Privacy Policy : Hyundai Doosan Infracore Engine

Privacy Policy

Home Privacy Policy

We at Hyundai Doosan Infracore Co., Ltd. (hereafter: “we,” “us,” “our”) comply with the personal information protection clauses of the relevant laws, including the Personal Information Protection Act and the Act on the Promotion of Information and Communications Network Utilization and Information Protection, etc. We also do everything we can to protect the rights and interests of data subjects including our customers, employees, homepage users, etc. in accordance with the Personal Information Handling Guidelines (“the GUIDELINES”) that we have established under the relevant law.

We make it a rule to inform all data subjects of the items of personal information that we collect from them, the purpose of such collection, and the steps we take to protect their personal information according to the GUIDELINES. In the event of a revision of the GUIDELINES, we will put up a public notice on our website or inform each individual data subject thereof.

We disclose the following guidelines on personal information protection: the GUIDELINES concerning the protection of data subjects’ personal information handled by us, and the Guidelines on the Operation and Management of Video Information Processing Devices concerning the protection of individual video information.

We apply separate guidelines concerning our other websites.

Effective date: September 1, 2020

Effective date: September 1, 2020 ~ January 1, 2019

01. General Provisions

“Personal information” refers to the name, resident registration number, video image etc. included in the information on a living individual, which is used to identify that individual (including information that can only be used to identify an individual in combination with other information).
“Data subject” refers to a person who, as the subject of the collected information, can be identified with the processed information. We display the GUIDELINES on the first screen of our homepage (www.doosanengine.com) to allow users to consult them easily at any time.

02. Purpose of processing personal information

We process personal information for the following purposes.

[Concerning services provided by us]

Membership management; processing of users’ complaints/opinions.
Online market surveys and opinion polls.
Marketing or ads.
Service provision and settlement of fees.
Support for subcontractors.

[Concerning the recruitment of employees]

Screening of recruitment applications, correction of application forms, checking of results of application, contacts with applicants, checking of application requirements.
Salary payment, welfare-related matters, support provided to employees in their execution of business, and personnel management including evaluations.

03. Period of processing/retention of personal information

We destroy personal information upon attaining the purpose of its collection/use. However, we keep the following personal information for the period stated in the following.

[Concerning services provided by us]

Personal information items kept: name, home address, email, contact number, name of company, name of representative, type of business, bank account information, service use records, connection log, cookies, and connection IP information.
Period of retention: Until the end of the service provided, or what is separately stipulated in the law if that is the case.
Reason for retention: user identification, improvement of service quality, and provision of support for subcontractors’ business.

[Concerning recruitment and maintenance of recruitment status]

Personal information items kept: name, password, DOB, gender, resident registration number, home address, home phone number, cell phone number, interests, special skills, academic background, work experience, foreign language proficiency, military service record, family-related matters.
Period of retention: Until the end of employment or an extended period pursuant to consent by the data subjects.
Reason for retention: Salary payment, welfare-related matters, support provided to employees in their execution of business, and personnel management including evaluations.

04. Methods of destruction of personal information

We destroy personal information upon attaining the purpose of its collection/use, termination of the service, or end of the relevant business.

1. Destruction procedure

We destroy personal information and personal information files that we no longer needs according to our internal guidelines and procedure, as follows

Destruction of personal information: Upon expiry of the designated period of retention.
Destruction of personal information files: On the day the file is judged to be no longer needed as the purpose of its collection/use has been attained, or upon termination of the service, etc.

2. Destruction method

For personal information stored in electronic files – Destruction in a way that renders such information irretrievable.
For printouts containing personal information – Shredded or incinerated.

05. Provision of personal information to third parties

We do not provide any personal information to any third party without a justifiable reason, such as being required to do so by the law, or without the prior consent of the data subject, etc., unless one of the following is the case:

In cases where the data subject’s separate consent has been obtained;
In cases where a special clause is stipulated in the law;
In cases where it is judged that such provision is clearly required to protect the life or property of the data subject or the third party, and where the data subject or his legal agent is unable to express his opinion or it is impossible to obtain his/her consent due to the lack of an address etc.
In cases where personal information is provided in such a way that specific individuals cannot be identified for the purpose of drawing up statistics or for academic research.

Currently, we provide personal information to third parties as follows:

Parties to which we provide personal information: Multicampus, Korea TOEIC Committee, Korea Chamber of Commerce and Industry.
Personal information items provided: name, DOB, cell phone number.
Purpose of use of personal information: Verification of qualifications for recruitment.
Period of retention/use of personal information provided: Until attainment of the purpose of collection/use.

Parties to which we provide personal information: Ministry of Defense/local offices of the Military Manpower Administration, district offices/community service centers.
Personal information items provided: name, resident registration number, cell phone number, military serial number.
Purpose of use of personal information: Conduct of business related to the Homeland Reserve Forces, such as the organization, mobilization, training or demobilization of HR Forces.
Period of retention/use of personal information provided: Until the end of the employment.

Parties to which we provide personal information: Doosan Corporation.
Personal information items provided: name, photo, password, home address, home phone number, cell phone number, email, academic background, military service record, foreign language proficiency, computer skill, qualifications, familial relations, work experience, social experience, prizes received, experience accumulated overseas, research experience.
Purpose of use of personal information: Management/development of human resources.
Period of retention/use of personal information provided: Until the end of employment.

06.　Entrustment of personal information processing

We do not entrust the processing of personal information to a third party without obtaining the prior consent of the data subject. We entrust personal information as follows and ensure that all entrustment contracts include a clause on the safe management of the information under the law.

Trustee: Hyundai C&R
Content of entrustment: Matters pertaining to salary management, welfare, and general affairs (e.g. management of company vehicles/cell phones, mutual aid, etc.).

Trustees: Multicampus, KACNET, ALPACO, SPICUS, PICKUPPHONE, eCAMPUS, fn Innoedu, YBM
Content of entrustment: Matters pertaining to Internet-based lectures for employees, etc.

Trustee: Doosan Digital Innovation
Content of entrustment: Operation and management of the personnel information processing system.

Trustee: International SOS Korea
Content of entrustment: Operation of a positioning system in linkage with employees undertaking overseas business trips.

Trustee: S1
Content of entrustment: Photo-taking; issuance of employee passes.

Trustee : KUMA DATA TECH
Content of entrustment: Issuance of employee IDs.

Trustee : Photomind
Content of entrustment: Taking photos of employees.

Trustee : Oracle Corporation
Content of entrustment: Retention/management of personal information.

Trustee: Salesforce.com Singapore Pte Ltd
Content of entrustment: Retention/management of personal information.

Trustee : Hyundai Genuine
Content of entrustment: Execution of HDI various educational services, provide integrated training service among affilates. Matters pertaining to business support for trading partners, operation and management of the Supplier Portal.

07. Data subjects’ rights and obligations and how to exercise them

Data subjects may ask us to allow them to access, correct or delete their personal information or request that we cease our handling and processing thereof. However, we may reject or restrict such request in any of the following cases.

Where there is a special clause in the law; in cases where we are required to fulfill our legal obligation.
In cases where it is feared that compliance with such request will cause harm to a person’s life or health or unjustly infringe on a person’s interests, including their property.
In cases where failure not to handle personal information makes it impossible to execute a contract, including the provision of a service stipulated in a contract to a data subject, and where the data subject has failed to clearly express his/her intention to terminate the contract

Methods and procedure of exercising rights

Data subjects who wish to access their personal information kept by us may submit a request for access to, correction/deletion of, or cessation of our handling of their information to our department in charge of personal information in writing by email or fax, etc. (For information on the department, refer to 08. Service for handling petitions about personal information hereto.)
With regard to the submittal of such request, we will comply with it within 10 days unless there is a justifiable reason for not doing so, or inform the data subject of the reason for our restriction/refusal within 5 days and how the data subject may file an appeal for our reconsideration of the matter.
Where data subjects or their agents request access to the personal information kept by us, we may check their identity by asking for their ID (e.g. resident registration card) or certified electronic signature, etc.

Forms used for this purpose(English)

08. Our personal information service

We have appointed a department and a Personal Information Manager as following to handle all business concerning the protection of users’ personal information and associated complaints.

1. Department in charge of personal information

Name of department: Security Audit Team
Telephone number: 02-479-8754
email: hdi.security@hyundai-di.com

2. Personal Information Manager

Name: Mr. Kim Byungkwan
Telephone number: 02-479-7062
Email: hdi.security@hyundai-di.com

If you need to report a case of personal information infringement or wish to receive consulting, please contact one of the following:

Personal Information Dispute Mediation Committee (http://privacy.kisa.or.kr Telephone number: 118)
Personal Information Infringement Report Center (http://www.privacy.go.kr Telephone number: 118)
Information Protection Mark Certification Committee (http://www.eprivacy.or.kr Telephone number: 02-580-0533~4)
Internet Crime Investigation Center of the Supreme Prosecutors' Office (http://www.spo.go.kr Telephone number: 02-3480-3600)
National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr Telephone number: 02-392-0330)

09. Installation/operation of devices for automatic collection of personal information and customers’ refusal thereof

We use “cookies” to store users’ information and fetch it from time to time. Cookies are very small text files stored in your computer hard disk. They are sent by the server used to operate our website to users’ browser. We use cookies for the following purpose.

1. Purpose of use of cookies

Cookies are used to analyze the frequency of users’ connection to a website or the time of day of their visits, to determine users’ tastes/interests, to check the level of their participation in special events, etc., which are necessary for our targeted marketing and the provision of customized services to users. You have the right to accept or reject our installation of cookies in your computer hard disk by setting the option in your web browser. You may accept all cookies, check each time cookies are stored, or reject all cookies.

2. How to reject the installation of cookies

You may accept all cookies, check each time cookies are stored, or reject all cookies by setting the option of your web browser accordingly.
How to set the option (in Internet Explore)
Go to “Tool” at the top of your web browser > Internet option > personal information.

You may have difficulty in using our services if you refuse to accept cookies.

10. Overseas transfer of personal information

We transfer data subjects’ personal information to third parties abroad as follows in the process of handling our business through the following system. This allows us to handle the information in a server in an area outside the country in which the data subject resides.

[Access Portal]

Business to which we transfer personal information and contact point
Name of business: Oracle Corporation
Contact point : https://www.oracle.com/corporate/contact/ (Telephone number +1.650.506.7000)
Country where the transferee is located, date, method.
Country where the transferee is located: Ashburn, Virginia, U.S.A.
Date and method: Transmission via the network with the request for issuance of an account through the Access Portal.
Personal information items transferred: User’s name, User ID, nationality, email, home phone number, cell phone number, position in workplace.
Purpose of personal information transfer; Period of retention/use of personal information: Storage, retention, and management at an overseas data center operated by the transferee during the relevant period.
Data subjects have the right to reject the collection of their personal information, but such refusal may lead to restrictions on their use of our service.

[CRM]

Business to which we transfer personal information and contact point
Name of business: Salesforce.com Singapore Pte. Ltd.
Contact point: https://www.salesforce.com/form/other/privacy-request
Country where the transferee is located, date, method.
Area where the transferee is located: Tokyo, Japan
Date and method: Transmission via the network with the registration of customer information with the CRM system for sales opportunity management.
Personal information items transferred:
Customer’s name, DOB, email, home phone number, cell phone number, business registration number, address.
Purpose of personal information transfer; Period of retention/use of personal information: Storage, retention, and management at an overseas data center operated by the transferee during the relevant period.
Data subjects have the right to reject the collection of their personal information, but such refusal may lead to restrictions on their use of our service.

11. Steps taken to secure the safety of personal information

We take the following steps to secure safety when handling users’ personal information to prevent the loss, theft, leakage, forgery or damage thereof.

[Technical steps]

We observe the criteria stipulated in the law for the safe storage and transmission of personal information.
We use vaccine programs to protect our users’ personal information against damages caused by computer viruses.
The vaccine programs are updated periodically. We immediately use newly developed vaccine programs to prevent the personal information kept by us from being affected.

[Administrative steps]

We restrict the right to access personal information to the following employees: those responsible for sales/marketing with data subjects first hand; those responsible for the managing personal information; those responsible for handling personal information as a regular part of their duties.
We run periodic in-house education sessions concerning personal information protection for employees who are responsible for handling personal information, including the appointment of outside lecturers. We do all we can to ensure that our employees observe the laws concerning personal information protection both during their employment and after their retirement.

[Physical steps]

We take protective measures such as the use of physical locks to prevent physical access in order to keep personal information and the personal information processing system safe.
We have designated our computer rooms and rooms for storing important information as off-limits areas to ensure the protection of users’ personal information.

01. General Provisions

“Personal Information” refers to the personally identifiable information of a living person whose identity may be checked easily in combination with the use of other sources such as a name, national identification number and picture, even though it is rarely possible to differentiate the individual in question with only the given information. “Informer” means the owner of any information which enables the recognition of a person’s identity. The Company discloses the Personal Information Processing Policy on the first screen of the website (www.doosanengine.com, "this site") to facilitate the verification of the policy in question, and will always announce any changes or revisions to this policy via a notice posted on its website or through individual communication.

02. Processed Personal Information and Purposes of Processing

Without the legitimate provisions or the consent of the informer, the Company may handle neither the sensitive information that may significantly compromise the privacy of its provider nor the unique identification information assigned to distinguish the interested-party from others.

1. Processed Information

[Concerning customers]

Name, home address, e-mail, company name, service record, access log, cookies and IP address information

[Concerning employment]

Name, national identity number, picture, password, home address, home telephone number, mobile phone number, e-mail, education, military service, foreign language proficiency, computer skills, qualifications, family relationships, and career

2. Processed Personal Information and Purposes of Processing

[Concerning customers]

Settlement of the complaints on the membership and points of dissatisfaction
Online market research or survey
Marketing or advertising
Service delivery and the settlement of fees

[Concerning employment]

Test process, modification of the application form, verification of acceptance, contact for applicants, and verification of employment requirements
Personnel management, including payroll, welfare benefits, support for various tasks, and assessment

03. Processing and the Retention Period of Personal Information

In principle, the collected personal information will be destroyed immediately after the purpose for which it was collected has been achieved. However, the following information will be retained during the designated period for the reasons set forth below :

Retained information: name, home address, e-mail, company name
Retention period: 1 year
Reasons for retention: user inquiries / request management, user identification, etc.

Retained information: service use data, access log, cookies, IP address information
Retention period: 3 years
Reasons for retention: enhancement of service quality through analysis of service use

Retained information: name, password, date of birth, gender, national identity number, home address, home telephone number, mobile phone number, hobbies, skills, education, work experience, foreign language proficiency, military service, and family relationship
Retention period: in principle, until the expiration of employment relationship
Reasons for retention: Personnel management, including payroll, welfare benefits, support for various tasks, and assessment
However, the personal information of an applicant, who was not employed, will be discarded immediately after the completion of the employment process.

04. Procedures and Methods for the Destruction of Personal Information

1. Destruction procedures

The company destroys the personal information without delay once it has achieved the purpose of its collection or the retention period has finished, except where the retention is required pursuant to the informer’s consent, terms of use, or relevant legislation.

2. Methods of destruction

Personal information stored in electronic file formats shall be deleted using technical methods that prevent the recovery of its record.
Personal information printed on the paper shall be broken by the shredder, or destroyed through incineration.

05. Vision of Personal Information to a Third Party

The Company uses the personal information only within the scope laid out in “02. Processed Personal Information and Purposes of Processing”, and does not abuse it in excess of the established range nor discloses it to a third party. However, the following cases are exceptions :

In the case of having received the special consent of the informer
If there are special provisions in other relevant laws
If the information subject or his/her legal representative cannot express his/her will, or prior consent cannot be obtained because his/her address is unknown, and it is deemed necessary for the clear benefit of life, body, or property of the information subject or third party
If personal information is needed for statistics composition or academic research, and the information is provided in a form that cannot identify an individual

The Company currently provides the following personal information

Institutions receiving personal information : Multicampus, Korea TOEIC Committee, Chamber of Commerce, the Department of Defense and Regional Military Manpower Administration, District Office/Dong Residents’ Center
Offered personal information : name, national identity number, phone number, military serial number
Purpose : verification of qualification
Retention and use period : immediately destroyed

Institution receiving personal information : Doosan Corporation
Personal information items provided: Name, social security number, photo, password, home address, home phone number, mobile phone number, e-mail, academic background, military service, language skills, computer skills, qualifications, family relationship, career, social experience, awards received, overseas experience, and research experience
Purpose of using the provided information: Integrated management and development of human resources
Retention and use period of the provided information : Until the labor relationship is terminated

Personal information receiver : Korean Standards Association
Personal information items provided : Name, mobile phone number, residential area
Purpose of using the provided information : Doosan service quality survey
Immediate destruction after achieving the purpose of providing information (September 22 - December 5, 2014)

06. Consignment of Personal Information Processing

The Company does not entrust personal information processing to an external company without the consent of the information subject.

Trustee company : Doosan Corporation
Consigned service details: Salary management, welfare benefits, general affairs (business vehicle and mobile phone management, mutual aid, etc.)

Trustee: Multicampus Co., Ltd., Korea Academy, Alphaco, Spicus, Pickupphone, eCampus, KT Innoedu
Consigned work contents : Internet lectures for employees, etc.

Trustee : Doosan Information Communication BU Inc.
Consigned service details : Management (maintenance) and operation of the HR information processing system

Trustee : International SOS Korea Co., Ltd.
Consigned service details: Operation of the location system by linking with the employees’ overseas business trip information

Trustee: S1 Co., Ltd.
Consigned service details: Photographing, overall control over access card production/issuance

Trustee : Kuma Data Tech Co., Ltd.
Consigned service details : Employee card production/issuance

Consigned service details : Photomind
Consigned service details : Taking photographs of the employees

07. Rights and Obligations of Informers and Methods to Exercise the Rights

All information subjects can request the viewing, correction, deletion, and suspension of processing of their personal information processed by the Company.

If there is a special provision, or if it is inevitable to comply with legal obligations
If there are concerns of harming another person's life or body or unjustly infringing another person's property or other interests
If the contract cannot be fulfilled (e.g., unable to provide the service agreed upon with the information subject) when personal information is not processed, and the information subject does not clearly express any intention of terminating the contract

Methods and Procedures to Exercise Rights

An information subject who wishes to retrieve his/her personal information can submit the retrieval, correction, deletion, and processing suspension request document to the department in charge of personal information in writing or via e-mail or fax. (See “09. Complaint handling service related to personal information” for the department in charge.)
The Company will take appropriate measures within 10 days unless there is no valid reason and will inform you of the reason for restriction or rejection, if any, as well as how to raise a complaint within 5 days.
When the information subject or his/her representative requests the retrieval of personal information, the Company may check the identity of the information subject or the representative by checking the identity card such as resident registration card or certified electronic signature.

Request Form Download

08. Technical, Administrative, and Physical Protection Measures for Personal Information

The Company takes the following safety measures to prevent personal information from being lost, stolen, leaked, altered, or damaged.

The Company complies with the required legal standards for the secure storage and transmission of the personal information.
Using anti-virus software, the company takes steps to prevent the damage caused by computer viruses.
The anti-virus program is updated periodically, and protects against the violation of privacy in case of a sudden outbreak of a new virus, providing its new version as soon as possible.
Against external attacks such as hacking, the Company does everything for the security, utilizing an intrusion detection system and a vulnerability assessment system for each server.

The company gives the exclusive access to personal information to those who deal with sales and marketing directly with the informers, to those in charge of the management of personal information, and those who inevitably handle the personal data through carrying out other tasks.
The employees who treat the personal information take a regular in-house training and outsourcing education on the protection of personal information, being properly supervised to strictly comply with laws and regulations to the same purpose after both starting work and after taking retirement.

For the secure storage of the personal information and its handling system, the facilities are equipped with protection measures to prevent a physical access, including physical locking devices.
The computer room and data storage room, designated as special security areas, are under strict access control.

09. Complaint Resolution Service for Personal Information

The Company designates and operates the following division and officer in charge to protect the personal information and respond to the complaints regarding the sector.

1. Personal Information Department

Department : Information Security Team
Phone : 02-3398-2906
Fax : 02-3398-8499
E-mail : di_security@hyundai-di.com
Business hours : (Mon ~ Fri) 09:00 - 18:00, (closed on holidays, Saturdays, and Sundays)

2. Privacy Manager

Name : Park, Dong Beom
Phone : 02-3398-2906
E-mail : di_security@hyundai-di.com

Please contact the following government agency if you need to report or consult about personal information infringement :

Personal Information Dispute Mediation Committee (http://privacy.kisa.or.kr Phone: 118)
Personal Information Violation Report Center (http://www.privacy.go.kr Phone: 118)
Korea Online Privacy Association (http://www.eprivacy.or.kr Phone: 02-580-0533~4)
Internet Crime Investigation Center, Supreme Prosecutor's Office (http://www.spo.go.kr Phone: 02-3480-3600)
Cyber Terror Response Center, National Police Agency (http://www.ctrc.go.kr Phone: 02-392-0330)

10. Notice Obligation

If more provisions are added to this privacy policy, or if any provision is deleted or modified, it will be announced on “Notice” of the website at least 10 days before such changes take effect.

Notice date : September 30, 2011
Effective date : January 1, 2019

01. General Provisions

“개인정보”란 살아 있는 개인에 관한 정보로서 성명, 주민등록번호 및 영상 등을 통하여 개인을 알아볼 수 있는 정보(해당 정보만으로는 특정개인을 알아볼 수 없더라도 다른 정보와 쉽게 결합하여 알아볼 수 있는 것을 포함한다)를 말합니다. “정보주체”란 처리되는 정보에 의하여 알아볼 수 있는 사람으로서 그 정보의 주체가 되는 사람을 말합니다. 회사는 개인정보처리방침을 홈페이지(www.hyundai-di.com) 첫 화면에 공개함으로써 언제나 쉽게 확인할 수 있도록 조치하고 있으며, 개인정보처리방침을 개정하는 경우 웹 사이트 공지사항(또는 개별공지)을 통하여 공지할 것입니다.

02. Processed Personal Information and Purposes of Processing

회사는 법령의 규정 또는 정보주체의 동의 없이는 정보주체의 사생활을 현저히 침해할 우려가 있는 민감정보, 개인을 고유하게 구별하기 위하여 부여된 고유식별정보를 처리하지 않습니다.

1. 처리 항목

[고객 관련]

성명, 자택 주소, 이메일, 회사명, 서비스 이용기록, 접속 로그, 쿠키, 접속 IP정보

[채용 관련]

성명, 주민등록번호, 사진, 비밀번호, 자택 주소, 자택 Phone, 휴대전화 번호, 이메일, 학력, 병역, 어학 능력, 컴퓨터 능력, 자격사항, 가족관계, 경력

2. 처리 목적

[고객 관련]

회원 관리, 불만처리 등 민원처리
온라인 시장조사 또는 여론 조사
마케팅 또는 광고
서비스 제공 및 요금정산

[채용 관련]

입사전형 진행, 입사지원서 수정, 합격여부 확인, 입사지원자와의 연락, 채용자격 요건 확인
급여 지급, 복리후생 제공, 각종 업무수행 지원 및 평가 등 인사관리

03. Processing and the Retention Period of Personal Information

원칙적으로, 개인정보의 수집 및 이용 목적이 달성된 후에는 해당 정보를 지체 없이 파기합니다. 다만, 다음의 정보에 대해서는 아래의 이유로 명시한 기간 동안 보유합니다.

보유 항목 : 이름, 자택주소, 이메일, 회사명
보유 기간 : 1년
보유 이유 : 사용자 문의/요청 관리, 사용자 식별 등

보유 항목 : 서비스 이용기록, 접속 로그, 쿠키, 접속 IP 정보
보유 기간 : 3년
보유 이유 : 사용자의 서비스 이용 분석을 통한 서비스의 질 향상

보유 항목 : 성명, 비밀번호, 생년월일, 성별, 주민등록번호, 자택 주소, 자택 Phone, 휴대전화 번호, 취미, 특기, 학력, 경력, 어학 능력, 병역사항, 가족사항
보유 기간 : 원칙적으로 근로관계 종료시까지
보유 이유 : 급여 지급, 복리후생 제공, 각종 업무수행 지원 및 평가 등 인사관리
다만, 채용되지 아니한 입사지원자의 개인정보는 채용절차 완료 후 지체 없이 파기합니다.

04. Procedures and methods for the destruction of personal information

1. 파기 절차

회사는 수집한 개인정보의 처리목적이 달성되거나 그 보유기간이 종료되는 경우 정보주체의 동의, 이용약관, 관련 법령에 따라 보관이 필요한 경우를 제외하고 해당 정보를 지체 없이 파기합니다.

2. 파기 방법

전자적 파일형태로 저장된 개인정보는 기록을 재생할 수 없는 기술적 방법을 사용하여 삭제합니다.
종이에 출력된 개인정보는 분쇄기로 분쇄하거나 소각을 통하여 파기합니다.

05. Vision of personal information to a third party

회사는 “02. 개인정보의 처리 항목 및 목적”에서 고지한 목적 범위 내에서 개인정보를 이용하며, 동 범위를 초과하여 개인정보를 이용하거나 제3자에게 제공∙공개하지 않습니다. 다만, 아래의 경우에는 예외로 합니다.

정보주체로부터 별도의 동의를 받는 경우
다른 법률에 특별한 규정이 있는 경우
정보주체 또는 그 법정대리인이 의사표시를 할 수 없는 상태에 있거나 주소불명 등으로 사전 동의를 받을 수 없는 경우로서 명백히 정보주체 또는 제3자의 급박한 생명, 신체, 재산의 이익을 위하여 필요하다고 인정되는 경우
통계작성 및 학술연구 등의 목적을 위하여 필요한 경우로서 특정 개인을 알아볼 수 없는 형태로 개인정보를 제공하는 경우

현재 회사는 아래와 같이 개인정보를 제공하고 있습니다.

개인정보를 제공 받는 자 : (주)멀티캠퍼스, 한국토익위원회, 대한상공회의소, 국방부/지방병무청, 구청/동주민센터
제공하는 개인정보의 항목 : 성명, 주민등록번호, 휴대Phone, 군번
제공정보의 이용 목적 : 자격 검증
제공정보의 보유 및 이용 기간 : 즉시파기

개인정보를 제공 받는 자 : (주)두산
제공하는 개인정보의 항목 : 성명, 주민등록번호, 사진, 비밀번호, 자택 주소, 자택 Phone, 휴대전화 번호, 이메일, 학력, 병역, 어학 능력, 컴퓨터 능력, 자격사항, 가족관계, 경력, 사회경험, 수상경험, 해외경험, 연구경험
제공정보의 이용 목적 : 인적자원의 통합관리 및 개발
제공정보의 보유 및 이용 기간 : 근로관계 종료시까지

개인정보를 제공 받는 자: 한국표준협회
제공하는 개인정보의 항목: 성명, 휴대전화 번호, 주거 지역
제공정보의 이용 목적: 두산 서비스 품질 조사
제공정보의 보유 및 이용 기간: 제공 목적 달성 후 즉시 파기(2014년 9월 22일 ~ 12월 5일)

06. Consignment of Personal Information Processing

회사는 정보주체의 동의 없이 개인정보의 처리를 외부 업체에 위탁하지 않습니다. 회사는 아래와 같이 개인정보의 처리를 위탁하고 있으며, 관련 법령에 따라 위탁계약 시 개인정보가 안전하게 관리될 수 있도록 필요한 사항을 규정하고 있습니다.

수탁업체 : (주)두산
위탁업무 내용 : 급여관리, 복리후생, 총무(업무용 차량∙휴대폰 관리, 상조 등) 업무위탁

수탁업체 : (주)멀티캠퍼스, 고려아카데미, 알파코, 스피쿠스, 피커폰, e캠퍼스, KT Innoedu
위탁업무 내용 : 임직원 인터넷 강의 업무 등

수탁업체 : (주)두산 (정보통신BU)
위탁업무 내용 : 인사정보처리시스템 운영 및 관리(유지보수) 위탁

수탁업체 : 인터내셔널에스오에스코리아(주)
위탁업무 내용 : 임직원 해외출장 정보 연동 통한 위치파악시스템 운영

수탁업체 : (주)에스원
위탁업무 내용 : 사진촬영, 출입카드제작/발급 총괄

수탁업체 : 금아데이타테크(주)
위탁업무 내용 : 사원증 카드 제작/발급

07. Rights and Obligations of Informers and Methods to Exercise the Rights

모든 정보주체는 회사가 처리하는 자신의 개인정보에 대한 열람, 정정∙삭제 및 처리정지를 요구할 수 있습니다. 다만, 아래 사항에 해당하는 경우 회사는 위와 같은 요구를 거절하거나 제한할 수 있습니다.

법률에 특별한 규정이 있거나 법령상 의무를 준수하기 위하여 불가피한 경우
다른 사람의 생명∙신체를 해할 우려가 있거나 다른 사람의 재산과 그 밖의 이익을 부당하게 침해할 우려가 있는 경우
개인정보를 처리하지 아니하면 정보주체와 약정한 서비스를 제공하지 못하는 등 계약의 이행이 곤란한 경우로서 정보주체가 그 계약의 해지 의사를 명확하게 밝히지 아니한 경우

권리행사 방법 및 절차

개인정보의 열람 등을 원하는 정보주체는 열람∙정정∙삭제∙처리정지 청구서를 서면, 전자우편, 팩스 등의 방법으로 개인정보 담당부서에 제출하실 수 있습니다. (담당부서는 “09. 개인정보에 민원 서비스” 참조)
회사는 정당한 사유가 없는 한 10일 이내에 해당 조치를 취하고, 거절 또는 제한의 사유가 있는 경우에는 5일 이내에 제한∙거절의 사유 및 이의 제기 방법을 알려드립니다.
회사는 정보주체 또는 그의 대리인이 개인정보의 열람 등을 청구하는 때에는 주민등록증 등의 신분증명서, 공인전자서명 등을 확인하여 정보주체 본인 또는 대리인 여부를 확인할 수 있습니다.

Request Form Download

08. Technical, Administrative, and Physical Protection Measures for Personal Information

회사는 개인정보를 취급함에 있어 개인정보가 분실, 도난, 누출 변조 또는 훼손되지 않도록 아래와 같은 안전성 확보 조치를 취하고 있습니다.

<기술적 조치>

개인정보의 안전한 저장 및 전송 등을 위하여 법령이 정한 기준을 준수하고 있습니다.
회사는 백신프로그램을 이용하여 컴퓨터바이러스에 의한 피해를 방지하기 위한 조치를 취하고 있습니다.
백신프로그램은 주기적으로 업데이트되며 갑작스런 바이러스가 출현할 경우 백신이 나오는 즉시 이를 제공함으로써 개인정보가 침해되는 것을 방지하고 있습니다.

<관리적 조치>

회사는 정보주체를 직접 상대로 하여 영업 및 마케팅 업무를 수행하는 자, 개인정보관리업무를 수행하는 자, 기타 업무상 개인정보의 취급이 불가피한 자 등으로 개인정보에 대한 접근권한을 제한하고 있습니다.
개인정보를 취급하는 직원을 대상으로 개인정보보호에 관한 정기적인 사내 교육 및 외부 위탁교육을 실시하고 있으며, 입사 및 퇴사 후 개인정보보호에 관한 법령을 준수하도록 철저히 관리∙감독하고 있습니다.

<물리적 조치>

개인정보와 개인정보처리시스템의 안전한 보관을 위하여 물리적 잠금장치 등의 물리적 접근방지를 위한 보호조치를 취하고 있습니다.
전산실 및 자료 보관실 등을 특별 보호구역으로 설정하여 출입을 통제하고 있습니다.

09. Complaint Resolution Service for Personal Information

회사는 개인정보를 보호하고 개인정보와 관련한 불만을 처리하기 위하여 아래와 같이 관련 부서 및 개인정보 보호책임자를 지정하고 있습니다.

1. 개인정보 담당부서

부서 : 정보보안팀
Phone : 02-3398-2436
팩스번호 : 02-3398-8337
이메일 : di_security@hyundai-di.com
업무시간 안내 : (월~금) 09:00 – 18:00, (공휴일, 토~일) 휴무

2. 개인정보 보호책임자

이름 : 박동범
Phone : 02-3398-2436
이메일 : di_security@hyundai-di.com

기타 개인정보침해에 대한 신고나 상담이 필요하신 경우에는 아래 기관에 문의하시기 바랍니다.

개인분쟁조정위원회 (http://privacy.kisa.or.kr Phone : 118)
개인정보침해신고센터 (http://www.privacy.go.kr Phone : 118)
정보보호마크인증위원회 (http://www.eprivacy.or.kr Phone : 02-580-0533~4)
대검찰청 인터넷범죄수사센터 (http://www.spo.go.kr Phone : 02-3480-3600)
경찰청 사이버테러대응센터 (http://www.ctrc.go.kr Phone : 02-392-0330)

10. Notice Obligation

현 개인정보처리방침의 내용 추가, 삭제 및 수정이 있을 시에는 개정 최소 10일 전부터 홈페이지의 ‘공지사항’을 통해 고지할 것입니다.

공고일자 : 2011년 9월 30일
시행일자 : 2018년 1월 1일

01. Basis and Purposes of the Installation of Visual Information Processing Equipment

The Visual Information Processing Equipment Management Policy (“the Policy”) has its purpose to promote the proper execution of work and contribute to the assurance of interests of the informers, establishing the provisions with which Hyundai Doosan Infracore Engine ("the Company") shall comply regarding the installation and operation of visual information processing equipment and the protection of personal video information, in accordance with Article 25 of the Personal Information Protection Act.

02. Principles of the Protection of Personal Visual Information

The Company collects personal visual information within the scope of minimum necessity to meet the purpose of installing visual information processing equipment, so that this intention will be recognized clearly by the informers, and does not use the data for purposes other than this. The Company commits to correctly managing the personal visual information safely, ensuring its accuracy and latest update, disclosing general details on the processing of personal visual information and guaranteeing the rights of any relevant informers.

03. Designation of the Administrator

The officer, division and personnel responsible for the safe management of the personal visual information are as follows :

Officer : General Affairs Team Manager
Division : General Affairs Team, Finance & Administration Division
Operator in charge : Operator responsible for installation and operation of visual information processing equipment, Emergency Planning Team, Div. of Administrative Support

04. Installation of Visual Information Processing Equipment

The number, locations, and shooting ranges of the installed visual information processing equipment are shown below.

Number of visual information processing equipment : A total 82 units (71 of fixed types, 11 of rotary types)
Locations of visual information processing equipment : Entrance and aisle of each floor, elevator hall and elevator interior, vehicles entering and exiting from parking facilities and outside square
Shooting range of video information processing equipment : Entrances, walkways, elevator hall and elevator interior

05. Installation of signs

The Company takes the necessary measures so that the installation and operation of visual information processing equipment can be easily recognized, including installation of information signs that state the following points:

Purpose and place of the installation, shooting range and time, and the administrator’s name, job title and contact details
In case of the outsourcing of the installation and management, the trustee’s name and contact details

Location and size of the sign attached are as follows

Place : Entrance to the building
Size : 40 ⅹ 30cm (However, it can be changed according to the condition of the installed location)

06. Viewing Request of the Informer

The informer may request the viewing and verification (“the view”) of his or her own personal visual information that the Company handles.

When the Company receives the request for the view, it shall take necessary measures without delay, and may verify the identity of the requestor, or his or her legitimate representative with the submission of documents which can prove the informer’s identity, such as a national identity card, driver’s license or passport.

If the corresponding personal visual information is destroyed, due to the storage period termination
If there are legitimate reasons to reject the informer’s view request

07. Recording Time of Visual Information Processing Equipment

Recording and storage times and storage areas are as follows.

Recording time : 24 hours
Storage time : 30 days to 3 months, depending on the shooting area
Storage areas: General Control Center

08. Visual Information Management

Using the personal visual information for any purpose other than the collection or providing it to third parties with informer’s consent or by the provisions of the law requires the following points on the “Personal Visual Information Management Record” to be inscribed.

Name of personal visual information file
Name of the person who will use or receive the information
Purpose of the use or offer
Statutory grounds of the use or offer, if any
Period of the use or offer, if any
Form of the use or offer

In the case of the destruction of the personal visual information, it is required to note down the following points on the “Personal Visual Information Management Record.

Personal visual information item to be destroyed
Date of the destruction of personal visual information (in case of a pre-set period for automatic destruction, its destruction cycle, etc.)
Personnel in charge of the destruction of personal visual information

09. Storage and Destruction

The Company destroys the collected personal visual information without delay, when the storage period expires, set forth in the Policy. However, this does not apply if there are special provisions in other relevant laws.

For the output (pictures, for example) containing the personal visual information, shredding or incineration
For personal visual information in the form of electromagnetic video files, permanent deletion that incapacitates their restoration by technical means

10. Administrative, Technical and Physical Measures

The Company administers minimum personnel to access to the personal visual information processed by the equipment, including the administrator and responsible operator in charge.
The zones where the personal visual information transmitted by the processing equipment is viewed and played are designated as restricted access areas to control the entrance of the people other than the authorized to access.
The Company modifies or disqualifies without delay the permission rights of those who change their positions due to retirement and transfer.
The company takes necessary measures to ensure the security of the personal information or video files processed or transmitted, in order to prevent them from being lost, stolen, leaked, damaged or altered, including password setting.
The Company checks regularly the functions of the visual information processing equipment to block an alteration or falsification of the data.

11. Outsourcing of the Installation and Management of Visual Information Processing Equipment

The Company outsources the management of personal visual information to the following trustee and is responsible for overseeing the processing of the information.

Trustee: DFMS Inc.
Outsourced service: installation and operation of visual information processing equipment

Announcement Date : September 30, 2011
Effective Date : September 30, 2011

Privacy Policy

01. General Provisions

02. Purpose of processing personal information

[Concerning services provided by us]

[Concerning the recruitment of employees]

03. Period of processing/retention of personal information

[Concerning services provided by us]

[Concerning recruitment and maintenance of recruitment status]

04. Methods of destruction of personal information

1. Destruction procedure

2. Destruction method

05. Provision of personal information to third parties

06. Entrustment of personal information processing

07. Data subjects’ rights and obligations and how to exercise them

08. Our personal information service

1. Department in charge of personal information

2. Personal Information Manager

09. Installation/operation of devices for automatic collection of personal information and customers’ refusal thereof

1. Purpose of use of cookies

2. How to reject the installation of cookies

10. Overseas transfer of personal information

[Access Portal]

[CRM]

11. Steps taken to secure the safety of personal information

[Technical steps]

[Administrative steps]

[Physical steps]

01. General Provisions

02. Processed Personal Information and Purposes of Processing

1. Processed Information

[Concerning customers]

[Concerning employment]

2. Processed Personal Information and Purposes of Processing

[Concerning customers]

[Concerning employment]

03. Processing and the Retention Period of Personal Information

04. Procedures and Methods for the Destruction of Personal Information

1. Destruction procedures

2. Methods of destruction

05. Vision of Personal Information to a Third Party

06. Consignment of Personal Information Processing

07. Rights and Obligations of Informers and Methods to Exercise the Rights

08. Technical, Administrative, and Physical Protection Measures for Personal Information

09. Complaint Resolution Service for Personal Information

1. Personal Information Department

2. Privacy Manager

10. Notice Obligation

01. General Provisions

02. Processed Personal Information and Purposes of Processing

1. 처리 항목

[고객 관련]

[채용 관련]

2. 처리 목적

[고객 관련]

[채용 관련]

03. Processing and the Retention Period of Personal Information

04. Procedures and methods for the destruction of personal information

1. 파기 절차

2. 파기 방법

05. Vision of personal information to a third party

06. Consignment of Personal Information Processing

07. Rights and Obligations of Informers and Methods to Exercise the Rights

08. Technical, Administrative, and Physical Protection Measures for Personal Information

<기술적 조치>

<관리적 조치>

<물리적 조치>

09. Complaint Resolution Service for Personal Information

1. 개인정보 담당부서

2. 개인정보 보호책임자

10. Notice Obligation

01. Basis and Purposes of the Installation of Visual Information Processing Equipment

02. Principles of the Protection of Personal Visual Information

03. Designation of the Administrator

04. Installation of Visual Information Processing Equipment

05. Installation of signs

06. Viewing Request of the Informer

07. Recording Time of Visual Information Processing Equipment

08. Visual Information Management

09. Storage and Destruction

10. Administrative, Technical and Physical Measures

06.　Entrustment of personal information processing