Thermo Lab Korea (hereinafter referred to as the “Company”) values users’ personal information and comply with all laws related to protection of personal information, including “Promotion of Information Network Utilization and Information Protection Act” and “Personal Information Protection Act.”
The Company informs you how personal information you provide is being taken and what it is used for and what steps are being taken to protect your personal information through privacy policy statement.

○ This Privacy Policy shall become effective on Feb 19, 2021.

1. Types of Personal Information Processed

The Company collects the following personal information for consultation and service use, etc. Users may refuse the collection of personal information.

ο Customer Support
-Name, contact information, e-mail, details of inquiry and other items directly entered by the client

ο The following information may be created and collected automatically during the process of using the services.
-User’s browser type and OS, access records (IP address, access time), cookies

2. Purpose of Personal Information Processing

The Company uses the personal information collected only for the following purposes nd shall obtain prior consent when the purpose of use changes.

-Receipt of Service Inquiry
-Processing of Inquiries and Complaints and Delivery of Notices

3. Processing and Retention Period of Personal Information

Personal information of users shall be destroyed, without delay, when the purposes of collecting and using the personal information have been achieved or when the user withdraws the consent on the collection and use of personal information.
Provided, personal information shall be retained with a consent of the user or for a period stipulated in relevant laws, as following:

ο Customer Support
-Retained Items: Name, contact information, details of the e-mail inquiry and other items entered by the client directly;
-Retention Period: at the time receiving consultation and inquiry and for 6 months after the completion of the consultation

-When users individually consented to providing to a third party;
-Pursuant to stipulation of a law or as requested by an investigative agency according to the procedures and methods stipulated in the law for the purposes of an investigation; or
-From time to time, the Company may recommend a job applicant to an affiliated company (subsidiary or affiliated company), and in such a case, the job application will be provided to the concerned company after obtaining a separate consent from the job applicant in advance.

5. Outsourcing of Personal Information Processing

The Company does not outsource the processing of personal information to another company and manages the personal information within the Company.

6. Procedure and Method of Personal Information Destruction

The Company shall destroy the personal information of users upon achieving the purposes of collection and use, as a rule. The following are the procedures and methods for personal information destruction:

ο Procedure for Destruction
-The information entered by users for inquiry or registration, etc. shall be stored in a separate database (a separate document box for physical documents) after achieving the purpose and will be destroyed according to internal regulations and the reasons for the information protection (see retention and usage period) by other relevant laws.
-Personal information stored in a separate database shall not be used for other purposes except in cases where it is not provided by law and used only for retention.

ο Method of Destruction
-Personal information stored in an electronic format shall be destroyed in such a way that renders it unrecoverable by any technical means.
-Personal information in the form of a physical document shall be destroyed by a paper shredder or incinerated.

7. Rights and Obligations of the Users and the Method of Exercising Such Rights

Users may request to delete or suspend processing of information. Any request to delete the information shall be made with the privacy manager, which shall be implemented without delay. Moreover, the Company guarantees the rights of a legal representative of a minor, under the age of 14, under the law. (Right to Request access, correction, deletion and suspension of processing of personal information of a child)

8. Technical and Administrative Measures to Ensure the Safety of Personal Information

In order to protect the personal information from loss, theft, leak, alteration or damage, the Company provides the following technical and administrative measures to secure safety of users’ personal information during processing.

ο Encryption of Personal Information
Important data related to personal information are protected through security measures, such as encryption during storage and transmission of the data.

ο Technical Measures Against Hacking, Etc.
The company makes the best efforts to prevent leaks and damages of users’ personal information from hacking or virus. Security programs are kept with the latest version to prevent leaks or damages to personal information and takes necessary measures to prevent other access to personal information.

ο Minimum Number of Employees in Processing Personal Information and Training
The employees processing personal information shall be limited to the persons actually performing the personal information tasks, including the privacy officer and privacy manager, etc., and emphasis on complying with the privacy policy are reinforced through regular education for the managers

9. Privacy Officer and Contact Information

The users can report any complaints related to the privacy of personal information during the use of the Company’s services to the privacy officer or the relevant department. The Company shall provide a satisfactory answer as soon as possible regarding the reports made by the users.

–Privacy Officer Seok Choi, CEO, 031)374-7102, choisk@tlksys.com
–Personal Information Manager Seok Choi, CEO, 031)374-7102, choisk@tlksys.com

If you need to report or consult other privacy violations, please contact the following agencies.
– KISA Privacy Center (privacy.kisa.or.kr / 118)
– Supreme Prosecutors’ Office of the Republic of Korea (www.spo.go.kr / 1301)
– Cyber Terror Response Center (cyberbureau.police.go.kr / 182)

10. Miscellaneous

Any additions, deletions and corrections of this privacy policy will be made public on the “Notices” section of the Company’s website from 7 days prior to the effective date of any such changes.
-Notification date : Feb 19, 2021
-Effective date : Feb 19, 2021