Creating a more abundant future
with trust and a creative mind

HOME > Privacy Policy

Privacy Policy

< HL D&I Halla > (hereinafter referred to as 'HL D&I Halla Website') establishes and discloses this privacy policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and handle related grievances promptly and smoothly.
This policy will take effect on January 21, 2025.

  1. 1. Purpose of Processing Personal Information
    1. The HL D&I Halla Website processes personal information for the following purposes. The processed information will not be used for any other purpose unless prior consent is obtained in accordance with Article 18 of the Personal Information Protection Act when the purpose changes
    2. a. Recruitment
      • Collect and process information necessary for recruitment.
    3. b. Visitors to Business Premises
      • Collect and process information required for infection prevention and parking management.
    4. c. On-site Hired Workers
      • Comply with legal obligations, assess health and job suitability, manage attendance, ensure safety and health, and handle industrial accidents.
    5. d. Partner Company Employees
      • Comply with legal obligations, assess health and job suitability, manage attendance, ensure safety and health, handle industrial accidents, manage contracts and payments, and conduct evaluations and training.
    6. e. Former Employees
      • Issue personal certificates.
    7. f. Customer Service
      • Respond to inquiries made to the customer service center.
  2. 2. Retention and Processing Period of Personal Information
    1. The HL D&I Halla Website retains and processes personal information within the period consented to by the data subject or as required by law.
      1. Retention periods for each purpose are as follows:
        • Recruitment: 3 years (immediate destruction upon request).
        • Visitors: 2 months.
        • On-site Workers: 5 years after contract termination (or until the case is resolved in the event of accidents).
        • Partner Employees: Until de-registration from the company’s partner pool.
        • Former Employees: 5 years (or 20 years with signed consent).
        • Customer Service: 1 year after inquiry resolution; 3 years for complaints or disputes.
  3. 3. Provision of Personal Information to Third Parties
    1. The HL D&I Halla Website processes personal information within the scope of purposes outlined in Article 1 and does not provide it to third parties without consent.
      1. However, information may be provided in the following cases:
        • With prior consent from the data subject.
        • When required by law.
        • When necessary to perform a service contract and obtaining consent is impractical.
        • When anonymized to prevent identification of individuals.
      1. For Recruitment
        • Purpose: Verify submitted information and qualifications.
        • Shared Items: Name, date of birth, test or certificate number.
        • Retention Period: Until the purpose is achieved.
        • Recipients: Authorized organizations such as the Korea TOEIC Committee, TEPS Management Committee, and similar organizations.
  4. 4. Entrustment of Personal Information Processing
    1. The HL D&I Halla Website entrusts personal information processing to external service providers for efficient operation.
      1. Website Maintenance
        • Entrusted Party: Nexmedia Co., Ltd.
        • Scope of Entrustment: Maintenance of the HL D&I Halla website.
        • Period: Until contract termination.
      2. Recruitment
        • Entrusted Parties: HL Holdings, Saramin HR.
        • Scope of Entrustment: Management and operation of recruitment systems.
        • Period: Until contract termination.
  5. 5. Rights of Data Subjects
    1. Data subjects may exercise the following rights at any time:

      1. Request access to personal information.

      2. Request correction of inaccuracies.

      3. Request deletion.

      4. Request suspension of processing.

      Requests can be made via written, electronic, or fax communication in accordance with Article 41 of the Enforcement Decree of the Personal Information Protection Act.
  6. 6. Categories of Processed Personal Information
    1. The HL D&I Halla Website processes the following types of personal information:
      • Recruitment: Name, date of birth, contact details, academic and career information, certificates, etc.
      • Visitors: Name, phone number, company, vehicle number.
      • On-site Workers: Name, nationality, ID numbers, health data, and more.
      • Partner Employees: Name, contact details, qualifications, etc.
      • Former Employees: Name, contact information, job history.
      • Customer Service Users: Name, email address.
  7. 7. Destruction of Personal Information
    1. Personal information is destroyed promptly when its retention period expires or its processing purpose is achieved.
      • Procedure: Transferred to a separate database or shredded for physical files.
      • Method: Electronic files are deleted using non-recoverable methods, and physical records are shredded or incinerated.
  8. 8. Measures for Ensuring Personal Information Security
    1. The HL D&I Halla Website implements the following measures to ensure data security:
      • Regular internal audits.
      • Minimization and training of staff handling personal data
      • Implementation of encryption and access controls.
      • Use of intrusion prevention systems and physical safeguards.
  9. 9. Contact Information for Data Protection
    1. Chief Privacy Officer
      • Name: Hyungjin Choi (CPO)
      • Contact: cpo.hldni@hlcompany.com
    2. Personal Information Protection Department
      • Team: DI Team
      • Manager: Pilsu Han
      • Contact: 02-3434-5208, pilsu.han@hlcompany.com
  10. 10. Remedies for Privacy Infringement
    1. For grievances or complaints, data subjects may contact:
      • Personal Information Infringement Report Center: privacy.kisa.or.kr
      • Dispute Resolution Committee: www.kopico.go.kr
  11. 11. Changes to the Privacy Policy
    1. This policy is effective as of January 21, 2025. Changes will be notified at least 7 days prior to implementation.