Video Information Processing Device Operation and Management Policy




Purpose and Basis for Installation of Video Information Processing Devices

NeoCremar Co., Ltd. (hereinafter referred to as the Company) does not, in principle, install video information processing devices in publicly accessible places or in locations where there is a significant risk of infringing on personal privacy.

However, in some publicly accessible areas, they are installed and operated to the minimum extent permitted under the Personal Information Protection Act for crime prevention and facility security.

The Company has established and complies with the following Operation and Management Policy for Video Information Processing Devices (hereinafter referred to as the “Policy”) to protect the rights and interests of data subjects and to securely manage personal video information.




Installation Locations and Viewing Scope, Number of Devices, and Person in Charge

The Company operates video information processing devices at necessary locations at each business site. The status of CCTV installed in publicly accessible areas and the person in charge are as follows, and the number of devices may be adjusted in part considering device performance or viewing direction.



Business Site



Location



Installation Location and Viewing Scope



Number of Devices



Person in Charge



Contact



Head Office



Gangnam, Seoul



Around entrances, lobby, parking lot



Roads around the building, etc.



13



General Affairs Manager



070



4860-0862



Factory



Iksan, Jeonbuk



Around the rear gate entrance



Warehouse entrance area



48



Plant Manager



070



4860-0817







Recording Time, Retention Period, Storage Location, and Management Method for Video Information

1) The Company’s retention of personal video information is as follows.



– Recording time: 24-hour automatic recording



– Retention period: within 15 days



– Storage location: access-controlled area (secured with locking devices or encryption)



2) In order for data subjects to easily recognize that video information processing devices are installed and operated, the Company posts signs stating the installation purpose and location, viewing scope and time, department name and title of the person in charge, and contact information.



– Entrusted party: CAPS Web Monitoring (CCTV), Monitoring Center: https://www.capslive.co.kr/





3) The Company records and manages the following cases.



– When personal video information is used or provided to a third party for purposes other than the original collection purpose with the consent of the data subject



provided to a third party



– When personal video information is destroyed (in the case of automatic deletion with a predetermined destruction time in advance



check the destruction cycle and the timing for confirming whether automatic deletion is enabled)



– When viewing or destruction is requested by the data subject



4) When the retention period specified in this Policy for collected personal video information has expired, the Company shall promptly destroy it by the following methods.



However, this shall not apply where special provisions are stipulated in other laws and regulations.



– Printed outputs (photos, etc.) containing personal video information: shredding or incineration



– Personal video information in the form of electronic files: permanent deletion by a technical method that makes restoration impossible





Methods and Location for Checking the Company’s Personal Video Information

In cases where it is necessary to check recorded personal video information, the Company, in principle, has the person in charge review it at the storage location



.





Requests for Access, etc. by Data Subjects

1) Data subjects may request access to and confirmation of the existence of personal video information in which they themselves were recorded, and only to the extent of personal video information that is clearly necessary to protect the urgent life, body, or property interests of the data subject (hereinafter referred to as “access, etc.”).



The Company.



2) Data subjects requesting access, etc. must submit an identification document such as a resident registration card, driver’s license, or passport to verify their identity or that of a legitimate agent.



3) The Company may reject requests for access, etc. in the following cases.



– When the retention period for personal video information has elapsed and the information has been destroyed



– When there is a legitimate reason to refuse the data subject’s request for access, etc.





Safety Measures for Protecting Video Information

Access to personal video information collected and processed by video information processing devices is limited to the minimum number of designated personnel, such as the person in charge and relevant staff.

The locations where personal video information transmitted by video information processing devices is viewed and played back are designated as access-restricted areas, and entry and viewing/playback by persons other than those granted access rights are controlled.

If access rights are changed due to personnel transfer, retirement, or other personnel changes, the Company promptly modifies or revokes the rights.

When processing personal video information or transmitting and receiving personal video information files, the Company takes necessary measures to ensure security, such as setting passwords, so that the video information is not lost, stolen, leaked, altered, or damaged.

The Company periodically inspects whether the video information processing devices are operating properly in order to prevent forgery or alteration of personal video information




Other

1) The Company collects personal video information within the minimum scope consistent with the purpose of installation of the video information processing devices, ensures that data subjects clearly recognize the purpose of installation, and does not use personal video information for purposes other than the intended purpose.



2) The Company securely manages personal video information, discloses matters concerning the processing of personal video information, and guarantees the rights of data subjects with respect to personal video information



Date of Notice: January 1, 2023



Effective Date: January 1, 2023