법무법인 린

Privacy Policy

This Privacy Policy is established and published by LIN (the “Law Firm”) to protect data subjects’ personal information and to ensure the timely and smooth resolution of any related grievances in accordance with Article 30 of the Personal Information Protection Act.

Article 1 (Types of Personal Information to be Processed, Purposes of Processing, and Processing and Retention Period)

The types of personal information to be processed by the Law Firm, the purposes of processing, and the processing and retention period are as set forth in each of the following subparagraphs:

1. Clients’ personal information (including information on potential clients)

Types of personal information to be processed	Name, contact information (phone number, email address), address, name of company, title and position, account number, etc.
Purposes of processing personal information	Provision of services relating to the client; sending newsletters and promotional materials, etc. published and distributed by the Law Firm; provision of information and invitations to events organized by the Law Firm; tax reporting; any other purposes for which the information is provided
Retention period for personal information	Until completion of the purposes of processing, as stated above

2. Officers’ and employees’ personal information

Types of personal information to be processed	- Mandatory information collected: Name, resident registration number, contact information (phone number, email address), address, education, qualifications, work experience, military service information, account number, etc. - Optional information collected: Automobile information, family information, etc.
Purposes of processing personal information	Hiring officers and employees of the Law Firm, personnel management, provision of welfare benefits, and other purposes (execution and maintenance of employment contracts, paying wages and severance pay, education, issuance of various certificates, provision of welfare benefits to officers and employees and their families, insurance and pension related matters, etc.)
Retention period for personal information	Until three (3) years after the termination of employment of the officer or employee

3. Job applicants’ personal information

Types of personal information to be processed	- Mandatory information collected: Name, gender, date of birth, contact information (phone number, email address), address, education, academic transcripts (undergraduate, law school, language studies, etc.), qualifications, work experience, military service information, etc. - Optional information collected: Family information
Purposes of processing personal information	Hiring officers and employees of the Law Firm and building talent databases
Retention period for personal information	Until three (3) years after completion of the hiring process

Article 2 (Disclosure of Personal Information to Third Parties)

The Law Firm will, in principle, process data subjects’ personal information only for the purposes set out in Article 1, and the Law Firm will disclose personal information to third parties only with the prior consent of the data subject, or in accordance with the Personal Information Protection Act and other relevant laws and regulations.

Article 3 (Delegation of Personal Information Processing)

The Law Firm has not delegated the processing of personal information to any other person. In case of delegation of the processing of personal information, the Law Firm will make notice of the person delegated with the processing of personal information, the details of the delegated work, and the delegation period in the Privacy Policy.

Article 4 (Rights and Obligations of Data Subjects and Procedure for Exercising Such Rights)

(1) Data subjects may exercise their rights, including the right to access personal information and the rights to request the correction, deletion, or suspension of the processing of personal information, with respect to the Law Firm, in accordance with the Personal Information Protection Act and other relevant laws and regulations. In this regards, the Law Firm will take measures without delay in accordance with the Personal Information Protection Act and other relevant laws and regulations.

(2) The exercise of rights under Paragraph (1) may be performed through the data subject’s agent, such as a legal representative or attorney-in-fact, and in such cases, a power of attorney must be submitted in accordance with the Enforcement Rule of the Personal Information Protection Act.

(3) Data subjects shall not infringe on the personal information and privacy of the data subject or any other person processed by the Law Firm by violating the Personal Information Protection Act or other relevant laws and regulations.

Article 5 (Destruction of Personal Information)

(1) Any personal information that becomes unnecessary, such as when the retention period thereof under Article 1 has elapsed or the processing purposes thereof have been completed, will be destroyed by the Law Firm without delay after the date the processing of such personal information is deemed to be unnecessary, in accordance with the Personal Information Protection Act and other relevant laws and regulations, unless there is a reasonable cause not to do so.

(2) Printouts, documents, etc. on which personal information is recorded will be destroyed by shredding or incineration, and personal information in the form of electronic files will be destroyed by way of permanent deletion in a non-restorable way.

Article 6 (Measures to Ensure Security of Personal Information)

The Law Firm has taken the following measures to ensure the security of personal information.
1. Administrative measures: Establishing and implementing internal management plans, providing regular employee training, etc.
2. Technical measures: Managing the rights of access to personal information processing systems, etc.; installing access control systems; encrypting unique identification information, etc.; installing security programs.
3. Physical measures: Restricting access to computer rooms, data storage rooms, etc.

Article 7 (Change of Privacy Policy)

In the event that this Privacy Policy is changed by the Law Firm, the Law Firm will make notice of the time of such change and enforcement thereof and the details of the change.

Article 8 (Privacy Officer)

(1) The Law Firm is responsible for the overall management of personal information processing and has appointed a privacy officer as follows for the purposes of handling any complaints and requests for remedies from data subjects relating to personal information processing.

Privacy Officer	Name: Yong Gap Kim Position: Attorney-at-law Contact Information: 02-3477-8686, ygkim@law-lin.com
Privacy Office	Name of Office: General Affairs Office Head of Office: Ho Hyun Joo, Manager Contact Information: 02-3477-8500, hhjoo@law-lin.com

(2) Data subjects may refer all inquiries, complaints, and requests for remedies relating to personal information protection that arise in the course of using any services (or business) provided by the Law Firm to the privacy officer and the privacy office. The Law Firm will promptly respond to and handle any such matters referred by the data subject.