Consent to Collect Personal Information
Diquest Inc.'s Policy on Personal Information
<Diquest Inc.>('www.diquest.com', hereafter 'Diquest Inc. homepage') has the policies as follows in order to protect user's personal information and rights and to process user's claim related to personal information according to the Personal Information Protection Act.
<Diquest Inc.>(‘Diquest Inc. homepage’) shall notice the amendment of the policy on Personal Information through notice of the website (or through individual notice).
The policy shall be enforced on May 16, 2016.
1. Purpose of Processing Personal Information
<Diquest inc.>(‘Diquest Inc. homepage’) shall process personal information as follows: The processed personal information shall not be used except for the following purposes and in case of modification of the purpose of use, we shall seek consent from users in advance.
① Processing for Claims
In order to identifying claimer, his or her claims, contacting and noticing for investigation, and notice the results, we shall process personal information.
② Use for Marketing and Promotion
In order to provide newly developed services(products) and customized services, event and promoting information, and chance for them, we shall procee personal information.
2. The Current Status of Personal Information Files
① File Name of Personal Information: Inquiry on Diquest Inc.'s products and training
- Items of Personal Information: Name, Company, Position, Department, E-Mail, Cell Number, Company Telephone Number, Service Log(collected automatically), Access Log(collected automatically), Cookie(collected automatically), Accessed IP Information(collected automatically)
- How to be collected: Homepage
- Grounds for Collecting: Promoting IT network usage and protecting information
- Period for storage: 3 years
- Related Regulation: Records abut collecting/processing and using credit information: 3 years
3. Period to Process and Store Personal Information
① <Diquest Inc.>('Diquest Inc. homepage') shall process and store personal information for period to process and store personal information according to law or within the period with consent from the subject of information when collecting the information.
② Each period for processing and storing is as follows:
1). Processing Claims
Personal Information related to processing claims shall be stored and used for the purpose as above until 3 years from the date of consent on collecting and using personal information
- Grounds for Collecting: Promoting IT network usage and protecting information
- Period for storage: 3 years
- Related Regulation: Records for dealing with claims or disputes of client: 3 years
- Exceptions: In case that information subject continues to consent and provide information(renewal of will of consent when providing that information).
2). Use for Marketing and Promotion
Personal information related to use for marketing and promotion shall be stored and used for the purpose as above until 3 years after the date of consent about collecting and using the information.
- Grounds for Collecting: Promoting IT network usage and protecting information
- Related Regulation: Records abut collecting/processing and using credit information: 3 years
- Exceptions: In case that information subject continues to consent and provide information(renewal of will of consent when providing that information).
4. The Contents about Providing Personal Information to Thrid Party
① <Diquest Inc.>('www.diquest.com', hereafter 'Diquest Inc. homepage') shall not provide user's personal information to the outside in principle. However, the following cases shall be exceptions.
- In case of Articles 17 and 18 of the Personal Information Protection Act including information subject's consent and special regulation from law
5. Information Subject's Right, Duty and How to Exercise Them; User shall be entitled to exercise the following rights
① Information subject shall always be entitled to exercise rights related to personal information protection to Diquest Inc.('www.diquest.com', hereafter 'Diquest Inc. homepage', according to the following items.
1). Demanding open persoanl information
2). Demanding amendment in case of error
3). Demanding deletion
4). Demanding to stop processing
② Exercising right according to Clause 1 can be done to Diquest Inc.('www.diquest.com', hereafter 'Diquest Inc. homepage') by letter, e-mail, or FAX according to the form of additional no. 8, exercising rule of the Personal Information Protection Act and Diquest Inc.('www.diquest.com', hereafter 'Diquest Inc. homepage') shall process it immediately.
③ In case of information subject requests to amend errors of or delete personal information, Diquest Inc.('www.diquest.com', hereafter 'Diquest Inc. homepage') shall not use or provide it until amending or deleting it.
④ Extemporizing the right according to Clause 1, can be done by agent who is legal agent or the assignee of an information subject. In that case, the letter of asggine according to additional no. 11, exercising rule of the Personal Information Protection Act shall be submitted.
6. Composing Items in Personal Information to be Processed
① <Diquest, Inc.>('www.diquest.com', hereafter Diquest, Inc. homepage') shall process the following items of personal information.
1). Processing claims
- Required: Name, Company, Cell Number, Company Telephone Number, Service Log(collected automatically), Access Log(collected automatically), Cookie(collected automatically), Accessed IP Information(collected automatically)
- Optional: Position and Department
2). Using for Marketing and Promotion
- Required: Name, Company, Cell Number, Company Telephone Number, Service Log(collected automatically), Access Log(collected automatically), Cookie(collected automatically), Accessed IP Information(collected automatically)
- Optional: Position and Department
7. Destroying Personal Information
<Diquest, Inc.>('www.diquest.com', hereafter Diquest, Inc. homepage') shall destroy immediately the personal information when achieving the purpose to process the personal information in principle. The procedure, period, and method of its destroying are as follows:
-Procedure of destroying: Information filled by user, after achieving the purpose, shall be moved to additional DB(in case of paper, as additional document), and stored for sometime according to internal guideline and other related laws and/or destroyed immediately. Then, personal information moved to DB cannot be used for other purpose except by law.
-Period for Destroying: User's personal information shall be destroyed within 5 days from the end of the period to store when exceeding the period and within 5 days from the date to be considered as no necessity of processing personal information in case of no necessity of the personal information due to achieving its purpose, abolishing the service or completing the business, respectively.
-How to Destroy It Electronic file form of information shall be done by technical method for regenerating it. Personal Information printed on paper shall be cut away or incineration.
8. Measuring Safety of Personal Information
<Diquest Inc.>('Diquest Inc. homepage') conducts technical, managing, and physical measures for requiring to secure stability as follows, according to Article 29, the Personal Information Protection Act.
① Conducting Regular Self-Audits
For securing stability related to personal information, we shall conduct self-audit regularly(twice a year)
② Limiting Approach to Personal Information
Through giving, changing, and cancelling approaching authority to database system processing personal information, the measures required controlling approaches to personal information shall be done and unauthorized approach from outside shall be controlled by invasion detecting system.
③ Using Locking Device for Security of Documents
The documents and storage containing personal information shall be stored in safe place with locking device.
9. Who Shall be Responsible for Protecting Personal Information
① Diquest Inc. '(www.diquest.com', hereafter, 'Diquest, Inc. homepage') appoint who shall be responsible for protecting personal information to be responsible for general affairs about processing personal information and for treating claims and compensating damages related to processing personal information.
▶ Who Shall be Responsible for Protecting Personal Information
Name: Kang, Lak-kun
Position: CEO
Contact: +82-2-3470-4300, web@diquest.com
▶ Department in charge of Personal Information
Department: Department of Business Support
Manager: Deputy Manager Cho, Yeon-ji
Contact: +82-2-3470-4329, marketing@diquest.com
※ The contact shall be connected to the department in charge of protection of personal information.
② Information subject shall be entitled to inquire to who shall be responsible for protecting personal information and department in charge about every content of personal information protection, claims, and remedy on damages occurred during using services(or businesses) of Diquest, Inc.('www.diquest.com', hereafter, 'Diquest, Inc. homepage'). Diquest, Inc.('wwwdiquest.com', hereafter, 'Diquest, Inc. homepage') shall reply and process for the inquiry from information subject immediately.
10. Duty to Notice according to Amendment of the Policy on Personal Information
① This policy on personal information shall be enforced from the day of its enforcement, and in case of adding, deleting or amending according to laws and policies, it shall be notice through notification from 7 days before the enforcement of the amendment.
Date of Notice: May 16, 2016 / Date of Enforcement: May 16, 2016.