1. Basic policy on proper handling of specific personal information
Bewith, Inc. ("the Company") has established this Basic Policy to ensure the proper handling of individual numbers and specified personal information ("Specified Personal Information") as an organization.
2. Compliance with relevant laws, regulations, guidelines
The Company handles Specified Personal Information appropriately, complying with the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures, the Act on the Protection of Personal Information, and the Guidelines for Proper Handling of Specified Personal Information (Business Operators Edition).
3. Purpose of use
The Company uses Specified Personal Information solely within the scope of individual number-related operations and individual number utilization operations (including associated tasks) and does not process such information for any other purposes, except as permitted by law.
Specified Personal Information concerning clients to whom the Company is entrusted will be obtained and used only to carry out the purpose of entrusted services based on the contract with the client. When acquiring and using Specified Personal Information, the Company ensures that the client's instructions and purpose of use comply with laws, regulations, and guidelines related to the protection of such information. The Company does not disclose, modify, add, delete, suspend the use of, erase, or provide such information to third parties unless authorized. Such Specified Personal Information is not included in the personal information subject to disclosure.
4. Matters related to security control measures
-
Specified Personal Information obtained by the Company will not be provided to third parties, except in cases permitted under the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures (the "Number Act").
-
The Company has established a Security Committee to ensure the proper maintenance and promotion of the protection system for Specified Personal Information handled by the Company. The Security Committee oversees the implementation of personal information protection measures and evaluate their effectiveness. Additionally, the Company will regularly and promptly review internal systems and regulations to address changes in technological, social, and legal environments, as well as newly identified risks.
-
The Company provides systematic and ongoing education and training to ensure that all employees understand the Company's personal information protection measures and that these measures are effectively implemented and enforced. Furthermore, it regularly audits compliance with the Privacy Policy and other regulations.
-
To prevent leakage, falsification, loss, or unauthorized use of Specified Personal Information handled by the Company, it implements information security measures, including educating all employees as outlined in the preceding section. These measures also include protection against unauthorized access (e.g., entry/exit management, access restrictions from external networks, and restrictions on the use of media and devices) and protection against computer viruses (e.g., implementing antivirus software and network monitoring). The Company will conduct continuous reviews and corrective actions to enhance these measures.
-
The Company will handle Specified Personal Information only to the extent necessary for business operations and only by authorized personnel within appropriately controlled environments. In the unlikely event of leakage or loss, the Company will promptly notify the affected individual and report the incident to the Personal Information Protection Committee.
-
When entrusting the handling of Specified Personal Information to a third party, the Company ensures that the third party maintains the same level of protection as the Company. Appropriate security measures are stipulated in contracts or agreements, and necessary supervision of the entrusted party is conducted.
5. Point of contact for questions and complaints
Bewith, Inc. Personal Information Consultation Service
For inquiries regarding disclosure, correction, or other matters related to the Company's Specified Personal Information and questions or complaints about its handling, please use the "Contact Us" form in the upper right corner of the screen.
6. Effective date
This policy is effective as of March 1, 2022.