개인 정보 처리 방침
2018.08.01
※ This policy will be implemented from August 1, 2018.
'ESTsoft' (hereinafter referred to as the 'Company') values the personal information of job applicants and complies with the 'Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc.' The Company informs applicants of how their personal information is being used and what measures are being taken to protect personal information through its privacy policy. Should there be any changes to the personal information processing policy, the Company will announce it through the homepage's notices. If you have any questions about the changes, you are welcome to visit the ESTsoft homepage at any time to check.
1. Processed personal information items
The company allows job applications without a separate membership registration process and collects the following personal information through the website to provide job application opportunities:
1) Range of personal information collected during job application
- Required information: Photo, Name, Date of birth, Sex, Password for application modification, Email address, Mobile phone number, Application route, Military service details, Eligibility for merit-based veterans (including bonus rates for eligible candidates), Disability status (for eligible candidates, including details and level of disability), Alma mater, Academic background, Period of enrollment, Major and grades, Official transcript from last attended school, Career details (for experienced applicants), Level of skills possessed, Self-introduction
- Optional information: Marital status, Career details (for new entrants), Language and other qualifications, Awards and honors
2. Purpose of Personal Information Processing
1) Identification verification for job application, qualification review, recruitment progress status check, job application modification, delivering notices, handling inquiries, etc. to ensure smooth communication with applicants, management of future resource
Provision of Personal Information to Third Parties
1) The company will not use or provide personal information to a third party beyond the scope of personal information collection and usage purposes announced in Article 2, in principle. However, the following cases are exceptions:
- When applicants have agreed in advance to disclosure
- Other cases where it is deemed in good faith to be required by law (for example, at the request of government/law enforcement agencies under lawful procedures required by related laws)
2) Even in exceptional circumstances, when information is provided in accordance with relevant laws or at the request of investigative agencies, it is a principle to notify the concerned party. However, there may be instances where notification cannot be made due to legal reasons. We will ensure that information is not indiscriminately provided against the original purpose of collection and use.
3) Furthermore, the company will not entrust the applicant’s information to an external company without the applicant's consent. If such a need arises in the future, we will notify the applicant about the entrustee and the details of the entrusted tasks, and obtain prior consent if necessary.
4) Occasionally, the company may offer job proposals to job applicants for companies that have a special relationship with the company (subsidiaries, affiliates), and in such cases, individual contact will be made with the job applicant to go through the consent process before transferring the job application to the related company.
4 Personal Information Processing Consignment
To provide enhanced services, we may outsource the processing of your personal information to external agencies. When entrusting the processing of personal information, we will notify you in advance.
The outsourced personal information processing agencies and their content are as follows:
· Trustee: Midas IT Co., Ltd.
· Scope of entrustment: Operation of the recruitment website and related recruitment management system, and related complaints handling
· Shared information: Personal information on the job application form
· Retention and usage period of shared information: Until the deletion of the job application form by the recruiting company or the end of the entrustment contract
Processing and Retention Period of Personal Information
1) In principle, personal information is destroyed without delay after the purpose of collecting and using it has been achieved. However, personal information is stored for the period agreed upon at the time of collection if separate consent is obtained, and for a certain period as prescribed by relevant laws. However, if the applicant withdraws consent to provide personal information, the relevant personal information will be immediately deleted.
6 Personal Information Destruction Procedure and Method
1) The personal information of job applicants will in principle be destroyed without delay once the purpose of processing the personal information has been achieved. The company's personal information destruction procedure and method are as follows:
2) Destruction procedure
- The information entered by the user for job applications, etc., is transferred to a separate DB (in the case of paper, a separate file box) and stored for a certain period according to internal policies and other relevant legal reasons (refer to retention and usage period), after which it is destroyed.
- This personal information is not used for any other purpose than retention unless required by law.
3) Method of destruction
- Personal information printed on paper is destroyed by shredding or incineration.
- Personal information saved in electronic file format is deleted using technical methods that prevent the information from being reproduced.
7 User Rights, Obligations and Methods of Exercise
1) The personal information provided when applying for a job at the company can be freely accessed, modified, and deleted after identity verification (real-name verification) until the end of the recruitment process.
2) After the completion of the recruitment process, modification and deletion are not possible. However, if the applicant wishes, they can request deletion by contacting the customer service center or the personal information protection grievance department on the ESTsoft website, and we will delete it for you. The company processes the deleted personal information according to the provisions stated in the "Personal Information Processing and Retention Period Collected by the Company," and ensures that it cannot be accessed or used for any other purposes.
3) Users must not infringe upon their own or others' personal information and privacy that is being processed in accordance with this personal information processing policy in violation of the Personal Information Protection Act and other related laws.
4) In the case of children under the age of 14, the legal representative has the right to view and modify the child's personal information, and the right to withdraw consent for collection and use. At this time, the minimum personal information of the legal representative can be collected from the child.
8 Technical/Administrative Protective Measures for Personal Information
1) The company devises technical/administrative measures to ensure the safety of applicants' personal information, preventing loss, theft, leakage, alteration, or damage.
2) Password Encryption
- The password set during the company application process is encrypted, stored, and managed. Only the applicant knows it, and only the applicant can access and change personal information with that password.
3) Countermeasures against Hacking
- The company does its best to prevent the leakage or damage of applicants' personal information due to hacking or computer viruses. Data is regularly backed up to anticipate the damage to personal information, the latest antivirus programs are used to prevent any leakage or harm to the applicants' information, and encrypted communication is implemented to safely transmit personal information over the network. Also, intrusion prevention systems control unauthorized access from the outside, and we are striving to equip all possible technical devices to secure systems.
4) Minimization and Training of Personal Information Handling Staff
- The company's personal information handling staff is restricted to designated personnel. They are assigned separate passwords that are regularly renewed, given periodic training, and emphasized on the protection of the applicant's personal information.
5) Operation of a Dedicated Personal Information Protection Unit
- Through the company's internal personal information protection unit, we are making efforts to promptly correct and rectify any issues found by verifying the compliance with the company's personal information handling policy and the compliance of the staff. However, the company is not responsible for any issues arising from the leakage of personal information such as passwords or identification numbers due to the user's negligence or problems on the Internet.
Matters related to the installation and operation of devices that automatically collect personal information such as internet connection information files, and their refusal
The 'Company' uses cookies to provide users with personalized services.
Cookies are small data files sent from an HTTP server to a user's browser and are stored on the user's device. Cookies may record information about the website used and the user's personal information, and this information is shared with the server.
Users can set the web browser's options (based on IE) by selecting [Tools] > [Internet Options] > [Security] > [Custom Level] to allow all cookies, go through verification whenever a cookie is saved, or refuse the storage of all cookies.
10 Personal Information Protection Officer and Related Business Department Guide
1) You may report any personal information protection-related grievances that arise during your use of the company's online job application or other processes to the personal information protection officer or the responsible department. The company will provide a prompt and sufficient response to the reports of its users.
2) Personal Information Protection Officer
-Name : Bae Jae-hyun
-Affiliation : Management Planning Office
-Title : Director
-Email : public@estsoft.com
3) Personal Information Protection Department
-Name : Park Jae-sun
-Affiliation : Management Planning Office
-Title : Manager
-Email : public@estsoft.com
4) If you have any inquiries regarding personal information related to recruitment, please contact the department below.
- Department : People Partner Team
- Email : recruit@estsoft.com
5) Users can apply for dispute resolution or counseling to entities such as the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency's Personal Information Infringement Center in order to get remedy for personal information infringement. For further reports and consultations on personal information infringement, please contact the following institutions:
- Personal Information Infringement Report Center (Operated by the Korea Internet & Security Agency) (https://privacy.kisa.or.kr / dial without area code 118)
- The Supreme Prosecutors' Office Cybercrime Investigation Department (http://www.spo.go.kr / dial without area code 1301)
- Cyber Safety Bureau of the Korean National Police Agency (http://cyberbureau.police.go.kr / dial without area code 182)
- Personal Information Dispute Mediation Committee (https://www.kopico.go.kr/)
The duty of high ground 11
1) In the event of additions, deletions, or modifications to the current personal information processing policy, notice will be given through the 'Announcements' section of the homepage at least 7 days prior to the amendment. However, in the case of significant changes to user rights such as the collection and use of personal information and provision to third parties, notice will be given at least 30 days in advance.
2) Notice date: July 25, 2018
3) Implementation date: August 1, 2018
