This page is currently under preparation
For related information, please refer to the link below.
www.hd-xitesolution.com/company/sustainability
Contact : taeyeon3.kim@hd.com
Privacy and Info. Policy
We will be a company that heeds your comments and feedback and gives back to society.
To protect the liberty and the rights of the owner of the information, HD Construction Equipment Co. Ltd. (hereinafter the Company) lawfully processes and safely manages the personal information in compliance with the Personal Information Protection Act and the related laws.
Accordingly, we formulated and disclosed the Personal Information Processing Policy as follows to inform the information owner of the procedures and the standards for the processing and the protection of personal information and to promptly and effectively address relevant grievances.
01Items of Personal Information Processing
02Purpose of Processing Personal Information
03Period of Processing and Retaining Personal Information
04Provision of Personal Information to a Third Party
05Process and Method of Destroying Personal information
06Measures to Ensure Personal Information Security
07Matters Related to Installation, Administration and the Refusal of Devices to Automatically Collect Personal Information
08Rights and Obligations of Information Owners and Legal Representatives and Method of Exercising the Rights
09Entrustment of Personal Information Processing
10Personal Information Protection Manager (in Charge of Addressing Requests Regarding Personal Information)
11Changes to Personal Information Processing Policy
01. Items of Personal Information Processing
The Company collects the personal information of customers, prospective customers,
and other interested parties as follows.
|
Personal information processing |
Items of information processing |
|---|---|
|
Customer support (online inquiry) |
|
02. Purpose of Processing Personal Information
The Company processes personal information for the following purposes. The personal information process will not be used for any purpose other than the purpose below. If the purpose of the use is changed, we will take necessary measures such as obtain separate consent pursuant to Article 18 of the Personal Information Protection Act.
| Processing personal information | Purpose of information processing |
|---|---|
|
Customer support (online inquiry) |
Addressing requests and grievances |
03. Period of Processing and Retaining Personal Information
The Company processes and retains the personal information during the period of retaining and using the personal information, which period is agreed upon when collecting the personal information is collected from the owner of the information.
If the information needs to be preserved in accordance with the relevant laws and regulations, the information may be retained for the legally required period.
|
Personal information processing |
Period of processing and retaining the information |
|---|---|
|
Customer support (online inquiry) |
Three years |
04. Provision of Personal Information to a Third Party
The Company does not provide to a third party the personal information of the information owner.
The personal information is provided to a third party only in such cases as when the information owner consents to such provision, or the personal information needs to be provided to a third party under Article 17 or Article 18 of the Personal Information Protection Act. If personal information is to be provided to a third party, it will be disclosed in accordance with the Personal Information Processing Policy.
05. Process and Method of Destroying Personal information
If the personal information retention period has elapsed, the purpose of the information processing has been achieved, or it is otherwise not necessary to retain the personal information any more, the Company promptly destroys the relevant personal information. If personal information needs to be preserved otherwise in accordance with the laws and regulations even though the personal information retention period consented to by the information owner has elapsed or the purpose of processing has been achieved, the Company will transfer the personal information to a separate database or store it in a different storage location.
The process and the method of destroying personal information are as follows.
1. Personal information stored in an electronic file format is deleted by a technical method which makes the record unrecoverable.
2. Records, prints, documents and other recording media which are not electronic files are destroyed by shredding or incineration.
06. Measures to Ensure Personal Information Security
The Company is taking the following measures to ensure the security of the personal information.
1. Administrative measures
Minimizing the number of employees who process the personal information; employees training; formulating and implementing an internal management plan
2. Technical measures
Installing and updating a security program, encrypting personal information, storing access records and preventing forgery and alteration, restricting access to personal information
3. Physical measures
Restricting access by an unauthorized person
07. Matters Related to Installation, Administration and the Refusal of Devices to Automatically Collect Personal Information
The Company does not currently operate a device (cookies etc.) which collects the personal information automatically generated in the service use. However, we may install and administer an automatic collection device subsequently if such installation is necessary to provide the service, and the information owner may have an option of installing cookies or refusing to store any cookies.
A. What are Cookies?
Cookies are very small text files which the server which is used to run the website sends to the information owner’s browser. Cookies are stored on the hard disk of the information owner. Thereafter, when the information owner visits the website, the website server reads the contents of the cookies stored on the information owner’s hard disk. The website server uses cookies to maintain the information owner's preferences and provide customized services.
B. Installation, Administration and Refusal of Cookies
An information owner has an option of installing cookies, and can configure settings (allowing, blocking, deletion etc. of cookies) through a web browser option.
-
Allowing and blocking cookies at web browser.
- 1. Chrome: Web browser settings > Personal information protection and security > Deleting internet use record. 제
- 2. Edge: Web browser settings > Cookies and site authorization > Managing and deleting cookies and site data.
-
- Permitting and blocking cookies at mobile browser
- 1. Chrome: Mobile browser settings > Personal information protection and security > Deleting internet use record.
- 2. Safari: Mobile device settings > Safari > Advanced > Blocking all cookies.
- 3. Samsung internet: Mobile browser settings > Internet use record > Deleting internet use record.
08. Rights and Obligations of Information Owners and Legal Representatives and Method of Exercising the Rights
An information owner may exercise his or her right and request permission to inspect the personal information at any time, or request the Company to correct, delete or suspend processing of personal information. An information owner can exercise his or her right and make a request through writing, phone, e-mail, facsimile etc. in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will promptly take necessary measures.
An information owner can also exercise the right through an agent, such as the information owner's legal representative or a person with authorization. If an information owner exercises the right through an agent, the agent should submit a power of attorney in the form of Attachment no. 11 of the Notice on Personal Information Processing Method.
The right to request inspection etc. may be limited by Article 35(4) and Article 37(2) of the Personal Information Protection Act
An information owner may contact the departments below to request the inspection etc. of personal information.
Department Which Receives Requests for Inspection etc. of Personal Information
- Department : Brand Strategy Department
- Contract information : Manager Chung Sunkyung (Sunkyung.chung@hd.com)
09. Consignment of Personal Information Processing
For the effective processing of personal information, the Company consigns the personal information processing to an external service provider as follows. If the content of the consigned work or the service provider changes, we will promptly disclose it in accordance with the Personal Information Processing through this policy without delay.
| Consignee | Consigned work |
Period of Retaining and Using Personal Information |
|---|---|---|
| Easy Media |
Maintenance and repair of homepage (managing personal information) |
Until the end of the consignment contract |
| HD KOREA SHIPBUILDING & OFFSHORE ENGINEERING |
Data analysis to improve customer service |
Until the end of the consignment contract |
| transcosmos Korea |
Customer consultation, and support |
Until the end of the consignment contract |
10. Personal Information Protection Manager (in Charge of Addressing Requests Regarding Personal Information)
The Company is responsible for the general management of the personal information. The Company has designated a personal information protection manager and the department in charge as listed below to handle complaints and provide a remedy for loss to the information owner in relation to personal information processing.
| Categories | Chief Privacy Officer |
Personal Information Management Department |
|---|---|---|
|
Departments / names |
Business Support Manager (HR) / Managing Director |
Coexistence/HR Team / Senior Manager |
| Names | Jo Geon-Jae | Kim yeong-Dae |
| E-mails | forjuly@hd.com | kyda1004@hd.com |
| Business hours | (Monday ~ Friday) 08:00 ~ 17:00 / (public holidays, Saturday, Sunday) Closed | |
You may report any personal information protection-related issue which arises while using the Company's services and may report it to the personal information protection manager or the department in charge of the issue. The Company will provide prompt and sufficient responses to a user report. If you need to report or otherwise have consultation about personal information infringement, please contact the organizations below.
- 1. Personal Information Dispute Mediation Committee : (No area code) 1833-6972 (www.kopico.go.kr)
- 2. Personal Information Infringement Report Center: (No area code) 118 (privacy.kisa.or.kr)
- 3. Supreme Prosecution Service: (No area code) 1301 (www.spo.go.kr)
- 4. National Police Agency: (No area code) 182 (ecrm.cyber.go.kr)
11. Changes to Personal Information Processing Policy
This Personal Information Processing Policy will enter into force in march 2025. The previous privacy policy can be found below.
We will be a company that heeds your comments and feedback and gives back to society.
To protect the liberty and the rights of the owner of the information, HD Construction Equipment Co. Ltd. (hereinafter the Company) lawfully processes and safely manages the personal information in compliance with the Personal Information Protection Act and the related laws.
Accordingly, we formulated and disclosed the Personal Information Processing Policy as follows to inform the information owner of the procedures and the standards for the processing and the protection of personal information and to promptly and effectively address relevant grievances.
01Items of Personal Information Processing
02Purpose of Processing Personal Information
03Period of Processing and Retaining Personal Information
04Provision of Personal Information to a Third Party
05Process and Method of Destroying Personal information
06Measures to Ensure Personal Information Security
07Matters Related to Installation, Administration and the Refusal of Devices to Automatically Collect Personal Information
08Rights and Obligations of Information Owners and Legal Representatives and Method of Exercising the Rights
09Entrustment of Personal Information Processing
10Personal Information Protection Manager (in Charge of Addressing Requests Regarding Personal Information)
11Changes to Personal Information Processing Policy
01. Items of Personal Information Processing
The Company collects the personal information of customers, prospective customers,
and other interested parties as follows.
|
Personal information processing |
Items of information processing |
|---|---|
|
Customer support (online inquiry) |
|
02. Purpose of Processing Personal Information
The Company processes personal information for the following purposes. The personal information process will not be used for any purpose other than the purpose below. If the purpose of the use is changed, we will take necessary measures such as obtain separate consent pursuant to Article 18 of the Personal Information Protection Act.
| Processing personal information | Purpose of information processing |
|---|---|
|
Customer support (online inquiry) |
Addressing requests and grievances |
03. Period of Processing and Retaining Personal Information
The Company processes and retains the personal information during the period of retaining and using the personal information, which period is agreed upon when collecting the personal information is collected from the owner of the information.
If the information needs to be preserved in accordance with the relevant laws and regulations, the information may be retained for the legally required period.
|
Personal information processing |
Period of processing and retaining the information |
|---|---|
|
Customer support (online inquiry) |
Three years |
04. Provision of Personal Information to a Third Party
The Company does not provide to a third party the personal information of the information owner.
The personal information is provided to a third party only in such cases as when the information owner consents to such provision, or the personal information needs to be provided to a third party under Article 17 or Article 18 of the Personal Information Protection Act. If personal information is to be provided to a third party, it will be disclosed in accordance with the Personal Information Processing Policy.
05. Process and Method of Destroying Personal information
If the personal information retention period has elapsed, the purpose of the information processing has been achieved, or it is otherwise not necessary to retain the personal information any more, the Company promptly destroys the relevant personal information. If personal information needs to be preserved otherwise in accordance with the laws and regulations even though the personal information retention period consented to by the information owner has elapsed or the purpose of processing has been achieved, the Company will transfer the personal information to a separate database or store it in a different storage location.
The process and the method of destroying personal information are as follows.
1. Personal information stored in an electronic file format is deleted by a technical method which makes the record unrecoverable.
2. Records, prints, documents and other recording media which are not electronic files are destroyed by shredding or incineration.
06. Measures to Ensure Personal Information Security
The Company is taking the following measures to ensure the security of the personal information.
1. Administrative measures
Minimizing the number of employees who process the personal information; employees training; formulating and implementing an internal management plan
2. Technical measures
Installing and updating a security program, encrypting personal information, storing access records and preventing forgery and alteration, restricting access to personal information
3. Physical measures
Restricting access by an unauthorized person
07. Matters Related to Installation, Administration and the Refusal of Devices to Automatically Collect Personal Information
The Company does not currently operate a device (cookies etc.) which collects the personal information automatically generated in the service use. However, we may install and administer an automatic collection device subsequently if such installation is necessary to provide the service, and the information owner may have an option of installing cookies or refusing to store any cookies.
A. What are Cookies?
Cookies are very small text files which the server which is used to run the website sends to the information owner’s browser. Cookies are stored on the hard disk of the information owner. Thereafter, when the information owner visits the website, the website server reads the contents of the cookies stored on the information owner’s hard disk. The website server uses cookies to maintain the information owner's preferences and provide customized services.
B. Installation, Administration and Refusal of Cookies
An information owner has an option of installing cookies, and can configure settings (allowing, blocking, deletion etc. of cookies) through a web browser option.
-
Allowing and blocking cookies at web browser.
- 1. Chrome: Web browser settings > Personal information protection and security > Deleting internet use record. 제
- 2. Edge: Web browser settings > Cookies and site authorization > Managing and deleting cookies and site data.
-
- Permitting and blocking cookies at mobile browser
- 1. Chrome: Mobile browser settings > Personal information protection and security > Deleting internet use record.
- 2. Safari: Mobile device settings > Safari > Advanced > Blocking all cookies.
- 3. Samsung internet: Mobile browser settings > Internet use record > Deleting internet use record.
08. Rights and Obligations of Information Owners and Legal Representatives and Method of Exercising the Rights
An information owner may exercise his or her right and request permission to inspect the personal information at any time, or request the Company to correct, delete or suspend processing of personal information. An information owner can exercise his or her right and make a request through writing, phone, e-mail, facsimile etc. in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will promptly take necessary measures.
An information owner can also exercise the right through an agent, such as the information owner's legal representative or a person with authorization. If an information owner exercises the right through an agent, the agent should submit a power of attorney in the form of Attachment no. 11 of the Notice on Personal Information Processing Method.
The right to request inspection etc. may be limited by Article 35(4) and Article 37(2) of the Personal Information Protection Act
An information owner may contact the departments below to request the inspection etc. of personal information.
Department Which Receives Requests for Inspection etc. of Personal Information
- Department : Brand Strategy Department
- Contract information : Manager Chung Sunkyung (+82-2-479-7658, Sunkyung.chung@hd.com)
09. Consignment of Personal Information Processing
For the effective processing of personal information, the Company consigns the personal information processing to an external service provider as follows. If the content of the consigned work or the service provider changes, we will promptly disclose it in accordance with the Personal Information Processing through this policy without delay.
| Consignee | Consigned work |
Period of Retaining and Using Personal Information |
|---|---|---|
| Easy Media |
Maintenance and repair of homepage (managing personal information) |
Until the end of the consignment contract |
10. Personal Information Protection Manager (in Charge of Addressing Requests Regarding Personal Information)
The Company is responsible for the general management of the personal information. The Company has designated a personal information protection manager and the department in charge as listed below to handle complaints and provide a remedy for loss to the information owner in relation to personal information processing.
| Categories |
Personal Information Protection Manager |
Department in charge of personal information |
|---|---|---|
|
Departments / names |
People & Culture Department / in general charge of HR Department |
People & Culture Department / Senior Manager |
| Names | Kim Hyun-rak | Park Sang-hak |
| Phone numbers | +82-2-479-7722 | +82-2-479-7880 |
| E-mails | hyunrak.kim@hd.com | sanghak.park@hd.com |
| Business hours | (Monday ~ Friday) 08:00 ~ 17:00 / (public holidays, Saturday, Sunday) Closed | |
You may report any personal information protection-related issue which arises while using the Company's services and may report it to the personal information protection manager or the department in charge of the issue. The Company will provide prompt and sufficient responses to a user report. If you need to report or otherwise have consultation about personal information infringement, please contact the organizations below.
- 1. Personal Information Dispute Mediation Committee : (No area code) 1833-6972 (www.kopico.go.kr)
- 2. Personal Information Infringement Report Center: (No area code) 118 (privacy.kisa.or.kr)
- 3. Supreme Prosecution Service: (No area code) 1301 (www.spo.go.kr)
- 4. National Police Agency: (No area code) 182 (ecrm.cyber.go.kr)
11. Changes to Personal Information Processing Policy
This Personal Information Processing Policy will enter into force in october 2024. The previous privacy policy can be found below.
We will be a company that heeds your comments and feedback and gives back to society.
HD Construction Equipment Co., Ltd. (hereinafter referred to as the "Company"), which values the personal information of data subjects, will comply with the personal information protection provisions of relevant laws and regulations, such as the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Protection of Communications Secrets Act, and the Telecommunications Business Act, and lawfully and appropriately handle personal information that is collected, retained, and processed by the provisions of relevant laws and regulations to properly conduct tasks involving personal information and protect the rights and interests of data subjects. The Company has set forth its Privacy Policy to protect the privacy and rights of data subjects by relevant laws and regulations and to facilitate the smooth handling of data subjects' grievances related to personal information. In case of any revisions to the Privacy Policy, a notice will be posted on the website (or the data subjects will be notified individually).
01Personal information collected
02Purpose of processing personal information
03Period of retention and use of personal information
04Viewing, correction, and deletion of personal information
05Procedure for and method of destroying personal information
06Measures to protect personal information
07Installation and operation of automatic personal information collection devices and rejection thereof
08Rights and obligations of the information subject and how to exercise them
09Third-party processing of personal information
10Customer service regarding privacy
11Changes to this Privacy Policy
01. Personal information collected
The Company collects the personal information of customers, prospective customers, and stakeholders as follows:
[Customer Center (1:1 inquiry)]
① IR meeting inquiry
Required information: Applicant's information (name, company name, phone number, e-mail address), visitor information (names, company name, number of visitors, date and time of the visit, company profile, or visitors' business cards)
② Product, A/S, parts, service, safety inquiries, and service suggestions
Required information: name, email address, phone number, and inquiry
[Internal Accounting Reporting Center]
① When reporting in one's real name,
Required information: name of the person concerned, details of the report, and whistleblower's information (name, phone number, and e-mail address)
Optional information: Department and job title
② When reporting anonymously
Required information: name of the person concerned, details of the report,
Optional information: Department and job title
02. Purpose of processing personal information
The Company utilizes the collected personal information for the following purposes:
① Handling grievances and complaints
② Marketing and advertising
③ Service provision and settlement
03. Period of retention and use of personal information
The Company destroys the information without delay after the purpose of collecting and using personal information is achieved, in principle.
However, the following information will be retained for the specified period for the following reasons:
① Retained information: name, e-mail address, mobile phone number, and address
② Grounds for retention: Company's internal policy
③ Retention period: 3 years
04. Viewing, correction, and deletion of personal information
Users may request to view, correct, or delete their personal information held by the Company at any time, and the Company is obligated to take necessary measures. If the user requests the correction of an error, the Company will not use his/her personal information until the error is corrected. Also, the Company will not retain customer information that has been deleted after a request for deletion.
You can request that your personal information be deleted by e-mail, fax, or phone.
05. Procedure for and method of destroying personal information
The Company destroys personal information without delay after the purpose of collection and use is achieved, in principle.
The procedure for and method of destroying personal information are as follows:
[Personal Information Destruction Procedure]
① The entered information will be transferred to a separate database (separate filing cabinet in case of paper) after the purpose is achieved and be retained for a certain period of time (see the section, "Period of retention and use of personal information") in accordance with the internal policy and other relevant laws and regulations before it is destroyed. Personal information transferred to a separate database will not be used for any purpose other than that for which it is retained, unless otherwise required by law.
[Personal Information Destruction Method]
① Personal information stored in the form of electronic files will be deleted using technical measures that make it impossible to reproduce the records.
② In the case of records, printed materials, written materials, or other recording media aside from electronic files, they will be destroyed by shredding or incineration.
06. Measures to protect personal information
In handling the personal information of information subjects, the Company takes the following measures to protect the personal information against loss, theft, leakage, tampering, and damage:
A. Establishment and implementation of internal management plan
The Company establishes and implements an internal management plan in accordance with the Standards for Measures to Protect Personal Information.
B. Minimization and training of personal information handlers
The Company's employees who handle personal information are limited to those in charge of personal information and are given a separate password, which is regularly updated, for this purpose. The compliance with the Company's privacy policy is always emphasized by conducting frequent training to the employees.
C. Restriction of access to personal information
The Company takes necessary measures to control access to personal information by granting, changing, and canceling access privileges to the database system that processes personal information, and uses a virtual private network (VPN) when personal information handlers access the personal information processing system from the outside via an information and communication network.
D. Retention of access records and prevention of falsification and alteration
The Company keeps and manages access records (web logs, etc.) of the personal information processing system for at least one year (but not less than two years in the case of processing the information of more than 50,000 information subjects or processing sensitive information or unique identification information) and uses security features to prevent forgery, tampering, theft, and loss of access records.
E. Encryption of personal information
The personal information of the information subject is stored and managed in encrypted form. The Company also takes other security measures such as encrypting important data for storage and transmission.
F. Measures against hacking, etc.
The Company is doing its best to prevent the personal information of its members from becoming leaked or damaged by hacking or computer viruses.
In preparation for damage to personal information, data are backed up frequently, the latest antivirus program is used to prevent leakage or damage to personal information or data of information subjects, and personal information is transmitted safely over the network based on encrypted communication.
The Company uses an anti-intrusion system to control unauthorized access from the outside and strives to equip itself with all possible technical devices to ensure systematic security.
G. Access control for unauthorized persons
The Company has a separate physical storage location for the personal information system used to store personal information and operates access control procedures.
A. Password encryption
Passwords are stored and managed in encrypted form so that only their respective information subjects know them. It is only possible for the information subjects to check and change their passwords.
G. Operation of a privacy protection organization
The Company has an in-house privacy protection organization to the implementation of the Company's privacy protection policy and the compliance of the persons in charge. If any problems are found, the Company makes efforts to take immediate corrective actions to rectify them.
However, the Company is not responsible for any problems caused by the leakage of personal information such as ID, password, and resident registration number due to the negligence of the information subject or problems on the Internet.
07. Installation and operation of automatic personal information collection devices and rejection thereof
The Company does not currently operate a device that collects personal information automatically generated when using the Service, such as cookies. However, if it becomes necessary to use such a device to provide the Service in the future, the Company may install and operate an automatic collection device. In this case, the information subject will have the option to accept or refuse cookies.
A. What are cookies?
The Company may use cookies that store and retrieve user information to provide personalized and customized services. A cookie is a very small text file sent to the user's browser by the server used to operate the website and stored on the user's computer hard drive. When the data subject subsequently visits the website, the website server reads the contents of the cookie stored on the information subject's hard disk to retain information on his/her preferences and provide customized services. Cookies do not automatically or actively collect personally identifiable information, and the information subject may refuse or delete cookies at any time.
B. Purpose of use of cookies by the Company
Currently, the Company does not use cookies. However, it may be used in the future to retain information on the preferences of the information subject, provide customized services, etc. [Installation, use, and rejection of cookies] The information subject has a choice regarding the installation of cookies. As such, the information subject can accept all cookies, confirm each time a cookie is saved, or refuse all cookies by setting the relevant options in the web browser. However, if you refuse to store cookies, you may have difficulty using services that require you to log in. The procedure for specifying whether to accept or refuse cookies (for Internet Explorer) is as shown below: 1) Select [Internet Options] from the [Tools] menu. 2) Click the [Privacy tab]. 3) Set the [Privacy Level].
08. Rights and obligations of the information subject and how to exercise them
The information subject may exercise the following rights:
A. Requesting access to personal information
The information subject may request access to his/her personal information held by the Company at any time pursuant to Article 35 (Viewing Personal Information) of the Personal Information Protection Act.
However, the Company may restrict access in the following cases: 1) Access is prohibited or restricted under the law; 2) There are concerns of harming the life, body, or property of another person or unreasonably infringing on the property and other interests of another person.
B. Requesting correction or deletion of personal information
The information subject may request correction or deletion of his/her personal information held by the Company in accordance with Article 36 (Correction and Deletion of Personal Information) of the Personal Information Protection Act. However, if the personal information is specified as the subject of collection in other laws and regulations, the request for deletion will not be fulfilled.
C. Requesting suspension of personal information processing
The information subject may request the suspension of processing of his/her personal information held by the Company pursuant to Article 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act. However, the Company may refuse the request in the following cases: 1) There are special provisions in the law or it is unavoidable to comply with legal obligations; 2) There are concerns of harming the life, body, or property of another person or unreasonably infringing on the property and other interests of another person; 3) It will be difficult to fulfill the contract, such as not being able to provide the services agreed with the information subject, without processing the personal information, and the information subject did not clearly state his/her intention to terminate the contract.
D. Other matters
If the information subject requests the correction or deletion of errors in his/her personal information, the Company will not use or provide the personal information until the correction or deletion is completed. Also, if the Company has already provided incorrect personal information to a third party, the third party will be notified without delay of the results of the correction or deletion process so that the correction can be made.
The Company will process personal information that has been terminated or deleted at the request of the information subject or his/her legal representative as specified in the section, "Period of retention and use of personal information," and will not allow it to be viewed or used for any other purposes.
09. Third-party processing of personal information
When the Company enters into a personal information processing contract with a third party, the Company will specify in the relevant documents, such as the contract, the prohibition of processing personal information other than for the purpose of performing entrusted tasks, technical and administrative protection measures, restrictions on subcontracting, management and supervision of the contractor, and liability for damages in accordance with Article 25 of the Personal Information Protection Act and will supervise whether the contractor processes personal information safely and securely.
10. Customer service regarding privacy
In order to protect your personal information and handle complaints related thereto, the Company has designated the following department and privacy officers as follows:
| Category | Privacy Officer | Privacy Department |
|---|---|---|
| Affiliation/Title명 | People & Culture Team / Head of Human Resources Department | PPeople & Culture Team / Head |
| Name | JUNG, Seungho | HA, Junwoo |
| Phone number | 02-479-7751 | 02-479-7576 |
| E-mail address | seungho.jung@hd.com | junwoo.ha@hd.com |
| Business hours | (Mon to Fri) 8 a.m. to 5 p.m. / (Closed on weekends and holidays) | |
You may file any complaints related to privacy protection arising from the use of the Company's services to the privacy officer or privacy department, and the Company will provide a sufficient response as soon as possible. If you wish to report or consult on privacy infringement, please contact the following organizations: 1) Personal Information Dispute Mediation Committee
(www.kopico.go.kr, Phone number 1833-6972) 2) Supreme Public Prosecutor's Office Cyber Investigation Division
(www.spo.go.kr, Phone number 1301) 3) National Police Agency Cyber Investigation Bureau
(ecrm.cyber.go.kr, Phone number 182)
11. Changes to this Privacy Policy
This Privacy Policy is effective as of November 27, 2023. Our previous Privacy Policy can be found below.
We will be a company that heeds your comments and feedback and gives back to society.
HD Construction Equipment Co., Ltd. (hereinafter referred to as the "Company"), which values the personal information of data subjects, will comply with the personal information protection provisions of relevant laws and regulations, such as the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Protection of Communications Secrets Act, and the Telecommunications Business Act, and lawfully and appropriately handle personal information that is collected, retained, and processed by the provisions of relevant laws and regulations to properly conduct tasks involving personal information and protect the rights and interests of data subjects. The Company has set forth its Privacy Policy to protect the privacy and rights of data subjects by relevant laws and regulations and to facilitate the smooth handling of data subjects' grievances related to personal information. In case of any revisions to the Privacy Policy, a notice will be posted on the website (or the data subjects will be notified individually).
01Personal information collected
02Purpose of processing personal information
03Period of retention and use of personal information
04Viewing, correction, and deletion of personal information
05Procedure for and method of destroying personal information
06Measures to protect personal information
07Installation and operation of automatic personal information collection devices and rejection thereof
08Rights and obligations of the information subject and how to exercise them
09Third-party processing of personal information
10Customer service regarding privacy
01. Personal information collected
The Company collects the personal information of customers, prospective customers, and stakeholders as follows:
① Required information : name, email address, phone number, and inquiry
② Optional information : Address
③ Collection method: Contact us > Inquiry
02. Matters concerning third-party handling of personal information
The Company utilizes the collected personal information for the following purposes:
① Handling grievances and complaints
② Marketing and advertising
③ Service provision and settlement
03. Period of retention and use of personal information
The Company destroys the information without delay after the purpose of collecting and using personal information is achieved, in principle.
However, the following information will be retained for the specified period for the following reasons:
① Retained information : name, e-mail address, mobile phone number, and address
② Grounds for retention : Company's internal policy
③ Retention period: 3 years
04. Viewing, correction, and deletion of personal information
Users may request to view, correct, or delete their personal information held by the Company at any time, and the Company is obligated to take necessary measures. If the user requests the correction of an error, the Company will not use his/her personal information until the error is corrected. Also, the Company will not retain customer information that has been deleted after a request for deletion. You can request that your personal information be deleted by e-mail, fax, or phone.
05. Procedure for and method of destroying personal information
The Company destroys personal information without delay after the purpose of collection and use is achieved, in principle. The procedure for and method of destroying personal information are as follows:
[ Personal Information Destruction Procedure ]
① The entered information will be transferred to a separate database (separate filing cabinet in case of paper) after the purpose is achieved and be retained for a certain period of time (see the section, "Period of retention and use of personal information") in accordance with the internal policy and other relevant laws and regulations before it is destroyed. Personal information transferred to a separate database will not be used for any purpose other than that for which it is retained, unless otherwise required by law.
[ Personal Information Destruction Method ]
① Personal information stored in the form of electronic files will be deleted using technical measures that make it impossible to reproduce the records.
② In the case of records, printed materials, written materials, or other recording media aside from electronic files, they will be destroyed by shredding or incineration.
06. Measures to protect personal information
In handling the personal information of information subjects, the Company takes the following measures to protect the personal information against loss, theft, leakage, tampering, and damage:
A. Establishment and implementation of internal management plan
The Company establishes and implements an internal management plan in accordance with the Standards for Measures to Protect Personal Information.
B. Minimization and training of personal information handlers
The Company's employees who handle personal information are limited to those in charge of personal information and are given a separate password, which is regularly updated, for this purpose. The compliance with the Company's privacy policy is always emphasized by conducting frequent training to the employees.
C. Restriction of access to personal information
The Company takes necessary measures to control access to personal information by granting, changing, and canceling access privileges to the database system that processes personal information, and uses a virtual private network (VPN) when personal information handlers access the personal information processing system from the outside via an information and communication network.
D. Retention of access records and prevention of falsification and alteration
The Company keeps and manages access records (web logs, etc.) of the personal information processing system for at least one year (but not less than two years in the case of processing the information of more than 50,000 information subjects or processing sensitive information or unique identification information) and uses security features to prevent forgery, tampering, theft, and loss of access records.
E. Encryption of personal information
The personal information of the information subject is stored and managed in encrypted form. The Company also takes other security measures such as encrypting important data for storage and transmission.
F. Measures against hacking, etc.
The Company is doing its best to prevent the personal information of its members from becoming leaked or damaged by hacking or computer viruses.
In preparation for damage to personal information, data are backed up frequently, the latest antivirus program is used to prevent leakage or damage to personal information or data of information subjects, and personal information is transmitted safely over the network based on encrypted communication.
The Company uses an anti-intrusion system to control unauthorized access from the outside and strives to equip itself with all possible technical devices to ensure systematic security.
G. Access control for unauthorized persons
The Company has a separate physical storage location for the personal information system used to store personal information and operates access control procedures.
H. Password encryption
Passwords are stored and managed in encrypted form so that only their respective information subjects know them. It is only possible for the information subjects to check and change their passwords.
I. Operation of a privacy protection organization
The Company has an in-house privacy protection organization to the implementation of the Company's privacy protection policy and the compliance of the persons in charge. If any problems are found, the Company makes efforts to take immediate corrective actions to rectify them. However, the Company is not responsible for any problems caused by the leakage of personal information such as ID, password, and resident registration number due to the negligence of the information subject or problems on the Internet.
07. Installation and operation of automatic personal information collection devices and rejection thereof
The Company does not currently operate a device that collects personal information automatically generated when using the Service, such as cookies. However, if it becomes necessary to use such a device to provide the Service in the future, the Company may install and operate an automatic collection device. In this case, the information subject will have the option to accept or refuse cookies.
A. What are cookies?
The Company may use cookies that store and retrieve user information to provide personalized and customized services. A cookie is a very small text file sent to the user's browser by the server used to operate the website and stored on the user's computer hard drive. When the data subject subsequently visits the website, the website server reads the contents of the cookie stored on the information subject's hard disk to retain information on his/her preferences and provide customized services. Cookies do not automatically or actively collect personally identifiable information, and the information subject may refuse or delete cookies at any time.
B. Purpose of use of cookies by the Company
Currently, the Company does not use cookies. However, it may be used in the future to retain information on the preferences of the information subject, provide customized services, etc.The information subject has a choice regarding the installation of cookies. As such, the information subject can accept all cookies, confirm each time a cookie is saved, or refuse all cookies by setting the relevant options in the web browser. However, if you refuse to store cookies, you may have difficulty using services that require you to log in. The procedure for specifying whether to accept or refuse cookies (for Internet Explorer) is as shown below: 1) Select [Internet Options] from the [Tools] menu. 2) Click the [Privacy tab]. 3) Set the [Privacy Level].
08. Rights and obligations of the information subject and how to exercise them
The information subject may exercise the following rights:
A. Requesting access to personal information
The information subject may request access to his/her personal information held by the Company at any time pursuant to Article 35 (Viewing Personal Information) of the Personal Information Protection Act. However, the Company may restrict access in the following cases: 1) Access is prohibited or restricted under the law; 2) There are concerns of harming the life, body, or property of another person or unreasonably infringing on the property and other interests of another person.
B. Requesting correction or deletion of personal information
The information subject may request correction or deletion of his/her personal information held by the Company in accordance with Article 36 (Correction and Deletion of Personal Information) of the Personal Information Protection Act. However, if the personal information is specified as the subject of collection in other laws and regulations, the request for deletion will not be fulfilled.
C. Requesting suspension of personal information processing
The information subject may request the suspension of processing of his/her personal information held by the Company pursuant to Article 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act. However, the Company may refuse the request in the following cases: 1) There are special provisions in the law or it is unavoidable to comply with legal obligations; 2) There are concerns of harming the life, body, or property of another person or unreasonably infringing on the property and other interests of another person; 3) It will be difficult to fulfill the contract, such as not being able to provide the services agreed with the information subject, without processing the personal information, and the information subject did not clearly state his/her intention to terminate the contract.
D. Other matters
If the information subject requests the correction or deletion of errors in his/her personal information, the Company will not use or provide the personal information until the correction or deletion is completed. Also, if the Company has already provided incorrect personal information to a third party, the third party will be notified without delay of the results of the correction or deletion process so that the correction can be made.
The Company will process personal information that has been terminated or deleted at the request of the information subject or his/her legal representative as specified in the section, "Period of retention and use of personal information," and will not allow it to be viewed or used for any other purposes.
09. Third-party processing of personal information
When the Company enters into a personal information processing contract with a third party, the Company will specify in the relevant documents, such as the contract, the prohibition of processing personal information other than for the purpose of performing entrusted tasks, technical and administrative protection measures, restrictions on subcontracting, management and supervision of the contractor, and liability for damages in accordance with Article 25 of the Personal Information Protection Act and will supervise whether the contractor processes personal information safely and securely.
10.Customer service regarding privacy
In order to protect your personal information and handle complaints related thereto, the Company has designated the following department and privacy officers as follows:
| Category | Privacy Officer | Privacy Department |
|---|---|---|
| Affiliation/Name | People & Culture Team / Head of Human Resources Department | People & Culture Team / Head |
| Name | JUNG, Seungho | HA, Junwoo |
| Phone number | 02-479-7751 | 02-479-7576 |
| E-mail address | seungho.jung@hd.com | junwoo.ha@hd.com |
| Business hours | (Mon to Fri) 8 a.m. to 5 p.m. / (Closed on weekends and holidays) | |
You may file any complaints related to privacy protection arising from the use of the Company's services to the privacy officer or privacy department, and the Company will provide a sufficient response as soon as possible. If you wish to report or consult on privacy infringement, please contact the following organizations: 1) Personal Information Dispute Mediation Committee
(www.kopico.go.kr, Call 1833-6972) 2) Information Protection Mark Certification Committee
(www.eprivacy.or.KO, Call 02-580-0533~4) 3) Supreme Public Prosecutor's Office Cyber Investigation Division
(http://www.spo.go.KO, Call 02-3480-3573) 4) National Police Agency (NPA) Cyberterrorism Response Center (http://www.ctrc.go.KO, Call 02-392-0330)