THE SHILLA

The Shilla Stay ("the company" hereinafter) informs you as to the usage and methods in which the image information the company processes is used or maintained through its policy on operation and maintenance of image or video information processing appliances.

1. Grounds for and installation purposes of image or video information processing appliances

a. The company installs and operates image or video information processing appliances for the below-listed purposes pursuant to Article 25 paragraph 1 of the Personal Information Protection Act:

•  -Facility safety and fire prevention
•  -Crime prevention for customer safety (When installed in parking lots)

•  -Prevention of car theft or damage
  ※ For parking lots for 30 or more cars, image or video information processing appliances may be installed based on the Enforcement Rules of the Parking Lot Act Article 6 paragraph 1.

2. Number, location and coverage of appliances installed

3. Persons in charge of maintenance or authorized to access [personal information]

4. Shooting time, storage period, place and processing method of image information

- Processing method: Records are maintained concerning requests for use of personal image or video information for unauthorized purposes, provision to third parties, destruction, viewing etc. Personal image or video information is permanently deleted in an irrecoverable method (shredded or incinerated in case of output) when the storage period expires.

5. Outsourcing of installation and maintenance of image or video information processing appliances

6. Verification method and place of personal image or video information

You may request the maintenance manager of the personal image or video information at any time when you desire to view or verify the existence or deletion of your personal image or video information. However, it shall be limited to the personal image or video information in which you are recorded or that is clearly necessary for urgent rescue of life, physical or financial profits of the owners of such information. You may check the image or video information by visiting the department in charge after giving advance notice to the above-mentioned maintenance managers or persons (under paragraph 3).

7. Actions based on request for viewing of image or video information by the owner

The company will, without delay, take actions when the owner of the personal image or video information requests the viewing or verification of existence or deletion of the same. In the below-listed cases, the company may refuse the owner's request for viewing or verification of the personal image or video information; in such a case, the maintenance manager must inform the owner of the refusal cause in writing within 10 days.

• When personal image or video information has been destroyed because the storage period is over.
• When the privacy of third parties may be severely infringed when necessary actions are taken against a request for viewing and others.
• When the company has other justifiable causes for refusing a request for viewing and others by the owner.

8. Actions for ensuring safety of image or video information

The image or video information handled by the company is maintained in a secure manner using encryption and other actions. Further, the company differentiates the access authority to personal information as an administrative measure for protecting personal image or video information. The company also records and maintains the date and time personal image or video information is created, the purpose, the person and date and time of viewing the personal image or video information in order to prevent forging or tampering. In addition, locking devices are installed in order to store personal image or video information in a physically secure manner.

9. Changes in policy for handling personal information

This policy for operation or maintenance of image or video information processing appliances was enacted on 8 April 2020. The company will publish or notify the causes for and details of changes through its website at least seven days before implementation when the policy contents are added, deleted or revised because of changes in the statutes, policies or security technologies.

Date published: 8 April 2020
Date implemented: 8 April 2020