본문내용 바로가기

LEGAL NOTICE

Chapter 1 Personal Information Processing Policy

The Law Firm, Law Win (hereinafter referred to as “the Law Firm”) shall establish and disclose personal information processing policy (hereinafter referred to as “the Policy”) as follows, to protect the personal information, rights and interests from the subject of the information, and to smoothly deal with the information subject's problems related to the personal information in accordance with the related Policies.

  • Article 1 (Items of Personal Information Processed)

  • The personal information items processed by the Law Firm are as follows:
    • (a) Customer’s personal information
    • (i) Required Information · Name, contact information, e-mail, resident registration number (required only when signing a delegation contract), front and back copy of the identification card (required only when signing a delegation contract), address (required only when signing a delegation contract)
    • (ⅱ) Optional information · Consultation time, title, content, attached file, company name and position
    • (ⅲ) When using paid service · Credit card information for payment, bank account information, payment records, etc.
    • (ⅳ) In the process of using the service, the following information may be automatically generated and collected.  · IP address, cookie, date and time of visit, history of used service, history of used volume, used device information
    • (ⅴ) Method to collect personal information: Homepage (Consultation inquiry, paid service payment)
  • Even if optional information is not entered, there shall be no restriction on the use of the service and sensitive personal information (race, ideology and creed, political tendency, criminal record, medical information, etc.) that may violate basic human rights of users shall not be collected.
    • (b) Personal information of employees
    • (i) Required items: All personal information written in documents such as name, resident registration number, address, contact information, gender, e-mail, resume, self-introduction, academic transcript, etc.
    • (ⅱ) Optional items: Qualifications, language skills, awards, family history, family relationship, family name, family address, family contact information, etc.
    • (c) Personal information of professionals, such as lawyers, general employees, applicants for practical training, etc.
    • (i) Required items: All personal information written in documents such as name, resident registration number, address, contact information, gender, e-mail, resume, self-introduction, academic transcript, etc.
    • (ⅱ) Optional items: Qualifications, language skills, awards, family history, family relationship, family name, family address, family contact information, etc.
  • Article 2 (Purpose of the Personal Information Processing)

  • The Law Firm shall process personal information for the following purposes. The personal information being processed shall not be used for purposes other than the following, and if the purpose of use is changed, the Law Firm shall take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
    • (a) Customer information · Preparation of contracts and contacts necessary in conducting events requested by or involved in customers and other customer-related events, sending newsletters and other publications produced and published by the Law Firm, and offering event information hosted by the Law Firm and other information  · Use of service provided on the homepage (reception of Internet consultation and paid service), payment of service fees, record analysis of the user's service use and access frequency, statistics on service use, offer of customized service and service improvement
    • (b) Employees’ personal information For the purpose of personnel management of employees of the Law Firm, such as signing and maintaining employment contracts, paying wages, training, issuing certificates, providing welfare benefits to workers and their families, health (medical) insurance, employment insurance, and national pension
    • (c) Personal information of professionals, such as lawyers, general employees, applicants for practical training, etc. For the purpose of recruitment, such as confirmation of an applicant's identity, academic background, career, management of past career, decision and notification of hiring, and confirmation of the intention to apply for additional recruitment
  • Article 3 (Processing and Retention Period of Personal Information)

  • (1) The Law Firm shall process and retain personal information within the period of retention and use of personal information in accordance with the Policy, or within the period of retention and use of personal information that was agreed upon when collecting personal information from the subject of information.
  • (2) Each personal information processing and retention period is as follows:

    • (a) Customer personal information : Until the purpose is achieved or customer's consent is withdrawn
    • (b) Personal information of employees: 3 years after the retirement of employees or until a request for destruction from the subject of information
    • (c) Personal information of professionals such as lawyers, general employees, and intern applicants, etc.: 3 years after the date of application or until a request for destruction from the subject of information
  • Article 4 (Provision of Personal Information to a Third Party)

  • (1) In principle, the Law Firm shall process personal information from the subject of information only within the scope of the purposes specified in Article 2, and shall not process it beyond the original purpose or provide the information to a third party without prior consent from the subject of information. Provided that, in the case falling under any of the following subparagraphs, the personal information may be used for purposes other than the purpose of use or be provided to a third party, except when there is a risk of improperly infringing the interests of the subject of information or a third party.
    • 1. In the case of obtaining separate consent from the subject of information
    • 2. If otherwise provided in other Policies
    • 3. In the event that subject of information or its legal representative is unable to express his/her intention or cannot obtain prior consent due to an unknown address, etc., and deemed necessary for the benefit of the subject of information or a third party's urgent life, body, or property.
    • 4. If the personal information is provided in a form that a specific individual is not identifiable as necessary for statistical purpose and academic research purpose, etc.
  • (2) When obtaining consent under paragraph (1), the Law Firm shall notify the subject of information on the following issues. If any of the following issues are changed, the Law Firm shall notify the subject of information about this and shall obtain consent.
    • 1. Those who receive the personal information
    • 2. Purpose of using the personal information (if provided, it refers to the purpose of the recipient)
    • 3. Items of personal information used or provided
    • 4. Retention and use period of personal information (if provided, it means the retention and use period of the recipient)
    • 5. The fact about the rights to reject consent and details of the disadvantages if there are disadvantages due to the rejection of consent
  • Article 5 (Consignment of Personal Information Processing)

  • In principle, the Law Firm shall not entrust the processing of personal information to others without the users’ consent. In the future, if personal information processing entrustment is required, subject of entrustment, entrustment work content, entrustment period, and entrustment contract details (compliance with the Policies related to personal information protection, the prohibition of provision to third parties about personal information, and regulation of liability, etc.) shall be notified through the policy of processing personal information protection. In addition, the Law Firm shall obtain prior consent, if necessary.
  • Article 6 (Rights, Obligations of Personal Information Subject, and Method of Exercise)

  • (1) The subject of information may exercise the rights related to the protection of personal information, such as requests of access, to correct, to delete, and to suspend the processing of personal information at any time.
  • (2) The exercise to pursue the rights according to paragraph (1) may be made through writing, telephone, e-mail, or fax to the Law Firm, and the Law Firm shall promptly take action.
  • (3) If the subject of information requests correction, deletion, or suspension of processing of errors in the personal information, etc., the Law Firm shall not use or provide the personal information until the correction or deletion is completed.
  • (4) The exercise to pursue the rights according to paragraph (1) may be made through a legal representative of the subject of information or an agent, such as a person who has been delegated. In this case, the power of attorney in accordance with the attached Form 11 of the Enforcement Rules of the Personal Information Protection Act shall be submitted.
  • (5) The subject of information shall not infringe the personal information and privacy of the subject of information or other people handled by the Law Firm by violating the related Policies such as the Personal Information Protection Act.
  • Article 7 (Destruction of Personal Information)

  • (1) If the personal information is not necessary, for example, the elapse of the retention period of personal information and achievement of the purpose of processing, the Law Firm shall promptly destroy the personal information.
  • (2) In the event that the personal information needs to be kept in accordance with other Policies, even though the retention period of personal information agreed by the subject of information has elapsed or the purpose of processing has been achieved, the personal information shall be transferred to a separate database (DB) or preserved in a different storage location.
  • (3) The Law Firm shall select the personal information that has a reason for destruction and shall destroy the personal information recorded and stored in the form of an electronic file using Low-Level Format method, so that the information cannot be played back, by receiving the approval of the personnel in charge of personal information protection, and shall destroy personal information recorded and stored on paper documents by grinding with a grinder or incineration.
  • Article 8 (Measures to Secure Safety of Personal Information)

  • In accordance with Article 29 of the Personal Information Protection Act, the Law Firm takes technical, administrative and physical measures necessary to ensure the safety as follows:
  • 1. Establishment and implementation of an internal management plan

    The Law Firm has established and implemented an internal management plan for the safe handling of personal information.

  • 2. Access control and restriction of access rights

    The Law Firm is taking necessary measures to control access to personal information through granting, changing, and canceling access to database systems that process personal information, and controlling unauthorized access from outside using an intrusion prevention system. In addition, the Law Firm is managing personal information by designating employees who handle the personal information, limiting and minimizing it to the personnel in charge.

  • 3. Encryption of personal information

    Passwords of the personal information of the subject of information are encrypted, stored and managed, and sensitive data are being managed using separate security functions, such as encrypting files and transmission data or using the file lock function.

  • 4. Storage of access records, and prevention of forgery and falsification

    The Law Firm keeps and manages records that have been accessed about the personal information processing system for at least 6 months, and uses security functions to prevent access records from being forged, falsified, stolen, or lost.

  • 5. Technical measures against hacking, etc.

    The Law Firm installs a security program to prevent personal information leakage and damage by hacking, computer virus, etc., periodically updates and checks, installs a security program in the area where access is controlled from the outside, and monitors and blocks technically and physically.

  • 6. Use of locks for document security

    The Law Firm keeps documents containing personal information, auxiliary storage media, etc. in a safe place with a lock.

  • Article 9 (Change of Personal Information Processing Policy)

  • In the event of a change in the personal information processing policy, the Law Firm shall continuously disclose the time of the change, enforcement, and changes.
  • Article 10 (Processing Personal Information of Employees)

  • The provisions of the Personal Information Processing Policy shall apply mutatis mutandis to the personal information processing of employees of the Law Firm.
  • Article 11 (Remedy for Infringement of Rights and Interests)

  • The subject of the personal information may apply for a dispute resolution or consultation, etc., to the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency's Personal Information Infringement Report Center in order to receive relief from personal information infringement. If necessary, for reporting or consultation due to other personal information infringements, please contact the following organizations.

    • 1. Personal Information Dispute Mediation Committee (118 without area code)
    • 2. Korea Internet & Security Agency, Personal Information Infringement Report Center (http://privacy.kisa.or.kr/kor/main.jsp)
    • 3. Information Protection Mark Certification Committee (www.eprivacy.or.kr/ 02.580.0533 ~ 4)
    • 4. Supreme Prosecutors' Office, High-Tech and Financial Crime Investigation Division (www.spo.go.kr/ 02.3480.2000)
    • 5. Korean National Police Agency, Cyber Terror Response Center (www.ctrc.go.kr/ 02.392.0330)
  • Article 12 (Personnel in Charge of Information Protection, etc.)

  • (1) The person in charge of personal information protection and person in charge of administrative work under Article 31 (1) of the Personal Information Protection Act of the Law Firm are as follows.
  •  · Personal information protection manager
    Affiliation/position
    Corporate overall control/representative lawyer
    Name
    Lee Seung-woo
    Contact
    02-782-9980
  •  · Personal information protection work-level manager
    Affiliation/position
    Corporate overall control/manager
    Name
    Ryu Ho-ran
    Contact
    02-782-9980
  • (2) The subject of information may inquire person in charge of administrative work of personal information protection about personal information protection inquiries, complaint handling, and damage relief, etc., incurred while using the services of the Law Firm. The Law Firm shall answer and process any inquiries from the subject of information without delay.

  • (3) If the person in charge of personal information protection, person in charge of administrative work of personal information protection, or person in charge of requesting access to personal information is changed, the Law Firm shall notify the changes, personal name, department name, and contact information such as phone number by posting them on the notice on the Internet website or by changing the personal information processing policy.

  • Article 13 (Matters Concerning Installation, Operation, and Rejection of Cookies)

  • 1. Definition of Cookies

    Cookies are very small text files, which the server uses to operate the website and transmits to a user's computer and are stored on the user's computer hard disk. As such, since the users can choose to install and collect cookies by themselves, the users may refuse to collect them.

  • 2. How to refuse cookie setting

    1. For Internet Explorer: "Tool" (at the top of the web browser)> "Internet Option"> "Personal Information"> Direct Settings

    2. For Chrome: Customize and control Chrome (at the top right of the web browser)> "Setting"> "Advanced"> "Content Setting" in the "Privacy and Security" section> Direct Setting in the Cookie section

Chapter 2 Operation and Management Policy of Video Information Processing Equipment

  • Article 14 (Basis for and Purpose of Installation)

  • The Law Firm operates and manages video information processing equipment for safety management, facility protection, and crime prevention., etc.
  • Article 15 (Number of Installations, Installation Location and Shooting Range)

  • 1. Seoul Office
    Number of installations
    Installation location
    Shooting range
    1 unit
    Around 2nd floor multifunction device
    2nd floor entrance, lobby
    4 units
    Representative lawyer office on the 3rd floor, litigation team office, around the multifunction device, side building
    3rd floor representative lawyer office interior, litigation team complete, hallway, side building complete view
    1unit
    In front of 5th floor tea making room
    5th floor entrance
  • 2. Gwangju Branch Office
    Number of installations
    Installation location
    Shooting range
    5 units
    3rd floor office Inside office
    Lobby, meeting room, 3 lawyer offices
    4 units
    4th floor office Inside and outside office
    lobby, 2 lawyer offices, balcony
  • 3. Daejeon Branch Office
    Number of installations
    Installation location
    Shooting range
    4 units
    Room 1003 each lawyer office,
    Hall of 1003, Counseling office
    Inside each lawyer office, Entrance,
    View of 1003 hall, Inside counseling room
    4 units
    Room 1005 each lawyer office,
    Hall of 1005
    Inside each lawyer office, Interior view
    of room 1005
  • 4. Busan Branch Office
    Number of installations
    Installation location
    Shooting range
    1 unit
    Lawyer office
    Counseling table
    1 unit
    Lawyer office
    Near the entrance door
    1 unit
    Entrance of counseling room
    From the entrance of the counseling room to the window
    1 unit
    Office doorway
    Office doorway
  • 5. Suwon Branch Office
    Number of installations
    Installation location
    Shooting range
    2 unit
    Room 305
    Inside office
    2 unit
    Room 306
    Inside office
  • 6. Uijeongbu Branch Office
    Number of installations
    Installation location
    Shooting range
    1 unit
    Counseling office
    From the doorway to the inside office
    1 unit
    Counseling office
    From the entrance of the counseling room to the inside office
  • Article 16 (Manager in Charge, Department in Charge, etc.)

  • (1) The general manager in charge of video information processing equipment of the Law Firm is as follows.
  • Personal information protection manager
    Affiliation/position
    Corporate overall control/representative lawyer
    Name
    Lee Seung-woo
    Contact
    02-782-9980
  • (2) Persons who have access rights to video information processing equipment of the Law Firm are as follows.
  • 1. Seoul Branch Office
    Affiliation/position
    Corporate overall control/representative lawyer
    Name
    Lee Seung-woo
    Contact
    02-782-9980
  • 2. Gwangju Branch Office
    Affiliation/position
    Corporate overall control/responsible lawyer at Gwangju Branch Office
    Name
    Cho Hyung-rae
    Contact
    062-719-4066
  • 3. Daejeon Branch Office
    Affiliation/position
    Corporate overall control/responsible lawyer at Daejeon Branch Office
    Name
    Park Eun-kook
    Contact
    042-716-1190
  • 4. Suwon Branch Office
    Affiliation/position
    Corporate overall control/responsible lawyer at Suwon Branch Office
    Name
    Kim Sang-soo
    Contact
    031-547-9650
  • 5. Busan Branch Office
    Affiliation/position
    Corporate overall control/responsible lawyer at Busan Branch Office
    Name
    Bae Kyung-min
    Contact
    051-714-5240
  • 6. Uijeongbu Branch Office
    Affiliation/position
    Corporate overall control/responsible lawyer at Uijeongbu Branch Office
    Name
    Moon Pil-sung
    Contact
    031-894-8961
  • Article 17 (Recording Time, etc.)

  • (1) The video information processing equipment of the Law Firm records video from 00:00 to 24:00 throughout the year.

    (2) The Law Firm and the Headquarters of the Law Firm retain the recorded video information for 30 days from the time of recording.

  • Article 18 (Management of Personal Video Information Files Generated by Video Information Processing Device, etc.)

  • (1) The Law Firm shall not use personal video information generated by video information processing devices for purposes other than safety management, facility protection, and crime prevention.

    (2) The Law Firm may often check personal video information by replaying recorded files in the office of the General Affairs Team, where personal video information concerned is kept to investigate crimes, etc. that occurred within the Law Firm.

    (3) If retention and processing period under Article 3 (2) elapses, the Law Firm shall permanently technically remove the file and shred or incinerate any printouts containing personal video information. Provided that, in case of otherwise provided in other Policies, this shall not apply.

    (4) Recorded video information shall not be used for purposes other than the installation of video information processing devices or be read or provided to anyone other than those authorized to access it.

  • Article 19 (Reading, etc.)

  • (1) The subject of personal information may request access or confirmation of existence (hereinafter referred to as “reading, etc.”) of personal video information processed by the Law Firm to the manager of video information processing devices concerned or the manager in the headquarters of the Law Firm. In this case, the subject of personal information shall explain the reason why he or she needs the personal video information.

    (2) If the Law Firm receives a request from the subject of personal information according to paragraph (1), the operator of video information processing devices shall verify whether the person who requests reading, etc. is the person himself or herself, or a legitimate agent by receiving identification documents such as the certificate of resident registration, driver's license, or passport.

    (3) If the application for reading, etc. according to paragraph (1) falls under any of the following, the Law Firm shall permit reading, etc.:

    1. In the case of consent by the subject of information

    2. In the case of reading, etc. provided to the subject of information

    3. In case of otherwise provided in other Policies

    4. In case of necessity for the purpose of media coverage through newspapers/ broadcasts, when a specific individual is provided in an unrecognizable form

    5. In case of necessity for investigation, prosecution, and maintenance of crimes

    6. In case of necessity for court trial

    (4) In spite of the provisions in paragraph (3), the operator of video information processing devices may reject requests from the subject of personal information, including access to personal video information, etc. in any of the following. In this case, the operator of video information processing devices shall notify the subject of information about the reason for the refusal in written form, etc. within 10 days.

    1. In the case of causing serious obstacles to a criminal investigation, maintenance of prosecution, and trial execution

    2. In case that the storage period of personal video information has expired and the information has been destroyed

    3. In case of a great concern that privacy of others may be infringed due to reading, etc. since it is technically very difficult to remove only the video information of a specific subject of information

    4. In the case of causing significant obstacles to the work of the Law Firm

    5. If the case of other legitimate reasons in terms of public interests for rejecting requests for reading, etc.

    (5) In the case of taking measures such as reading according to paragraph (3), when any person other than the subject of information can be clearly identified, or there is a concern of invasion of privacy of any person other than the subject of information, the Law Firm may take actions such as reading by taking protective measures so that the personal video information of any person other than the subject information cannot be recognized.

  • (6) When taking measures under paragraphs 3 and 4, the Law Firm shall record and manage the following matters.

    1. Name and contact information of the subject information who requested access to personal video information, etc.

    2. Name and contents of personal video information files to which the subject information requested access, etc.

    3. Purposes of such access to personal video information

    4. If refused to access to personal video information, etc., the specific reason for the rejection.

    5. If a copy of personal video information is provided to the subject of information, the content of the video information and the reason for providing it

  • (7) In case of allowing access, etc., the Law Firm shall have the subject of personal information to view the video in an emergency room, etc., where the actual management of the video information processing device occurs, at the time allowed.
  • (8) If the Law Firm entrusts a third party with the affairs of installation and operation of video information processing equipment, name of the trustee, etc. shall be disclosed in the information board, and operation and management policy of video information processing equipment, so that the subject of information can easily check the contents at any time.
  • (9) If the Law Firm entrusts a third party with the affairs of installation and operation of video information processing equipment, the Law Firm shall manage and supervise whether the person entrusted with the affairs safely processes personal video information.
  • Article 20 (Technical, Administrative and Physical Measures for Video Information Protection)

  • The Law Firm takes measures to ensure the safety of each of the following so that personal video information may not be lost, stolen, leaked, falsified or damaged.
  • 1. By setting the storage location of personal video information as a restricted area, the Law Firm strictly controls the access to and from the area, except that access authority is granted.

    2. In order to keep processing records and to prevent forgery and falsification, the Law Firm records and manages the date and time of creation, and the purpose of viewing, the viewers and the date and time of viewing, etc., in the case of viewing.

    3. The Law Firm applies technology to safely store and transmit personal video information (for network cameras, the Law Firm sets encryption measures for safe transmission and set password settings, etc. when saving personal video information files).

    4. The Law Firm prepares a storage facility for safe physical storage of personal video information or install a locking device.

    5. Establish and implement an internal management plan for the safe processing of personal video information.

  • Article 21 (Provisions Applicable Mutatis Mutandis)

  • If not contrary to the nature, except as specified in this chapter about personal video information, the provisions of Chapter 1 shall apply mutatis mutandis.
  • Article 22 (Addendum)

  • The personal information processing policy, and the operation and management policy of video information processing equipment shall be applied retroactively from February 23, 2016.