Privacy Policy

BAT Partners Inc. (the “Company”) collects, uses and manages users’ personal information in accordance with the following principles, and complies with the applicable laws and regulations of the Republic of Korea, personal information protection regulations and guidelines that providers of information and communications services are required to observe. Through this Privacy Policy, the Company informs users of the purposes for which and the manner in which their personal information is used, and of the measures the Company takes to protect personal information. This English translation is provided for convenience. In the event of any discrepancy, the Korean version prevails.

1. Purpose of Processing Personal Information

The Company processes only the minimum personal information necessary for the following purpose.

Contact: Service-related inquiries

2. Personal Information Processed

The Company collects the following personal information for service-related consultations and inquiries.

Required items: Company/organization, name, email address
Optional items: Phone number, job title
Method of collection: Collected through the “Contact” form on the website

The following information may be generated and collected in the course of using the service.

Service usage records, access logs, cookies, access IP information

3. Processing and Retention Period of Personal Information

In principle, personal information is destroyed without delay once the purpose of its collection and use has been achieved. However, where retention is required under applicable laws and regulations, the Company retains the information for the period prescribed by such laws, as set out below.

Items retained: Personal information entered when submitting an inquiry, and the content of the inquiry
Retention period: 3 months

4. Provision of Personal Information to Third Parties

Except where the data subject has given consent or where required by applicable laws and regulations, the Company uses the data subject’s personal information only within the scope described in Sections 1 to 3 of this Policy, and does not use it beyond that scope or provide it to any other person, company or institution.

5. Outsourcing of Personal Information Processing

This website does not outsource any personal information processing.

6. Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them

The data subject may at any time exercise the following rights relating to the protection of personal information.

Request access to personal information
Request correction of any errors
Request deletion
Request suspension of processing

These rights may be exercised in writing, by email or by fax using Form No. 8 of the Enforcement Rule of the Personal Information Protection Act, and the Company will take action without delay.

Where the data subject requests correction or deletion of errors in personal information, the Company will not use or provide the personal information concerned until the correction or deletion has been completed.

These rights may also be exercised through an agent, such as the data subject’s legal representative or a person authorized by the data subject. In this case, a power of attorney in the format of Form No. 11 of the Enforcement Rule of the Personal Information Protection Act must be submitted.

7. Destruction of Personal Information

In principle, personal information is destroyed without delay once the purpose of its processing has been achieved. The procedure, timing and method of destruction are as follows.

Destruction procedure

Information entered by the data subject is destroyed without delay once the purpose has been achieved. However, where retention is required under other laws, the personal information concerned is stored and managed separately from other personal information.

Timing of destruction

Once the purpose of use has been achieved, the information is deleted or destroyed in accordance with internal policies and information protection policies under other applicable laws.

Method of destruction

Information in electronic file form is destroyed using technical methods that prevent the records from being restored.
Personal information printed on paper is destroyed by shredding or incineration.

8. Installation, Operation and Refusal of Automatic Personal Information Collection Devices

The Company uses “cookies” and similar technologies that store and retrieve your information from time to time. Cookies are small pieces of information that the server (HTTP) operating the website sends to the data subject’s web browser; they may be stored on the hard disk of the data subject’s computer.

Purpose of cookies

Cookies are used to identify visit and usage patterns for each service and website visited by the data subject, whether secure connections are used, and similar information, in order to provide the data subject with optimized information.

Installation, operation and refusal of cookies

You can refuse cookies in your web browser’s settings (for example, Tools > Internet Options > Privacy in older browsers, or the privacy/cookie settings in current browsers).

If you refuse the storage of cookies, you may experience difficulty using personalized services.

9. Chief Privacy Officer

The Company has designated the following Chief Privacy Officer, who has overall responsibility for personal information processing and handles data subjects’ complaints and remedies for damages relating to personal information processing.

Chief Privacy Officer

Organization / Name: BAT Partners / Donghan Shin
Email: donghan.shin@b-at.kr

Privacy Officer

Organization / Name: BAT Partners / Minjae Ko
Email: minjae.ko@b-at.kr

10. Measures to Ensure the Security of Personal Information

In accordance with Article 29 of the Personal Information Protection Act, the Company takes the following technical, administrative and physical measures necessary to ensure security.

Minimizing and training staff who handle personal information

The Company designates the staff who handle personal information and limits such handling to those staff, keeping their number to a minimum.

Technical measures against hacking and similar threats

To prevent leakage of and damage to personal information caused by hacking, computer viruses and similar threats, the Company installs security programs, updates and inspects them regularly, installs systems in areas with controlled external access, and monitors and blocks access by technical and physical means.

Encryption of personal information

For important data, the Company uses additional security functions, such as encrypting files and transmitted data or using file-lock functions.

Retention of access records and prevention of forgery or alteration

The Company retains and manages records of access to the personal information processing system for at least six months, and uses security functions to prevent such records from being forged, altered, stolen or lost.

Restriction of access to personal information

The Company takes the necessary measures to control access to personal information by granting, changing and revoking access rights to the database systems that process personal information, and uses intrusion prevention systems to control unauthorized external access.

Use of locking devices for document security

Documents and auxiliary storage media containing personal information are kept in a secure location.

Access control for unauthorized persons

The Company maintains a separate physical storage location for personal information and has established and operates access control procedures for it.

11. Remedies for Infringement of Data Subjects’ Rights

The following institutions are independent of the Company. If you are not satisfied with the Company’s own handling of complaints or remedies for damages, or if you require further assistance, please contact them.

Personal Information Infringement Report Center (operated by KISA)

Responsibilities: Reporting of personal information infringements; requests for consultation
Website: privacy.kisa.or.kr (opens in a new tab)
Phone: 118 (no area code)
Address: Personal Information Infringement Report Center, 3F, 9 Jinheung-gil (301-2 Bitgaram-dong), Naju-si, Jeollanam-do (58324), Republic of Korea

Personal Information Dispute Mediation Committee

Responsibilities: Applications for personal information dispute mediation; collective dispute mediation (civil resolution)
Website: www.kopico.go.kr (opens in a new tab)
Phone: 1833-6972 (no area code)
Address: 4F, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul (03171), Republic of Korea

Cyber Crime Investigation Division, Supreme Prosecutors’ Office: 02-3480-3573 (www.spo.go.kr)
Cyber Bureau, Korean National Police Agency: 182 (http://cyberbureau.police.go.kr)