Personal Information Management and Processing Policy
of Cargill Korea
Cargill Korea (the “Company”) considers users’ personal information with respect and importance and comply with the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc. and the relevant regulations.
In this Personal Information Management and Processing Policy of Cargill Korea Policy (this ”Policy”), the Company informs users how and for what purposes their personal information that they provided are utilized and also informs that what the Company does to protect such personal information.
If this Policy is amended or revised, the Company will inform you of such amendment or revision on our official homepage or by notice to each user.
This Policy becomes effective as of Jun. 21 2018.
Personal Information Collection Items
The Company collects personal information as set out below for membership registration, service applications, job applications and related services:
- Items of Collection: name, national registration number, log-in ID, passwords, mobile phone number, whether married or not, addresses and phone numbers of home and office, email address, scores of language tests, career records, army service records, school records, previous employers, positions held at the previous employers, compensation information at the previous employers, photos, family that applicants support, any other items on the job application form, IP addresses, cookies or other user record remained or retained from use of our services and processing thereof.
- Methods of collection: membership application, free consulting service application, job application or other event application
Purpose of Collection of Personal Information
The Company utilizes personal information that it collected for the following purposes:
- Provision of contents in the course of provision of service and performance of service contract, Service consulting, membership consulting
- Membership management (identification of members, protection from improper use of member information, confirmation of membership, confirmation of ages, claims management and customer service)
- Marketing and advertisement
- Recruiting purposes
- Tax law/regulation compliance including issuance of cash receipts, tax invoices and other tax documents
Period of retention and utilization of Personal Information
For the period that users use various services that the Company provides, the Company retains and utilizes users’ personal information for provision of services. If a user requests that the user wishes to deregister his or her membership or requests that the user wishes his or her personal information to be deleted, such user’s personal information is processed such that cannot be read or utilized. However, if any of the personal information of such user is required for membership management protecting from improper use, the Company may retain such user’s ID, name and email address for 6 months from the date of the user’s request.
-
Retention and Utilization Period per the Company’s internal policy
The Company retains users’ personal information for the purpose of registration of membership pursuant to the Company’s internal policy. -
Retention and Utilization Period per relevant laws
If any of users’ personal information needs to be retained to comply with relevant laws, the Company retains the information for the prescribed period per the relevant laws. In this case, the Company retains the information solely for the purpose prescribed by law. The period for such prescribed purposes is set out below:
-
To identify users
- Purpose: Compliance with the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc.
- Period: 6 months
-
To keep record of visits
- Purpose: compliance with the Protection of Communications Secrets Act
- Period: 3 months
-
To keep record of making or rescinding contracts
- Purpose: compliance with the Act on the Consumer Protection in Electronic Commerce, etc.
- Period: 5 years
-
To keep record of payment and provision of products
- Purpose: compliance with the Act on the Consumer Protection in Electronic Commerce, etc.
- Period: 5 years
-
To keep record of customer service and claims management
- Purpose: compliance with the Act on the Consumer Protection in Electronic Commerce, etc.
- Period: 3 years
Destruction of Personal Information
The Company without undue delay destroys users’ personal information after completion of the purpose of collection and utilization of such personal information. Methods of destruction are as follows:
- Personal information saved as electronic files are deleted and destroyed by a technical method which cannot replay such personal information.
- Personal information printed on papers is incinerated or ground.
Provision of Personal Information to Third Parties or Outsourcing
The Company does not, in principle, provide users’ personal information to any third parties. However, in following cases, the Company can provide such information to third parties:
- With the user’s prior consent
- If law requires or if competent government authorities require pursuant to the relevant law’s prescribed process and method
For provision of services, part of services related work are outsourced to third parties for processing, and such third parties that process users’ personal information per the Company’s policy and instruction for safe management of personal information in compliance with the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc.
Third parties who are provided with personal information | Scope and purpose of processing | Period for retention and utilization |
---|---|---|
Cognizant, Capgemini, Wipro, Standard Networks co. | System development and operation |
Until completion of service contract or deregistration of membership |
Tata Consultancy Services | Infra operation and data storage | |
Daham SLP, TaeKyung, Logo, Hansol Logistics, Daeshin, Hydex, , Youngdae, Jinyung. | Delivery of products | |
Neoh, DaeShin Information | delivery service management | |
CARGILL INVESTMENTS (CHINA) LTD NANJING BRANCH | Financial process management (accounting, payment, issuance of invoices) |
Transfer of Personal Information Overseas
Cargill is a global company that runs various businesses in many countries. Users’ personal information collected by the Company for the purposes set out in this Policy is saved in Cargill’s Singapore data center where Cargill’s APAC headquarter is located, and such personal information is managed and protected by relevant laws. Also, some of the Company’s finance affairs are processed and managed by Cargill Business Service located in Nanjing, China.
- Personal information transferred overseas: name, trade name, business registration number, national registration number, phone number, email address, address
- Countries where the personal information is transferred: Singapore, China
- Companies that are transferred with personal information: CARGILL ASIA PACIFIC HOLDINGS PTE LTD, CARGILL INVESTMENTS (CHINA) LTD NANJING BRANCH
- Time and method of transfer: as soon as membership application is submitted, by electronic network
- Period of retention and utilization of personal information by the companies who are transferred with such information: until completion of outsourcing contract or deregistration of membership
Consent or refusal to collection of personal information
The Company asks users for a prior consent to collect the users’ personal information for the prescribed purposes of collection and utilization and the users can reject to consent. However, if the users do not consent, such users cannot enjoy information and certain services that the Company provides.
Automatic collection of Personal Information
In the course of use of services that the Company provides or transaction processing, IP information , cookies or service use record may be created and collected automatically.
-
Purpose of use of cookies
The Company retains information collected from cookies anonymously and does not disclosure to any external parties. Cookies are information saved at the user’s computer and thus the users can set up or change its cookies environment. Cookies contain IP address information only and do not contain user’s name. - Retention of Cookies and Refusal thereto
- Users have options regarding implementation of cookies. Users can allow all cookies by setting up options on web browser, or can check each time cookies are saved, or can refuse for saving of cookies. In case refusal to saving of cookies, there may be difficulties for using of certain services that require log-ins.
- How to set up options for cookies on Internet Explorer
- Click on Internet Options under Tools
- Click on the tab of personal information
- Set up the level of personal information management
Rights or Exercise of Rights by Users or User’s legal guardians
Users can read, change their personal information on the Company’s homepage or request for deregistration of membership.
Persons below the age of 14 cannot be registered as members of the Company websites, but those persons could input information or put comments on the board without their parents’ consent.
Therefore, parents of children below the age of 14 should monitor their children with care for children not to upload any personal information.
If users wish to change their member information, they can do by themselves on the homepage after their ID and passwords. They can also email to the Company’s personal information protection manager via email.
If users wish to check their ID or passwords, they can put int their information for identification and ID and passwords are emailed to the email address they put int at the time of membership application. They can also request the same via email.
Users can withdraw their consent for collection, utilization or provision of personal information anytime. They can withdraw on the Company homepage or by email to the Company’s personal information protection manager.
The Company allows users to withdraw their consents for collection of personal information by the same method and process as those that users did at the time of consent for collection of the personal information.
Personal Information Protection Manager
In order to protect the users’ personal information and to process any complaints in relation thereto, the Company appoints the following person as the Company’s personal information protection manager.
Privacy Officer
Name: Park, Byoung Kwon
Phone: 031-710-6052
Email: [email protected]
Users can report any complaints, difficulties or problems relating to their personal information in the course of use of the Company’s services to the Company’s personal information protection manager.
Remedies for invasion or infringement of personal information
Please contact following organizations for reports or consultation regarding infringement of personal information rights.
- Privacy Infringement Report Center (privacy.kisa.or.kr / Phone no. 118)
- Cyber Crime Investigation Unit, Supreme Prosecutor’s Office (www.spo.go.kr / Phone no. 1301)
- Cyber Terror Response Center, National Police Agency (cyberbureau.police.go.kr / Phone no. 182)