Privacy Policy
Privacy Policy
Kang & Shin (“Firm”) complies with the Personal Information Protection Act and other relevant laws and regulations of the Republic of Korea, and has established the following Privacy Policy to protect users’ personal information.
1. Personal Information Collected
Firm collects information such as name, phone number, email address, inquiry details, IP address, date and time of visit, browser information, and cookies.
2. Purpose of Processing Personal Information
Firm uses the collected personal information for purposes such as user management, legal consultation requests and responses, identity verification and contact for service provision, and statistical analysis of website usage.
3. Processing and Retention Period of Personal Information
Firm promptly disposes of personal information once the purpose of its collection and use has been fulfilled. However, in cases where it is necessary to preserve the information in accordance with the provisions of relevant laws and regulations, Firm shall retain the information for the period specified by those laws.
4. Provision of Personal Information to Third Parties
Firm, in principle, does not provide users’ personal information to third parties. However, personal information may be provided to third parties if required by law or if the data subject has given consent.
5. Procedures and Methods for Destroying Personal Information
Firm, in principle, destroys personal information in accordance with the relevant laws and regulations once the purpose of its collection and use has been fulfilled. Electronic files are permanently deleted in a manner that prevents recovery or restoration, and hard copy documents are shredded or incinerated.
6. Outsourcing of Personal Information Processing
Firm may outsource website and hosting management to external professional service providers. When entrusting personal information processing tasks, Firm supervises the entrusted party to ensure that personal information is handled securely in accordance with the Personal Information Protection Act and other relevant laws and regulations.
7. Rights of Data Subjects and Legal Representatives, and Methods of Exercising Rights
Data subjects may exercise their rights related to personal information protection, such as requesting access to, correction or deletion of, or suspension of processing personal information, against Firm in accordance with the Personal Information Protection Act and other relevant laws. These rights may also be exercised by the legal representative or an authorized agent of the data subject. Firm handles such requests in accordance with the procedures prescribed by the relevant laws and regulations.
8. Personal Information Protection Officer and Personal Information Complaint Service
To protect personal information and handle related complaints, Firm has designated the following Personal Information Protection Officer:
• Won Sang Kang, Attorney-at-Law (02-3495-0906)
Users may contact the officer regarding any inquiries, complaints, or damage relief related to personal information protection arising from the use of the Firm’s services.
For additional help with personal information infringement issues, you may contact the following organizations:
• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• Supreme Prosecutors’ Office Cybercrime Division (www.spo.go.kr / 1301)
• National Police Agency Cybercrime Bureau (www.police.go.kr / 182)
9. Measures to Ensure the Security of Personal Information
Firm takes the following measures to ensure the security of personal information:
• Management measures: Establishment and implementation of internal management plans, regular employee training
• Technical measures: Access control to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
• Physical measures: Access control to computer rooms and document storage facilities
10. Changes to the Privacy Policy
This privacy policy may be revised in accordance with relevant laws or internal operational policies. In such cases, changes will be disclosed in accordance with applicable legal requirements.
This Privacy Policy is effective as of April 17, 2025.