Select
[V 7.2] Oct 24, 2024 [V 7.1] Jun 5, 2024 [V 7.0] February 7, 2024 [V 6.2]December 22, 2023 [V 6.1] April. 26. 2023 [V 6.0] March 7, 2023 [V 5.1] October 14, 2022 [V 5.0] April 8, 2022 [V 4.1] August 30, 2021 [V 4.0] April 30, 2021 [V 3.7] May 19, 2020 [V 3.6] January 16, 2020 [V 3.5] January 14, 2020 [V 3.4] August 1, 2018 [V 3.3] July 15, 2018 [V 3.2] April 5, 2018 [V 3.1] JUL 12, 2017 [V 3.0] DEC 31, 2016 [V 2.1] MAR 18. 2016 [V 2.0] JAN 14. 2016 [V 1.9] NOV 16. 2015 [V 1.8] JUL 2. 2015 [V 1.7] NOV 27. 2014 [V 1.6] OCT 15. 2014 [V 1.5] SEP 4. 2014Samsung SDS Co., Ltd. (“Samsung SDS”) complies with the Personal Information Protection Act and related laws to protect the freedom and rights of data subjects, lawfully processing and safely managing personal information. In accordance with Article 30 of the Personal Information Protection Act, this Privacy Policy is established and disclosed to inform data subjects of the procedures and standards for processing personal information, and to facilitate the prompt and efficient resolution of any related concerns.
This Policy takes effect on Oct 31, 2024.
Samsung SDS processes personal information for the purposes outlined below. The personal information being processed will not be used for any purposes other than those specified. If there is a change in the purpose of use, necessary actions, such as obtaining additional consent in accordance with Article 18 of the Personal Information Protection Act, will be taken.
Samsung SDS collects and uses personal information only to the extent required for providing services.
1) Personal Information processed without the consent of the data subject
There are no personal information items processed without the consent of the data subject.
2) Personal Information processed with the consent of the data subject
Samsung SDS processes the following personal information with the consent of the data subject, in compliance with Articles 15 (1) 1 and 22 (1) 7 of the Personal Information Protection Act.
3) The following information may be automatically generated and collected during the use of the service.
Samsung SDS processes and retains personal information in accordance with the retention and usage periods set by law or within the timeframe agreed upon with the data subject at the time of collection.
The retention and processing periods for each type of personal information are as follows:
Samsung SDS retains information for a specified period in accordance with relevant laws until the conclusion of any investigations or inquiries related to violations of those laws.
Samsung SDS does not provide services to children under the age of 14.
Samsung SDS promptly disposes of personal information when it is no longer necessary due to the expiration of the retention period or the achievement of the purpose of processing.
The procedures and methods for the disposal of personal information are as follows:
(i) Samsung SDS processes data subject’s personal information only within the scope specified in the Purpose of Personal Information Processing and provides a third party with the personal information only in cases under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the data subject and special provisions of the Act. Except for the cases, data subject’s personal information shall not be transferred to a third party.
(ii) For the seamless provision of services, Samsung SDS provides personal information to the minimum scope upon the consent of the data subject in accordance with Article 17 (1) 1 of the Personal Information Protection Act as follows.
(iii) Samsung SDS may disclose personal information to a third party without prior consent in the event of emergencies such as disasters, epidemics, accidents that pose risks to life and health, and unexpected loss of personal property.
(iv) Cases where personal information is transferred to overseas third parties are specified in ‘8. Overseas Transfer of Personal Information.’
Samsung SDS entrusts the processing of personal information as follows for smooth processing of personal information.
When concluding the outsourcing contract, the following clauses regarding responsibilities: (a) the prohibition of processing personal information for purposes other than the performance of entrusted tasks; (b) technical and administrative protective measures; (c) restrictions on re-entrustment, (d) management and supervision of trustee; and (e) liability for damages shall be stipulated in the contract in accordance with Article 26 of the Personal Information Protection Act. Samsung SDS also supervises whether the trustee processes personal information safely. The consigned processing agency and contents of the commissioned work are as follows.
However, among 2. Items of Personal Information Processed, Reporting Wrongful Practices and Violation of Compliance, Security Report Center (reports), and Privacy Violation Report are excluded from entrusted affairs.
A trustee obtains consent from Samsung SDS when it re-entrusts the processing of personal information in accordance with Article 26 (6) of the Personal Information Protection Act. If the details of the outsourced work or the trustee is changed, Samsung SDS shall disclose such changes in this Privacy Policy without delay. The cases of entrusting personal information processing to an overseas party are described in 8. Overseas Transfer of Personal Information.
Samsung SDS transfers data subject’s personal information to a third party overseas as detailed below.
Samsung SDS takes the following technical, administrative, and physical measures needed to ensure security:
Samsung SDS uses ‘cookies’ that store and frequently retrieve user information to provide individual services and convenience to users. Cookies are small pieces of data that the server (http) for website operation sends to data subject’s browser and cookies are stored on data subject's PC or mobile device.
Data subjects can select the web browser option to allow or reject cookies. However, when the data subject rejects cookie installation, there may be difficulties in service provision. Below is the list of cookies employed, and they are only active for visiting sessions
| Classification | Name | Purpose |
|---|---|---|
| Auto ID save upon visit | Customer Guid | Identify the visitor without log-in |
| Activity response | Total conversation | To serve better interactions, these cookies track web behaviors of email subscribers and web for submitters. |
| Total pages | ||
| Total time | ||
| Total visits | ||
| Most recent search query | ||
| Most recent search engine | ||
| Most recent referrer | ||
| Most recent marketing campaign | ||
| Most recent form submitted | ||
| Last visit date and time | ||
| Last page in visit | ||
| First visit date and time | ||
| First page in visit | ||
| IP address based information | City | To serve better interactions, this cookie assumes regions and companies of email subscribers and web for submitters. |
| Company | ||
| Country DNS name | ||
| Country (from DNS) | ||
| Country (from IP) | ||
| Latitude | ||
| Longitude | ||
| State/Province | ||
| Time zone | ||
| Time zone offset from GMT | ||
| Zip code |
A data subject may exercise the rights to request access, edit, and delete his or her personal information, and suspend the processing of such information (hereinafter referred to as “Exercise of a Right”.) The data subject may conduct Exercise of a Right via written documents, emails, and FAX under Article 41 (1) of “Enforcement Decree of the Personal Information Protection Act,” and Samsung SDS will immediately take appropriate action.
- The data subject may request access, edit and delete his or her personal information by sending an email to the department in charge at any time.
The data subject also may conduct Exercise of a Right through an agent, such as a legal representative or a delegated person. In such cases, the data subject shall submit a power of attorney in accordance with attached Form 11 under “Public Notice on the Processing Method of Personal Information.”
The rights of the data subject may be limited pursuant to Articles 35 (4) and 37 (2) of the Personal Information Protection Act for the requesting suspension of personal information access and processing.
If personal information is specified as a subject of collection in other laws and regulations, deletion of such information cannot be requested.
Samsung SDS checks whether the person who exercise the rights is himself or a legitimate agent.
Request to Exercise of a Rights may be submitted to the following department.
Samsung SDS will try to expedite the request for exercise of data subject’s rights
Samsung SDS appoints the following Chief Privacy Officer and Point of Contact to handle personal information processing and data subjects’ complaints and remedies relating to such processing.
For any inquiries, complaints, or damages relief regarding the protection of personal information while using Samsung SDS’s services, the data subjects are encouraged to reach out to the designated Data Protection Officer and the relevant department. Samsung SDS is committed to promptly addressing inquiries and providing effective solutions.
If Samsung SDS’s complaint handling or damage relief results are unsatisfied, or if further reporting, consultation, or assistance with other instances of personal information infringement are needed, please contact the institutions mentioned below.
Samsung SDS tries to ensure data subjects’ right to self-determination of personal information and provide consultation and relief for damage caused by personal information infringement. If report or consultation is needed, please contact the following department.
Samsung SDS shall notify users at least 7 days prior to any additions, deletions or changes are made to this Privacy Policy via notice board. In the event of a security breach caused by hacking or computer virus, Samsung SDS shall immediately notify all users affected.
Privacy Policy Version: V.7.2
Privacy Policy Effective Date: Oct 31, 2024
Latest Update to Privacy Policy: Oct 24, 2024