The Law Firm, Law Win (hereinafter referred to as “the Law Firm”) shall establish and disclose personal information processing policy (hereinafter referred to as “the Policy”) as follows, to protect the personal information, rights and interests from the subject of the information, and to smoothly deal with the information subject's problems related to the personal information in accordance with the related Policies.
(2) Each personal information processing and retention period is as follows:
The Law Firm has established and implemented an internal management plan for the safe handling of personal information.
The Law Firm is taking necessary measures to control access to personal information through granting, changing, and canceling access to database systems that process personal information, and controlling unauthorized access from outside using an intrusion prevention system. In addition, the Law Firm is managing personal information by designating employees who handle the personal information, limiting and minimizing it to the personnel in charge.
Passwords of the personal information of the subject of information are encrypted, stored and managed, and sensitive data are being managed using separate security functions, such as encrypting files and transmission data or using the file lock function.
The Law Firm keeps and manages records that have been accessed about the personal information processing system for at least 6 months, and uses security functions to prevent access records from being forged, falsified, stolen, or lost.
The Law Firm installs a security program to prevent personal information leakage and damage by hacking, computer virus, etc., periodically updates and checks, installs a security program in the area where access is controlled from the outside, and monitors and blocks technically and physically.
The Law Firm keeps documents containing personal information, auxiliary storage media, etc. in a safe place with a lock.
The subject of the personal information may apply for a dispute resolution or consultation, etc., to the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency's Personal Information Infringement Report Center in order to receive relief from personal information infringement. If necessary, for reporting or consultation due to other personal information infringements, please contact the following organizations.
Cookies are very small text files, which the server uses to operate the website and transmits to a user's computer and are stored on the user's computer hard disk. As such, since the users can choose to install and collect cookies by themselves, the users may refuse to collect them.
1. For Internet Explorer: "Tool" (at the top of the web browser)> "Internet Option"> "Personal Information"> Direct Settings
2. For Chrome: Customize and control Chrome (at the top right of the web browser)> "Setting"> "Advanced"> "Content Setting" in the "Privacy and Security" section> Direct Setting in the Cookie section
(1) The video information processing equipment of the Law Firm records video from 00:00 to 24:00 throughout the year.
(2) The Law Firm and the Headquarters of the Law Firm retain the recorded video information for 30 days from the time of recording.
(1) The Law Firm shall not use personal video information generated by video information processing devices for purposes other than safety management, facility protection, and crime prevention.
(2) The Law Firm may often check personal video information by replaying recorded files in the office of the General Affairs Team, where personal video information concerned is kept to investigate crimes, etc. that occurred within the Law Firm.
(3) If retention and processing period under Article 3 (2) elapses, the Law Firm shall permanently technically remove the file and shred or incinerate any printouts containing personal video information. Provided that, in case of otherwise provided in other Policies, this shall not apply.
(4) Recorded video information shall not be used for purposes other than the installation of video information processing devices or be read or provided to anyone other than those authorized to access it.
(1) The subject of personal information may request access or confirmation of existence (hereinafter referred to as “reading, etc.”) of personal video information processed by the Law Firm to the manager of video information processing devices concerned or the manager in the headquarters of the Law Firm. In this case, the subject of personal information shall explain the reason why he or she needs the personal video information.
(2) If the Law Firm receives a request from the subject of personal information according to paragraph (1), the operator of video information processing devices shall verify whether the person who requests reading, etc. is the person himself or herself, or a legitimate agent by receiving identification documents such as the certificate of resident registration, driver's license, or passport.
(3) If the application for reading, etc. according to paragraph (1) falls under any of the following, the Law Firm shall permit reading, etc.:
1. In the case of consent by the subject of information
2. In the case of reading, etc. provided to the subject of information
3. In case of otherwise provided in other Policies
4. In case of necessity for the purpose of media coverage through newspapers/ broadcasts, when a specific individual is provided in an unrecognizable form
5. In case of necessity for investigation, prosecution, and maintenance of crimes
6. In case of necessity for court trial
(4) In spite of the provisions in paragraph (3), the operator of video information processing devices may reject requests from the subject of personal information, including access to personal video information, etc. in any of the following. In this case, the operator of video information processing devices shall notify the subject of information about the reason for the refusal in written form, etc. within 10 days.
1. In the case of causing serious obstacles to a criminal investigation, maintenance of prosecution, and trial execution
2. In case that the storage period of personal video information has expired and the information has been destroyed
3. In case of a great concern that privacy of others may be infringed due to reading, etc. since it is technically very difficult to remove only the video information of a specific subject of information
4. In the case of causing significant obstacles to the work of the Law Firm
5. If the case of other legitimate reasons in terms of public interests for rejecting requests for reading, etc.
(5) In the case of taking measures such as reading according to paragraph (3), when any person other than the subject of information can be clearly identified, or there is a concern of invasion of privacy of any person other than the subject of information, the Law Firm may take actions such as reading by taking protective measures so that the personal video information of any person other than the subject information cannot be recognized.
(6) When taking measures under paragraphs 3 and 4, the Law Firm shall record and manage the following matters.
1. Name and contact information of the subject information who requested access to personal video information, etc.
2. Name and contents of personal video information files to which the subject information requested access, etc.
3. Purposes of such access to personal video information
4. If refused to access to personal video information, etc., the specific reason for the rejection.
5. If a copy of personal video information is provided to the subject of information, the content of the video information and the reason for providing it
1. By setting the storage location of personal video information as a restricted area, the Law Firm strictly controls the access to and from the area, except that access authority is granted.
2. In order to keep processing records and to prevent forgery and falsification, the Law Firm records and manages the date and time of creation, and the purpose of viewing, the viewers and the date and time of viewing, etc., in the case of viewing.
3. The Law Firm applies technology to safely store and transmit personal video information (for network cameras, the Law Firm sets encryption measures for safe transmission and set password settings, etc. when saving personal video information files).
4. The Law Firm prepares a storage facility for safe physical storage of personal video information or install a locking device.
5. Establish and implement an internal management plan for the safe processing of personal video information.