Consent to the Collection and Use of Personal Information

21st Century Law Firm collects the minimum personal information necessary to process online enquiry submissions, as set out below.
Please review the following information concerning the collection and use of personal information carefully before giving your consent.

Purpose of the Collection and Use of Personal Information

Article 1 (Purpose of Processing Personal Information) Personal information will not be used for any purpose other than those stated below. If the purpose changes, additional consent will be obtained before processing.

1. Consultation Call: a telephone call in response to an online enquiry.

Article 2 (Categories of Personal Information Processed)
This website collects and processes the following categories of personal information.

1. Required Information: name and contact details.

Article 3 (Processing and Retention Period)
In accordance with Article 6 of the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce, Etc., personal information is retained for five years and then deleted. However, where a client requests deletion, the information will be deleted without delay.

Article 4 (Provision of Personal Information to Third Parties)
Personal information collected and retained by the Korean Standards Association will not be provided to a third party without the user’s consent. However, except where doing so may unfairly infringe the interests of the data subject or a third party, the information may be used for another purpose or provided to a third party in the following circumstances.

1. Where separate consent has been obtained from the data subject.
2. Where specifically provided by law or necessary to comply with a legal obligation.
3. Where prior consent cannot be obtained because the data subject or legal representative is unable to express an intention or cannot be located, and processing is clearly necessary to protect the urgent interests of the life, body or property of the data subject or a third party.
4. Where information is provided in a form that does not permit identification of a specific individual for statistical compilation or academic research.
5. Where statutory duties under another law cannot be performed without using the information for another purpose or providing it to a third party, following review and resolution by the Personal Information Protection Commission.
6. Where provision to a foreign government or international organisation is necessary for the implementation of a treaty or other international agreement.
7. Where necessary for a criminal investigation or the institution and maintenance of a prosecution.
8. Where necessary for the performance of judicial duties by a court.
9. Where necessary for the execution of a sentence, custodial measure or protective disposition.
This website does not otherwise provide personal information to third parties in connection with its processing activities.

Article 5 (Outsourcing the Processing of Personal Information)
As a general rule, the Korean Standards Association does not outsource the processing of personal information without the user’s consent. Where processing is outsourced to a third party, the scope of the outsourced work and the service provider will be posted on the relevant website.

Article 6 (Destruction of Personal Information)
The Korean Standards Association follows the procedures and methods below when destroying personal information.

1. Destruction Procedure: As a general rule, personal information is destroyed without delay once the retention period has expired or the purpose of processing has been achieved, unless it must be retained under another law.
2. Method of Destruction: Electronic information is destroyed by technical means that prevent recovery. Personal information printed on paper is shredded or incinerated.

Article 7 (Security Measures)
In accordance with Article 29 of the Personal Information Protection Act, the Korean Standards Association implements the technical, administrative and physical measures required to safeguard personal information.

Article 8 (Data Protection Officer)
To protect personal information and handle related matters, the Korean Standards Association designates a data protection officer, responsible personnel, and a department and officer to receive and process access requests.

Article 9 (Remedies for Infringement of Rights)
A data subject may seek dispute resolution or counselling from the Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Centre of the Korea Internet & Security Agency. For other reports or consultations, please contact the institutions below.

1. Personal Information Dispute Mediation Committee: 118, extension 2 (without area code) (privacy.kisa.or.kr)
2. Information Protection Mark Certification Committee: +82-2-580-0533~4 (http://eprivacy.or.kr)
3. Cybercrime Investigation Division, Supreme Prosecutors’ Office: +82-2-3480-3582 (http://www.spo.go.kr)
4. Cyber Terror Response Centre, Korean National Police Agency: 1566-0112 (http://cyberbureau.police.go.kr)

Article 10 (Amendments to the Privacy Policy)
This Privacy Policy applies from its effective date. Any additions, deletions or amendments arising from changes in laws or policies will be announced through the notices section of the website (http://www.gwangshin.co.kr/).

Effective Date: 3 September 2024 (change of Data Protection Officer)

Name
Contact Number
Location
Enquiry Details
Verification Code	Please enter all numbers shown in the order displayed.