Privacy Policy

Hanwha TotalEnergies Petrochemical Privacy Policy Ver 8.0

Hanwha TotalEnergies Petrochemical Co., Ltd. (hereinafter referred to as "Hanwha TotalEnergies Petrochemical") takes personal information of our customers seriously and enacts and implements privacy policies in order to comply with related laws such as the Personal Information Protection Act. Hanwha TotalEnergies Petrochemical Privacy Policy may be changed in accordance with enactment and amendment of laws, changes in government policies, and changes in Hanwha TotalEnergies Petrochemical's internal policies.

* This policy will be effective on Oct 7, 2024.
  • Article 1 Purpose, Items, Period of Collecting and Using Personal Information

    The personal (location) information collected and used by Hanwha TotalEnergies Petrochemical is as follows. In cases where it is necessary to retain personal information in accordance with relevant laws, the company may store the information for a certain period as stipulated by the law.

    Purpose Items Period
    To control entrance Name, Mobile Phone Number, Date of Birth, Affiliation, (if applicable) Vehicle Type, Vehicle Number, Driving License Possession (For delivery drivers) Driving License Type, Address, Transportation Company 5 years (7 years for delivery drivers)
    To provide Online Purchase and Construction Contract Services (SRM) ID, Password, Name, Company Name, Department Name, Contact Information, Email Until membership termination
    To provide goods and services (SmartOrder) ID, Password, Name, Company Name, Department Name, Company Address, Business Registration Number, Company Phone Number, Mobile Phone Number, Email, Position. Until membership termination
    To manage receipts and disbursements of outside tanks / entry and departure of vessels in the complex (SLS) ID, PW, Name, Company Name, Business Registration Number, Email, Company Phone Number, Mobile Phone Number, Company Address Until membership termination
    To manage tasks for partner companies, including delivery, construction, and safety environment (BPS) ID, Password, Name, Company Name, Department Name, Position/Title, Mobile Phone Number Until membership termination
    To manage construction/work site Name, Company Name, Mobile Phone Number, Gender, Date of Birth, Job Type (Construction Type), Certification Information, Training Information, Special Medical Examination Information, (For On-site Supervisors) Address, Email Until the Purpose of Retention is Achieved
    To manage worker safety Name, Affiliation, Date of Birth, Gender, Blood Pressure Information, Disease Information 3 years
    To respond to inquiries from customers or complaints (Optional) Name, Phone Number, Email Address 5 years
    To My Safety Service Name, Mobile Phone Number, Date of Birth, Personal Location Information From entry to exit of plant

    In accordance with the Act on the Protection and Use of Location Information, the Company shall automatically record data verifying the collection, use, and provision of location information in a location information system, and preserve the data for 6 months.

  • Article 2 Provision of Personal Information to Third Parties

    Hanwha TotalEnergies Petrochemical shall use your personal information under the range stipulated on the 『 Purpose, Items, Period of Collecting and Using Personal Information 』 and not use it beyond the range or provide any third parties without prior consent of data subjects except for the following cases

    1) Where there is a separate consent of an data subject

    2) Where there are special regulations in other laws

    3) When it is deemed necessary for the benefit of life, body, property of the data subject or third party

    4) When personal information is provided so as not to identify a specific individual for statistical data and academic research purposes

    5) Other cases covered by Articles 17 and 18 of the Personal Information Protection Act

    In case Hanwha TotalEnergies Petrochemical provides personal location information to a third party designated by the user, Hanwha TotalEnergies Petrochemical immediately notifies the subject of personal location information of the designated recipient of such information, the date and time, and the purpose of such provision on each occasion. However, Hanwha TotalEnergies Petrochemical notifies the subject of personal location information once a month with consent In the following cases, you will be notified in advance through the communication terminal device or E-mail that you have specified:

    1) When the communication terminal device that collected personal location information does not have the capability to receive text, voice, or video.

    2) When the subject of personal location information has previously requested notification through a communication terminal device other than the one that collected the information or through E-mail

  • Article 3 Outsourcing personal information processing

    Hanwha TotalEnergies Petrochemical outsources the processing of personal information to external parties as follows for efficient business

    Outsource Subcontractor Details of outsourced work
    Hanwha Systems Co., Inc ANYFIVE, WeZon Co., Ltd. System management
    WeZon Co., Ltd. Innocean System management
    Daou Tech Co., Inc. - Business Messaging Service
    HDS Security Co., Inc - Entrance control, Facility protection

    When Hanwha TotalEnergies Petrochemical outsources personal information processing, it does so based on a document that includes the following:

    1) The purpose and scope of the outsourced task

    2) Prohibition of processing personal information for purposes other than the outsourced task

    3) Administrative and technical protective measures for personal information

    4) Restrictions on re-outsourcing the task

    5) Inspection and supervision of the management status of personal information processed for the outsourced task

    6) Liability for damages caused by the contractor's breach of obligations

  • Article 4 Judgment Criteria for Additional Use and Provision of Personal Information

    Pursuant to the Personal Information Protection Act, Hanwha TotalEnergies Petrochemical may use and provide personal information within the scope reasonably related to the purposes for which the personal information was initially collected without the consent of the data subject.

    In determining whether to use or provide personal information additionally without the data subject's consent, Hanwha TotalEnergies Petrochemical considers the following factors

    1) Whether the purpose of additional use and provision is related to the purposes for which the personal information was initially collected.

    2) Whether the additional use and provision are predictable in light of the circumstances or industry practice.

    3) Whether the additional use and provision unfairly infringes upon the interests of the data subject or a third party

    4) Whether measures to secure safety, such as pseudonymization or encryption, have been taken

  • Article 5 Destruction of Personal Information

    Hanwha TotalEnergies Petrochemical shall destroy personal information without delay when it becomes unnecessary due to the expiration of the retention period or the achievement of the processing purpose. If the retention period agreed upon by the data subject has expired, or the processing purpose has been achieved, but the personal information must still be preserved in accordance with other laws, the personal information shall be transferred to a separate database (DB) or stored in a different location.

    The retention periods for personal information that Hanwha TotalEnergies Petrochemical is legally required to keep are as follows:

    1) Records on display and advertising: 6 months (Act on the Consumer Protection in Electronic Commerce, Article 6)

    2) Records on contracts and withdrawal of offers: 5 years (Act on the Consumer Protection in Electronic Commerce, Article 6)

    3) Records on payment and supply of goods: 5 years (Act on the Consumer Protection in Electronic Commerce, Article 6)

    4) Records on consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, Article 6)

    5) Service login records: 3 months (Protection of Communications Secrets Act, Article 15-2)

    The procedures and methods for destroying personal information are as follows:

    1) Procedures
    Hanwha TotalEnergies Petrochemical selects the personal information that caused the reason for destruction and destroys the personal information with the approval of Hanwha TotalEnergies Petrochemical's Personal Information Protection Officer.

    2) Methods
    Hanwha TotalEnergies Petrochemical destroys the personal information recorded and stored in an electronic file so that it cannot be reproduced. Personal information recorded and stored in paper documents is crushed by a crusher or is burned and destroyed.

    3) Destruction of Personal Location Information
    When they withdraw from membership or the company achieves its purpose of use. Hanwha TotalEnergies Petrochemical safely destroys personal location information in an unrecoverable way without any delay.

  • Article 6 Measures to Ensure the Security of Personal Information

    Hanwha TotalEnergies Petrochemical takes the following measures to ensure the security of personal information.

    1) Administrative measures: Establishing and implementing an internal management plan, minimizing the number of employees handling personal information, and training them

    2) Technological measures: Managing access to personal information processing systems, installing access control systems, encrypting unique identification information, installing and updating security programs, keeping access records and preventing forgery and falsification

    3) Physical measures: Securing safe storage facilities, and installing locks

  • Article 7 Rights of the data Subject and Exercise Method

    The data subject may exercise the following personal information protection rights over Hanwha TotalEnergies Petrochemical at any time. The legal representative of a child under the age of 14 may request access, correction, deletion, or suspension of processing of the child’s personal information.

    1) Request to access personal information

    2) Request correction or deletion in case of errors

    3) Request to stop processing

    The exercise of rights may be made in writing, by email, or by facsimile (FAX), and Hanwha TotalEnergies Petrochemical will take action without delay. If the rights are exercised through an agent, such as a legal representative or a delegated person, a power of attorney must be submitted in accordance with the relevant laws.

    In addition, if the data subject requests correction or deletion of errors in personal information, Hanwha TotalEnergies Petrochemical will not use or provide the personal information until the correction or deletion is completed.

    Where the legal guardian of any of the following persons (hereinafter referred to as "child of eight years old or younger, etc.") gives consent to the use or provision of personal location information regarding the child of eight years old or younger, etc., for the protection of the child's health or safety, the Company shall deem that the child, etc. themselves consent thereto:

    1) A child of eight years old or younger;

    2) A person under adult guardianship;

    3) A person with a mental disorder defined in Article 2 (2) 2 of the Act on Welfare of Persons with Disabilities, classified as a person with a severe disability defined in subparagraph 2 of Article 2 of the Act on the Employment Promotion and Vocational Rehabilitation of Persons with Disabilities (limited to those registered as disabled persons under Article 32 of the Act on Welfare of Persons with Disabilities).

    For the protection of the health or safety of a child of eight years old or younger, etc., the legal guardian who intends to consent to the use or provision of personal location information must submit a written consent to the Company along with a document proving that he/she is the legal guardian. The legal guardian can exercise all of the rights of the subject of personal location information if he/she agrees to the use or provision of personal location information for a child of eight years old or younger, etc.

  • Article 8 Chief Privacy Officer and Responsible Department for Personal Information

    Hanwha TotalEnergies Petrochemical takes responsibility for processing personal information, and in order to deal with complaints and damage relief related to personal information processing, Hanwha Total has designated Chief Privacy Officer as follows

    1) Chief Privacy Officer
        - CPO : Director of Information Security Division
        - E-mail: securityhtc@htpchem.com

    The data subject may contact the Personal Information Protection Officer and the responsible department regarding all inquiries related to personal information protection, complaint handling, and remedies for damages arising from the use of Hanwha TotalEnergies Petrochemical's services (or business). They can also request access to personal (location) information in accordance with Article 35 of the Personal Information Protection Act and Article 24 of the Location Information Act at the department listed below. Hanwha TotalEnergies Petrochemical will respond to and address the inquiries of the data subject without delay.

    2) Department in charge of accepting and dealing with requests for reading personal information
        - Affiliation: Information Security Division
        - E-mail: securityhtc@htpchem.com

  • Article 9 Remedies for infringements of rights

    Data subjects can consult with the following organizations about remedies for infringement on personal information.
    ※ The following organizations are separate institutions from Hanwha TotalEnergies Petrochemical, so please contact them if you are not satisfied with Hanwha TotalEnergies Petrochemical in dealing with complaints about personal information, the results of the damage relief, or need more help.

    1) Personal Information Dispute Mediation Committee (www.kopico.or.kr/1833-6972)

    2) Personal Information Infringement Report Center (privacy.kisa.or.kr/118)

    3) Supreme Prosecutor's Office(www.spo.go.kr/1301)

    4) National Police Agency (ecrm.cyber.go.kr/182)

  • Article 10 Installation and operation of an automatic personal information collection system and the denial thereof

    Hanwha TotalEnergies Petrochemical uses a cookie that stores and retrieves information and users have the option to refuse them.

    A cookie is used to provide information optimized for users and enhanced website usability

    An individual may deny storage of a cookie by setting the option in the web browser. However, there may be some difficulties in using the customized services when storage of cookie is refused.

  • Appendix 1 EU Specific Information for German Branch Office

    1. Controller under GDPR
    The controller under GDPR for the provision of this website in the context of the German branch office is:
    Hanwha TotalEnergies Petrochemical Co., Ltd.
    Information Security Division, 103, Dokgot 2-ro, Daesan-eup, Seosan-si, Chungcheongnam-do, Republic of Korea
    E-mail: security.htc@htpchem.com

    2. Competent data protection authority
    The competent data protection authority for the German branch office is:
    Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
    Gustav-Stresemann-Ring 1
    65189 Wiesbaden, Germany
    E-Mail: poststelle@datenschutz.hessen.de

    3. Legal basis for data processing
    The legal basis for providing this website is our legitimate interest (Art. 6 (1) f) GDPR) in corporate communications. The legal basis of the processing of personal data necessary to fulfil contracts and in the context of new or existing business relationships is Art. 6 (1) b) GDPR.

    4. Recipients to whom the data can be communicated
    We use service providers to process personal data on our behalf, for example for hosting of our website or sending newsletters. Such processors only process personal data according to our instructions (Art. 28 GDPR).
    Furthermore, we transfer personal data to third parties if this is required by law, necessary for the exercise and defence of legal claims or if third parties provide certain services for us (e.g., lawyers, tax consultants).
    Hanwha TotalEnergies Petrochemical is based in South Korea whose level of data protection has been found adequate by the EU Commission. Service providers, authorities, business partners and group companies may also process personal data outside the EU, South Korea and other countries whose level of data protection has been found adequate. In these cases, we ensure an appropriate level of data protection through other transfer mechanisms in compliance with GDPR (generally by standard contractual clauses approved by the EU Commission). You can request a copy of the contract ensuring the adequate level of data protection.

    5. Rights under GDPR
    You have the following rights (if the respective requirements under GDPR are met):
        - Right of access (Art. 15 GDPR)
        - Right to rectification (Art. 16 GDPR)
        - Right to erasure (Art. 17 GDPR)
        - Right to restriction of processing (Art. 18 GDPR)
        - Right to data portability (Art. 20 GDPR)
    You can revoke your consent to the processing of personal data at any time with effect for the future (Art. 7 (3) GDPR).

    You can object to the data processing on the basis of our legitimate interests (Art. 6 (1) f) GDPR) at any time based on grounds relating to your particular situation (Art. 21 GDPR).

    You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

  • Appendix 2 Privacy Notice for Applicants German Branch Office

    Privacy Notice for Applicants
    Hanwha TotalEnergies Petrochemical, German Branch

    This privacy notice applies to the processing of personal data of applicants to the German branch of Hanwha TotalEnergies Petrochemical Co., Kölner Straße 10 b, 65760 Eschborn, Germany ("Hanwha TotalEnergies" or "we").

    1. Why we process your personal data and based on which legal basis?
    We process your personal data for processing of your application.
    This is personal data that we collect directly from you (such as your application docu-ments) or personal data that we collect as part of your application process (such as personal data on IT systems – e-mails, log files, etc.).

    The legal basis for processing is Art. 6 (1) b) GDPR. Insofar as we are legally obliged to process personal data (e.g., in the case of statutory retention periods), the legal basis is Art. 6 (1) c) GDPR. Insofar as we base our data processing on legitimate interests (e.g., compliance measures), the legal basis is Art. 6 (1) f) GDPR. If you separately consent to the processing of your data, the legal basis is Art. 6 (1) a) GDPR.

    2. Who receives my personal data?
        - Service providers & business partners, insofar as this is necessary for processing of your application or the protection of legitimate interests (e.g., cloud provid-ers).

    3. Is my personal data transferred to a third country?
    Hanwha TotalEnergies Petrochemical is based in South Korea whose level of data pro-tection has been found adequate and equivalent to GDPR by the EU Commission.

    Our service providers and business partners will sometimes process personal data in countries without an adequate level of data protection law. In these cases, we ensure an appropriate level of data protection through other transfer mechanisms in compliance with GDPR (generally by standard contractual clauses approved by the EU Commission). You can request a copy of the contract ensuring the adequate level of data pro-tection.

    4. How long will my personal data be stored?
    Unless a specific retention period is specified in this privacy notice, we will only pro-cess your personal data as long as it is necessary for processing of your application or as long as there are legal retention obligations. After the processing is no longer necessary for this purpose and the retention obligations end, your data will be routinely deleted.

    5. What data protection rights do I have and who can I contact?
    You have the following rights (if the respective requirements under GDPR are met):
        - Right of access (Art. 15 GDPR)
        - Right to rectification (Art. 16 GDPR)
        - Right to erasure (Art. 17 GDPR)
        - Right to restriction of processing (Art. 18 GDPR)
        - Right to data portability (Art. 20 GDPR)
    You can revoke your consent to the processing of personal data at any time with effect for the future (Art. 7 (3) GDPR).

    You can object to the data processing on the basis of our legitimate interests (Art. 6 (1) f) GDPR) at any time based on grounds relating to your particular situation (Art. 21 GDPR).

    Please address your questions or concerns regarding the processing of your personal data to:

        Hanwha TotalEnergies Petrochemical Co., Ltd.
        Information Security Division
        103, Dokgot 2-ro, Daesan-eup, Seosan-si,
        Chungcheongnam-do, Republic of Korea
        E-mail: security.htc@htpchem.com

    You also have the right to lodge a complaint with a data protection authority (Art. 77 GDPR).
    The competent supervisory authority for Hanwha TotalEnergies Petrochemical is:

        Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
        Gustav-Stresemann-Ring 1
        65189 Wiesbaden, Germany
        E-Mail: poststelle@datenschutz.hessen.de

    6. Do I have an obligation to provide personal data?
    The provision of your data is not mandatory. The provision of your data is neither legally nor contractually required.
    However, if you would like to apply for a specific position, it is necessary for your data to be made available so that we can decide on your application – and thus ultimately on your hiring.