Gaon Law Group (hereinafter referred to as the “Firm”) establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information and rights of data subjects and to handle related grievances in a smooth manner.
Article 1 (Items of Personal Information Processed, Purpose of Processing, and Retention Period)
The items of personal information processed by the Firm, the purposes of processing, and the retention periods are as follows:
| Items of Personal Information Processed: | Name, date of birth, contact information (address, phone number, email, etc.), workplace information (company name, job title, etc.) |
|---|---|
| Purpose of Processing: | Performance of matters entrusted by clients; providing news and updates from the Firm |
| Processing and Retention Period: | Until the purpose of processing is fulfilled or the data subject withdraws consent |
| Items of Personal Information Processed: | Name, resident registration number, contact information (address, phone number, email, etc.), educational background, employment history, military service record, qualifications, family information, HR-related information (resident registration certificate, bank account number, etc.) |
|---|---|
| Purpose of Processing: | Execution and maintenance of employment contracts; HR management |
| Processing and Retention Period: | Until the purpose of processing is fulfilled or the data subject withdraws consent (However, after the purpose is fulfilled, the information is retained only for dispute resolution, complaint handling, or compliance with legal obligations.) |
| Items of Personal Information Processed: | Name, date of birth, contact information (address, phone number, email, etc.), educational background, employment history, military service record, qualifications |
|---|---|
| Purpose of Processing: | Evaluation of hiring eligibility |
| Processing and Retention Period: | Until the purpose of processing is fulfilled or the data subject withdraws consent (However, after the purpose is fulfilled, the information is retained only for dispute resolution, complaint handling, or compliance with legal obligations.) |
Article 2 (Provision of Personal Information to Third Parties)
① The Firm processes personal information only within the scope specified in Article 1 and does not process it beyond that purpose or provide it to third parties without the prior consent of the data subject. However, personal information may be used for other purposes or provided to third parties in the following cases:
- 1) When separate consent is obtained from the data subject
- 2) When required by other laws
- 3) When the data subject (including legal representatives) is unable to express intent or cannot be contacted, and it is deemed necessary for the urgent protection of life, body, or property of the data subject or a third party
- 4) When provided in a form that makes it impossible to identify an individual, for purposes such as statistics or academic research
② When obtaining consent in accordance with Paragraph 1, Item 1, the Firm will notify the data subject of the following matters. If any of the following items change, the Firm will notify the data subject and obtain renewed consent:
- 1) Recipient of the personal information
- 2) Purpose of use or provision
- 3) Items of personal information to be used or provided
- 4) Retention and use period of the personal information
- 5) Right to refuse consent and any disadvantages arising from refusal
Article 3 (Outsourcing of Personal Information Processing)
① The Firm outsources personal information processing as follows:
- Service Provider: Sejong Partners
- Outsourced Tasks: Information related to payroll services for employees
② When outsourcing personal information processing, the Firm complies with the Personal Information Protection Act and related laws, and supervises the service provider to ensure safe processing of personal information.
Article 4 (Rights and Obligations of Data Subjects and Methods of Exercising Them)
① In accordance with the Personal Information Protection Act and related laws, data subjects may exercise rights such as requesting access, correction, deletion, suspension of processing, or withdrawal of consent regarding their personal information.
② The rights specified in Paragraph 1 may also be exercised through a legal representative or an authorized agent. In such cases, a power of attorney must be submitted in the form prescribed by the Enforcement Rule of the Personal Information Protection Act.
③ The Firm will take necessary measures without delay in accordance with applicable laws when the data subject exercises these rights.
Article 5 (Destruction of Personal Information)
① When personal information becomes unnecessary due to fulfillment of the processing purpose or other reasons, the Firm will destroy the information without delay.
② If personal information must be retained under applicable laws, the Firm will store and manage it separately from other personal information.
③ The Firm selects personal information subject to destruction and destroys it upon approval from the Personal Information Protection Officer.
④ Personal information in electronic form is permanently deleted in an irreversible manner, and other records, printouts, documents, or storage media are shredded or incinerated.
Article 6 (Measures to Ensure the Security of Personal Information)
To ensure the safe processing of personal information, the Firm takes the following measures:
- Administrative Measures: Establishment and implementation of internal management plans; regular training on personal information protection
- Technical Measures: Access control to personal information processing systems; installation of access control systems; encryption of unique identification information; installation of security programs
- Physical Measures: Access control for storage locations such as data rooms
Article 7 (Personal Information Protection Officer)
Data subjects may contact the following Personal Information Protection Officer for inquiries, complaints, or remedies related to personal information protection:
- Officer: Jihyun Park, Director
- Department: Management Support Division
- Contact: jsk@gaonlaw.com
Article 8 (Changes to the Privacy Policy)
This Privacy Policy may be amended, and any changes will be disclosed in accordance with applicable laws.
This Privacy Policy has been effective since March 1, 2022.