Empowering Innovation

Securing the Future

Realizing innovation and securing the future

Privacy Policy
MDS Intelligence is committed to managing and protecting personal information securely, in accordance with relevant laws and internal policies.
Privacy Policy

MDS Intelligence Inc. (hereinafter referred to as the “Company”) establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to ensure that any related grievances can be promptly and smoothly addressed. The Company will notify any amendments to this Privacy Policy via the website notice (or individual notice).

Article 1 (Purpose of Personal Information Processing)

The Company processes personal information for the following purposes. Collected personal information will not be used for purposes other than those listed below. In case of any change in the purpose of use, the Company will take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.
  1. Website Membership Registration and Management
    Personal information is processed to confirm membership intent, identify and authenticate members, maintain and manage membership eligibility, implement limited verification procedures, and prevent misuse of services.
  2. Recruitment
    Personal information is processed for recruitment procedures, updating application forms, verifying qualifications, confirming acceptance, and maintaining smooth communication with applicants.
  3. Marketing and Advertising Services
    Personal information is processed for delivering promotional information such as product shipments or events, analyzing visit frequency, and generating statistics on member service usage.

Article 2 (Collected Personal Information Items and Collection Methods)

The Company collects the following personal information for purposes including membership registration, modification or termination, quotation inquiries, consultations, course introductions, event notifications, and user management.
  • Collected Items
    1. Information for Membership Registration, Event Application, and Quotation Inquiry
      Company/Organization Name, Industry Type, Name, Position/Title, Department/Team, Job, Email, Telephone, Mobile, Referral Source, Consent to Provide Information
    2. Education Application Information
      Company/Organization Name, Industry Type, Name, Position/Title, Department/Team, Job, Email, Telephone, Mobile, Referral Source, Consent to Provide Information, Education Manager Name, Contact, Email
    3. Employment Insurance Reimbursement Information (Collected separately for relevant courses)
      Resident Registration Number
    4. Recruitment
      Required Information: Name, Application Password, Email Address, Date of Birth, Gender, Phone Number (Landline/Mobile), Photo, School, Education, Major, Career (for experienced applicants), Military Service Status (if not served, reason), Veteran Status
      Optional Information: Qualifications, Awards, Language Skills
    5. Information Generated During Service Use or Business Processing
      Service usage records, access logs, access IP information, payment method records (bank account, credit card), payment history
  • Collection Methods
    1. The Company collects personal information through the following methods:
      Website (membership registration), paper forms, customer consultation, service applications, address updates/entries, event/survey participation, etc., to support customers in using the services smoothly.

Article 3 (Processing and Retention Period of Personal Information)

  1. The Company processes and retains personal information within the period specified by law or within the consented retention period obtained from the data subject at the time of collection.
  2. The retention period for each type of personal information is as follows:
  • Website Membership Registration and Management: Until withdrawal from the business/organization website
    However, in the following cases, until the reason ceases:
    1. During investigation or inquiry due to violation of relevant laws, until the investigation/inquiry concludes.
    2. During the employment insurance reimbursement review period under the Employee Vocational Competency Development Act, until the review concludes.
  • Recruitment
    1. Stored in the company’s talent pool for ongoing recruitment purposes.
    2. If an applicant requests deletion of personal information, it will be deleted without delay.
  • Service Provision: Personal information will be destroyed immediately upon achievement of the purpose.
    However, in the following cases, until the period concludes:
    1. Records of identity verification under the Act on Promotion of Information and Communications Network Utilization and Information Protection: 6 months
    2. Computer communication, internet log records, and connection trace records under the Protection of Communications Secrets Act: 3 months

Article 4 (Provision of Personal Information to Third Parties)

  1. The Company processes personal information within the scope specified in Article 1 (Purpose of Personal Information Processing) and provides it to third parties only when the data subject consents, when legally required, or under Article 17 of the Personal Information Protection Act.
  2. The Company provides personal information to third parties as follows:
    1. Recipients: Ministry of Employment and Labor and Human Resources Development Service of Korea
    2. Purpose of Use by Recipients: Managing individual training records, evaluation of government vocational training programs
    3. Provided Personal Information Items: Name, Resident Registration Number, Mobile Phone Number, Email Address, Company Name, Position, Department

Article 5 (Rights and Duties of Data Subjects and How to Exercise Them)

  1. Data subjects may exercise the following rights related to the protection of personal information at any time:
    1. 1. Request access to personal information
    2. 2. Request correction of errors
    3. 3. Request deletion
    4. 4. Request suspension of processing
  2. Exercise of rights may be made via written request, phone, email, or fax, and the Company will respond without delay.
  3. If a data subject requests correction or deletion, the Company will not use or provide the relevant personal information until the correction or deletion is completed.
  4. Rights may be exercised through legal representatives or authorized agents, with submission of a power of attorney in accordance with the Personal Information Protection Act Enforcement Rules.
  5. Data subjects shall not infringe on the personal information or privacy of themselves or others in violation of relevant laws.

Article 6 (Destruction of Personal Information)

  1. When the retention period expires or the purpose of processing is achieved, the Company will promptly destroy personal information.
  2. If required by other laws, personal information may be transferred to a separate database or storage location.
  3. Procedure and Method:
    1. Selection and approval by the person responsible for personal information protection.
    2. Destruction Method: Electronic records will be irreversibly deleted (Low Level Format), and paper records will be shredded or incinerated.

Article 7 (Measures to Ensure Security of Personal Information)

The Company implements the following measures to ensure the security of personal information:
  1. Administrative Measures: Establishment and implementation of internal management plan, regular employee training
  2. Technical Measures: Access control for personal information systems, installation of access control systems, encryption of unique identifiers, installation of security programs
  3. Physical Measures: Access control for server rooms and document storage rooms

Article 8 (Automatic Collection Devices and Refusal)

  1. The Company uses cookies to store and retrieve usage information.
  2. The Company uses web log analysis services to analyze visitor counts and page views without identifying individual users.
  3. Users may configure browser settings to allow or refuse cookies, or receive confirmation each time cookies are stored.

Article 9 (Personal Information Protection Officer)

  1. The Company designates a Personal Information Protection Officer to oversee all matters related to personal information processing:
    1. Personal Information Protection Officer: Management Team
    2. Contact: 031-627-3114 / privacy@mdsit.co.kr
    3. Fax: 031-620-1450
  2. Data subjects may contact the officer for inquiries, complaints, or damage relief, and the Company will respond without delay.

Article 10 (Request for Access to Personal Information)

Data subjects may request access to personal information in accordance with Article 35 of the Personal Information Protection Act.
  1. Department Handling Access Requests:
  2. Department: Management Team
  3. Contact: 031-627-3114 / privacy@mdsit.co.kr
  4. Fax: 031-620-1450

Article 11 (Remedies for Rights Infringement)

Data subjects may contact the following institutions for remedies, consultation, or complaints regarding personal information infringement. These institutions are independent from the Company.
  1. Personal Information Infringement Report Center (operated by KISA)
    1. Scope: Reporting, consultation
    2. Website: privacy.kisa.or.kr
    3. Phone: 118 (without area code)
    4. Address: 3rd Floor, 9 Jinheung-gil, Naju-si, Jeollanam-do 58324, Korea
  2. Personal Information Dispute Mediation Committee (operated by KISA)
    1. Scope: Mediation of personal information disputes, collective dispute resolution (civil)
    2. Website: www.kopico.go.kr
    3. Phone: 1833-6972 (without area code)
    4. Address: 4th Floor, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul 03171, Korea
  3. Supreme Prosecutors’ Office Cyber Crime Investigation Division: 02-3480-3573 (www.spo.go.kr)
  4. National Police Agency Cyber Safety Bureau: 182 (http://cyberbureau.police.go.kr)

Article 12 (Installation and Operation of Video Information Processing Devices)

  1. The Company installs and operates video information processing devices as follows:
    1. Legal basis and purpose: Facility safety and fire prevention
    2. Number, location, and range: 14 devices in the main facilities such as lobby and exhibition hall, covering all key areas
    3. Responsible manager, department, and access authorization: Management Team
    4. Recording time, retention period, storage location, and processing method
      1. Recording time: 24 hours
      2. Retention period: 30 days
      3. Storage and processing: IS Room (digital door lock)
    5. Viewing method and location: Request to responsible manager (Management Team)
    6. Data subject access: Requires submission of video access request form, allowed only for personal or clearly necessary cases
    7. Technical, administrative, and physical measures: Internal management plan, access control, secure storage/transmission, recording protection, locked storage facilities

Article 13 (Changes to Privacy Policy)

  1. This Privacy Policy is effective from July 1, 2020.