GTist

[GTIST Co., Ltd. Privacy Policy]

GTIST Co., Ltd. (hereinafter referred to as the “Company") protects personal information in accordance with Article 30 of the Personal Information Protection Act and establishes and publishes the following personal information processing guidelines for the prompt and smooth handling of complaints related thereto.

Article 1 (Purpose, Processed Items, Retention Period)

The purpose, processed items, and retention period of the personal information processed by the Company are as follows. The collected personal information shall not be used for any purpose other than the following purposes. If the purpose of use is changed, the Company shall implement necessary measures such as receiving consent in accordance with Article 18 of the Personal Information Protection Act.

1. Personal Information of Applicant Writer

Classification	Contents
Purpose of Processing Personal Information	Implementing supportive procedures, decision-making on the conclusion of a writing contract with a writer, contacting and providing notifications to the writer, notifying the writer of the results of processing, etc.
Items of Personal Information	Name, gender, date of birth, contact information (cell phone number and e-mail address), address, education and experience, military service, marital status, and personal information inserted in the resume and portfolio of the applicant
Method of Collection of Personal Information	Insertion on website
Personal Information Retention Period	Three (3) years from the date of conclusion of the writer’s contract or request for destruction by the subject of information

2. Personal Information of Recruitment Applicants

Classification	Contents
Purpose of Processing Personal Information	Conducting and managing the hiring process, deciding whether to hire, constructing a talent database, contacting and notifying applicants, and notifying applicants of the results of processing
Items of Personal Information	Name, gender, date of birth, contact information (cell phone number and e-mail address), address, education and experience, military service, marital status, and personal information inserted in the resume and portfolio of the recruitment applicant
Method of Collection of Personal Information	Insertion on website
Personal Information Retention Period	Three (3) years from the date of confirmation of recruitment or when a request for destruction is made by the subject of information.

3. Personal Information of (Individual) Partnership Applicant

Classification	Contents
Purpose of Processing Personal Information	The personal information of (individual) partnership applicants is collected for the purpose of conducting, managing and making decisions in the partner agreement process, establishing a partner database, contacting and notifying partners, and notifying partners of the results of processing.
Items of Personal Information	(Individual) Partner's name, gender, date of birth, contact information (cell phone number and e-mail address), address, education and work experience
Method of Collection of Personal Information	Website Reception
Personal Information Retention Period	Three (3) years from the date of confirmation of partnership or when a request for destruction is made by the subject of information.

Article 2 (Provision of Personal Information to Third Parties)

The Company processes the personal information of the subjects of information only within the scope specified in Article 1 (Purpose of Processing Personal Information), and the personal information can only be shared with a third party where Article 17 of the Personal Information Protection Act applies, including obtaining the consent of the subject of information and special provisions of the law.

Article 3 (Rights and Obligations of the Subject of Information and Methods of Exercising Rights)

① The subject of information may exercise the right of privacy protection at any time with respect to the Company.

1. Request to view personal information

2. Request for correction if there is an error

3. Request for deletion

4. Request for cessation of processing

② The exercise of rights under Paragraph 1 can be done in writing, by telephone, or by fax, and the company shall take action regarding such exercise of rights without delay.

③ If a subject of information requests correction or deletion of personal information, the Company shall not use or provide the personal information until the correction or deletion is completed.

④ The exercise of the rights under Paragraph 1 can be done through a legal representative of the subject of information or a person whom the subject of information has delegated. In such case, a power of attorney pursuant to Form 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

⑤ The subject of information shall not infringe the personal information or the privacy of the subject of information or other persons handled by the Company in violation of related laws such as the Personal Information Protection Act.

Article 4 (Destruction of Personal Information)

① The Company shall immediately destroy the personal information when the personal information becomes unnecessary, such as when the personal information retention period has elapsed or the purpose of collecting the personal information has been achieved.

② The procedures and methods of destroying personal information are as follows.

1. Destruction procedure: The Company shall select personal information for which a reason for the destruction and discarding of the personal information has occurred with the approval of the Company's personal information protection officer.

2. Destruction method: The Company shall permanently delete personal information recorded and stored in the form of electronic files in a non-recoverable manner and shall destroy personal information recorded and stored in the form of paper documents by way of shredding or incineration.

Article 5 (Measures to Ensure the Safety of Personal Information)

The Company takes the following measures to ensure the safety of personal information.

1. Administrative measures: Establishment and implementation of an internal management plan, providing regular staff training, etc.

2. Technical measures: Management of access authority to personal information system, etc., installation of access control system

3. Physical measures: Access control to the data room

Article 6 (Installation, Operation and Rejection of Personal Information Automatic Collection Device)

① The Company uses "cookies" which store and utilize frequently used information in order to provide users with personalized services.

② Cookies are a small amount of information sent by the server (http) used to run the website to the user's computer browser and may be stored on the hard disk of the user's PC.

A. Purpose of cookies: Cookies are used to provide optimized information to users by saving information on visits and usage patterns relating to each service and website and determining popular search terms, and whether access is secure.

B. Installation, Operation and Rejection of Cookies: Users can refuse to store cookies via the options setting in Tools > Internet Options > Privacy at the top of the web browser.

Article 7 (Personal Information Protection Officer)

① The Company is responsible for the handling of personal information, and has designated a person responsible for the protection of personal information as follows for the handling of complaints and damage relief for subjects of information related to the processing of personal information.

▶ Personal Information Protection Officer

Name: Wonwoo Choi

Position: Planning Director

Contact: T.82-2-360-3500, F.82-2-360-3501

② The subjects of information can contact the personal information protection officer and the department in charge with regards to all personal information protection related inquiries, complaint handling, and damage relief for damage that occurred while using the Company's service (or business). The Company shall respond promptly to such an inquiry made by a subject of information.

Article 8 (Request for Access to Personal Information) The subject of information may make a request to view his or her personal information in accordance with Article 35 of the Personal Information Protection Act to the following department. The Company will endeavor to promptly process the request to view personal information by the subject of information.

▶ Department which receives and handles requests to view personal information

Name of department: Production management department

Manager: Sungae Ha

Contact: T.82-2-360-3500, F.82-2-360-3501

Article 9 (Remedies Against Infringement of Rights) The subject of information can contact the following organizations with regards to damage relief, consultation, etc. concerning the infringement of personal information. (The institution below is separate from the Company, so please contact said institution if you are not satisfied with the Company's handling of personal information-related complaints, damage relief outcomes, or if you need further assistance).

▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)

- Jurisdiction: Reporting on personal information infringement, application for consultation

- Website: privacy.kisa.or.kr

- Phone: (Without area code) 82-118

- Address: (58324) Personal Information Infringement Report Center, 3F, 9, Jinheung-gil, Naju-si, Jeonnam, Republic of Korea

▶ Personal Information Dispute Resolution Committee

- Jurisdiction: Applications for personal information dispute settlement, collective dispute settlement (civil settlement)

- Website: www.kopico.go.kr

- Phone: (without area code) 82-1833-6972

- Address : 4th floor, Seoul Government Office, 209 Sejong-daero, Jongno-gu, Seoul

▶ Supreme Prosecutors' Office Cyber Crime Investigation Division: 82-2-3480-3573 (www.spo.go.kr)

▶ National Police Agency Cyber Security Bureau: 82-182 (http://cyberbureau.police.go.kr)

Article 10 (Change of Personal Information Processing Policy) This Privacy Policy is effective as of [Aug. 05, 2019]. If there is any change in the content of the Privacy Policy, we will disclose such change through the Company's website (http://gtist.com) at least seven (7) days prior to the effective date of the change. If there is any change in the content of the Privacy Policy, we will disclose such change through the Company's website (http://gtist.com) at least seven (7) days prior to the effective date of the change.