Privacy Policy (2025. 07. 11)

<Cheongchul Law Firm Personal Information Processing Policy>

Cheongchul Law Firm (hereinafter referred to as “the law firm”) processes personal information in compliance with the 『Personal Information Protection Act』and related laws to protect the rights and freedoms of the information subjects. Accordingly, in accordance with Article 30 of the 『Personal Information Protection Act』, we establish and disclose the personal information processing policy to guide information subjects on the procedures and standards regarding the processing and protection of personal information, and to ensure that complaints related to this can be handled quickly and smoothly.

  1. Purpose of Processing Personal Information The law firm processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those specified below, and in the case of a change in purpose, necessary measures, such as obtaining separate consent in accordance with Article 18 of the 『Personal Information Protection Act』, will be carried out.
    a. Providing Consultation Services Personal information is processed for the purpose of providing consultation reservation services on the website.
    b. Providing Newsletter Services Personal information is processed for the purpose of managing newsletter subscriptions and sending newsletters.

  2. Items of Personal Information Processed The law firm collects and uses the following personal information items with the consent of the information subjects.

    1. Providing Consultation Services

      • Legal Basis: Article 15, Paragraph 1 of the Personal Information Protection Act (‘Consent’)

      • Items Collected and Used: Name, Contact Number, Email Address, Consultation Requests

    1. Providing Newsletter Services

      • Legal Basis: Article 15, Paragraph 1 of the Personal Information Protection Act (‘Consent’)

      • Items Collected and Used: Name, Email Address

  3. Retention and Processing Period of Personal Information
    ① The law firm processes and retains personal information within the retention and use period specified by law or within the period consented to by the information subject when collecting personal information.
    ② The respective processing and retention periods for personal information are as follows.

    • Consultation Services: Until the provision of legal services due to consultation is completed

    • Newsletter Provision: Until the subscription is canceled

  4. Procedures and Methods for Destruction of Personal Information
    ① The law firm will promptly destroy personal information when it is no longer necessary, such as upon expiration of the retention period or achievement of the processing purpose.
    ② The procedures and methods for destruction of personal information are as follows.
    a. Destruction Procedure The law firm selects personal information that has met the destruction criteria and obtains approval from the head of personal information protection before destroying it.
    b. Destruction Method The law firm destroys personal information recorded and stored in electronic files such that it cannot be restored, and personal information recorded in paper documents is destroyed by shredding or incineration.

  5. Provision of and Entrustment to Third Parties Regarding Personal Information The law firm entrusts the processing of personal information to the following for smooth handling of personal information tasks. Entrusted party (trustee) - Stevie Co., Ltd. Entrusted task - Newsletter subscription management

  6. Measures to Ensure the Security of Personal Information The law firm takes the following measures to ensure the safety of personal information.

    1. Administrative Measures: Establishment and implementation of internal management plans, regular staff training, operation of dedicated organizations

    2. Technical Measures: Management of access rights to personal information processing systems, installation of access control systems and other related protective measures, encryption of personal information, installation and renewal of security programs

    3. Physical Measures: Access control to computer rooms, data storage rooms, etc., MS365 cloud security

  7. Rights and Obligations of Information Subjects and Legal Representatives and How to Exercise Them
    ① Information subjects can request the law firm at any time to view, transfer, correct, delete, suspend processing, and withdraw consent regarding their personal information (hereinafter referred to as “Exercise of Rights”).
    ② Exercise of rights can be made to the law firm by written request, phone, email, fax, internet, etc., in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the law firm will promptly respond to such requests. Information subjects can directly contact the personal information protection officer of the law firm to inquire about, modify, delete, stop processing, withdraw consent, or request to view their personal information at any time.
    ③ Rights can also be exercised through legal representatives or authorized persons, in which case a power of attorney in accordance with the “Notice on Personal Information Processing Methods” [Attachment 11] must be submitted.
    ④ The right of information subjects to demand the viewing and suspension of processing of personal information may be restricted under Article 35, Paragraph 4 and Article 37, Paragraph 2 of the 『Personal Information Protection Act』.
    ⑤ If the personal information is specified as the subject of collection under other laws, a request for deletion of such personal information cannot be made.
    ⑥ The law firm verifies whether the person exercising rights is the actual person or a legitimate representative.
    ⑦ The business related to the exercise of rights of the information subject is handled by the personal information protection officer as per section '8. Personal Information Protection Officer' of this privacy policy. The law firm will strive to ensure that the exercise of rights by information subjects is processed quickly.

  8. Personal Information Protection Officer
    ① The law firm designates a personal information protection officer as follows to comprehensively oversee the handling of tasks related to personal information processing and to handle complaints and remedy from information subjects regarding personal information processing.

    ▶ Personal Information Protection Officer

    ② Information subjects can inquire to the personal information protection officer and the responsible department regarding all personal information protection-related inquiries, complaint handling, remedy, etc., that arise while using the services (or business) of the law firm. Cheongchul Law Firm will respond and address inquiries from information subjects without delay.
    ③ Information subjects can apply for conflict resolution or consultations with the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency Personal Information Breach Reporting Center, etc., to receive remedy for personal information breaches. For other reports or consultations related to personal information breaches, please contact the institutions below.

    1. Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)

    2. Personal Information Breach Reporting Center: (without area code) 118 (privacy.kisa.or.kr)

    3. Korean National Police Agency: (without area code) 182 (ecrm.police.go.kr) If you need to report or consult about other personal information breaches, please contact the institutions below.

  9. Changes to the Privacy Policy This privacy policy will apply from July 11, 2025. Previous versions of the privacy policy can be found below.