Article 1 (Items of Personal Information Processed, Purpose of Processing, Processing and Retention Period)

ELPS processes personal information items, purposes of processing personal information, and processing and retention periods are as follows:

 

1. Personal Information of Clients

Items of Personal Information to Be Processed	Name, contact information, address, company name, position and title within the company, and legal inquiries ELPS has addressed
Purpose of Processing Personal Information	To represent our clients, provide our clients with legal services, and contact with our clients in connection with our clients’ cases, to provide our clients with law information and legal information service (invitation to seminars, letters of appreciation, and newsletters) and to administer our client relationship
Retention and Utilization Period of Personal Information	Until the purpose for which ELPS uses personal information is accomplished or until our clients withdraw their consent to the provision of personal information.

 

2. Personal Information of Job Applicants for the Position of Professionals including Attorneys-at-Law

Items of Personal Information Processed	1. Essential information necessary for hiring decisions and carrying out duties ("Basic Essential Information"): Email, photo, name (in Korean, English and Chinese letters), date of birth, gender, present address, cell phone number, home phone number, educational background (school, department, period and grade), year of passing the judicial examination and grade at the Judicial Training and Research Institute (if the applicant is a student with the JTRI or a judge advocate), particulars of military service (classification, period of service, rank), and self-introduction. 2. Optional information: Professional background (workplace, particulars of services, period of service, etc.), foreign language (language, certified proficiency test grade and date), overseas training (purpose, place, and period), license (certificate of standing, issuer, and acquisition date), desired practice group, submitted documents.
Purpose of Processing Personal Information	To identify the job applicants, to check whether the applicants are appropriate for the applied-for positions, and to utilize as personnel management materials after hiring
Retention and Utilization Period	1. Three years from the date of application (until retirement for those employed) 2. ELPS shall at the request of the job applicants return all the job application documents within 14 days to 180 days from the completion of the relevant recruitment procedure.

 

3. Personal Information of Job Applications (Employees)

Items of Personal Information Processed	1. Essential information necessary to examine the job applicants and carry out the screening process of the applicants (“Basic Essential Information”): Email address, photo, name (in Korean, English and Chinese letters), date of birth, gender, present address, cell phone number, home phone number, emergency contact point and relationship therewith, educational background (school, department, period and grade), particulars of military service (classification, period of service, rank), and self-introduction. 2. Optional information: Professional background (workplace, particulars of services, period of service, etc.), foreign language (language, certified proficiency test grade and date), overseas training (purpose, place, and period), license (certificate of standing, issuer, and acquisition date), desired practice group, submitted documents.
Purpose of Processing Personal Information	To identify the job applicants, to check whether the applicants are appropriate for the applied-for positions, and to utilize as personnel management materials after hiring
Retention and Utilization Period	1. Three years from the date of application (until retirement for those employed) 2. ELPS shall at the request of the job applicants return all the job application documents within 14 days to 180 days from the completion of the relevant recruitment procedure.

 

Article 2 (Entrustment of Personal Information Processing)

ELPS shall not, in principle, entrust processing of personal information to any third party. If it is necessary to entrust processing of personal information afterwards, ELPS shall comply with the obligations of a trustor under the applicable laws.

 

Article 3 (Rights and Obligations of Data Subject and Exercise Thereof)

① The data subject may exercise his/her rights to protect his/her personal information, including access to, rectification, deletion, suspension of processing of personal information, and withdrawal of consent to provision of personal information, etc. in accordance with the applicable laws.

② Rights under Paragraph 1 may be exercised via an attorney-in-fact of the data subject, in which case a power of attorney is required to be submitted to ELPS.

③ ELPS will handle with the data subject’s exercise of rights immediately without delay in accordance with the applicable laws.

 

Article 4 (Destruction of Personal Information)

① If the retention period of personal information under Article 1 expires, ELPS shall destroy relevant personal information within five days after the last day of such retention period, unless there is a justifiable reason. If personal information is deemed to be unnecessary because the purpose of processing of personal information is achieved, ELPS shall, unless there is a justifiable reason, destroy relevant personal information within five days after it is deemed that processing of personal information is unnecessary.

② ELPS shall keep and manage such personal information or files as required to be preserved pursuant to the provisions of the applicable laws, separately from other personal information.

③ ELPS shall destroy personal information upon obtaining approval from the Chief Privacy Officer of ELPS.

④ Printouts and documents, etc. on which personal information is written shall be destroyed by shredding or incineration, and any personal information contained in an electronic file shall be permanently deleted in a way making it impossible to be restored.

 

Article 5 (Measures of Ensuring Safety of Personal Information)

ELPS shall take the following measures necessary to ensure safety in accordance with the applicable laws:

1. Physical protections: Restricting access to computing room, data room, and other storage places of personal information

2. Administrative protections: Establishment and implementation of internal privacy plan and regular education on privacy

3. Technical protections: Restricting access to personal information processing system, management of access power, installation of security program, and encryption of personal information

 

Article 6 (Installation/Operation and Rejection of Automatic Personal Information Collection Devices)

1. Definition of Cookies

A cookie is a small text file which the server for the operation of a website sends and stores on the user's computer hard disc. As the data subject may freely decide on whether to install or collect cookies, the data subject may, therefore, refuse the collection of cookies.

2. Method to Refuse Cookie Settings

For Internet Explorer : Select “Tool” (at the top of the web browser) > “Internet Option” > “Personal Information” > select setting

For Chrome : Select “Chrome Setting and Control“(at the upper-right side of the web browser ) > “Setting” > “Advanced” > “Contents Setting” in the “Personal Information and Security” section > select setting in the cookie section

 

Article 7 (Personal Information Protection Manager)

① ELPS's Personal Information Protection Manager and responsible department are as follows:

1. Personal Information Protection Manager

Name: Sang-Yeol Park

Title: Managing Partner

Contact: T 02-3453-1033, F 02-3453-1034, sypark@elpslaw.com

2. Department for the Protection of Personal Information

Department: Management Support Team

Manager: Ha-Neul Oh, Team Leader

Contact: T 02-3453-1033, F 02-3453-1034, info@elpslaw.com

② The data subject may contact the personal information protection manager and the department responsible for the protection of the personal information regarding any inquiry on the personal information protection, complaints, relief, etc. that may arise in the course of the use of ELPS services. ELPS will promptly respond to and handle any such inquires raised by data subjects.

 

Article 8 (Standards for Additional Use or Production)

① ELPS may additionally use or provide the personal information without the consent of the data subject, in consideration of such matters as set forth in Article 14-2 of the Enforcement Decree of the Personal Information Protection Act(the “PIPA”) in accordance with Article 15(3) and Article 17(4) of the PIPA.

② ELPS will consider the following matters for such additional use or production of the personal information without the consent of the data subject:

1. Whether the purpose of such additional use or production is related to the original purpose for which the personal information was collected;
2. Whether such additional use or production is foreseeable in light of the circumstances under which the personal information was collected and processing practices;
3. Whether such additional use or production does not unfairly infringe on the interests of the data subject; and
4. Whether the measures required to ensure security such as pseudonymization or encryption have been taken.

 

Article 9 (Request for Access to Personal Information)

A data subject may request the following department to permit access to his/her personal information in accordance with Article 35 of the PIPA.

Name of Department: Management Support Team

Person in charge: Ha-Neul Oh, Team Leader

Contact: T 02-3453-1033, F 02-3453-1034, info@elpslaw.com

 

Article 10 (Remedies for Infringement of Rights and Interests)

Data subjects may seek relief and advice regarding personal information infringement from the following organizations (As these organizations are independent from ELPS, please contact them directly if you need more detailed support or if you are not satisfied with ELPS's handling of complaints or remedies related to your personal information):

 

1. Personal Information Infringement Reporting Center (operated by the Korea Internet & Security Agency)

Function: Processing reports of personal information infringement, providing advice

Website: https://privacy.kisa.or.kr

Telephone Number: 118 (No Area Code)

Address: Personal Information Infringement Reporting Center, 135, Jungdae-ro, Songpa-gu, Seoul, Korea (05717)

2. Personal Information Dispute Mediation Committee (operated by the Korea Internet & Security Agency)

Function: Processing of personal information dispute applications, mediation of class action disputes (civil resolutions)

Website: https://privacy.go.kr

Telephone Number: 118 (No Area Code)

Address: Personal Information Infringement Reporting Center, 135, Jungdae-ro, Songpa-gu, Seoul, Korea (05717)

3. Cybercrime Investigation Division of the Supreme Prosecutors' Office

Contact: 02-3480-3573 (https://www.spo.go.kr)

4. Cyber Bureau of the Korean National Police Agency

Contact: 1566-0112 (https://cyberbureau.police.go.kr)

 

Article 11 (Installation and Operation of Video Information Processing Equipment)

ELPS installs and operates video information processing equipment as follows:

50. Purpose of installation and operation: Safety management of ELPS, safety of facilities, and prevention of crime
50. Installation location, scope of recording: Installed in major facilities such as lobby and office, and recordings of all entries and exits to and from major facilities and the entire space thereof.
50. Person and department in charge of management, and authorized personnel to access videos: Ha-Neul Oh, Team Leader, Management Support Team
50. Recording time, retention period, storage place, and management procedure of the video information
    14. Recording time: 24-hour recording
    14. Retention period: 30 days from recording
    14. Storage place and management procedure: Stored and managed at Information System Operation Room
50. How and where to check the video processing system: Department in charge of the video processing system
    14. Name of Department: Management Support Team
    14. Person in charge: Ha-Neul Oh, Team Leader
    14. Contact: T 02-3453-1033, F 02-3453-1034, info@elpslaw.com
50. Actions in response to any request by the data subject to access the image data: A written request must be filed for access, or confirmation of existence, of the personal video data. Such access will be permitted only when the data subject is recorded or when such access is obviously necessary to protect the life, body or property of the data subject.
50. Technical/administrative/physical measures to protect the video data: Establishment of internal management plan, access control, restriction on right of access, safe storage of video data, application of transmission technology, management of storage records, measures for prevention of forgery, preparation of storage facilities, installation of locking devices, and others