The personal information items processed, the purpose of processing, and the processing and retention period of personal information by EJELAW are as follows.
Legal Notice
Privacy Policy
Article 1 (Items of Personal Information Processed, Purpose of Processing, Processing and Retention Period)
1. Client’s Personal Information
| Personal Information Items Processed | Name, contact information, address, company name, position and title within the company, legal consultation details (upon separate consent), unique identification information (resident registration number, foreigner registration number, passport number, driver’s license number) |
|---|---|
| Purpose of Processing Personal Information | Identification of the Client, Conclusion and Execution of Mandate Contracts, Performance of Cases Entrusted or Involved by the Client or Other Client-Related Matters, and Necessary Communication in Connection therewith, Provision of Legal Information and Legal Service Information, Client Management, and Processing of Tax Affairs |
| Retention and Use Period |
1. Six years from the date of application (until resignation if hired). 2. The firm will return all application documents within 14 to 180 days from the date of the recruitment decision, only if requested by the applicant. |
2. Applicants for Lawyers and Other Professionals / Law School Interns
| Personal Information Items Processed |
1. Essential Information for Determining Recruitment and for Work Performance of Lawyers and Other Professionals (hereinafter “Basic Essential Information”): Name, Personal Photograph, Date of Birth, Current Address, Telephone Number, Email, Academic Information (Name of School, Major, Period of Attendance, Grades), Professional Experience (Employer, Description of Work, Period of Employment), Self-Introduction Letter 2. Optional Information: Foreign Language Proficiency (Language, Name of Official Foreign Language Test, Score, Date of Acquisition), Overseas Training (Purpose of Training, Location, Training Period), Qualifications and Licenses (Name of Qualification, Issuing Organization, Date of Acquisition), Desired Field of Specialization, and Other Information and Reference Items Stated in Application Documents Submitted for Employment. |
|---|---|
| Purpose of Processing Personal Information | Verification of the Applicant’s Identity and Compliance with Recruitment Requirements for the Hiring of Lawyers and Other Professionals, Decision and Notification of Recruitment, and Use as HR Materials After Employment |
| Retention and Use Period |
1. Six years from the date of application (until resignation if hired). 2. The firm will return all application documents within 14 to 180 days from the date of the recruitment decision, only if requested by the applicant. |
3. Staff Applicant
| Personal Information Items Processed |
1. Mandatory Information for Determination of Recruitment and Performance of Related Duties (hereinafter referred to as the “Essential Information”): Full name, personal photograph, date of birth, current address, telephone number, email address, academic background (name of school, department, period of attendance, and grades), work experience (name of employer, description of duties, and duration of employment), and self-introduction letter. 2. Optional Information: Foreign language proficiency (language, name of standardized test, score, and date of acquisition), overseas training (purpose, location, and duration), certifications and licenses (name of certificate, issuing authority, and date of acquisition), desired field of practice, and any other information or reference materials included in the application documents submitted during the recruitment process. |
|---|---|
| Purpose of Processing Personal Information | Processing of tasks necessary for the execution (recruitment) and maintenance of the employment contract, and for personnel management after joining the firm. |
| Retention and Use Period |
1. For a period of six (6) years from the date of application (or until the date of resignation, in the case of successful recruitment) 2. EJELAW shall return all application documents within a period of fourteen (14) to one hundred eighty (180) days from the date on which the hiring decision is finalized, only upon the applicant’s request. |
Article 2 (Collection and Use of Sensitive Information)
In principle, EJELAW does not collect sensitive information that may infringe upon the privacy of data subjects. In cases where the collection of such information is deemed necessary, it shall be conducted only upon obtaining the data subject’s separate and explicit consent, and such information shall be used solely for the purposes to which the data subject has agreed. EJELAW shall, however, periodically verify the accuracy and currency of any sensitive information it holds.
Article 3 (Provision of Personal Information to Third Parties)
EJELAW shall process the personal information of data subjects only within the scope specified in Article 1, and shall provide such information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as when the data subject has given consent or where otherwise permitted by special provisions of law. EJELAW does not currently provide personal information to any third parties.
Article 4 (Overseas Transfer and Entrustment of Personal Information)
EJELAW entrusts the storage and management of all documents created, used, retained, or processed by EJELAW, as well as all collected personal information (including unique identification information and sensitive information), to a data center located in Singapore operated by iManage LLC.
Personal information transferred overseas shall not be used or disclosed for any purpose other than those specified, and shall be securely processed in compliance with the Personal Information Protection Act and other applicable laws and regulations regarding personal data protection.
| Recipient of Transferred Personal Information (Entrusted Party) | iManage LLC. |
|---|---|
| Items of Personal Information to Be Transferred | All general personal information collected and used by EJELAW, including unique identification information and sensitive information |
| Country to Which Personal Information Is Transferred | Republic of Singapore |
| Timing and Method of Personal Information Transfer | The data is transmitted on an ongoing basis and is stored and managed at a data center (server) located in the Republic of Singapore. |
| Contact Information of the Data Protection Officer (DPO) | dpo@imanage.com |
| Purpose of Use by the Recipient of Personal Information (Entrusted Tasks) | Performance of entrusted tasks such as establishing IT infrastructure and databases necessary for the business operations of EJELAW |
| Retention and Use Period of Personal Information | Until the purpose of the entrusted task is fulfilled; provided, however, that if otherwise stipulated by applicable laws or regulations, the information shall be retained in accordance with such laws or regulations. |
EJELAW, upon entering into an outsourcing agreement with an entrusted entity, specifies in the contract or other written documentation the matters required under applicable laws and regulations including prohibition of processing personal information beyond the scope of the entrusted purpose; implementation of technical and administrative safeguards; restrictions on subcontracting; supervision and management of the entrusted entity; and liability for damages. EJELAW also supervises the entrusted entity to ensure that personal information is processed securely.
Article 5 (Rights and Obligations of Data Subjects and Methods of Exercise)
In accordance with applicable laws and regulations, data subjects may exercise their rights relating to the protection of personal information, including the right to access, correct, delete, suspend processing of personal data, and withdraw consent.
The rights under Paragraph 1 may also be exercised through the data subject’s legal representative. In such cases, a power of attorney must be submitted to EJELAW.
EJELAW shall take prompt action without undue delay in accordance with applicable laws and regulations upon receiving a request to exercise such rights.
If a data subject requests correction or deletion of personal information due to errors or inaccuracies, EJELAW shall not use or provide the relevant personal information until the correction or deletion has been completed.
Article 6 (Destruction of Personal Information)
EJELAW shall promptly destroy personal information without delay when it is no longer necessary, such as upon expiration of the retention period or achievement of the processing purpose.
Notwithstanding Paragraph 1, where retention is required under other applicable laws, EJELAW shall store and manage the relevant personal information or files separately from other personal information.
Personal information shall be destroyed with the approval of the Data Protection Officer.
Personal information recorded in printed form or on paper shall be shredded or incinerated, and personal information in electronic form shall be permanently deleted by an irrecoverable method.
Article 7 (Measures to Ensure the Security of Personal Information)
EJELAW takes the following measures to ensure the security of personal information:
- Physical safeguards: Access control to storage areas such as server rooms and document archives.
- Administrative safeguards: Establishment and implementation of internal management plans; regular training on personal information protection.
- Technical safeguards: Access control to personal information processing systems; management of access rights; installation of security programs; encryption of personal data.
Article 8 (Amendments to the Privacy Policy)
This Privacy Policy of EJELAW may be amended from time to time, and any changes will be disclosed in accordance with methods prescribed by applicable laws and regulations.
Article 9 (Data Protection Officer and Staff in Charge)
The Data Protection Officer and the staff responsible for personal information protection at EJELAW, as designated under the Personal Information Protection Act, are as follows:
| Category | Title | Name | Contact Information |
|---|---|---|---|
| Data Protection Officer (DPO) | Attorney | Hyeon Ho Kim | Tel: +82-2-6367-5000 |
| Person in Charge (Practical) | Assistant Manager | Yujin Kim | Email: ejelaw@ejelaw.com |