PLMICROMED Co., Ltd. (hereinafter referred to as “PLMICROMED”) establishes and discloses the following Privacy Policy in accordance with Article 30 of the Personal Information Protection Act, in order to protect the personal information of data subjects and to handle related complaints promptly and efficiently.
○ This Privacy Policy shall take effect from September 1, 2025.
Article 1 (Purpose of Processing Personal Information)
PLMICROMED processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those specified below, and in the event of a change in the intended purpose of use, necessary measures such as obtaining separate consent will be taken in accordance with Article 18 of the Personal Information Protection Act.
1. Provision of goods or services
Personal information is processed for the purpose of providing services.
Article 2 (Processing and Retention Period of Personal Information)
① PLMICROMED processes and retains personal information within the period of retention and use of personal information as prescribed by relevant laws, or within the period of retention and use of personal information consented to by the data subject at the time of collection.
② The retention periods for each category of personal information are as follows:
• 1. Provision of goods or services
Personal information related to the provision of goods or services shall be retained and used for the above purpose from the date of consent to collection and use until one (1) year.
• Basis for retention: Provision of services
• Relevant laws: Records on the collection, processing, and use of credit information – 3 years
• Exceptions: —
Article 3 (Rights and Obligations of Data Subjects and Legal Representatives, and Methods of Exercise)
① The data subject may, at any time, exercise rights such as requesting access to, correction of, deletion of, or suspension of processing of personal information with respect to PLMICROMED.
② The exercise of rights under Paragraph ① may be carried out through written request, e-mail, facsimile (FAX), etc., in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and PLMICROMED shall take prompt measures without delay.
③ The exercise of rights under Paragraph ① may also be carried out through the data subject’s legal representative or an authorized agent. In such cases, a power of attorney in the form prescribed in Annex Form No. 11 of the “Public Notice on the Methods of Processing Personal Information (No. 2020-7)” must be submitted.
④ Requests for access to and suspension of processing of personal information may be restricted pursuant to Articles 35(4) and 37(2) of the Personal Information Protection Act.
⑤ Requests for correction or deletion of personal information cannot be made if the personal information is specified as a subject of collection under other laws.
⑥ When a request for access, correction, deletion, or suspension of processing is made pursuant to the rights of the data subject, PLMICROMED shall verify whether the requesting party is the data subject himself/herself or a duly authorized representative.
Article 4 (Items of Personal Information Processed)
① PLMICROMED processes the following items of personal information:
• 1. Provision of goods or services
• Required item: E-mail
• Optional item: E-mail
Article 5 (Destruction of Personal Information)
① PLMICROMED shall, without delay, destroy personal information when the retention period has expired, the purpose of processing has been achieved, or the personal information otherwise becomes unnecessary.
② Notwithstanding the expiration of the retention period or achievement of the processing purpose, if the personal information must continue to be preserved under other applicable laws, such personal information shall be transferred to a separate database (DB) or preserved in a different storage location.
1. Legal basis: —
2. Items of personal information to be preserved: Account information, transaction dates
③ The procedures and methods for destroying personal information are as follows:
1. Destruction procedure
PLMICROMED selects personal information for which grounds for destruction have arisen and destroys it with the approval of PLMICROMED’s Personal Information Protection Officer.
2. Destruction method
o Personal information in electronic file format shall be destroyed using technical methods that prevent the records from being restored.
o Personal information printed on paper shall be destroyed by shredding or incineration.
Article 6 (Measures to Ensure the Security of Personal Information)
PLMICROMED takes the following measures to ensure the security of personal information:
1. Minimization and training of personnel handling personal information
Employees who handle personal information are designated and limited to specific persons, and measures are implemented to manage personal information in a minimized manner.
2. Encryption of personal information
Users’ personal information, such as passwords, is encrypted and stored/managed so that only the individual can know it. Important data is also protected by encrypting files and transmission data, or by using separate security functions such as file locking.
3. Restriction of access to personal information
Necessary measures are taken to control access to personal information through the granting, modification, and revocation of access rights to the database system processing personal information, and unauthorized external access is blocked using intrusion prevention systems.
Article 7 (Matters Concerning the Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)
PLMICROMED does not use “cookies” or any other automatic data collection devices that store and retrieve users’ information.
Article 8 (Personal Information Protection Officer)
① PLMICROMED designates the following Personal Information Protection Officer who is responsible for overseeing all tasks related to the processing of personal information, and for handling complaints and remedying damages of data subjects in connection with personal information processing:
• ▶ Personal Information Protection Officer
• Name: Sun-Kyung Im
• Contact: +82-55-381-1345 / E-mail: info@plmicromed.com
② Data subjects may contact the Personal Information Protection Officer and the responsible department regarding any inquiries, complaints, or remedies for damages related to personal information protection that arise while using PLMICROMED’s services (or business). PLMICROMED will respond to and handle such inquiries without delay.
Article 9 (Request for Access to Personal Information)
Data subjects may request access to their personal information pursuant to Article 35 of the Personal Information Protection Act through the department listed below. PLMICROMED will make every effort to ensure that requests for access to personal information are processed promptly.
Article 10 (Remedies for Infringement of Rights)
In order to seek relief from personal information infringement, data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency (KISA), or other relevant organizations. For reporting or consultation regarding other personal information infringements, please contact the following institutions:
1. Personal Information Dispute Mediation Committee: ☎ 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center (KISA): ☎ 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors’ Office: ☎ 1301 (www.spo.go.kr)
4. National Police Agency: ☎ 182 (ecrm.cyber.go.kr)
A person whose rights or interests have been infringed due to a disposition or omission by the head of a public institution in response to a request made pursuant to Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), or Article 37 (Suspension of Processing of Personal Information, etc.) of the Personal Information Protection Act may file an administrative appeal in accordance with the Administrative Appeals Act.
※ For further details on administrative appeals, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).
Article 11 (Changes to the Privacy Policy)
① This Privacy Policy shall take effect from September 1, 2025.
