HCG

EN KR
Privacy Policy

HCG (Human Consulting Group) establishes and discloses the following privacy policy in compliance with Article 30 of the Personal Information Protection Act to safeguard the personal information of data subjects and to ensure the prompt and seamless handling of related complaints.

Article 1. Personal Information Processing Purpose
Process personal information for the following purposes: The personal information being processed shall not be used for any purpose other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent under Article 18 of the Personal Information Protection Act will be implemented.
  1. 1. Subscribe and manage website membership
    • Personal information is processed with the consent of the information subject for the purpose of responding to inquiries about services and products of HCG and providing related information.
  2. 2. Services
    • Personal information is processed with the consent of the information subject to provide services such as HR system maintenance and payroll service.
Article 2. Processing and Retention Period of Personal Information
① HCG processes and retains personal information within the period of retention and use of personal information under the Act or the period of personal information received consent when collecting personal information from the information subject.
② Each person's personal information processing and retention period is as follows.
  1. 1. Subscription and management of website membership: Until withdrawal of HCG homepage
  2. 2. Service Delivery: Until the termination of the service supply and payment and settlement of charges discussed with the customer. However, if the following reasons apply, until the end of the relevant reason:
    • 1) If an investigation or investigation in violation of related laws is in progress, until the termination of the relevant investigation or investigation
    • 2) Records of transactions, such as marking, advertising, contract details, and implementation under the 「Act on the Protection of Consumers in Electronic Commerce, etc. 」
      • - Records of indications and advertisements: 6 months
      • - Supply records of contracts or subscription withdrawal, payment, goods, etc.: 5 years
      • - Records of consumer complaints or dispute handling: 3 years
    • 3) Archive of communication fact verification data under Article 41 of the 「Communication Secret Protection Act」
      • - Subscriber telecommunication date and time, counterparty's subscriber number, frequency of use, and location tracking data of the sending base station: 1 year
      • - Computer communication, Internet log records, and location tracking data: 3months
Article 3. Items for processing personal information
HCG collects the following personal information for smooth customer support and various services, as outlined below. You have the right to refuse to consent to the collection of 'mandatory information,' and you can also refuse to consent to the collection of 'optional information' beyond the mandatory details. If you do not agree to the collection of mandatory information, it may limit your use of our services.
Service name Processing Purpose Items Retention/Usage Period
Homepage Product Inquiry and Consultation - Required: Service Type, Company Name, Name, Contact Info. (Company), Mobile Number, Department, Email, Application and Inquiry Details, Preferred Consultation Time, how came to know about HCG 1year
HelpDesk Customer Support - Required: ID, Password, Name, Company, General phone number, Mobile phone, Email.
- Optional: Primary Job Responsibilities, External Title/Position
Membership Withdrawal or Consent Withdrawal
Year-end Tax Settlement Education Support - Required: Primary Job Responsibilities, Name, Mobile Phone, Email
- Optional: Position, Affiliation (Department), Office Phone, Address, Application Type, Certificate Issuance Status
Service Subscription Period
JaDE/PO HR/Payroll Outsourcing Services for Clients - Required
ID, Password, Employee ID, Name(in Korean), Company Name, Personal Identification Number, Department, Position, Date of Employment, Date of Resignation
- Optional
Mobile Number, Office Number, Landline Number, Email, Name(in English, Chinese characters), Gender, Photo, Date of birth, Marital status, Wedding anniversary, Home address, Position, Title, Date of Employment, Date of Resignation, Family Information, Education, Language skills, Certification, Career information, Appointment Information, Rewards and Punishments, Military Service Information, Attendance, location Payroll, Account, Employee Benefits, Performance, Education, Recruitment
Service Subscription Period
Performance Plus Performance Management Service for Client - Required : Email, Password, Company Name Department, Administrator, Service Usage Information Service Subscription Period
Article 4. Outsourcing of Personal Information Processing
HCG is processing the following personal information items:
  1. ① HCG has entrusted the following personal information processing tasks to ensure the smooth handling of personal information.
    Service Name Recipient of Outsourcing (Processor) Outsourced Task
    JaDE HR Service OCI(Chuncheon Region) Cloud Service Utilization
    PO Payroll Outsourcing OCI(Chuncheon Region)
    KT Cloud(Mok-dong ZONE)
    Cloud Service Utilization
    Performance Plus Performance Management Service AWS(Seoul Region) Cloud Service Utilization
  2. ② HCG, when entering an outsourcing contract, complies with Article 26 of the Personal Information Protection Act, and specifies matters such as the prohibition of processing personal information beyond the purpose of performing the outsourced task, technical and administrative protective measures, restrictions on re-outsourcing, and the management and supervision of the contractor, as well as liability for damages, in the contract or other documents. HCG also oversees whether the contractor securely processes personal information.
  3. ③ If the content of the entrusted task or the contractor changes, we will promptly disclose it through this Privacy Policy.
Article 5. Procedure and Method of Personal Information Destruction
① HCG promptly destroys the relevant personal information when it becomes unnecessary due to the expiration of the retention period or the achievement of the processing purpose. However, in cases where the purpose is to provide outsourced HR/payroll services for clients, it is processed in accordance with the internal processing standards of the client.
② Despite the expiration of the personal information retention period agreed upon with the data subject or the achievement of the processing purpose, it is necessary to continue retaining the personal information in accordance with other laws, the information will be moved to a separate database (DB) or stored in a different location.
③ The Procedure and methods of destruction of personal information are as follows.
  1. 1. Destruction Procedure
    • HCG selects personal information for destruction when the reason for disposal arises and, with the approval of HCG's Data Protection Officer, proceeds to destroy the personal information. However, in cases where the purpose is to provide outsourced HR/payroll services for clients, it follows the internal processing standards of the client.
  2. 2.Destruction Method
    • HCG destructs electronically recorded and stored personal information to ensure it cannot be reproduced, and paper documents containing personal information are shredded or incinerated for destruction.
Article 6. Rights, Duties, and Methods of Exercising Rights and Obligations of Data Subjects and Legal Representatives
① The information subject may exercise the following privacy rights to HCG at any time.
  1. 1. Request for Personal Information Access
  2. 2. Request for Correction in Case of Errors or Inaccuracies
  3. 3. Request for deletion
  4. 4. Request for processing suspension
② Exercising the rights under paragraph 1 can be done with HCG through written documents, email, facsimile (FAX), etc., in accordance with the format provided in Attachment No. 8 of the Personal Information Protection Act Enforcement Rules. HCG will promptly act in response to such requests.
③ Exercising the rights under paragraph 1 can be done through a legal representative of the data subject or a person authorized by the data subject. In this case, you must submit a power of attorney in accordance with the format provided in Attachment No. 11 of the Personal Information Protection Act Enforcement Rules.
④ Requests for the access to personal information and suspension of processing may be restricted in accordance with Article 35, Paragraph 4, and Article 37, Paragraph 2 of the Personal Information Protection Act, which may limit the rights of the data subject."
⑤ Requests for the correction and deletion of personal information cannot be made when that personal information is specified as the subject of collection under other laws.
⑥ HCG verifies whether the requester of an inspection in accordance with the rights of the data subject, a request for correction or deletion, or a request for suspension of processing is the data subject or a legitimate representative.
Article 7. Measures to secure safety of Personal Information
HCG takes the following measures to ensure the security of personal information.
  1. 1.Management Measures: Establishing an internal management plan. Implementation, regular staff training, etc.
  2. 2. Technical Measures: Management of access rights such as personal information processing systems, installation of access control systems, encryption of unique identification information and Personal location information, installation of security programs, etc.
  3. 3. Physical Measures: Control access to computer rooms, data storage rooms, etc.
Article 8. Installation, Operation, and Refusal of Devices Collecting Personal Information Automatically
① HCG uses 'cookies' to store and retrieve usage information in order to provide individualized customized services to users.
② A 'cookie' is a small piece of information sent by the server (http) used to operate a website to the user's computer browser, and it can also be stored on the hard drive of users' PC.
  • 1. Purpose of using cookies: Cookies are used to track and understand user visits and usage patterns for each service and website visited by the user, popular search terms, and security access status in order to provide users with optimized information.
  • 2. Installation, Operation, and Refusal of Cookies: You can refuse to store cookies by adjusting the options in the Tools > Internet Options > Privacy menu in your web browser.
  • 3. If you refuse to store cookies, it may cause difficulties in using customized services
Article 9. Matters Concerning the Collection, Use, and Refusal of Behavioral Information.
HCG does not collect, use, or provide behavioral information for online personalized advertisements and similar purposes.
Article 10. The Personal Information Protection Officer
① HCG takes overall responsibility for personal information processing and has designated a Data Protection Officer as follows to oversee personal information processing and handle complaints and remedies related to data subjects' personal information."
② Data subjects can inquire about all matters related to personal information protection, complaints, and remedies related to HCG's services through the Data Protection Officer and the relevant department. HCG will respond to and process inquiries from data subjects promptly."
Article 11. Request for Personal information Access
Data subjects can request access to personal information under Article 35 of the Personal Information Protection Act to the following department. HCG will make efforts to ensure that data subjects' requests for access to personal information are processed promptly.
  • ▶ Personal Information Access Department
Article 12. Remedies for Rights Violation
Data subjects can inquire about remedies, consultations, etc., for personal information breaches with the following agencies. These agencies are separate entities from HCG. If you are not satisfied with HCG's internal personal information complaint processing or remedies and need more detailed assistance, please contact them.
  1. 1. Personal Information Dispute Mediation Committee: 02-2100-2499 (www.kopico.go.kr)
  2. 2. Personal Information Infringement Reporting Center: (without a national number) 118 (privacy.kisa.or.kr)
  3. 3. Supreme Prosecutors' Office Cybercrime Investigation Team: 02-3480-3571 (www.spo.go.kr)
  4. 4. Cyber Security Agency of the National Police Agency: (without a national number) 182 (www.cyberbureau.police.go.kr)
Article 13. Installation and Operation of Visual Data Processing Devices
HCG has installed and is operating video information processing equipment as follows.
  1. 1. Reasons and Purpose for the Installation of Video Information Processing Equipment: The safety of HCG's facilities and fire prevention
  2. 2. Number of Installations, Installation Locations, and Coverage Area: "Installed at Pangyo Center - 2 Units, Covering Entrances and Office Spaces
  3. 3. Responsible Manager, Department in Charge, and Authorized Personnel for Video Information Access
    • - Pangyo Center: BSS Center: Kim Eun Ji Manager
  4. 4. Recording Time, Storage Duration, Storage Location, and Processing Method for Video Information
    • - Recording Time: 24-Hour Recording.
    • - Storage Duration: Recording for a Period of 30 Days from the Time of Capture.
    • - Storage Location, and Processing Method for Video Information: S1(SECOM) Data Center, to be Deleted After the Expiry of the Storage Period
  5. 5. Methods and Locations for Accessing Video Information: Request Access to the Center's Responsible Manager
  6. 6. Actions Taken in Response to Requests for Viewing Video Information by Data Subjects.
    • - To access personal video information, individuals must submit a request in the form of an existence confirmation claim, and access is granted only when the individual is clearly captured in the footage or when it is necessary for the protection of the individual's life, body, or property.
Article 14. Processing of personal location information
HCG process personal location information in accordance with the Location Information Act (hereinafter referred to as the 'Location Information Act')
  1. ① Purpose of Processing Personal Location Information and Retention Period
    Service Name Purpose of Processing Retention Period
    JaDE To provide a function for authentication of commute by utilizing location information when employees affiliated with corporate entities with service usage agreements record their commute times Up to the verification of commute by corporate attendance managers with service usage agreements.
  2. ② In accordance with Article 16, Paragraph 2 of the Location Information Act, HCG automatically records and retains confirmation documents regarding the collection, use, and provision of personal location information for a period of 6 months.
  3. ③ When the purposes of processing personal location information have been fulfilled, HCG securely disposes of it in accordance with Article 5, Paragraph 3 of the privacy policy.
  4. ④ HCG does not provide personal location information to third parties without the consent of corporate customers who have entered into service usage agreements. When providing such information to third parties, HCG informs the recipient and obtains prior consent, stating the purpose of the disclosure.
  5. ⑤ Rights, Obligations, and Methods of Exercising the Duties of Guardians of Children Aged 8 and Under
    1. 1. HCG does not collect the personal location information of children under the age of 14.
    2. 2. HCG regards the consent of an individual (hereinafter referred to as the 'guardian of minors') falling under the circumstances below and qualifying as a 'the person responsible for protection' under Article 26, Paragraph 2 of the Location Information Protection and Usage Law, as equivalent to the consent of the individual when such consent is given for the use or provision of personal location information to protect the life or physical well-being of minors under guardianship.
      • - Guardians of minors.
      • - Individuals with mental disabilities as defined in Article 2, Paragraph 2, Subparagraph 2 of the Disabled Welfare Act, and individuals with severe disabilities as defined in Article 2, Paragraph 2, Subparagraph 2 of the Act on Promotion of Employment of Disabled Persons, and Vocational Rehabilitation (only applicable to those who have registered as disabled individuals in accordance with Article 32 of the Disabled Welfare Act).
    3. 3. The person responsible for protection who intends to provide consent for the use or sharing of personal location information to ensure the protection of the life or physical well-being of minors under their guardianship must submit a written consent form to the client, accompanied by written documentation verifying their guardianship status.
    4. 4. The person responsible for protection when consenting to the use or provision of personal location information for minors under guardianship, shall possess all rights as the ultimate user under Article 7 of these terms and conditions.
  6. ⑥ HCG's location information management officer serves in a dual role as the personal information protection officer.
Article 15. Notification of Privacy Policy
The current privacy policy was revised on September 8, 2023. If there are any additions, deletions, or modifications to the content due to changes in government policies or security technology, we will provide notice through our website at least 7 days in advance.
  • - Announcement Date: September 8, 2023
  • - Effective Date: September 15, 2023