Privacy Policy

Shinheung Global Co., Ltd. (hereinafter referred to as the “Company”) places the utmost importance on protecting your personal information and complies with the Personal Information Protection Act of Korea.
Through this Privacy Policy, we inform you of the purposes for which your personal information is collected and used, as well as the measures taken to safeguard it.

1. Items of Personal Information Collected

The Company collects only the minimum personal information required for business operations.

[Upon Employment]
- Required by law: Name, address, and other information in accordance with applicable laws.

[When Registering as an Online Member]
- Required items
For website membership: Name, contact details (mobile phone), address, and email (collected after consent).
For job applications: Name, email, photo (collected after consent).
- Optional items: None.

2. Purpose of Collecting and Using Personal Information

The Company uses the collected personal information solely for the purposes stated below.
No information will be used for purposes other than those specified without prior consent.
- Compliance with company policies, tax laws, and other relevant regulations.

3. Retention and Use Period of Personal Information

Personal information is destroyed without delay once the purpose of collection is achieved.
- Employee information: Retained until termination of employment (immediately deleted once the statutory retention period under tax law has expired).
- Records related to contracts, payments, or supply of goods: Retained for 5 years.
(Legal basis: Act on Consumer Protection in Electronic Commerce, etc.)

4. Destruction of Personal Information

The Company destroys personal information once the purpose of processing is achieved or the retention period has expired.
- Information stored in electronic files is permanently deleted using technical methods that prevent recovery.
- Information printed on paper is shredded or incinerated.

Information printed on paper is shredded or incinerated.

The Company does not provide personal information to third parties without the user’s prior consent, except as required by law.

Recipients Items Provided Purpose of Use Related Documents
Pension Institutions (Kyobo, Hana Alternative Asset Management, Kookmin Bank) Name, employee ID, date of employment, date of resignation Retirement pension applications Retirement documents

6. ntrustment of Personal Information Processing

For the purpose of providing services, the Company entrusts the processing of personal information as outlined below. In accordance with relevant laws, the Company establishes necessary measures in the consignment agreement to ensure that personal information is managed safely.

Consignee Details of Consigned Services Personal Information Consigned Period of Use
Not applicable

7. Rights of Data Subjects and How to Exercise Them

Employees may withdraw consent to the collection, use, and provision of their personal information at any time.
They may also request access, correction, suspension of processing, or deletion of their personal information.

Requests can be made in writing, by phone, or by fax to the Privacy Officer, and the Company will promptly take necessary action. However, in cases where retention is required by law, the exercise of rights may be restricted.

8. Privacy Officer and Contact Information

To protect personal information and address related inquiries or complaints, the Company has designated the following personnel

Role Position Department Contact Remarks
Chief Privacy Officer Deputy General Manager Management Division +82-55-260-1085 -
Privacy Privacy Management Division +82-55-260-1007 -
Handlers Assistant Managers & below Strategy, Finance, HR, General Affairs - Attached list

9. Measures to Ensure Security of Personal Information

The Company employs strict security measures such as firewalls and intrusion detection systems to safeguard all information. Access rights to personal data are granted selectively, the number of personnel handling personal data is minimized, and continuous security training is conducted.
In addition, user access logs are maintained for all systems processing personal information.

System Model Location Implementation Date Administrator Remarks
Firewall Juniper Data Center Nov 2010 Kwon Kyung-gon -
Intrusion Prevention (IPS) Juniper Data Center Nov 2010 Kwon Kyung-gon -
DB Access Control & Audit - - - - Under review
DB Encryption - - - - Under review
DMZ/Internal Encryption - - - - Under review
PC Personal Data Scan - - - - Under review
Antivirus ForeFront Individual PCs May 2012 Kwon Kyung-gon -
etc - - - - -

10. Amendments to This Privacy Policy

This Privacy Policy was first enacted on March 29, 2013. Any additions, deletions, or modifications in accordance with changes in laws, policies, or security technology will be notified through the Company’s website.

- Date of Notice : April 5, 2013 / Effective Date : April 8, 2013

Shinheung Global Co., Ltd. (hereinafter referred to as the “Company”) provides this policy to inform you how video information collected through our CCTV systems is utilized and managed.

1. Legal Basis and Purpose of Installation

In accordance with Article 25(1) of the Personal Information Protection Act of Korea, the Company operates CCTV systems for the following purposes:
- Ensuring facility safety and fire prevention
- Preventing crimes for the safety of employees and visitors

2. Number, Location, and Scope of Cameras

Total units Locations and coverage
12 Perimeter areas, lobbies, and major corridors

The Company operates CCTV systems within its facilities to ensure safety and security.

Detailed locations (Household Appliances Plant 1):
- 5 units at perimeter and lobby (Air Conditioning Division)
- 7 units along main corridors
Coverage : Building entrances, hallways, rooftop parking lot
Operation time : 24/7
Managers : Jaehong Ahn, Management Planning Team (+82-55-280-2219) / Jongro Jung, Resource Management Team (+82-55-712-6520)

3. Person in Charge and Authorized Personnel

To protect personal video information and handle related complaints, the Company has designated the following personnel

Role Position Department Contact Name
Chief Manager Plant Manager Household Appliances Plant 1 +82-55-280-2255 Youngseo Kim
Chief Manager Director Air Conditioning Division +82-55-710-7145 +82-55-710-7145
Authorized Personnel Manager Plant 1 Management Team +82-55-280-2219 Jaehong Ahn
Authorized Personnel Assistant Manager Air Conditioning Management Team +82-55-712-6520 Jongro Jung

4. Recording Hours, Retention Period, and Storage

Recording hours Retention period Storage location
24 hours a day 30 days from the date of recording Security Control Room (Household Appliances Plant 1)

5. Outsourcing of CCTV Installation and Management

The Company may entrust the installation and management of CCTV systems to external service providers. In such cases, contractual and technical measures are taken to ensure data security.

Recording hours Retention period Storage location
Not applicable

6. Access to Video Information

- How to request: Contact the CCTV Manager in advance and visit the Company’s premises.
- Access location: Management Planning Team (Plant 1) / Resource Management Team (Air Conditioning Division)

7. Rights of Data Subjects

Employees and visitors may request to view, confirm the existence of, or delete their personal video information.
Such requests may be made at any time to the CCTV Operator.
However, access may be limited to cases where the video information is directly related to the data subject’s urgent interests, such as protection of life, body, or property.
The Company will take necessary action without delay upon receiving such requests.

8. Security Measures for Video Information

The Company takes strict measures to ensure the security of video information, including encryption and access controls.
Access rights are granted selectively.
Logs are maintained for all access to video records (including user, purpose, and time).
Video data is securely stored in physically restricted areas equipped with locking devices.

9. Amendments to this Policy

This CCTV Operation and Management Policy was first enacted on March 28, 2013.
Any additions, deletions, or modifications due to changes in laws, policies, or security technology will be notified on the Company’s website at least 7 days prior to enforcement.

- Date of Notice : April 5, 2013 / Effective Date : April 8, 2013