Policy on Operation and Management of Visual Data Processing Devices
The purpose of the policy on operation and management of visual data processing devices by Kakao Healthcare Corp.(hereinafter referred to as “the Company”) is to explain the purpose and method of using and managing visual information processed by the Company.
- Grounds for installing visual data processing devices
The Company installs and operates visual data processing devices for the following purposes in accordance with Article 25, Paragraph 1 of the Personal Information Protection Act:
o Facility safety and fire prevention
o When necessary for crime prevention and investigation
- Number of visual data processing devices installed, the locations of installation and the scope of filming
The Company produces and installs guide boards to inform information subjects of the installation status of visual data processing devices and the collection of visual information when installing such devices.
o Pangyo Agit Office:
– Quantity: 12
– Locations of installation and the scope of filming: Corridors, office entrance
o Pangyo Agit Office IDF Room:
– Quantity: 2
– Locations of installation and the scope of filming: Inside the IDF room and entrance
- Manager and access authority
o Manager: Head of Management Support Team
o Access authority: Management Support Team staff
o Contact: Management Support Team mst@kakaohealthcare.com
- Operating time, retention period, storage location, and processing method of visual information
o Duration of filming: 24 hours
o Retention period: 90 days
o Retention place: IDF room
o Processing method: Record and manage matters related to the use of personal visual information beyond its intended purpose, provision to third parties, destruction, and requests for viewing, and permanently delete it by a method that cannot be restored when the retention period expires (server automatic deletion).
- Matters related to outsourcing the installation and management of visual data processing devices
The company has outsourced the installation and management of visual data processing devices as follows, and stipulates necessary provisions to ensure the safe management of visual information in accordance with relevant laws and regulations when entering into a consignment contract.
o Subcontractor: S-1 Corp.
o Outsourced task: Installation and management of visual information processing devices.
- Measures to respond to requests for viewing personal visual information by information subjects
The Company takes necessary measures without delay when information subjects request to view or confirm personal visual information. However, this is limited to personal visual information necessary to protect the urgent interests of the information subject’s life, body, or property.
- Matters related to the method and location of confirming personal visual information
Information subjects can confirm their personal visual information by contacting and visiting the visual information management manager or access authority in advance. If they request to view or confirm personal visual information, they must submit a request for viewing and confirming personal visual information to the department in charge.
- Measures to Ensure the Safety of visual information
The company grants differentiated access rights to personal visual information to protect it, and records and manages the purpose, viewer, and viewing time when accessed to prevent tampering with personal visual information.
- Notice of Changes to the policy on operation and management of visual data processing devices
If the policy on operation and management of visual data processing devices is changed due to changes in laws, policies, or security technologies, the company will provide prior notice of the changes through its website announcement (or posting within the workplace).
Effective Date: April 25, 2023.
