Mediation Committee (privacy.kisa.or.kr / 118)
   2. Personal Information Infringement Report Center of the Korea Internet & Security Agency (privacy.kisa.or.kr / 118)
   3. Cyber Crime Investigation Agency of the Supreme Prosecutor’s Office (spo.go.kr / 02-3480-3573)
   4. Cyber Terror Response Center of the Korean National Police Agency (netan.go.kr / 1566-0112)

9. Article 9 Personal Information Protection Officer

   1. ① Yoon & Yang’s personal information protection officer is as follows

      Personal Information Protection Officer: Kwang Wook Lee, Esq.
      Telephone: 02-6003-7535

   2. ② Inquiries related to request for perusal of personal information and protection of personal information, complaints management and relief measures are handled by the following division and employee.

      Division & Employee: PR Team of the Management Support Division (Byung Hoon Kang, Senior Manager)
      Telephone: 02-6003-7219