Translation Simple complies with the issued by the Ministry of Information and Communication. Additionally, we put in place our privacy policy in accordance with the following principles to ensure that customers¡¯ personal information is safeguarded while using Our Website.
1. Personal Information Collected from Customers by Our Website
To fully utilize the services provided, customers must complete member registration. During the registration process, our website requires only the minimum necessary information related to site operations, such as the customer's ID, password, email address, name, address, and contact details.
2. 'Cookie' Information Used by Our Website
Cookies are small text files recorded on a user's hard drive by the web server when the user visits a website. Our website uses cookies solely to store and retrieve information corresponding to the member's ID. This allows us to provide better information services and enhance user convenience by identifying account-related information.
You can manage the receipt of cookies at any time by directly changing the settings on the log-on page or adjusting the options in your web browser.
3. Use of Customers' Personal Information by Our Website
The personal information collected by our website is used to provide better information services.
Through newsletters and other means, our website may deliver newly available content on the website and information that might be of interest to registered users.
4. Options Available to Users Regarding Our Website's Privacy Policy
If a user has subscribed to the newsletter, our website will continue to send newsletters via email. These newsletters may include advertisements from our website. If you no longer wish to receive such emails, you can modify your preferences at any time through the newsletter settings menu. Additionally, users have the option to manage their cookie preferences.
5. How to View, Edit, or Withdraw Personal Information
Users can access, edit, and delete their registered personal information at any time.
6. Personal Information Protection Measures
User account information is protected by a password, ensuring that only the user can access their personal information. Users can modify their account information using their member ID and password.
Personal Information Management Officer
7. Security Measures
At Translation Simple, we prioritize the protection of customer information and ensure that no customer data obtained during translation work is disclosed to third parties under any circumstances.
Primary Security Measures
- Control over personnel access and the entry/exit of documents (both physical and digital), strict access and viewing restrictions, meticulous management of office locking systems
- Separate storage and destruction (shredding or incineration) of completed documents after the management period has expired
Secondary Security Measures
- Training to prevent data leakage by personnel
- Restriction of communication access
8. Privacy Protection
The information entered during freelancer registration will not be used for any purposes other than those necessary for translation works. Additionally, it complies with the "Privacy Protection Guidelines" issued by the Ministry of Information and Communication.
Chapter 1: General Provisions
Article 1 (Purpose)
The purpose of these guidelines is to appropriately protect the personal information of users of information and communication services by stipulating the matters that must be followed by information and communication service providers in relation to Articles 16 to 18 of the Act on the Promotion of Information and Communications Network Utilization, etc.
Article 2 (Definitions) The definitions of terms used in these guidelines are as follows:
1."Personal Information"refers to information about a living individual that can identify that individual through details such as their name, resident registration number (social security number), etc. (This includes information that, by itself, may not identify a specific individual but can be easily combined with other information to identify the individual).
2. "Information and Communication Service"refers to the telecommunications services, as defined in Article 2, Section 7 of the Framework Act on Telecommunications, and the provision of information or the mediation of information provision using the services (hereinafter referred to as "service").
3. "Information and Communication Service Provider"refers to any telecommunications business operator that falls under the categories specified in Article 2, Section 1, Item 1 of the Telecommunications Business Act, as well as those who provide information or mediate the provision of information using the telecommunications services of a telecommunications business operator (hereinafter referred to as "service provider").
a. Long-distance Telecommunications Service Provider: A business operator who installs telecommunications line facilities and uses them to provide long-distance telecommunications services as defined in Article 3 of the Enforcement Rules of the Telecommunications Business Act, and who has obtained approval from the Minister of Information and Communication.
b. Special Telecommunications Service Provider: A business operator who provides long-distance telecommunications services using the telecommunications line facilities of a long-distance telecommunications service provider, or a business operator who installs telecommunications facilities within premises as specified in Article 3-2 of the Enforcement Rules of the Telecommunications Business Act and provides telecommunications services within those premises. This operator must be registered with the Minister of Information and Communication.
c. Value-Added Telecommunications Service Provider: A business operator who leases telecommunications line facilities from a long-distance telecommunications service provider to offer value-added telecommunications services and has filed a report with the Minister of Information and Communication.
4. "User"refers to an individual who uses the services provided by the service provider and is the subject of the information being processed that can be identified through the processed data.
5. "Third Party" refers to any natural person, legal entity, public institution, government-invested institution, and other entities that are not the user, the service provider who collects personal information with the user's consent, and the entity entrusted by the service provider to process personal information.
6. "Privacy Policy"refers to the internal plans established by the service provider to protect the personal information of users.
Article 3 (Scope of Application)These guidelines apply not only to personal information processed via information and communication networks for the purpose of providing services, but also to personal information processed manually, such as in written form.
Chapter 2: Measures Regarding the Collection of Personal Information
Article 4 (Scope of Collection)
a. Service providers shall collect only the minimum personal information necessary for the establishment and execution of a service contract, such as the name, address, and telephone number, through lawful and fair means.
b. Service providers shall not collect personal information that may significantly infringe on the basic rights of users, as outlined in the following subparagraphs. However, exceptions may be made if the user consents or if required by law or regulation.
1. Race and ethnicity
2. Ideology and beliefs
3. Place of origin and registered domicile
4. Political orientation and criminal records
5. Health status and sexual life
a. When the service provider collects a user's personal information, it must distinguish between mandatory items necessary for providing basic services and optional items required for additional services, allowing the user to fill them out accordingly.
b. The service provider shall not refuse to provide basic services to a user solely because the user has not provided information for the optional items.
Article 6 (Consent)
a. When the service provider collects a user's personal information, the consent of the user must be obtained. However, exceptions are made in the cases of the following subparagraphs:
1. Where there are special provisions under the Act on Promotion of Information and Communications Network Utilization or other applicable laws
2. When necessary for the performance of a service usage contract
3. When necessary for billing and payment in connection with the provision of the service
b. Consent under Paragraph 1 shall be obtained through methods such as the user's signature, electronic signature, email confirmation, or indication of agreement in a consent field.
Article 7 (Notification or Specification) When the service provider seeks to obtain consent from a user under Article 6, it must notify the user in advance of the following items or equivalent or more detailed information through written documents, an internet website, or other means, or specify them in the terms of service:
1. The affiliation, phone number, and other contact details of the personal information management officer
2. The purpose of collecting and using personal information
3. In cases where personal information is provided to a third party, the recipient, purpose of provision, and details of the information to be provided
4. The user's rights, including withdrawal of consent, requests for access, or correction, and the methods of exercising those rights.
5. The personal information items the service provider intends to collect.
6. The retention period and usage period of the collected personal information.
Chapter 3: Measures for the Use, Provision, and Management of Personal Information
Article 8 (Restrictions on Use and Provision)
a. The service provider shall not use a user's personal information beyond the scope notified or specified under Article 7, nor provide it to a third party. However, exceptions are allowed in the cases of the following subparagraphs:
1. Where there are special provisions in laws such as the Act on Real Name Financial Transactions and Confidentiality, the Credit Information Use and Protection Act, the Framework Act on Telecommunications, the Telecommunications Business Act, the Local Tax Act, the Consumer Protection Act, the Bank of Korea Act, the Criminal Procedure Act, or other applicable laws.
2. When necessary for billing and payment related to the provision of services.
3. When necessary for statistical compilation, academic research, or market research, provided that the information is provided in a form that does not allow the identification of specific individuals.
b. Notwithstanding the provisions of Paragraph 1, if the service provider intends to use a user's personal information beyond the scope notified or specified under Paragraph 1, or provide it to a third party, the provider must individually notify the user in writing or via email and obtain consent. In such cases, the user must be informed of their right to refuse the use or provision of their personal information beyond the notified or specified scope.
c. A party receiving a user's personal information from the service provider shall not use the information for purposes other than those for which it was provided or further provide it to a third party, except where the user has given consent or there are special provisions in the law.
Article 9 (Ensuring the Accuracy of Personal Information) The service provider shall manage users' personal information accurately and in an up-to-date manner.
Article 10 (Technical Measures) The service provider shall implement the technical measures in the following subparagraphs necessary to ensure the security of users' personal information and prevent its loss, theft, leakage, alteration, or damage when handling users¡¯ personal information:
1. Security devices using passwords or similar measures
2. Anti-virus programs to prevent computer viruses
3. Security devices that ensure the safe transmission of personal information over networks using encryption algorithms or similar methods
4. Access control devices such as intrusion prevention systems
5. Other technical devices necessary to ensure security
Article 11 (Administrative Measures)
a. The service provider shall establish necessary procedures for accessing and managing users' personal information.
b. The service provider shall designate users of systems handling users' personal information, assign user passwords, and update them regularly.
Article 12 (Confidentiality)
Individuals who handle or have handled users' personal information for the provision of services shall not disclose or provide such personal information learned in the course of their duties to other party.
Article 13 (Destruction of Personal Information)
a. The service provider or any party receiving personal information from the service provider must promptly destroy the personal information once the purpose of its collection or provision has been achieved. However, exceptions apply in the cases of the following subparagraphs
1. Where preservation is required by provisions of laws such as the Commercial Act.
2. Where the retention period has been pre-notified or specified to the user in accordance with Article 7.
3. Where individual consent has been obtained from the user.
b. When destroying personal information pursuant to Paragraph 1, personal information printed on paper must be shredded or incinerated, and personal information stored in electronic file format must be deleted using technical methods that prevent its recovery.
Article 14 (Measures for Outsourcing the Processing of Personal Information)
a. If the service provider outsources the processing of personal information to an external party, user consent must be obtained.
b. In cases of outsourcing pursuant to Paragraph 1, the service provider shall select a party capable of complying with these guidelines.
c. When outsourcing pursuant to Paragraph 1, the service provider shall establish clear terms in the outsourcing contract, including provisions on personal information protection, adherence to relevant instructions, confidentiality of personal information, prohibition of third-party provision, and liability in case of accidents. The contents of such agreements must be preserved in written or electronic records.
Chapter 4: Measures Regarding Users' Rights
Article 15 (Requests for Access and Correction)
a. When a user requests access to or correction of their personal information by visiting in person, using an electronic signature or providing their user ID, the service provider must verify the user's identity and promptly take necessary actions.
b. The service provider operating an internet website must take necessary measures to enable users to access or correct their personal information through the website.
c. If a user¡¯s representative visits to request access or correction, the service provider may require proof of the representative relationship to be presented.
d. If a user requests correction of errors in their personal information pursuant to Paragraph 1, the service provider must refrain from using the personal information in question until the errors are corrected.
e. Upon correcting personal information as per Paragraph 1, the service provider must promptly notify the user of the changes.
Article 16 (Withdrawal of Consent)
a. If a user withdraws consent by visiting in person, using an electronic signature or providing their user ID, the service provider must verify the user's identity and promptly take the necessary actions.
b. The service provider operating an internet website must take necessary measures to enable users to withdraw their consent for the collection, use, or provision of their personal information through the website.
Article 17 (Complaint Handling)
a. The service provider shall establish procedures to gather users' opinions and address complaints related to personal information.
b. The service provider shall receive and process user complaints through channels such as telephone, email, or the consultation section of the internet website.
Article 18 (Dispute Resolution) In the event of a dispute between the service provider and the user regarding personal information, either party may request resolution by the Personal Information Dispute Mediation Committee within the Korea Information Security Agency for prompt and effective dispute settlement.
Chapter 5: Measures Regarding Disclosure and Responsibility
Article 19 (Disclosure of Personal Information Protection Policy) The service provider shall establish and continuously implement a personal information protection policy, which includes the details of the following subparagraphs, and disclose it to users through written or website means:
1. Matters specified in the subparagraphs of Article 7.
2. Information regarding the operation of cookies.
3. Technical measures.
4. Matters related to personal information.
5. Information about amendments to the personal information protection policy.
Article 20 (Training)
a. The service provider shall establish necessary training procedures for employees to protect users' personal information.
b. The service provider may conduct the training in-house or outsource it to a professional institution in the relevant field.
Article 21 (Internal Audit)
a. The service provider shall establish necessary procedures for auditing the implementation of these guidelines and the compliance of relevant employees.
b. If the audit results reveal issues requiring operational correction or improvement or the violations of these guidelines by relevant employees, the service provider must promptly correct or improve the situation and take any other necessary actions.
Article 22 (Designation of Personal Information Management Officer and Responsibilities)
a. The service provider shall designate a personal information management officer to protect users' personal information.
b. The personal information management officer is responsible for implementing all necessary measures to comply with these guidelines.
Article 23 (Limitation on Personal Information Handlers) The service provider shall limit the number of individuals who are authorized to handle users' personal information to the minimum necessary and designate them accordingly.
Chapter 6: Special Measures Regarding Children
Article 24 (Collection Method) When the service provider collects personal information from a child under the age of 14, the purpose of the collection and use of the personal information must be clearly stated in a way that is easy to understand for the child, using simple and plain language. Additionally, the consent of the child's legal representative must be obtained.
Article 25 (Rights of Legal Representatives)
a. If a legal representative requests access to or correction of personal information collected from a child under the age of 14, the service provider must promptly take necessary actions.
b. If a legal representative withdraws consent for the use or provision of personal information collected from a child under the age of 14, the service provider must promptly take necessary actions.
c. The provisions of Articles 15 and 16 apply to requests from the legal representative for access, correction, and withdrawal of consent.
Chapter 7: Supplementary Provisions
Article 26 (Special Exceptions to Application)
a. If the service provider collects or handles users' personal information through agencies, the service provider shall bear a certain level of responsibility for personal information protection and recommend that the agencies comply with these guidelines.
b. Neither the service provider, users, nor any other parties shall damage another person's information or infringe upon or disclose another person's secrets transmitted or processed via an information communication network.
These guidelines shall take effect on October 1, 2003.
|