M.Office Privacy Policy
Samsung SDS Co., Ltd. (including its subsidiaries, hereinafter referred to as "Samsung SDS", “Company”, or “we”) lawfully processes and securely manages personal data to protect the freedom and rights of data subjects in compliance with applicable laws and regulations of personal data, such as the 「Personal Information Protection Act」 of Korea. We hereby inform of the procedures and standards for handling personal data related to M.Office Service and relevant websites (hereinafter collectively referred to as the “Services” or “M.Office”), which is also in accordance with Article 30 of the 「Personal Information Protection Act」 of Korea. And, in order to handle the grievances related to this quickly and smoothly, we establish and disclose the following Samsung SDS M.Office Privacy Policy (hereinafter referred to as “Privacy Policy”).
This Privacy Policy contains the following contents.
1. PURPOSE OF PROCESSING YOUR PERSONAL INFORMATION
2. TYPES OF YOUR PERSONAL INFORMATION TO BE PROCESSED
3. PROCESSING OF YOUR PERSONAL INFORMATION AND RETENTION PERIOD
4. PROCESSING OF PERSONAL INFORMATION OF CHILDREN UNDER THE AGE OF 14
5. PROCEDURE AND METHOD OF DESTROYING YOUR PERSONAL INFORMATION
6. ENTRUSTMENT OF PERSONAL INFORMATION PROCESSING
7. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION
8. MEASURES TO ENSURE THE SAFETY OF YOUR PERSONAL INFORMATION
9. COOKIES
10. YOUR PRIVACY RIGHTS AND EXERCISE METHOD
11. HOW TO CONTACT US
12. REMEDIES FOR INFRINGEMENT OF YOUR PRIVACY RIGHTS
13. UPDATES
1. PURPOSE OF PROCESSING YOUR PERSONAL INFORMATION
We process your personal information for the following purposes. Your personal information will not be used for any purpose other than the following purposes, and if the purpose of processing is changed, necessary measures will be taken, such as obtaining separate consent, which is also in accordance with Article 18 of the 「Personal Information Protection Act」 of Korea.
▶ M.Office User Authentication
- We process personal information for the purposes of identifying and authenticating the individual in M.Office.
▶ Application processing and information inquiry in M.Office
- We process personal information for the purpose of processing applications and searching information in M.Office.
※ We will not collect, use, or share behavioral information for online customized advertisements.
※ We will not use profiling or automated decision-making processes. A human decision maker will always be involved when a decision is made regarding you.
※ We will not sell any personal information of users
2. TYPES OF YOUR PERSONAL INFORMATION TO BE PROCESSED
We collect and use your personal information within the minimum necessary scope to provide the Services.
▶ Your personal information processed without consent
- There are no personal information items processed without the consent of the information subject.
▶ Types of your personal information processed with your consent
- We are processing the following your personal information with the consent, which is also in accordance with Article 15, Paragraph 1, Subparagraph 1 and Article 22 Paragraph 1, Subparagraph 7 of the 「Personal Information Protection Act」 of Korea.
- M.Office User Authentication and Application processing and information inquiry in M.Office
. Name, Employee number, Title, Company code, Department code, Department Name, Knox Portal ID, E-mail, Model of mobile phone
▶ In addition, the following information may be automatically generated and collected during your use of the Services
- Information collected during visiting sessions: User’s Activity log
※ We will not collect “sensitive information”, such as racial or ethnic origin opinions, political opinions, religious or philosophical beliefs, trade-union membership, genetic and biometric data processed solely to identify a human being, a person’s sex life or sexual orientation.
3. PROCESSING OF YOUR PERSONAL INFORMATION AND RETENTION PERIOD
We will retain your personal information for the period which you have consented at the time of collection or as otherwise required by applicable laws and regulations.
The processing and retention periods for each category of personal information is as follows:
▶ Provision of M.Office: Up to 1 (one) day after the user leaves the company.
4. PROCESSING OF PERSONAL INFORMATION OF CHILDREN UNDER THE AGE OF 14
We recognize the particular importance of protecting privacy where children are involved. We do not knowingly collect personal information online from children under the age of 14.
5. PROCEDURE AND METHOD OF DESTROYING YOUR PERSONAL INFORMATION
We destroy your personal information without delay when it is no longer needed, such as when the retention period for your personal information has expired or the purpose for which it was collected has been achieved.
Even after the retention period for your personal information has expired or the purpose for which it was collected has been achieved, if your personal information is required to be retained under other laws and regulations, your personal information will be stored in a separate storage location such as a separate database.
The procedure and method of destroying your personal information are as follows:
▶ Destruction procedure
- We select the personal information of users whose personal information is subject to destruction and destroy the personal information according to the internal destruction policy.
▶ Destruction method
- We destroy user’s personal information recorded and stored in electronic file format in such a way that the record cannot be reproduced, and user’s personal information recorded and stored in paper documents is shredded with a shredder or destroyed by incineration.
6. ENTRUSTMENT OF PERSONAL INFORMATION PROCESSING
We entrust some of the tasks required for providing Services to an outside service provider, ensuring necessary measures to safely manage personal information in accordance with relevant laws. The followings are the entrusted companies and the entrusted work.
▶ Entrusted company: Hyosung ITX
- Entrusted work: Responding and processing calls to customer centers
▶ Entrusted company: Samsung SDS Vietnam Co., Ltd (contact informaiton: help.sdsvietnam@samsung.com)
- Entrusted work: M.Office system operation and maintenance
▶ Re-entrusted company: CMC Global Co., Ltd (Re-entrusted by Samsung SDS Vietnam Co., Ltd) (contact informaiton: gdc-support@cmcglobal.vn)
- Re-entrusted work: M.Office system operation and maintenance
▶ Entrusted company: Openhands.CO.,LTD
- Entrusted work: Application QA
When we enter into an entrustment contract, we specify in the contract the responsibilities such as prohibition of processing personal information for purposes other than the performance of the entrusted work, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the re-entrusted company, and compensation for damages, and supervise whether the entrusted company safely processes personal information, which is also in accordance with Article 26, Paragraph 6 of the 「Personal Information Protection Act」 of Korea.
If the entrusted company re-entrusts the personal information processing work to another service provider, the entrusted company must obtain our consent, which is also in accordance with Article 26, Paragraph 6 of the 「Personal Information Protection Act」 of Korea.
If the content of entrusted work or the entrusted company changes, we will disclose it without delay through this Privacy Policy.
Overseas processing of your personal information is described in “7. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION”.
7. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION
We will transfer your personal information to third party entities outside Republic of Korea as follows:
▶ Entrustment (international transfer)
- Legal basis: Article 28-8, Paragrasph 1, Subparagraph 3, Item (a) of the 「Personal Information Protection Act」 of Korea
- Country, date of transfer and method of transfers
a) Country: Vietnam
b) Date of transfer: When the entrusted company employee processes the user's personal information
c) Method of transfer: Grant system access rights only
▶ Entrusted company: Samsung SDS Vietnam Co., Ltd
- Address: Lot CN05, YP6 Road, Yen Phong Industrial Park, Yen Trung Commune, Bac Ninh Province, Vietnam
- Contact informaiton: help.sdsvietnam@samsung.com
- Entrusted work: My M.Office system operation and maintenance
▶ Re-entrusted company: CMC Global Co., Ltd (Re-entrusted by Samsung SDS Vietnam Co., Ltd)
- Address: CMC Tower, 11 Duy Tan Street, Cau Giay Ward, Hanoi City
- Contact informaiton: gdc-support@cmcglobal.vn
- Re-entrusted work : My M.Office system operation and maintenance
▶ Types of personal information transferred: Name, Employee number, Title, Company code, Department code, Department Name, Knox Portal ID, Model of mobile phone
- Retention period: Until the end of entrustment contract
- How to refuse the transfer of your personal information, procedures and effects of refusal: You have the option to refuse the transfer of your personal information to these entrusted companies by withdrawing from your membership please contact us at (☎ 02-1661-3311). However, please note that this will prevent you from using the Services, as the systems related to the Services are operated and maintained by these entrusted companies.
8. MEASURES TO ENSURE THE SAFETY OF YOUR PERSONAL INFORMATION
We are taking the following measures to ensure the security of your personal information.
▶ Administrative Measures: Establishment and implementation of internal management plans, operation of a dedicated organization, and regular employee training.
▶ Technical Measures: Management of access rights to personal data systems, installation of access control systems, encryption of your personal information, installation and update of security programs
▶ Physical Measures: Access control to computer rooms, data storage rooms, etc.
9. COOKIES
We do not use 'cookies' that store and retrieve the usage information from you.
10. YOUR PRIVACY RIGHTS AND EXERCISE METHOD
You have the right to access, transfer, correct, delete, transfer and restrict the processing of your personal information at any time (hereinafter referred to as “Privacy Rights”).
※ Requests to exercise Privacy Rights of children under the age of 14 must be made by parent or legal guardian, and data subjects who are minors over the age of 14 may exercise their Privacy Rights by themselves or through their parent or legal guardian.
The exercise of Privacy Rights can be made in written, e-mail, or fax (FAX), which is also in accordance with Article 41, Paragraph 1 of the 「Enforcement Decree of the Personal Information Protection Act」 of Korea, and we will respond without delay.
Pursuant to Article 42-2, Paragraph 1 of the Enforcement Decree of the "Personal Information Protection Act", you may request that your information be transferred to you in accordance with the following methods and
procedures:
- Information subject to transfer request: Personal information described in "2. TYPES OF YOUR PERSONAL INFORMATION TO BE PROCESSED"
- Method of requesting transfer: Request through the Customer Center (☎ 02-1661-3311)
- Method of transmission and verification: Provided with encryption via email
- The deletion of your personal information can also be done by withdrawing through the customer center (☎ 02-1661-3311).
The exercise of Privacy Rights can also be done through an agent, such as a legal guardian or authorized person. In this case, a power of attorney must be submitted.
The right to access and the right to restrict the processing of your personal information may be limited in accordance with applicable laws and regulation, including Article 35, Paragraph 4 and Article 37, Paragraph 2 of the 「Personal Information Protection Act」 of Korea.
If other laws and regulation require the collection of your personal information, you may not exercise the right to delete your personal information.
When you or your agent exercise Privacy Rights or submit a request to us, we will verify your identity via our internal authentication procedures.
You can exercise Privacy Rights or submit a request to us, and we will respond and handle your inquiries without delay. Please contact us at the following contact details:
▶ Service Department
- Department: Common Development Group
- Address: 123, Olympic-ro 35-gil, Songpa-gu, Seoul, Republic of Korea
- Contact : 02-1661-3311, moffice@samsung.com
11. HOW TO CONTACT US
We are responsible for the processing of your personal information, and have designated Chief Privacy Officer and Service Department to handle complaints and provide remedies related to the processing of personal information. Please contact us at:
▶ Chief Privacy Officer
- Chief Privacy Officer : Legal service team leader
- Department : Privacy Management Group
- Contact : 02-6155-1118, privacy.sds@samsung.com
※ You will be connected to the department responsible for personal information protection.
▶ Service department
- Department : Common Development Group
- Contact : : 02-1661-3311, moffice@samsung.com
You can contact Chief Privacy Officer and Service Department for any inquiries related to your personal information protection, complaints, and damage relief that occurred while using the Services, and we will respond without delay.
12. REMEDIES FOR INFRINGEMENT OF YOUR PRIVACY RIGHTS
If you are not satisfied with the results of complaint handling or damage relief by us or if you need to report or consult on additional your personal information infringement, please contact the following government.
▶ Personal Information Dispute Mediation Committee: 1833-6972 (without area code) (www.kopico.go.kr)
▶ Personal Information Infringement Report Center: 118 (without area code) (privacy.kisa.or.kr)
▶ National Police Agency: 182 (without area code) (ecrm.cyber.go.kr)
We guarantee Privacy Rights and strives to provide advice and remedy for damages that occurred while using the Services. If you need to report or consult, please contact us at:
▶ Service Department
- Department: Common Development Group
- Contact: 02-1661-3311, moffice@samsung.com
13. UPDATES
- This Privacy Policy shall go into effect from the effective date stated at the top.
- Previous Privacy Policies can be found in the list above.
Article 1
Enter English content here.