[Privacy Policy]
GoodConsulting Group Co., Ltd. (hereinafter referred to as the 'company') has the following personal information processing policy in order to protect the personal information of information subjects and to handle complaints related to it promptly and smoothly in accordance with Article 30 of the 「Personal Information Protection Act」 Establish and disclose.
○ This Privacy Policy is effective from August 17, 2023.
Article 1 (Purpose of processing personal information)
The company processes personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and if the purpose of use is changed, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the 「Personal Information Protection Act」.
① We process personal information to handle civil affairs.
② We process personal information for customer requests for proposals for company services.
③ Personal information is processed for the purpose of carrying out the business if it is processed in accordance with the performance of the business consigned by the customer or the performance of the business entrusted.
④ We process personal information for event attendee confirmation and guidance, such as seminars and events, and surveys.
⑤ We process personal information for use in marketing and advertising.
Article 2 (Processing and Retention Period of Personal Information)
① The company processes and retains personal information within the period of retention and use of personal information according to the law or the period of retention and use of personal information consented to when collecting personal information from the information subject.
② After the purpose of collecting and using personal information is achieved, the company destroys the information without delay without exception.
③ If there is a need to preserve it according to the provisions of related laws, it will be kept until the period according to the following laws, and this information will never be used for any other purpose.
- Records on contract or withdrawal of subscription
Relevant laws: Act on Consumer Protection in Electronic Commerce, etc.
Retention period: 5 years
- Records on payment and supply of goods: 5 years
Relevant laws: Act on Consumer Protection in Electronic Commerce, etc.
Retention period: 5 years
- Records on consumer complaints or dispute handling
Relevant laws: Act on Consumer Protection in Electronic Commerce, etc.
Retention period: 3 years
Relevant laws: Protection of Communications Secrets Act
Retention period: 3 months
Article 3 (Items of Personal Information Processed and Collection Method)
① The company collects and processes the following personal information items.
- In the case of performing tasks consigned by the customer
Required Items: Items defined in the contract approved between the customer and Good Consulting Group Co., Ltd. or a document with equivalent legal effect for the service or items necessary for the performance of the task are collected.
- Civil complaint handling through the homepage
Required items: name, email, access IP information, cookie, access log
Optional items: mobile phone number, company name, department, title, company phone number, etc.
- Provision and execution of consulting services
Required items: Items listed in documents received for service provision and execution
Article 4 (Provision of Personal Information to Third Parties)
① The company processes personal information only within the scope specified in Article 1 (Purpose of processing personal information) and, in principle, does not provide it to the outside world. However, personal information is provided to a third party only when it falls under Articles 17 and 18 of the 「Personal Information Protection Act」 such as the consent of the information subject and special provisions of the law.
Article 5 (Matters Regarding entrustment of Personal Information Processing)
① If the company needs to entrust the processing of personal information for sake of efficiency, the company entrusts processing the processing of personal information to external parties, after obtaining the consent of the information principal in accordance with relevant laws and regulations.
② When the company concludes a entrustment contract, the company prohibits processing of personal information for purposes other than the purpose of entrusted business pursuant to Article 26 of the 「Personal Information Protection Act」, takes technical and managerial protection measures, restricts re-entrustment, manages and supervises the trustee, and compensates for damages, etc. are specified in documents such as contracts, and supervise whether the trustee handles personal information safely.
③ If the contents of the entrusted business or the consignee are changed, we will disclose it through this personal information processing policy without delay.
Article 6 (Matters Regarding Overseas Transfer of Personal Information)
① The company does not transfer personal information overseas.
② Domestic processing: Personal information is collected, stored, and processed within Korea, and is managed in servers or data centers in Korea.
Article 7 (Personal Information Destruction Procedure and Destruction Method)
① The company destroys the personal information without delay when the personal information becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the purpose of processing.
② Exceptions are made when personal information must be retained in accordance with other laws and regulations even though the personal information retention period agreed to by the information subject has elapsed or the purpose of processing has been achieved.
③ The procedure and method of destroying personal information are as follows.
The company selects the personal information for which the reason for destruction occurred and destroys the personal information with the approval of the person in charge of personal information protection of the company.
Personal information printed on paper is shredded with a shredder or destroyed by incineration, and information in the form of electronic files uses a technical method that cannot reproduce the record.
Article 8 (Rights and Obligations of Data Subjects and Legal Representatives and Matters Regarding the Method of Exercising)
① The information subject may exercise the right to view, correct, delete, or suspend processing of personal information at any time against the company.
② The exercise of rights pursuant to Paragraph 1 can be done in writing, e-mail, FAX, etc. in accordance with Article 41 (1) of the Enforcement Decree of the 「Personal Information Protection Act」, and the company will take action without delay.
③ The exercise of rights pursuant to Paragraph 1 can be done through an agent, such as a legal representative of the information subject or a person who has been delegated. In this case, you must submit a power of attorney in accordance with the “Public Notice on Personal Information Processing Methods (No. 2020-7)” Annex No. 11.
④ The rights of the information subject may be restricted in accordance with Article 35 Paragraph 4 and Article 37 Paragraph 2 of the 「Personal Information Protection Act」 when requesting access to and suspension of processing of personal information.
⑤ Requests for correction and deletion of personal information cannot be requested if the personal information is specified as the subject of collection in other laws and regulations.
⑥ The company checks whether the person who made the request, such as a request for viewing, a request for correction or deletion, or a request for suspension of processing according to the rights of the information subject, is the person or a legitimate agent.
Article 9 (Matters Regarding Measures to Ensure Safety of Personal Information)
① The company takes the following measures to ensure the safety of personal information.
- Establishment and implementation of internal management plan
For the safe handling of personal information, an internal management plan is established and implemented.
- Minimization and training of staff handling personal information
We are implementing measures to manage personal information by designating employees who handle personal information and limiting them to those in charge.
- Restriction of access to personal information
We take necessary measures to control access to personal information by granting, changing, or canceling access rights to the database system that handles personal information, and we control unauthorized access from outside using an intrusion prevention system.
- Access control for unauthorized persons
We set up a separate physical storage location for personal information and establish and operate access control procedures for it.
- Use of locking device for document security
Documents and auxiliary storage media containing personal information are stored in a safe place with a lock.
- Personal information encryption measures
We do not process personal information that requires encryption measures such as passwords, bio information, and unique identification.
Article 10 (Matters concerning the installation, operation and refusal of devices that automatically collect personal information)
① The company may operate 'cookies' that store and retrieve usage information from time to time in order to provide individually customized services to users.
② Cookies are very small text files that the server used to run the website sends to the user's browser and are sometimes stored on the user's computer.
Cookies are used to provide optimized information to users.
- Installation/Operation and Rejection of Cookies
Users have the option to install cookies. Therefore, the user may allow all cookies by setting options in the web browser, go through confirmation whenever a cookie is saved, or refuse to save all cookies.
- (How to set: Tools at the top of the web browser > Internet Options > Personal Information)
Article 11 (Matters Regarding Collection, Use, Provision and Rejection of Behavioral Information)
① The company does not collect, use, or provide behavioral information for online customized advertisements.
Article 12 (Matters on Person in Charge of Personal Information Protection)
① The company is responsible for overall handling of personal information, and has designated the person in charge of personal information protection as follows to handle complaints and damage relief of information subjects related to personal information processing.
▶ Person in charge of personal information protection
Name : SanHae Kim
Position : CEO
Contact: 070-4112-1447, james.kim@goodconsulting.co.kr
※ You will be connected to the department in charge of personal information protection.
② Information subjects can inquire about personal information protection related inquiries, complaint handling, damage relief, etc. that occurred while using the company's service (or business) to the person in charge of personal information protection and the department in charge. The company will respond to and process inquiries from information subjects without delay.
Article 13 (Department that receives and handles requests for access to personal information)
① The information subject may request the viewing of personal information in accordance with Article 35 of the 「Personal Information Protection Act」 to the department below.
▶ Personal information viewing request reception and processing department
Department Name: Digital Business Support Team
Person in charge : Seonmin Kim
Position: Manager
Contact: 070-4112-1447, smkim@goodconsulting.co.kr
Article 14 (Method of Remedy for Infringement of Rights and Interests of Information Subjects)
① The information subject may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency Personal Information Infringement Reporting Center, etc. in order to receive relief from personal information infringement. In addition, please contact the following organizations for reporting or consulting of other personal information infringement.
- Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
- Personal information infringement reporting center: (without area code) 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)
- National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)
In response to requests under the provisions of Article 35 (Access to Personal Information), Article 36 (Correction/Deletion of Personal Information), and Article 37 (Suspension of Processing of Personal Information, etc.) of the 「Personal Information Protection Act」, the head of a public institution A person whose rights or interests have been infringed upon due to a disposition or omission may request an administrative appeal in accordance with the Administrative Appeals Act.
※ Please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr) for details on administrative adjudication.
Article 15 (Change of Privacy Policy)
① This privacy policy is applied from August 17, 2023.
② If there are any additions, deletions or modifications to the current personal information processing policy, we will notify you 7 days prior to implementation.
