Mobiltech Co., Ltd. Personal Information Processing Policy
Mobiltech Co., Ltd. establishes and discloses the following personal information processing policy in accordance with relevant laws to protect the personal information of information subjects and to handle related complaints quickly and smoothly.
Article 1 (Purpose of Personal Information Processing)
The company processes personal information for the following purposes:
1. Response to inquiries and handling of complaints: verification of the inquirer's identity, confirmation of inquiries and requests, contact and notification for fact-finding, processing of inquiries and requests, and notification of processing results
2. Service improvement and development: improvement of existing services and development of new services
3. Scientific research: collection and research of 3D spatial information for the improvement of autonomous driving and smart city technologies
Article 2 (Personal Information Items to be Processed)
① The company collects and processes the following personal information items for those who write inquiries on the website:
1. Mandatory items when writing an inquiry on the website: name, email, affiliated institution, and position
2. Optional items when writing an inquiry on the website: phone number
3. Items collected and processed when handling inquiries: individual items necessary for handling inquiries, including those listed in items 1 and 2
② The company processes anonymized video information of roads and surrounding areas where vehicles are driven for the collection and research of 3D spatial information to improve autonomous driving and smart city technologies.
③ The company does not collect personal information of children under the age of 14.
Article 3 (Period of Personal Information Processing and Retention)
① The company deletes and disposes of personal information without delay when the processing and response to inquiries and follow-up inquiries are completely finished, unless there is a separate request. However, log records related to service use are retained for 3 months in accordance with the Telecommunications Secret Protection Act.
② Notwithstanding the preceding paragraph, if an investigation or investigation related to a violation of relevant laws is ongoing, personal information is retained until the end of the investigation or investigation.
Article 4 (Provision of Personal Information to Third Parties)
The company provides personal information to third parties only with the consent of the information subject or in cases where there are special provisions in the Personal Information Protection Act or other laws.
Article 5 (Use and Provision of Personal Information within the Scope of the Original Collection Purpose)
The company may use or provide personal information to third parties without the consent of the information subject within the scope of the original collection purpose, considering the following criteria:
1. Relevance to the original collection purpose: whether the additional use or provision purpose is related to the original collection purpose
2. Predictability of additional use or provision: whether the additional use or provision of personal information can be predicted in light of the relationship between the personal information processor and the information subject, the level of technology, and general practices
3. Unfair infringement of the information subject's interests: whether the additional use purpose unfairly infringes on the information subject's interests
4. Security measures: whether measures such as pseudonymization or encryption have been taken to ensure safety
Article 6 (Rights and Obligations of Information Subjects and Legal Representatives, and Method of Exercise)
① Information subjects may exercise their rights to request the company to inspect, correct, delete, or suspend the processing of their personal information at any time.
② The exercise of rights under paragraph 1 may be done in writing or by email, and the company will take action without delay.
③ The exercise of rights under paragraph 1 may be done through a legal representative or an agent of the information subject. In this case, a power of attorney must be submitted to confirm the fact of the agency.
④ The exercise of rights under paragraph 1 may be restricted in accordance with the Personal Information Protection Act and other relevant laws.
Article 7 (Destruction of Personal Information)
① The company destroys personal information without delay when it becomes unnecessary, such as when the retention period has expired or the processing purpose has been achieved.
② Notwithstanding the preceding paragraph, if it is necessary to retain personal information in accordance with relevant laws, the company transfers the personal information to a separate database or stores it in a separate location.
③ The procedure and method of destroying personal information are as follows:
1. Destruction procedure: the company selects personal information to be destroyed and obtains the approval of the personal information protection officer.
2. Destruction method: the company destroys personal information recorded or stored in electronic files in a way that makes it impossible to reproduce the records, and destroys personal information recorded or stored in paper documents by shredding or incineration.
Article 8 (Measures to Ensure the Safety of Personal Information)
The company takes the following measures to ensure the safety of personal information:
1. Managerial measures: establishment and implementation of internal management plans, regular employee training, etc.
2. Technical measures: technical measures against hacking, encryption of personal information, management of access authority to personal information processing systems, storage and prevention of tampering with access records, etc.
3. Physical measures: access control to server rooms, data storage rooms, etc.
Article 9 (Installation and Operation of Automatic Personal Information Collection Devices and Refusal)
The company does not use cookies that store and retrieve information subjects' usage information.
Article 10 (Collection, Use, and Refusal of Behavioral Information)
The company does not collect, use, or provide behavioral information for online personalized advertising.
Article 11 (Personal Information Protection Officer)
① The company designates a personal information protection officer to oversee personal information processing and handle information subjects' complaints and damage relief.
② Information subjects may inquire about personal information protection-related matters, including complaints and damage relief, to the personal information protection officer and the department in charge.
Article 12 (Installation and Operation of Video Information Processing Devices)
The company installs and operates video information processing devices as follows:
1. Installation basis: Article 25-2, Paragraph 2 of the Personal Information Protection Act
2. Installation purpose: collection of driving videos for autonomous driving technology improvement and 3D spatial information collection
3. Installation location and scope:
a. Installation area 1: Gangnam-gu, Seoul
- Installation number: 1
- Shooting range: roads where the installed vehicle is driven (Gangnam-gu, Seoul)
b. Installation area 2: Seongnam-si, Gyeonggi-do
- Installation number: 1
- Shooting range: roads where the installed vehicle is driven (Seongnam-si, Gyeonggi-do)
c. Installation area 3: Pohang-si, Gyeongsangbuk-do
- Installation number: 1
- Shooting range: roads where the installed vehicle is driven (Pohang-si, Gyeongsangbuk-do)
4. Manager, department in charge, and access authority:
- Manager: CTO Bae Jeong-hyeon
- Access authority: SW&I team leader Lee Jeong-heon
5. Shooting time, retention period, storage location, and processing method:
- Shooting time: minimum 1 hour to 5 hours
- Retention period: until anonymization is completed (up to 5 days from shooting)
- Storage location and processing method: stored and processed in the SW&I team server room, and permanently deleted in a way that makes it impossible to recover when the retention period expires
6. Method and location of video information confirmation: request to the manager (CTO)
7. Measures for video information protection: internal management plan establishment, access control, access authority restriction, storage of processing records, and tampering prevention measures
Article 13 (Amendment to the Personal Information Processing Policy)
The company may amend the personal information processing policy to reflect changes in laws or services. In the event of an amendment to the personal information processing policy, the company will notify information subjects in advance.
This personal information processing policy takes effect on August 1, 2023.
