In accordance with privacy related legislation, including the Personal Information Protection Act and Act on Promotion of Information and Communication Network Utilization and Information Protection, Etc. (hereinafter referred to as “Information and Communications Network Act”), SAMSUNG C&T CORPORATION (hereinafter referred to as “Company”) has personal information management policies as follows, to protect personal information and rights, and to notify where and how personal information is used.

The Company’s privacy policy may change depending on the modifications to related legislation or internal policies, and the changes shall be notified by posting a notice on the website.

1. Information we collect and the means of collecting personal information

(1) Personal Information we collect

1) The Company collects the following data to enable registration of sfdf.
• Required information: name, gender, date of birth, mobile phonfdfe number, Email address,
• Optional information: work experience, education background, awards/contest/exhibition information
2) The following data may be automatically generated and collected when using our services or during processing procedures.
• Records of services used, cookies, IP information, and more.

(2) Means used to collect personal information
• Applicants registration and service use through online and mobile website

2. Purpose of collection and use of personal information

The Company handles and processes personal information for the following purposes. Personal information collected by the Company is not used for purpose other than what is stated below. If the purpose of use is changed, the Company will take necessary measures, such as receiving a separate consent from applicants, according to relevant laws such as Article 18 of the Personal Information Protection Act.

• Applicants registration and management: (limited to applicants registration) identification for using the website, prohibition of wrongful use and unauthorized use, limiting membership registration and setting a limit on the possible number of registration, maintaining and managing member qualification, identification according to restrictive mandatory authentication.
• Complaint settlement: petitioner identification, request/inquiry/report confirmation, contact/notice for fact-finding, result notification
• Evaluation of applicants and processing sfdf: communication with all applicants, introducing applicants to the public, reviewing their application, selecting the finalists and the winners for sfdf, promoting sfdf to the public.

3. Period of retention and use of personal information

The Company processes and keeps personal information within the period of retention/use in accordance to the law or the period to which applicants agreed when collecting their personal information.
(1) Period of processing and retention to which applicants agreed

• The Company possesses and uses collected personal information only until the purpose of collection and use to which applicants agreed is fulfilled. After the purpose is fulfilled, the information is discarded without delay.

o Applicant registration and management: Information is possessed until applicants’ request for withdrawal of account. Notwithstanding the foregoing, (i) when an ongoing investigation is related to a violation of related law, information is possessed until the investigation is over, and (ii) when a creditor and debtor relationship exists based on the use of website, information is possessed until the debt is paid off.

4. Matters related to providing personal information to third parties

The Company uses applicants’ personal information only within the range stipulated in Article 1, Purpose of use of personal information. And the Company provides personal information to a third party only within the range which applicants consented to on (i) the party to be provided with applicants’ personal information, (ii) the party’s purpose of using personal information, (iii) items of personal information to be provided, or (iv) the party’s period of retaining and using personal information, or permitted by related legislation.

5. Entrustment of handling personal information

For smooth and quick provision of services, the Company is entrusting handling of personal information to outside professional businesses as follows, so that the entrusted company can collect, possess, process, use, provide, manage, and discard applicants’ personal information.

Name of Entrusted Firms	Entrusted Tasks
Samsung SDS	system building and maintenance
Think-Tree	system building and maintenance, website maintenance

When signing a consignment contract, in accordance with the article 26 of the Privacy Act and the article 25 of the Information and Communications Network Act, the Company clearly states in the consignment contract prohibition of personal information processing for purposes other than performing entrusted tasks, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the entrusted firm, and damage compensation and other responsibilities; and the Company supervises if the entrusted firm safely deals with personal information.
The Company will post the contents of entrusted work which are stated above or changes in the entrusted firm through this privacy policy without delay.

6. Information subjects’ rights, obligations and methods to exercise/fulfill them

(1) You can exercise the following rights related to personal information protection against the Company at any time.

• Demand to view personal information
• Demand to correct personal information when there is an error

(2) You can exercise the rights stated in Paragraph 1 online, by accessing the Company’s website and going through identification process, and then by using the rights on the personal information management menu. You can exercise the rights offline, by contacting the Company’s personal information manager in writing, by phone, or via Email.

(3) If you request a correction or deletion of an error on your personal information, the Company will not use or provide the personal information until the correction/deletion has been made.

(4) You can exercise the rights stated in Paragraph 1, through a legal representative or authorized agent. In this case, you must submit a power of attorney written according to the annex 11th form of the enforcement regulation of the Privacy Act.

(5) Applicants shall not violate privacy of their or others’ personal information which the Company is processing, by violating related legislation such as the Privacy Act.

7. Procedures and methods of destroying personal information

Unless otherwise prescribed by law, the Company destroys the information without delay as soon as the purpose of collecting and using personal information is fulfilled. The procedure, time limit, and methods of discarding personal information are detailed as follows.

(1) Procedure of destroying personal information

• After the purpose of collection and use is fulfilled, applicants’ personal information provided to the Company is moved to a separate database (a separate cabinet for documents) and stored until the time limit in accordance with internal policy or during a legal storage period for information protection, in accordance with related legislation (refer to Article 3, Period of Possession and Use of Personal Information of this policy).
• Personal information which was moved to a separate database is not used for other than storage purposes, unless otherwise prescribed by law.

(2) Method of destroying personal information

• Personal information saved as an electronic file is deleted by a technique which disables reproduction of the records.
• Personal information printed on paper is discarded by shredding the documents with a shredder or burning them.

8. Measures to ensure safety of personal information

The Company is taking technical, administrative, and physical measures needed to ensure safety as the following.

(1) Technical measures

• Encryption of personal information: Important personal information required by law is saved and managed as encrypted data, and thus only the person him/herself can check the information. Additional security functions are used for important files, such as encrypting or locking important files and transmission data.
• Installation of security programs: To safely provide and manage applicant information, vaccine programs are installed for the personal information processing system and regular updates and checks are carried out. Intrusion prevention/detection systems are installed to continuously monitor and prevent hacking and other outside attacks.
• Management of access authority for personal information processing system, etc.: Necessary measures are taken to control access to personal information, such as granting, changing, and cancelling access authority for the database system which processes personal information. Also, intrusion detection systems are used to restrict unauthorized access from the outside.
• Storage of access records and prevention of falsification: Access records on the personal information processing system are stored and managed for minimum six months, and security functions are used to prevent falsification, theft, and loss of access records.

(2) Administrative measures

• Establishment and implementation of the internal management plan: To safely process personal information, an internal management plan is set up and implemented.
• Execution of regular self-audits: To secure safety on handling personal information, self-audits are carried out on a regular basis (once a quarter).

(3) Physical measures

• Use of locking device for document security: Documents and supplementary storage devices containing personal information are stored in a secure place with a locking device.
• Control of unauthorized people’s access: There is a physical space which is separately set up to keep personal information, and an access control procedure is being established and operated on this storage.

9. Personal information protection manager and handling complaints

(1) The Company manages and takes charge of work related to processing applicants’ personal information, and designates a personal information protection manager as below, in order to handle applicant complaints and relieve damage related to personal information processing.

• Personal information protection team
Team(Division): Human Resource Administration Division
E-mail : fssecurity@samsung.com

(2) When applicants express opinions or raise complaints to the personal information protection manager above, the Company will quickly and sincerely deal with them to solve the problems.

10. Claims to view personal information

Applicants can make claims to view personal information in accordance with the Privacy Act to the below department. The Company will work hard to process the claims in a prompt manner.

• Department for receiving and processing claims to view personal information
Team(Division): Strategic Planning Team
E-mail：sfdf@samsung.com

In accordance with privacy related legislation, including the Personal Information Protection Act and Act on Promotion of Information and Communication Network Utilization and Information Protection, Etc. (hereinafter referred to as “Information and Communications Network Act”), SAMSUNG C&T CORPORATION (hereinafter referred to as “Company”) has personal information management policies as follows, to protect personal information and rights, and to notify where and how personal information is used.

The Company’s privacy policy may change depending on the modifications to related legislation or internal policies, and the changes shall be notified by posting a notice on the website.

1. Information we collect and the means of collecting personal information

(1) Personal Information we collect

1) The Company collects the following data to enable registration of sfdf.
• Required information: name, gender, date of birth, mobile phonfdfe number, Email address,
• Optional information: work experience, education background, awards/contest/exhibition information
2) The following data may be automatically generated and collected when using our services or during processing procedures.
• Records of services used, cookies, IP information, and more.

(2) Means used to collect personal information
• Applicants registration and service use through online and mobile website

2. Purpose of collection and use of personal information

The Company handles and processes personal information for the following purposes. Personal information collected by the Company is not used for purpose other than what is stated below. If the purpose of use is changed, the Company will take necessary measures, such as receiving a separate consent from applicants, according to relevant laws such as Article 18 of the Personal Information Protection Act.

• Applicants registration and management: (limited to applicants registration) identification for using the website, prohibition of wrongful use and unauthorized use, limiting membership registration and setting a limit on the possible number of registration, maintaining and managing member qualification, identification according to restrictive mandatory authentication.
• Complaint settlement: petitioner identification, request/inquiry/report confirmation, contact/notice for fact-finding, result notification
• Evaluation of applicants and processing sfdf: communication with all applicants, introducing applicants to the public, reviewing their application, selecting the finalists and the winners for sfdf, promoting sfdf to the public.

3. Period of retention and use of personal information

The Company processes and keeps personal information within the period of retention/use in accordance to the law or the period to which applicants agreed when collecting their personal information.
(1) Period of processing and retention to which applicants agreed

• The Company possesses and uses collected personal information only until the purpose of collection and use to which applicants agreed is fulfilled. After the purpose is fulfilled, the information is discarded without delay.

o Applicant registration and management: Information is possessed until applicants’ request for withdrawal of account. Notwithstanding the foregoing, (i) when an ongoing investigation is related to a violation of related law, information is possessed until the investigation is over, and (ii) when a creditor and debtor relationship exists based on the use of website, information is possessed until the debt is paid off.

4. Matters related to providing personal information to third parties

The Company uses applicants’ personal information only within the range stipulated in Article 1, Purpose of use of personal information. And the Company provides personal information to a third party only within the range which applicants consented to on (i) the party to be provided with applicants’ personal information, (ii) the party’s purpose of using personal information, (iii) items of personal information to be provided, or (iv) the party’s period of retaining and using personal information, or permitted by related legislation.

5. Entrustment of handling personal information

For smooth and quick provision of services, the Company is entrusting handling of personal information to outside professional businesses as follows, so that the entrusted company can collect, possess, process, use, provide, manage, and discard applicants’ personal information.

Name of Entrusted Firms	Entrusted Tasks
Samsung SDS	system building and maintenance
Think-Tree	system building and maintenance, website maintenance

When signing a consignment contract, in accordance with the article 26 of the Privacy Act and the article 25 of the Information and Communications Network Act, the Company clearly states in the consignment contract prohibition of personal information processing for purposes other than performing entrusted tasks, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the entrusted firm, and damage compensation and other responsibilities; and the Company supervises if the entrusted firm safely deals with personal information.
The Company will post the contents of entrusted work which are stated above or changes in the entrusted firm through this privacy policy without delay.

6. Information subjects’ rights, obligations and methods to exercise/fulfill them

(1) You can exercise the following rights related to personal information protection against the Company at any time.

• Demand to view personal information
• Demand to correct personal information when there is an error

(2) You can exercise the rights stated in Paragraph 1 online, by accessing the Company’s website and going through identification process, and then by using the rights on the personal information management menu. You can exercise the rights offline, by contacting the Company’s personal information manager in writing, by phone, or via Email.

(3) If you request a correction or deletion of an error on your personal information, the Company will not use or provide the personal information until the correction/deletion has been made.

(4) You can exercise the rights stated in Paragraph 1, through a legal representative or authorized agent. In this case, you must submit a power of attorney written according to the annex 11th form of the enforcement regulation of the Privacy Act.

(5) Applicants shall not violate privacy of their or others’ personal information which the Company is processing, by violating related legislation such as the Privacy Act.

7. Procedures and methods of destroying personal information

Unless otherwise prescribed by law, the Company destroys the information without delay as soon as the purpose of collecting and using personal information is fulfilled. The procedure, time limit, and methods of discarding personal information are detailed as follows.

(1) Procedure of destroying personal information

• After the purpose of collection and use is fulfilled, applicants’ personal information provided to the Company is moved to a separate database (a separate cabinet for documents) and stored until the time limit in accordance with internal policy or during a legal storage period for information protection, in accordance with related legislation (refer to Article 3, Period of Possession and Use of Personal Information of this policy).
• Personal information which was moved to a separate database is not used for other than storage purposes, unless otherwise prescribed by law.

(2) Method of destroying personal information

• Personal information saved as an electronic file is deleted by a technique which disables reproduction of the records.
• Personal information printed on paper is discarded by shredding the documents with a shredder or burning them.

8. Measures to ensure safety of personal information

The Company is taking technical, administrative, and physical measures needed to ensure safety as the following.

(1) Technical measures

• Encryption of personal information: Important personal information required by law is saved and managed as encrypted data, and thus only the person him/herself can check the information. Additional security functions are used for important files, such as encrypting or locking important files and transmission data.
• Installation of security programs: To safely provide and manage applicant information, vaccine programs are installed for the personal information processing system and regular updates and checks are carried out. Intrusion prevention/detection systems are installed to continuously monitor and prevent hacking and other outside attacks.
• Management of access authority for personal information processing system, etc.: Necessary measures are taken to control access to personal information, such as granting, changing, and cancelling access authority for the database system which processes personal information. Also, intrusion detection systems are used to restrict unauthorized access from the outside.
• Storage of access records and prevention of falsification: Access records on the personal information processing system are stored and managed for minimum six months, and security functions are used to prevent falsification, theft, and loss of access records.

(2) Administrative measures

• Establishment and implementation of the internal management plan: To safely process personal information, an internal management plan is set up and implemented.
• Execution of regular self-audits: To secure safety on handling personal information, self-audits are carried out on a regular basis (once a quarter).

(3) Physical measures

• Use of locking device for document security: Documents and supplementary storage devices containing personal information are stored in a secure place with a locking device.
• Control of unauthorized people’s access: There is a physical space which is separately set up to keep personal information, and an access control procedure is being established and operated on this storage.

9. Personal information protection manager and handling complaints

(1) The Company manages and takes charge of work related to processing applicants’ personal information, and designates a personal information protection manager as below, in order to handle applicant complaints and relieve damage related to personal information processing.

• Personal information protection team
Team(Division): Human Resource Administration Division
E-mail : fssecurity@samsung.com

(2) When applicants express opinions or raise complaints to the personal information protection manager above, the Company will quickly and sincerely deal with them to solve the problems.

10. Claims to view personal information

Applicants can make claims to view personal information in accordance with the Privacy Act to the below department. The Company will work hard to process the claims in a prompt manner.

• Department for receiving and processing claims to view personal information
Team(Division): Strategic Planning Team
E-mail：sfdf@samsung.com

In accordance with privacy related legislation, including the Personal Information Protection Act and Act on Promotion of Information and Communication Network Utilization and Information Protection, Etc. (hereinafter referred to as “Information and Communications Network Act”), SAMSUNG C&T CORPORATION (hereinafter referred to as “Company”) has personal information management policies as follows, to protect personal information and rights, and to notify where and how personal information is used.

The Company’s privacy policy may change depending on the modifications to related legislation or internal policies, and the changes shall be notified by posting a notice on the website.

1. Information we collect and the means of collecting personal information

(1) Personal Information we collect

1) The Company collects the following data to enable registration of sfdf.
• Required information: name, gender, date of birth, mobile phonfdfe number, Email address,
• Optional information: work experience, education background, awards/contest/exhibition information
2) The following data may be automatically generated and collected when using our services or during processing procedures.
• Records of services used, cookies, IP information, and more.

(2) Means used to collect personal information
• Applicants registration and service use through online and mobile website

2. Purpose of collection and use of personal information

The Company handles and processes personal information for the following purposes. Personal information collected by the Company is not used for purpose other than what is stated below. If the purpose of use is changed, the Company will take necessary measures, such as receiving a separate consent from applicants, according to relevant laws such as Article 18 of the Personal Information Protection Act.

• Applicants registration and management: (limited to applicants registration) identification for using the website, prohibition of wrongful use and unauthorized use, limiting membership registration and setting a limit on the possible number of registration, maintaining and managing member qualification, identification according to restrictive mandatory authentication.
• Complaint settlement: petitioner identification, request/inquiry/report confirmation, contact/notice for fact-finding, result notification
• Evaluation of applicants and processing sfdf: communication with all applicants, introducing applicants to the public, reviewing their application, selecting the finalists and the winners for sfdf, promoting sfdf to the public.

3. Period of retention and use of personal information

The Company processes and keeps personal information within the period of retention/use in accordance to the law or the period to which applicants agreed when collecting their personal information.
(1) Period of processing and retention to which applicants agreed

• The Company possesses and uses collected personal information only until the purpose of collection and use to which applicants agreed is fulfilled. After the purpose is fulfilled, the information is discarded without delay.

o Applicant registration and management: Information is possessed until applicants’ request for withdrawal of account. Notwithstanding the foregoing, (i) when an ongoing investigation is related to a violation of related law, information is possessed until the investigation is over, and (ii) when a creditor and debtor relationship exists based on the use of website, information is possessed until the debt is paid off.

4. Matters related to providing personal information to third parties

The Company uses applicants’ personal information only within the range stipulated in Article 1, Purpose of use of personal information. And the Company provides personal information to a third party only within the range which applicants consented to on (i) the party to be provided with applicants’ personal information, (ii) the party’s purpose of using personal information, (iii) items of personal information to be provided, or (iv) the party’s period of retaining and using personal information, or permitted by related legislation.

5. Entrustment of handling personal information

For smooth and quick provision of services, the Company is entrusting handling of personal information to outside professional businesses as follows, so that the entrusted company can collect, possess, process, use, provide, manage, and discard applicants’ personal information.

Name of Entrusted Firms	Entrusted Tasks
Samsung SDS	system building and maintenance
Think-Tree	system building and maintenance, website maintenance

When signing a consignment contract, in accordance with the article 26 of the Privacy Act and the article 25 of the Information and Communications Network Act, the Company clearly states in the consignment contract prohibition of personal information processing for purposes other than performing entrusted tasks, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the entrusted firm, and damage compensation and other responsibilities; and the Company supervises if the entrusted firm safely deals with personal information.
The Company will post the contents of entrusted work which are stated above or changes in the entrusted firm through this privacy policy without delay.

6. Information subjects’ rights, obligations and methods to exercise/fulfill them

(1) You can exercise the following rights related to personal information protection against the Company at any time.

• Demand to view personal information
• Demand to correct personal information when there is an error

(2) You can exercise the rights stated in Paragraph 1 online, by accessing the Company’s website and going through identification process, and then by using the rights on the personal information management menu. You can exercise the rights offline, by contacting the Company’s personal information manager in writing, by phone, or via Email.

(3) If you request a correction or deletion of an error on your personal information, the Company will not use or provide the personal information until the correction/deletion has been made.

(4) You can exercise the rights stated in Paragraph 1, through a legal representative or authorized agent. In this case, you must submit a power of attorney written according to the annex 11th form of the enforcement regulation of the Privacy Act.

(5) Applicants shall not violate privacy of their or others’ personal information which the Company is processing, by violating related legislation such as the Privacy Act.

7. Procedures and methods of destroying personal information

Unless otherwise prescribed by law, the Company destroys the information without delay as soon as the purpose of collecting and using personal information is fulfilled. The procedure, time limit, and methods of discarding personal information are detailed as follows.

(1) Procedure of destroying personal information

• After the purpose of collection and use is fulfilled, applicants’ personal information provided to the Company is moved to a separate database (a separate cabinet for documents) and stored until the time limit in accordance with internal policy or during a legal storage period for information protection, in accordance with related legislation (refer to Article 3, Period of Possession and Use of Personal Information of this policy).
• Personal information which was moved to a separate database is not used for other than storage purposes, unless otherwise prescribed by law.

(2) Method of destroying personal information

• Personal information saved as an electronic file is deleted by a technique which disables reproduction of the records.
• Personal information printed on paper is discarded by shredding the documents with a shredder or burning them.

8. Measures to ensure safety of personal information

The Company is taking technical, administrative, and physical measures needed to ensure safety as the following.

(1) Technical measures

• Encryption of personal information: Important personal information required by law is saved and managed as encrypted data, and thus only the person him/herself can check the information. Additional security functions are used for important files, such as encrypting or locking important files and transmission data.
• Installation of security programs: To safely provide and manage applicant information, vaccine programs are installed for the personal information processing system and regular updates and checks are carried out. Intrusion prevention/detection systems are installed to continuously monitor and prevent hacking and other outside attacks.
• Management of access authority for personal information processing system, etc.: Necessary measures are taken to control access to personal information, such as granting, changing, and cancelling access authority for the database system which processes personal information. Also, intrusion detection systems are used to restrict unauthorized access from the outside.
• Storage of access records and prevention of falsification: Access records on the personal information processing system are stored and managed for minimum six months, and security functions are used to prevent falsification, theft, and loss of access records.

(2) Administrative measures

• Establishment and implementation of the internal management plan: To safely process personal information, an internal management plan is set up and implemented.
• Execution of regular self-audits: To secure safety on handling personal information, self-audits are carried out on a regular basis (once a quarter).

(3) Physical measures

• Use of locking device for document security: Documents and supplementary storage devices containing personal information are stored in a secure place with a locking device.
• Control of unauthorized people’s access: There is a physical space which is separately set up to keep personal information, and an access control procedure is being established and operated on this storage.

9. Personal information protection manager and handling complaints

(1) The Company manages and takes charge of work related to processing applicants’ personal information, and designates a personal information protection manager as below, in order to handle applicant complaints and relieve damage related to personal information processing.

• Personal information protection team
Team(Division): Human Resource Administration Division
E-mail : fssecurity@samsung.com

(2) When applicants express opinions or raise complaints to the personal information protection manager above, the Company will quickly and sincerely deal with them to solve the problems.

10. Claims to view personal information

Applicants can make claims to view personal information in accordance with the Privacy Act to the below department. The Company will work hard to process the claims in a prompt manner.

• Department for receiving and processing claims to view personal information
Team(Division): Strategic Planning Team
E-mail：sfdf@samsung.com

In accordance with privacy related legislation, including the Personal Information Protection Act and Act on Promotion of Information and Communication Network Utilization and Information Protection, Etc. (hereinafter referred to as “Information and Communications Network Act”), SAMSUNG C&T CORPORATION (hereinafter referred to as “Company”) has personal information management policies as follows, to protect personal information and rights, and to notify where and how personal information is used.

The Company’s privacy policy may change depending on the modifications to related legislation or internal policies, and the changes shall be notified by posting a notice on the website.

1. Information we collect and the means of collecting personal information

(1) Personal Information we collect

1) The Company collects the following data to enable registration of sfdf.
• Required information: name, gender, date of birth, mobile phonfdfe number, Email address,
• Optional information: work experience, education background, awards/contest/exhibition information
2) The following data may be automatically generated and collected when using our services or during processing procedures.
• Records of services used, cookies, IP information, and more.

(2) Means used to collect personal information
• Applicants registration and service use through online and mobile website

2. Purpose of collection and use of personal information

The Company handles and processes personal information for the following purposes. Personal information collected by the Company is not used for purpose other than what is stated below. If the purpose of use is changed, the Company will take necessary measures, such as receiving a separate consent from applicants, according to relevant laws such as Article 18 of the Personal Information Protection Act.

• Applicants registration and management: (limited to applicants registration) identification for using the website, prohibition of wrongful use and unauthorized use, limiting membership registration and setting a limit on the possible number of registration, maintaining and managing member qualification, identification according to restrictive mandatory authentication.
• Complaint settlement: petitioner identification, request/inquiry/report confirmation, contact/notice for fact-finding, result notification
• Evaluation of applicants and processing sfdf: communication with all applicants, introducing applicants to the public, reviewing their application, selecting the finalists and the winners for sfdf, promoting sfdf to the public.

3. Period of retention and use of personal information

The Company processes and keeps personal information within the period of retention/use in accordance to the law or the period to which applicants agreed when collecting their personal information.
(1) Period of processing and retention to which applicants agreed

• The Company possesses and uses collected personal information only until the purpose of collection and use to which applicants agreed is fulfilled. After the purpose is fulfilled, the information is discarded without delay.

o Applicant registration and management: Information is possessed until applicants’ request for withdrawal of account. Notwithstanding the foregoing, (i) when an ongoing investigation is related to a violation of related law, information is possessed until the investigation is over, and (ii) when a creditor and debtor relationship exists based on the use of website, information is possessed until the debt is paid off.

4. Matters related to providing personal information to third parties

The Company uses applicants’ personal information only within the range stipulated in Article 1, Purpose of use of personal information. And the Company provides personal information to a third party only within the range which applicants consented to on (i) the party to be provided with applicants’ personal information, (ii) the party’s purpose of using personal information, (iii) items of personal information to be provided, or (iv) the party’s period of retaining and using personal information, or permitted by related legislation.

5. Entrustment of handling personal information

For smooth and quick provision of services, the Company is entrusting handling of personal information to outside professional businesses as follows, so that the entrusted company can collect, possess, process, use, provide, manage, and discard applicants’ personal information.

Name of Entrusted Firms	Entrusted Tasks
Samsung SDS	system building and maintenance

When signing a consignment contract, in accordance with the article 26 of the Privacy Act and the article 25 of the Information and Communications Network Act, the Company clearly states in the consignment contract prohibition of personal information processing for purposes other than performing entrusted tasks, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the entrusted firm, and damage compensation and other responsibilities; and the Company supervises if the entrusted firm safely deals with personal information.
The Company will post the contents of entrusted work which are stated above or changes in the entrusted firm through this privacy policy without delay.

6. Information subjects’ rights, obligations and methods to exercise/fulfill them

(1) You can exercise the following rights related to personal information protection against the Company at any time.

• Demand to view personal information
• Demand to correct personal information when there is an error

(2) You can exercise the rights stated in Paragraph 1 online, by accessing the Company’s website and going through identification process, and then by using the rights on the personal information management menu. You can exercise the rights offline, by contacting the Company’s personal information manager in writing, by phone, or via Email.

(3) If you request a correction or deletion of an error on your personal information, the Company will not use or provide the personal information until the correction/deletion has been made.

(4) You can exercise the rights stated in Paragraph 1, through a legal representative or authorized agent. In this case, you must submit a power of attorney written according to the annex 11th form of the enforcement regulation of the Privacy Act.

(5) Applicants shall not violate privacy of their or others’ personal information which the Company is processing, by violating related legislation such as the Privacy Act.

7. Procedures and methods of destroying personal information

Unless otherwise prescribed by law, the Company destroys the information without delay as soon as the purpose of collecting and using personal information is fulfilled. The procedure, time limit, and methods of discarding personal information are detailed as follows.

(1) Procedure of destroying personal information

• After the purpose of collection and use is fulfilled, applicants’ personal information provided to the Company is moved to a separate database (a separate cabinet for documents) and stored until the time limit in accordance with internal policy or during a legal storage period for information protection, in accordance with related legislation (refer to Article 3, Period of Possession and Use of Personal Information of this policy).
• Personal information which was moved to a separate database is not used for other than storage purposes, unless otherwise prescribed by law.

(2) Method of destroying personal information

• Personal information saved as an electronic file is deleted by a technique which disables reproduction of the records.
• Personal information printed on paper is discarded by shredding the documents with a shredder or burning them.

8. Measures to ensure safety of personal information

The Company is taking technical, administrative, and physical measures needed to ensure safety as the following.

(1) Technical measures

• Encryption of personal information: Important personal information required by law is saved and managed as encrypted data, and thus only the person him/herself can check the information. Additional security functions are used for important files, such as encrypting or locking important files and transmission data.
• Installation of security programs: To safely provide and manage applicant information, vaccine programs are installed for the personal information processing system and regular updates and checks are carried out. Intrusion prevention/detection systems are installed to continuously monitor and prevent hacking and other outside attacks.
• Management of access authority for personal information processing system, etc.: Necessary measures are taken to control access to personal information, such as granting, changing, and cancelling access authority for the database system which processes personal information. Also, intrusion detection systems are used to restrict unauthorized access from the outside.
• Storage of access records and prevention of falsification: Access records on the personal information processing system are stored and managed for minimum six months, and security functions are used to prevent falsification, theft, and loss of access records.

(2) Administrative measures

• Establishment and implementation of the internal management plan: To safely process personal information, an internal management plan is set up and implemented.
• Execution of regular self-audits: To secure safety on handling personal information, self-audits are carried out on a regular basis (once a quarter).

(3) Physical measures

• Use of locking device for document security: Documents and supplementary storage devices containing personal information are stored in a secure place with a locking device.
• Control of unauthorized people’s access: There is a physical space which is separately set up to keep personal information, and an access control procedure is being established and operated on this storage.

9. Personal information protection manager and handling complaints

(1) The Company manages and takes charge of work related to processing applicants’ personal information, and designates a personal information protection manager as below, in order to handle applicant complaints and relieve damage related to personal information processing.

• Personal information protection team
Team(Division): Human Resource Administration Division
E-mail : fssecurity@samsung.com

(2) When applicants express opinions or raise complaints to the personal information protection manager above, the Company will quickly and sincerely deal with them to solve the problems.

10. Claims to view personal information

Applicants can make claims to view personal information in accordance with the Privacy Act to the below department. The Company will work hard to process the claims in a prompt manner.

• Department for receiving and processing claims to view personal information
Team(Division): Strategic Planning Team
E-mail：sfdf@samsung.com

11. Changing privacy policy

① This Privacy Policy will apply from 2019. 2.26
② You can view previous privacy policy below.

View previous privacy policy(2018.06.14~2019.02.25)

이전 개인정보처리방침 보기 (2017년6월23일~2018년3월4일)

In accordance with privacy related legislation, including the Personal Information Protection Act and Act on Promotion of Information and Communication Network Utilization and Information Protection, Etc. (hereinafter referred to as “Information and Communications Network Act”), SAMSUNG C&T CORPORATION (hereinafter referred to as “Company”) has personal information management policies as follows, to protect personal information and rights, and to notify where and how personal information is used.

The Company’s privacy policy may change depending on the modifications to related legislation or internal policies, and the changes shall be notified by posting a notice on the website.

1. Information we collect and the means of collecting personal information

(1) Personal Information we collect

1) The Company collects the following data to enable registration of sfdf.
• Required information: name, gender, date of birth, mobile phonfdfe number, Email address,
• Optional information: work experience, education background, awards/contest/exhibition information
2) The following data may be automatically generated and collected when using our services or during processing procedures.
• Records of services used, cookies, IP information, and more.

(2) Means used to collect personal information
• Applicants registration and service use through online and mobile website

2. Purpose of collection and use of personal information

The Company handles and processes personal information for the following purposes. Personal information collected by the Company is not used for purpose other than what is stated below. If the purpose of use is changed, the Company will take necessary measures, such as receiving a separate consent from applicants, according to relevant laws such as Article 18 of the Personal Information Protection Act.

• Applicants registration and management: (limited to applicants registration) identification for using the website, prohibition of wrongful use and unauthorized use, limiting membership registration and setting a limit on the possible number of registration, maintaining and managing member qualification, identification according to restrictive mandatory authentication.
• Complaint settlement: petitioner identification, request/inquiry/report confirmation, contact/notice for fact-finding, result notification
• Evaluation of applicants and processing sfdf: communication with all applicants, introducing applicants to the public, reviewing their application, selecting the finalists and the winners for sfdf, promoting sfdf to the public.

3. Period of retention and use of personal information

The Company processes and keeps personal information within the period of retention/use in accordance to the law or the period to which applicants agreed when collecting their personal information.
(1) Period of processing and retention to which applicants agreed

• The Company possesses and uses collected personal information only until the purpose of collection and use to which applicants agreed is fulfilled. After the purpose is fulfilled, the information is discarded without delay.

o Applicant registration and management: Information is possessed until applicants’ request for withdrawal of account. Notwithstanding the foregoing, (i) when an ongoing investigation is related to a violation of related law, information is possessed until the investigation is over, and (ii) when a creditor and debtor relationship exists based on the use of website, information is possessed until the debt is paid off.

4. Matters related to providing personal information to third parties

The Company uses applicants’ personal information only within the range stipulated in Article 1, Purpose of use of personal information. And the Company provides personal information to a third party only within the range which applicants consented to on (i) the party to be provided with applicants’ personal information, (ii) the party’s purpose of using personal information, (iii) items of personal information to be provided, or (iv) the party’s period of retaining and using personal information, or permitted by related legislation.

5. Entrustment of handling personal information

For smooth and quick provision of services, the Company is entrusting handling of personal information to outside professional businesses as follows, so that the entrusted company can collect, possess, process, use, provide, manage, and discard applicants’ personal information.

Name of Entrusted Firms	Entrusted Tasks
Samsung SDS	system building and maintenance

When signing a consignment contract, in accordance with the article 26 of the Privacy Act and the article 25 of the Information and Communications Network Act, the Company clearly states in the consignment contract prohibition of personal information processing for purposes other than performing entrusted tasks, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the entrusted firm, and damage compensation and other responsibilities; and the Company supervises if the entrusted firm safely deals with personal information.
The Company will post the contents of entrusted work which are stated above or changes in the entrusted firm through this privacy policy without delay.

6. Information subjects’ rights, obligations and methods to exercise/fulfill them

(1) You can exercise the following rights related to personal information protection against the Company at any time.

• Demand to view personal information
• Demand to correct personal information when there is an error

(2) You can exercise the rights stated in Paragraph 1 online, by accessing the Company’s website and going through identification process, and then by using the rights on the personal information management menu. You can exercise the rights offline, by contacting the Company’s personal information manager in writing, by phone, or via Email.

(3) If you request a correction or deletion of an error on your personal information, the Company will not use or provide the personal information until the correction/deletion has been made.

(4) You can exercise the rights stated in Paragraph 1, through a legal representative or authorized agent. In this case, you must submit a power of attorney written according to the annex 11th form of the enforcement regulation of the Privacy Act.

(5) Applicants shall not violate privacy of their or others’ personal information which the Company is processing, by violating related legislation such as the Privacy Act.

7. Procedures and methods of destroying personal information

Unless otherwise prescribed by law, the Company destroys the information without delay as soon as the purpose of collecting and using personal information is fulfilled. The procedure, time limit, and methods of discarding personal information are detailed as follows.

(1) Procedure of destroying personal information

• After the purpose of collection and use is fulfilled, applicants’ personal information provided to the Company is moved to a separate database (a separate cabinet for documents) and stored until the time limit in accordance with internal policy or during a legal storage period for information protection, in accordance with related legislation (refer to Article 3, Period of Possession and Use of Personal Information of this policy).
• Personal information which was moved to a separate database is not used for other than storage purposes, unless otherwise prescribed by law.

(2) Method of destroying personal information

• Personal information saved as an electronic file is deleted by a technique which disables reproduction of the records.
• Personal information printed on paper is discarded by shredding the documents with a shredder or burning them.

8. Measures to ensure safety of personal information

The Company is taking technical, administrative, and physical measures needed to ensure safety as the following.

(1) Technical measures

• Encryption of personal information: Important personal information required by law is saved and managed as encrypted data, and thus only the person him/herself can check the information. Additional security functions are used for important files, such as encrypting or locking important files and transmission data.
• Installation of security programs: To safely provide and manage applicant information, vaccine programs are installed for the personal information processing system and regular updates and checks are carried out. Intrusion prevention/detection systems are installed to continuously monitor and prevent hacking and other outside attacks.
• Management of access authority for personal information processing system, etc.: Necessary measures are taken to control access to personal information, such as granting, changing, and cancelling access authority for the database system which processes personal information. Also, intrusion detection systems are used to restrict unauthorized access from the outside.
• Storage of access records and prevention of falsification: Access records on the personal information processing system are stored and managed for minimum six months, and security functions are used to prevent falsification, theft, and loss of access records.

(2) Administrative measures

• Establishment and implementation of the internal management plan: To safely process personal information, an internal management plan is set up and implemented.
• Execution of regular self-audits: To secure safety on handling personal information, self-audits are carried out on a regular basis (once a quarter).

(3) Physical measures

• Use of locking device for document security: Documents and supplementary storage devices containing personal information are stored in a secure place with a locking device.
• Control of unauthorized people’s access: There is a physical space which is separately set up to keep personal information, and an access control procedure is being established and operated on this storage.

9. Personal information protection manager and handling complaints

(1) The Company manages and takes charge of work related to processing applicants’ personal information, and designates a personal information protection manager as below, in order to handle applicant complaints and relieve damage related to personal information processing.

• Personal information protection team
Team(Division): Human Resource Administration Division
E-mail : fssecurity@samsung.com

(2) When applicants express opinions or raise complaints to the personal information protection manager above, the Company will quickly and sincerely deal with them to solve the problems.

10. Claims to view personal information

Applicants can make claims to view personal information in accordance with the Privacy Act to the below department. The Company will work hard to process the claims in a prompt manner.

• Department for receiving and processing claims to view personal information
Team(Division): Strategic Planning Team
E-mail：sfdf@samsung.com

11. Changing privacy policy

① This Privacy Policy will apply from 2019. 2.26
② You can view previous privacy policy below.

View previous privacy policy(2018.06.14~2019.02.25)

이전 개인정보처리방침 보기 (2017년6월23일~2018년3월4일)

In accordance with privacy related legislation, including the Personal Information Protection Act and Act on Promotion of Information and Communication Network Utilization and Information Protection, Etc. (hereinafter referred to as “Information and Communications Network Act”), SAMSUNG C&T CORPORATION (hereinafter referred to as “Company”) has personal information management policies as follows, to protect personal information and rights, and to notify where and how personal information is used.

The Company’s privacy policy may change depending on the modifications to related legislation or internal policies, and the changes shall be notified by posting a notice on the website.

1. Information we collect and the means of collecting personal information

(1) Personal Information we collect

1) The Company collects the following data to enable registration of sfdf.
• Required information: name, gender, date of birth, mobile phonfdfe number, Email address,
• Optional information: work experience, education background, awards/contest/exhibition information
2) The following data may be automatically generated and collected when using our services or during processing procedures.
• Records of services used, cookies, IP information, and more.

(2) Means used to collect personal information
• Applicants registration and service use through online and mobile website

2. Purpose of collection and use of personal information

The Company handles and processes personal information for the following purposes. Personal information collected by the Company is not used for purpose other than what is stated below. If the purpose of use is changed, the Company will take necessary measures, such as receiving a separate consent from applicants, according to relevant laws such as Article 18 of the Personal Information Protection Act.

• Applicants registration and management: (limited to applicants registration) identification for using the website, prohibition of wrongful use and unauthorized use, limiting membership registration and setting a limit on the possible number of registration, maintaining and managing member qualification, identification according to restrictive mandatory authentication.
• Complaint settlement: petitioner identification, request/inquiry/report confirmation, contact/notice for fact-finding, result notification
• Evaluation of applicants and processing sfdf: communication with all applicants, introducing applicants to the public, reviewing their application, selecting the finalists and the winners for sfdf, promoting sfdf to the public.

3. Period of retention and use of personal information

The Company processes and keeps personal information within the period of retention/use in accordance to the law or the period to which applicants agreed when collecting their personal information.
(1) Period of processing and retention to which applicants agreed

• The Company possesses and uses collected personal information only until the purpose of collection and use to which applicants agreed is fulfilled. After the purpose is fulfilled, the information is discarded without delay.

o Applicant registration and management: Information is possessed until applicants’ request for withdrawal of account. Notwithstanding the foregoing, (i) when an ongoing investigation is related to a violation of related law, information is possessed until the investigation is over, and (ii) when a creditor and debtor relationship exists based on the use of website, information is possessed until the debt is paid off.

4. Matters related to providing personal information to third parties

The Company uses applicants’ personal information only within the range stipulated in Article 1, Purpose of use of personal information. And the Company provides personal information to a third party only within the range which applicants consented to on (i) the party to be provided with applicants’ personal information, (ii) the party’s purpose of using personal information, (iii) items of personal information to be provided, or (iv) the party’s period of retaining and using personal information, or permitted by related legislation.

5. Entrustment of handling personal information

For smooth and quick provision of services, the Company is entrusting handling of personal information to outside professional businesses as follows, so that the entrusted company can collect, possess, process, use, provide, manage, and discard applicants’ personal information.

Name of Entrusted Firms	Entrusted Tasks
Samsung SDS	system building and maintenance

When signing a consignment contract, in accordance with the article 26 of the Privacy Act and the article 25 of the Information and Communications Network Act, the Company clearly states in the consignment contract prohibition of personal information processing for purposes other than performing entrusted tasks, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the entrusted firm, and damage compensation and other responsibilities; and the Company supervises if the entrusted firm safely deals with personal information.
The Company will post the contents of entrusted work which are stated above or changes in the entrusted firm through this privacy policy without delay.

6. Information subjects’ rights, obligations and methods to exercise/fulfill them

(1) You can exercise the following rights related to personal information protection against the Company at any time.

• Demand to view personal information
• Demand to correct personal information when there is an error

(2) You can exercise the rights stated in Paragraph 1 online, by accessing the Company’s website and going through identification process, and then by using the rights on the personal information management menu. You can exercise the rights offline, by contacting the Company’s personal information manager in writing, by phone, or via Email.

(3) If you request a correction or deletion of an error on your personal information, the Company will not use or provide the personal information until the correction/deletion has been made.

(4) You can exercise the rights stated in Paragraph 1, through a legal representative or authorized agent. In this case, you must submit a power of attorney written according to the annex 11th form of the enforcement regulation of the Privacy Act.

(5) Applicants shall not violate privacy of their or others’ personal information which the Company is processing, by violating related legislation such as the Privacy Act.

7. Procedures and methods of destroying personal information

Unless otherwise prescribed by law, the Company destroys the information without delay as soon as the purpose of collecting and using personal information is fulfilled. The procedure, time limit, and methods of discarding personal information are detailed as follows.

(1) Procedure of destroying personal information

• After the purpose of collection and use is fulfilled, applicants’ personal information provided to the Company is moved to a separate database (a separate cabinet for documents) and stored until the time limit in accordance with internal policy or during a legal storage period for information protection, in accordance with related legislation (refer to Article 3, Period of Possession and Use of Personal Information of this policy).
• Personal information which was moved to a separate database is not used for other than storage purposes, unless otherwise prescribed by law.

(2) Method of destroying personal information

• Personal information saved as an electronic file is deleted by a technique which disables reproduction of the records.
• Personal information printed on paper is discarded by shredding the documents with a shredder or burning them.

8. Measures to ensure safety of personal information

The Company is taking technical, administrative, and physical measures needed to ensure safety as the following.

(1) Technical measures

• Encryption of personal information: Important personal information required by law is saved and managed as encrypted data, and thus only the person him/herself can check the information. Additional security functions are used for important files, such as encrypting or locking important files and transmission data.
• Installation of security programs: To safely provide and manage applicant information, vaccine programs are installed for the personal information processing system and regular updates and checks are carried out. Intrusion prevention/detection systems are installed to continuously monitor and prevent hacking and other outside attacks.
• Management of access authority for personal information processing system, etc.: Necessary measures are taken to control access to personal information, such as granting, changing, and cancelling access authority for the database system which processes personal information. Also, intrusion detection systems are used to restrict unauthorized access from the outside.
• Storage of access records and prevention of falsification: Access records on the personal information processing system are stored and managed for minimum six months, and security functions are used to prevent falsification, theft, and loss of access records.

(2) Administrative measures

• Establishment and implementation of the internal management plan: To safely process personal information, an internal management plan is set up and implemented.
• Execution of regular self-audits: To secure safety on handling personal information, self-audits are carried out on a regular basis (once a quarter).

(3) Physical measures

• Use of locking device for document security: Documents and supplementary storage devices containing personal information are stored in a secure place with a locking device.
• Control of unauthorized people’s access: There is a physical space which is separately set up to keep personal information, and an access control procedure is being established and operated on this storage.

9. Personal information protection manager and handling complaints

(1) The Company manages and takes charge of work related to processing applicants’ personal information, and designates a personal information protection manager as below, in order to handle applicant complaints and relieve damage related to personal information processing.

• Personal information protection team
Team(Division): Human Resource Administration Division
E-mail : fssecurity@samsung.com

(2) When applicants express opinions or raise complaints to the personal information protection manager above, the Company will quickly and sincerely deal with them to solve the problems.

10. Claims to view personal information

Applicants can make claims to view personal information in accordance with the Privacy Act to the below department. The Company will work hard to process the claims in a prompt manner.

• Department for receiving and processing claims to view personal information
Team(Division): Strategic Planning Team
E-mail：sfdf@samsung.com

11. Changing privacy policy

① This Privacy Policy will apply from 2019. 2.26
② You can view previous privacy policy below.

View previous privacy policy(2018.06.14~2019.02.25)

이전 개인정보처리방침 보기 (2017년6월23일~2018년3월4일)

In accordance with privacy related legislation, including the Personal Information Protection Act and Act on Promotion of Information and Communication Network Utilization and Information Protection, Etc. (hereinafter referred to as “Information and Communications Network Act”), SAMSUNG C&T CORPORATION (hereinafter referred to as “Company”) has personal information management policies as follows, to protect personal information and rights, and to notify where and how personal information is used.

The Company’s privacy policy may change depending on the modifications to related legislation or internal policies, and the changes shall be notified by posting a notice on the website.

1. Information we collect and the means of collecting personal information

(1) Personal Information we collect

1) The Company collects the following data to enable registration of sfdf.
• Required information: name, gender, date of birth, mobile phonfdfe number, Email address,
• Optional information: work experience, education background, awards/contest/exhibition information
2) The following data may be automatically generated and collected when using our services or during processing procedures.
• Records of services used, cookies, IP information, and more.

(2) Means used to collect personal information
• Applicants registration and service use through online and mobile website

2. Purpose of collection and use of personal information

The Company handles and processes personal information for the following purposes. Personal information collected by the Company is not used for purpose other than what is stated below. If the purpose of use is changed, the Company will take necessary measures, such as receiving a separate consent from applicants, according to relevant laws such as Article 18 of the Personal Information Protection Act.

• Applicants registration and management: (limited to applicants registration) identification for using the website, prohibition of wrongful use and unauthorized use, limiting membership registration and setting a limit on the possible number of registration, maintaining and managing member qualification, identification according to restrictive mandatory authentication.
• Complaint settlement: petitioner identification, request/inquiry/report confirmation, contact/notice for fact-finding, result notification
• Evaluation of applicants and processing sfdf: communication with all applicants, introducing applicants to the public, reviewing their application, selecting the finalists and the winners for sfdf, promoting sfdf to the public.

3. Period of retention and use of personal information

The Company processes and keeps personal information within the period of retention/use in accordance to the law or the period to which applicants agreed when collecting their personal information.
(1) Period of processing and retention to which applicants agreed

• The Company possesses and uses collected personal information only until the purpose of collection and use to which applicants agreed is fulfilled. After the purpose is fulfilled, the information is discarded without delay.

o Applicant registration and management: Information is possessed until applicants’ request for withdrawal of account. Notwithstanding the foregoing, (i) when an ongoing investigation is related to a violation of related law, information is possessed until the investigation is over, and (ii) when a creditor and debtor relationship exists based on the use of website, information is possessed until the debt is paid off.

4. Matters related to providing personal information to third parties

The Company uses applicants’ personal information only within the range stipulated in Article 1, Purpose of use of personal information. And the Company provides personal information to a third party only within the range which applicants consented to on (i) the party to be provided with applicants’ personal information, (ii) the party’s purpose of using personal information, (iii) items of personal information to be provided, or (iv) the party’s period of retaining and using personal information, or permitted by related legislation.

5. Entrustment of handling personal information

For smooth and quick provision of services, the Company is entrusting handling of personal information to outside professional businesses as follows, so that the entrusted company can collect, possess, process, use, provide, manage, and discard applicants’ personal information.

Name of Entrusted Firms	Entrusted Tasks
Samsung SDS	system building and maintenance

When signing a consignment contract, in accordance with the article 26 of the Privacy Act and the article 25 of the Information and Communications Network Act, the Company clearly states in the consignment contract prohibition of personal information processing for purposes other than performing entrusted tasks, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the entrusted firm, and damage compensation and other responsibilities; and the Company supervises if the entrusted firm safely deals with personal information.
The Company will post the contents of entrusted work which are stated above or changes in the entrusted firm through this privacy policy without delay.

6. Information subjects’ rights, obligations and methods to exercise/fulfill them

(1) You can exercise the following rights related to personal information protection against the Company at any time.

• Demand to view personal information
• Demand to correct personal information when there is an error

(2) You can exercise the rights stated in Paragraph 1 online, by accessing the Company’s website and going through identification process, and then by using the rights on the personal information management menu. You can exercise the rights offline, by contacting the Company’s personal information manager in writing, by phone, or via Email.

(3) If you request a correction or deletion of an error on your personal information, the Company will not use or provide the personal information until the correction/deletion has been made.

(4) You can exercise the rights stated in Paragraph 1, through a legal representative or authorized agent. In this case, you must submit a power of attorney written according to the annex 11th form of the enforcement regulation of the Privacy Act.

(5) Applicants shall not violate privacy of their or others’ personal information which the Company is processing, by violating related legislation such as the Privacy Act.

7. Procedures and methods of destroying personal information

Unless otherwise prescribed by law, the Company destroys the information without delay as soon as the purpose of collecting and using personal information is fulfilled. The procedure, time limit, and methods of discarding personal information are detailed as follows.

(1) Procedure of destroying personal information

• After the purpose of collection and use is fulfilled, applicants’ personal information provided to the Company is moved to a separate database (a separate cabinet for documents) and stored until the time limit in accordance with internal policy or during a legal storage period for information protection, in accordance with related legislation (refer to Article 3, Period of Possession and Use of Personal Information of this policy).
• Personal information which was moved to a separate database is not used for other than storage purposes, unless otherwise prescribed by law.

(2) Method of destroying personal information

• Personal information saved as an electronic file is deleted by a technique which disables reproduction of the records.
• Personal information printed on paper is discarded by shredding the documents with a shredder or burning them.

8. Measures to ensure safety of personal information

The Company is taking technical, administrative, and physical measures needed to ensure safety as the following.

(1) Technical measures

• Encryption of personal information: Important personal information required by law is saved and managed as encrypted data, and thus only the person him/herself can check the information. Additional security functions are used for important files, such as encrypting or locking important files and transmission data.
• Installation of security programs: To safely provide and manage applicant information, vaccine programs are installed for the personal information processing system and regular updates and checks are carried out. Intrusion prevention/detection systems are installed to continuously monitor and prevent hacking and other outside attacks.
• Management of access authority for personal information processing system, etc.: Necessary measures are taken to control access to personal information, such as granting, changing, and cancelling access authority for the database system which processes personal information. Also, intrusion detection systems are used to restrict unauthorized access from the outside.
• Storage of access records and prevention of falsification: Access records on the personal information processing system are stored and managed for minimum six months, and security functions are used to prevent falsification, theft, and loss of access records.

(2) Administrative measures

• Establishment and implementation of the internal management plan: To safely process personal information, an internal management plan is set up and implemented.
• Execution of regular self-audits: To secure safety on handling personal information, self-audits are carried out on a regular basis (once a quarter).

(3) Physical measures

• Use of locking device for document security: Documents and supplementary storage devices containing personal information are stored in a secure place with a locking device.
• Control of unauthorized people’s access: There is a physical space which is separately set up to keep personal information, and an access control procedure is being established and operated on this storage.

9. Personal information protection manager and handling complaints

(1) The Company manages and takes charge of work related to processing applicants’ personal information, and designates a personal information protection manager as below, in order to handle applicant complaints and relieve damage related to personal information processing.

• Personal information protection team
Team(Division): Human Resource Administration Division
E-mail : fssecurity@samsung.com

(2) When applicants express opinions or raise complaints to the personal information protection manager above, the Company will quickly and sincerely deal with them to solve the problems.

10. Claims to view personal information

Applicants can make claims to view personal information in accordance with the Privacy Act to the below department. The Company will work hard to process the claims in a prompt manner.

• Department for receiving and processing claims to view personal information
Team(Division): Strategic Planning Team
E-mail：sfdf@samsung.com

11. Changing privacy policy

① This Privacy Policy will apply from 2019. 2.26
② You can view previous privacy policy below.

View previous privacy policy(2018.06.14~2019.02.25)

이전 개인정보처리방침 보기 (2017년6월23일~2018년3월4일)

In accordance with privacy related legislation, including the Personal Information Protection Act and Act on Promotion of Information and Communication Network Utilization and Information Protection, Etc. (hereinafter referred to as “Information and Communications Network Act”), SAMSUNG C&T CORPORATION (hereinafter referred to as “Company”) has personal information management policies as follows, to protect personal information and rights, and to notify where and how personal information is used.

The Company’s privacy policy may change depending on the modifications to related legislation or internal policies, and the changes shall be notified by posting a notice on the website.

1. Information we collect and the means of collecting personal information

(1) Personal Information we collect

1) The Company collects the following data to enable registration of sfdf.
• Required information: name, gender, date of birth, mobile phonfdfe number, Email address,
• Optional information: work experience, education background, awards/contest/exhibition information
2) The following data may be automatically generated and collected when using our services or during processing procedures.
• Records of services used, cookies, IP information, and more.

(2) Means used to collect personal information
• Applicants registration and service use through online and mobile website

2. Purpose of collection and use of personal information

The Company handles and processes personal information for the following purposes. Personal information collected by the Company is not used for purpose other than what is stated below. If the purpose of use is changed, the Company will take necessary measures, such as receiving a separate consent from applicants, according to relevant laws such as Article 18 of the Personal Information Protection Act.

• Applicants registration and management: (limited to applicants registration) identification for using the website, prohibition of wrongful use and unauthorized use, limiting membership registration and setting a limit on the possible number of registration, maintaining and managing member qualification, identification according to restrictive mandatory authentication.
• Complaint settlement: petitioner identification, request/inquiry/report confirmation, contact/notice for fact-finding, result notification
• Evaluation of applicants and processing sfdf: communication with all applicants, introducing applicants to the public, reviewing their application, selecting the finalists and the winners for sfdf, promoting sfdf to the public.

3. Period of retention and use of personal information

The Company processes and keeps personal information within the period of retention/use in accordance to the law or the period to which applicants agreed when collecting their personal information.
(1) Period of processing and retention to which applicants agreed

• The Company possesses and uses collected personal information only until the purpose of collection and use to which applicants agreed is fulfilled. After the purpose is fulfilled, the information is discarded without delay.

o Applicant registration and management: Information is possessed until applicants’ request for withdrawal of account. Notwithstanding the foregoing, (i) when an ongoing investigation is related to a violation of related law, information is possessed until the investigation is over, and (ii) when a creditor and debtor relationship exists based on the use of website, information is possessed until the debt is paid off.

4. Matters related to providing personal information to third parties

The Company uses applicants’ personal information only within the range stipulated in Article 1, Purpose of use of personal information. And the Company provides personal information to a third party only within the range which applicants consented to on (i) the party to be provided with applicants’ personal information, (ii) the party’s purpose of using personal information, (iii) items of personal information to be provided, or (iv) the party’s period of retaining and using personal information, or permitted by related legislation.

5. Entrustment of handling personal information

For smooth and quick provision of services, the Company is entrusting handling of personal information to outside professional businesses as follows, so that the entrusted company can collect, possess, process, use, provide, manage, and discard applicants’ personal information.

Name of Entrusted Firms	Entrusted Tasks
Samsung SDS	system building and maintenance

When signing a consignment contract, in accordance with the article 26 of the Privacy Act and the article 25 of the Information and Communications Network Act, the Company clearly states in the consignment contract prohibition of personal information processing for purposes other than performing entrusted tasks, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the entrusted firm, and damage compensation and other responsibilities; and the Company supervises if the entrusted firm safely deals with personal information.
The Company will post the contents of entrusted work which are stated above or changes in the entrusted firm through this privacy policy without delay.

6. Information subjects’ rights, obligations and methods to exercise/fulfill them

(1) You can exercise the following rights related to personal information protection against the Company at any time.

• Demand to view personal information
• Demand to correct personal information when there is an error

(2) You can exercise the rights stated in Paragraph 1 online, by accessing the Company’s website and going through identification process, and then by using the rights on the personal information management menu. You can exercise the rights offline, by contacting the Company’s personal information manager in writing, by phone, or via Email.

(3) If you request a correction or deletion of an error on your personal information, the Company will not use or provide the personal information until the correction/deletion has been made.

(4) You can exercise the rights stated in Paragraph 1, through a legal representative or authorized agent. In this case, you must submit a power of attorney written according to the annex 11th form of the enforcement regulation of the Privacy Act.

(5) Applicants shall not violate privacy of their or others’ personal information which the Company is processing, by violating related legislation such as the Privacy Act.

7. Procedures and methods of destroying personal information

Unless otherwise prescribed by law, the Company destroys the information without delay as soon as the purpose of collecting and using personal information is fulfilled. The procedure, time limit, and methods of discarding personal information are detailed as follows.

(1) Procedure of destroying personal information

• After the purpose of collection and use is fulfilled, applicants’ personal information provided to the Company is moved to a separate database (a separate cabinet for documents) and stored until the time limit in accordance with internal policy or during a legal storage period for information protection, in accordance with related legislation (refer to Article 3, Period of Possession and Use of Personal Information of this policy).
• Personal information which was moved to a separate database is not used for other than storage purposes, unless otherwise prescribed by law.

(2) Method of destroying personal information

• Personal information saved as an electronic file is deleted by a technique which disables reproduction of the records.
• Personal information printed on paper is discarded by shredding the documents with a shredder or burning them.

8. Measures to ensure safety of personal information

The Company is taking technical, administrative, and physical measures needed to ensure safety as the following.

(1) Technical measures

• Encryption of personal information: Important personal information required by law is saved and managed as encrypted data, and thus only the person him/herself can check the information. Additional security functions are used for important files, such as encrypting or locking important files and transmission data.
• Installation of security programs: To safely provide and manage applicant information, vaccine programs are installed for the personal information processing system and regular updates and checks are carried out. Intrusion prevention/detection systems are installed to continuously monitor and prevent hacking and other outside attacks.
• Management of access authority for personal information processing system, etc.: Necessary measures are taken to control access to personal information, such as granting, changing, and cancelling access authority for the database system which processes personal information. Also, intrusion detection systems are used to restrict unauthorized access from the outside.
• Storage of access records and prevention of falsification: Access records on the personal information processing system are stored and managed for minimum six months, and security functions are used to prevent falsification, theft, and loss of access records.

(2) Administrative measures

• Establishment and implementation of the internal management plan: To safely process personal information, an internal management plan is set up and implemented.
• Execution of regular self-audits: To secure safety on handling personal information, self-audits are carried out on a regular basis (once a quarter).

(3) Physical measures

• Use of locking device for document security: Documents and supplementary storage devices containing personal information are stored in a secure place with a locking device.
• Control of unauthorized people’s access: There is a physical space which is separately set up to keep personal information, and an access control procedure is being established and operated on this storage.

9. Personal information protection manager and handling complaints

(1) The Company manages and takes charge of work related to processing applicants’ personal information, and designates a personal information protection manager as below, in order to handle applicant complaints and relieve damage related to personal information processing.

• Personal information protection team
Team(Division): Human Resource Administration Division
E-mail : fssecurity@samsung.com

(2) When applicants express opinions or raise complaints to the personal information protection manager above, the Company will quickly and sincerely deal with them to solve the problems.

10. Claims to view personal information

Applicants can make claims to view personal information in accordance with the Privacy Act to the below department. The Company will work hard to process the claims in a prompt manner.

• Department for receiving and processing claims to view personal information
Team(Division): Strategic Planning Team
E-mail：sfdf@samsung.com

11. Changing privacy policy

① This Privacy Policy will apply from 2019. 2.26
② You can view previous privacy policy below.

View previous privacy policy(2018.06.14~2019.02.25)

이전 개인정보처리방침 보기 (2017년6월23일~2018년3월4일)

In accordance with privacy related legislation, including the Personal Information Protection Act and Act on Promotion of Information and Communication Network Utilization and Information Protection, Etc. (hereinafter referred to as “Information and Communications Network Act”), SAMSUNG C&T CORPORATION (hereinafter referred to as “Company”) has personal information management policies as follows, to protect personal information and rights, and to notify where and how personal information is used.

The Company’s privacy policy may change depending on the modifications to related legislation or internal policies, and the changes shall be notified by posting a notice on the website.

1. Information we collect and the means of collecting personal information

(1) Personal Information we collect

1) The Company collects the following data to enable registration of sfdf.
• Required information: name, gender, date of birth, mobile phonfdfe number, Email address,
• Optional information: work experience, education background, awards/contest/exhibition information
2) The following data may be automatically generated and collected when using our services or during processing procedures.
• Records of services used, cookies, IP information, and more.

(2) Means used to collect personal information
• Applicants registration and service use through online and mobile website

2. Purpose of collection and use of personal information

The Company handles and processes personal information for the following purposes. Personal information collected by the Company is not used for purpose other than what is stated below. If the purpose of use is changed, the Company will take necessary measures, such as receiving a separate consent from applicants, according to relevant laws such as Article 18 of the Personal Information Protection Act.

• Applicants registration and management: (limited to applicants registration) identification for using the website, prohibition of wrongful use and unauthorized use, limiting membership registration and setting a limit on the possible number of registration, maintaining and managing member qualification, identification according to restrictive mandatory authentication.
• Complaint settlement: petitioner identification, request/inquiry/report confirmation, contact/notice for fact-finding, result notification
• Evaluation of applicants and processing sfdf: communication with all applicants, introducing applicants to the public, reviewing their application, selecting the finalists and the winners for sfdf, promoting sfdf to the public.

3. Period of retention and use of personal information

The Company processes and keeps personal information within the period of retention/use in accordance to the law or the period to which applicants agreed when collecting their personal information.
(1) Period of processing and retention to which applicants agreed

• The Company possesses and uses collected personal information only until the purpose of collection and use to which applicants agreed is fulfilled. After the purpose is fulfilled, the information is discarded without delay.

o Applicant registration and management: Information is possessed until applicants’ request for withdrawal of account. Notwithstanding the foregoing, (i) when an ongoing investigation is related to a violation of related law, information is possessed until the investigation is over, and (ii) when a creditor and debtor relationship exists based on the use of website, information is possessed until the debt is paid off.

4. Matters related to providing personal information to third parties

The Company uses applicants’ personal information only within the range stipulated in Article 1, Purpose of use of personal information. And the Company provides personal information to a third party only within the range which applicants consented to on (i) the party to be provided with applicants’ personal information, (ii) the party’s purpose of using personal information, (iii) items of personal information to be provided, or (iv) the party’s period of retaining and using personal information, or permitted by related legislation.

5. Entrustment of handling personal information

For smooth and quick provision of services, the Company is entrusting handling of personal information to outside professional businesses as follows, so that the entrusted company can collect, possess, process, use, provide, manage, and discard applicants’ personal information.

Name of Entrusted Firms	Entrusted Tasks
Samsung SDS	system building and maintenance

When signing a consignment contract, in accordance with the article 26 of the Privacy Act and the article 25 of the Information and Communications Network Act, the Company clearly states in the consignment contract prohibition of personal information processing for purposes other than performing entrusted tasks, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the entrusted firm, and damage compensation and other responsibilities; and the Company supervises if the entrusted firm safely deals with personal information.
The Company will post the contents of entrusted work which are stated above or changes in the entrusted firm through this privacy policy without delay.

6. Information subjects’ rights, obligations and methods to exercise/fulfill them

(1) You can exercise the following rights related to personal information protection against the Company at any time.

• Demand to view personal information
• Demand to correct personal information when there is an error

(2) You can exercise the rights stated in Paragraph 1 online, by accessing the Company’s website and going through identification process, and then by using the rights on the personal information management menu. You can exercise the rights offline, by contacting the Company’s personal information manager in writing, by phone, or via Email.

(3) If you request a correction or deletion of an error on your personal information, the Company will not use or provide the personal information until the correction/deletion has been made.

(4) You can exercise the rights stated in Paragraph 1, through a legal representative or authorized agent. In this case, you must submit a power of attorney written according to the annex 11th form of the enforcement regulation of the Privacy Act.

(5) Applicants shall not violate privacy of their or others’ personal information which the Company is processing, by violating related legislation such as the Privacy Act.

7. Procedures and methods of destroying personal information

Unless otherwise prescribed by law, the Company destroys the information without delay as soon as the purpose of collecting and using personal information is fulfilled. The procedure, time limit, and methods of discarding personal information are detailed as follows.

(1) Procedure of destroying personal information

• After the purpose of collection and use is fulfilled, applicants’ personal information provided to the Company is moved to a separate database (a separate cabinet for documents) and stored until the time limit in accordance with internal policy or during a legal storage period for information protection, in accordance with related legislation (refer to Article 3, Period of Possession and Use of Personal Information of this policy).
• Personal information which was moved to a separate database is not used for other than storage purposes, unless otherwise prescribed by law.

(2) Method of destroying personal information

• Personal information saved as an electronic file is deleted by a technique which disables reproduction of the records.
• Personal information printed on paper is discarded by shredding the documents with a shredder or burning them.

8. Measures to ensure safety of personal information

The Company is taking technical, administrative, and physical measures needed to ensure safety as the following.

(1) Technical measures

• Encryption of personal information: Important personal information required by law is saved and managed as encrypted data, and thus only the person him/herself can check the information. Additional security functions are used for important files, such as encrypting or locking important files and transmission data.
• Installation of security programs: To safely provide and manage applicant information, vaccine programs are installed for the personal information processing system and regular updates and checks are carried out. Intrusion prevention/detection systems are installed to continuously monitor and prevent hacking and other outside attacks.
• Management of access authority for personal information processing system, etc.: Necessary measures are taken to control access to personal information, such as granting, changing, and cancelling access authority for the database system which processes personal information. Also, intrusion detection systems are used to restrict unauthorized access from the outside.
• Storage of access records and prevention of falsification: Access records on the personal information processing system are stored and managed for minimum six months, and security functions are used to prevent falsification, theft, and loss of access records.

(2) Administrative measures

• Establishment and implementation of the internal management plan: To safely process personal information, an internal management plan is set up and implemented.
• Execution of regular self-audits: To secure safety on handling personal information, self-audits are carried out on a regular basis (once a quarter).

(3) Physical measures

• Use of locking device for document security: Documents and supplementary storage devices containing personal information are stored in a secure place with a locking device.
• Control of unauthorized people’s access: There is a physical space which is separately set up to keep personal information, and an access control procedure is being established and operated on this storage.

9. Personal information protection manager and handling complaints

(1) The Company manages and takes charge of work related to processing applicants’ personal information, and designates a personal information protection manager as below, in order to handle applicant complaints and relieve damage related to personal information processing.

• Personal information protection team
Team(Division): Human Resource Administration Division
E-mail : fssecurity@samsung.com

(2) When applicants express opinions or raise complaints to the personal information protection manager above, the Company will quickly and sincerely deal with them to solve the problems.

10. Claims to view personal information

Applicants can make claims to view personal information in accordance with the Privacy Act to the below department. The Company will work hard to process the claims in a prompt manner.

• Department for receiving and processing claims to view personal information
Team(Division): Strategic Planning Team
E-mail：sfdf@samsung.com

11. Changing privacy policy

① This Privacy Policy will apply from 2019. 2.26
② You can view previous privacy policy below.

View previous privacy policy(2018.06.14~2019.02.25)

이전 개인정보처리방침 보기 (2017년6월23일~2018년3월4일)