Skip to main content
+82-2-6325-9200

Privacy Notice

Securitas Korea Co., Ltd. Privacy Policy

 

Securitas Korea Co., Ltd. (hereinafter referred to as the “Company”) committed to complying with all applicable laws and regulations, including the Personal Information Protection Act of the Republic of Korea. We are dedicated to protecting the rights and interests of our users through the implementation of this Privacy Policy (the “Policy”).

This Privacy Policy applies to the websites and chatbot services (hereinafter referred to as the “Services”) operated by the Company. It outlines the Company’s policies regarding the purpose of collection, use of collected information, entrustment or provision of such information to third parties, and the procedures for the destruction of personal information upon the fulfillment of its purpose, as mandated by the Personal Information Protection Act.

Unless otherwise defined herein, terms used in this Policy shall be interpreted in accordance with the Personal Information Protection Act and other relevant laws; matters not specified shall be governed by general commercial practices.

 

Article 1 (Purpose of Personal Information Processing)

The Company processes personal information exclusively for the purposes below. Personal information will not be used for any purposes other than those specified below. Should these purposes change, the Company will take all necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

  • Website Inquiries: To fulfill requests for information and materials (e.g., brochures, reports) and to respond to user inquiries.
  • Chatbot Service Operation: To provide real-time customer consultation, response to inquiries, and conduct AI model training and statistical analysis to improve service quality and user satisfaction surveys.
  • Marketing and advertisement (Optional): To provide marketing communications, including news regarding new services (products), promotions, and promotions.

 

Article 2 (Personal Information Collection and Usage)

1. The Company collects and uses the personal information necessary to provide and maintain the Services below.

Classification

Items Collected/Used

Purpose of Collection/Usage

Website Inquiries

[Required] Name, Email Address, Company Name, Country, Phone Number, Message

Fulfillment of requests for information/materials (e.g., brochures, reports) and response to inquiries via the website

Use of Chatbot Service

[Required] Complete records of chatbot conversations

[Automated Collection] Service usage records, access logs, cookies, IP addresses, device information

Real-time customer consultation and responses to questions

AI model training and statistical analysis for service quality improvement and satisfaction surveys

Automatically Collected and Generated Information Through Service Usage

Device information (OS, model) generated through use of PC web, mobile web/app, IP address, cookies, ADID, visit timestamps, service usage records

Provide personalized service based on service usage and access frequency analysis, service analysis, and service usage statistics

Access restriction for users that violate laws and regulations and the Terms of Service, preventing and sanctioning fraudulent use, preventing account theft, preserving records for dispute resolution, and handling customer inquiries

 

2. The Company collects and uses the personal information below based on the express consent of the data subject.

  • Category: Marketing information consent.  
  • Items: [Optional] Email address, [For SMS] Mobile phone number.
  • Purpose: To provide marketing information such as new services, promotions, and related news.

 

3. Should the processing of additional personal information become unavoidable under applicable laws, the Company shall notify the data subject of such fact and specific items via separate consent or notice.

 

Article 3 (Personal Information Processing and Retention Period)

1. The Company processes and retains personal information only for the period stipulated by law or the period consented by the data subject at the time of collection.

2. Specific processing and retention periods are as follows.

  • Website Inquiries: Destroyed without delay after the retention period of 1 year from the completion of the request. 
  • Chatbot Conversation Records: Destroyed without delay after the retention period of 1 year following the conclusion of the consultation.
  • Marketing Consent: Retained until the withdrawal of consent or membership cancellation. 
  • Statutory Retention Obligations:

i) Records regarding consumer complaints or dispute processing: 3 years (Enforcement Decree of the Act on Consumer Protection in Electronic Commerce, etc. Article 6(1))

ii) Computer communication, internet log records, and access point tracking data: 3 months (Protection of Communications Secrets Act Article 15-2(2))

 

Article 4 (Provision of Personal Information to Third Parties)

The Company does not disclose or provide personal information to external third parties without prior consent of the data subject. Exceptions apply only where the data subject has explicitly consented to the provision during the use of Services or where the Company is under legal obligation to submit such information in accordance with applicable laws.

 

Article 5 (Entrustment of Personal Information Processing)

1. To enhance service quality, the Company entrusts personal information processing to external parties as below and enforce strict management and supervision to ensure safe and compliant processing of personal information by these trustees, in accordance with the Personal Information Protection Act.

Trustee

Scope of Entrust Work

Retention & Usage Period

Leadoo

Operation and maintenance of chatbot system, storage and analysis of consultation records

Until cancellation of membership or termination of entrustment agreement

 

2. In accordance with Article 26 of the Personal Information Protection Act, the Company specifies in documents such as contract, matters related to prohibition of data processing outside the scope of work, technical and managerial safeguards, restrictions on re-entrustment, management and supervision of trustee, liability damages, and monitors safe processing of personal information by the trustee.

 

3. Any changes to the trustees or the scope of work kill be disclosed through this Policy without delay.

 

Article 6 (Cross-border Transfer of Personal Information)

1. The Company may transfer personal information overseas as below to provide global service and to operate IT infrastructure

(1) Transfer to Securitas Group (EU)

- Basis of Transfer: Adequacy decision on personal information protection between the Republic of Korea -EU (Personal Information Protection Act Article 28-8(1)(5))

- Destination: EU Member States

- Recipient: Securitas Group (Affiliates in the EU)

- Transferred Items: as mentioned in Article 2

- Purpose: Group-level service support and data analysis

- Retention and Usage Period: Until cancellation of membership or withdrawal of consent

 

(3) Overseas Direct Collection

The Company directly collect and processes personal information of domestic data subjects via servers located overseas.

- Country Of Personal Information Collection and Processing: Sweden, Poland, Canada.

 

2. Data subjects may refuse the overseas transfer of their personal information. If the data subject wishes to refuse the overseas transfer of their personal information, please contact the Chief Privacy Officer designated in Article 13. Please note that if the transfer is essential to provide the Services, refusal may result in Service unavailability.

 

Article 7 (Personal Information Destruction Procedures and Methods)

1. The Company destroys personal information without delay once the information is no longer necessary due to the expiration of the retention period or the achievement of the processing purpose.

2. If personal information must be preserved pursuant to other laws despite the expiration of the retention period or achievement of processing purpose, such information shall be transferred to a separate database or stored in a different physical location.

3. Procedures and methods for destroying personal information are as follows.

- Destruction Procedure: The Company selects personal information for which a reason for destruction has arisen and destroys the personal information with the approval of the company's Chief Privacy Officer.

- Destruction Method: The Company destroys personal information recorded and stored in electronic file formats so that the records cannot be reproduced, and destroys personal information recorded and stored in paper documents by shredding or incinerating them.

 

Article 8 (Rights, Obligations, and Exercise Methods of the Data Subject and Legal Representative)

1. Data subjects, at any time, may request the Company to exercise its rights to access, correct, delete, suspend the processing of, and withdraw consent regarding their personal information (hereinafter “Exercise of Rights”).

2. Data subjects may exercise its rights under Paragraph 1 by submitting a request via email, or through the website, in writing, and the Company will take necessary measures regarding such requests without delay.

3. Exercise of Rights may be done through a legal representative or an authorized agent. In such cases, the power of attorney according to Form 11 of the Public Notice on Personal Information Processing Methods must be submitted.

4. Rights to request access to or suspend processing of personal information may be limited in accordance with Articles 35(4) and 37(2) of the Personal Information Protection Act.

5. A request for deletion cannot be granted if certain personal information is a mandatory collection item under other laws.

6. Data subject may proceed with Exercise of Rights through the department below.

- Department responsible for receiving and processing exercise of rights regarding personal information

- Department Name: Securitas Korea

- Address: ILWON Building, 4th & 6th Floor, 422, Yeongdong-daero, 06174 Seoul

- Contact Information: Phone: 02-6325-9200, Email: enquiries.korea@securitasasia.com

 

Article 9 (Matters Regarding Automated Decision Making)

The Company uses fully automated systems powered by artificial intelligence technology to process personal information and make decisions (hereinafter referred to as “Automated Decisions”) during the operation of its chatbot service.

- Facts and Purpose of Automated Decisions: When using the chatbot service, Automated Decisions are made to analyze user inquiries (conversation) to generate real-time responses and improve service quality.

- Used Personal Information: Chatbot conversation, service usage records, etc.

- Processing Procedure: When a user enters a query, the AI ​​model analyzes the intent of the query and automatically generates the most appropriate response based on pre-trained data.

- Data Subject’s Rights: Data subjects have the right to object to these Automated Decisions or request an explanation if such decisions significantly impact their rights or obligations.

- Method of Exercising Rights: Objection or request for an explanation of an Automated Decision may be done by contacting the Chief Privacy Officer or the managing department under Article 13.

 

Article 10 (Installation, Operation, and Rejection of Automatic Collection Devices Such As Cookies)

1. The Company uses cookies to store and periodically retrieve usage information to provide personalized services and convenience by analyzing user access frequency and visit time.

2. Cookies are small pieces of information sent by the server (http) used to operate a website to the user’s browser and stored on the user’s computer or mobile device.

3. Users can configure their browser options to allow or block cookies.

- Chrome: Select th4e “:” sign in the top right corner of the web browser > Settings > Privacy & Security > Cookies and other site data

- Edge: Select the "..." sign in the top right corner of the web browser > Settings > Cookies and site permissions > Manage and delete cookies and site data

- Safari (Mobile): Device Settings > Safari > Advanced > Block all cookies

 

Article 11 (Processing of Pseudonymized Information)

The Company processes pseudonymized information for statistical compilation and scientific research (including AI model training) as below, pursuant to Article 28-2 of the Personal Information Protection Act

- Purpose of Use of Pseudonymized Information: Statistical analysis for chatbot service quality improvement and AI model training, etc.

- Items for Pseudonymized Information Use: Chatbot conversation records, service usage records, etc.

- Pseudonymized Information Use Period: 1 year (destroyed upon expiration of retention period)

- Security Measures: Separate storage of pseudonymized information and additional information, separation of access rights, access control, etc.

 

Article 12 (Measures to Ensure Security of Personal Information)

The Company takes measures below to ensure the security of personal information:

- Administrative measures: Establishment and implementation of an internal management plan, regular employee training

- Technical measures: Access control for personal information processing systems, installation of an access control system, personal information encryption, installation and update of security programs

- Physical measures: Access control for computer rooms, archives, etc.

 

Article 13 (Personal Information Protection Officer)

1. The Company has designated a Personal Information Protection Officer as below to take overall responsibility for personal information processing and to handle complaints and provide remedies to data subjects related to personal information processing.

(1) Personal Information Protection Officer (CPO)

  - Name: Heejeong Cho

  - Position: HR/GA Manager

  - Contact Information: Phone Number: 02-6325-9200, Email Address: enquiries.korea@securitasasia.com

 

2. The data subject may inquire about all personal information protection-related matters, including inquiries, complaints, and damage relief, that arise while using the company's services to the personal information protection officer and the department in charge.

 

Article 14 (Remedies for Infringement of Rights of Data Subjects)

Data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency's Personal Information Infringement Reporting Center to seek redress for personal information infringement. For other inquiries or reports of personal information infringement, please contact the organizations below.

- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)

- Personal Information Infringement Reporting Center: 118 (privacy.kisa.or.kr)

- National Police Agency: 182 (ecrm.police.go.kr)

 

Article 15 (Changes to the Privacy Policy)

1. This Policy is applicable from 19 November 2025.

2. The Company may revise this Policy in accordance with changes in laws, policies, or security technologies. Previous versions of the Policy can be found below.

 

Sorry, we don't support this browser. To enjoy our website, try using a newer browsers like Chrome, Safari, Firefox, or Edge.