top of page

SmileShark Video Data Processing Device Operation and Management Policy

(In accordance with the Personal Information Protection Act of the Republic of Korea)

 

SmileShark Co., Ltd. (“the Company”) installs and operates visual data processing devices in accordance with Article 25 of the Personal Information Protection Act (“PIPA”) and Article 27 of its Enforcement Decree. This Policy aims to ensure the safe management of visual data and the protection of the rights of data subjects.

  1. The statutory ground and purpose to install the visual data processing devices;

  2. The number of the fixed visual data processing devices installed, the locations of installation, and the scope of photographing;

  3. The manager and department in charge, and the person who is entitled to access the visual data;

  4. The number of persons authorized to access the visual data and their management;

  5. The duration of filming, retention period, retention place and processing method of the visual information;

  6. Matters concerning the consignment of the installation and management of visual data processing devices (if applicable);

  7. The method and place where the data subject may request the inspection of visual information;

  8. The measures taken to deal with the data subject’s request to access the visual information;

  9. The technical, administrative, and physical measures to ensure the secure management of visual information;

  10. Other matters necessary for the operation and management of visual data processing devices;

1 . The statutory ground and purpose to install the visual data processing devices;

Pursuant to Article 25(1) of the Personal Information Protection Act, the Company installs and operates visual data processing devices (CCTV) for the following purposes:

​

1) Ensuring facility safety and fire prevention

2) Monitoring access control and entry/exit

3) Crime prevention and protection of employees and visitors

4) Preventing unauthorized intrusion

5) Other purposes permitted under applicable laws

2. The number of the fixed visual data processing devices installed, the locations of installation, and the scope of photographing;

3. The manager and department in charge, and the person who is entitled to access the visual data

The Personal Information Protection Officer designated in the Company’s Privacy Policy also serves as the manager responsible for the management and protection of personal visual information collected via visual data processing devices.

4. The number of persons authorized to access the visual data and their management;

1) Department in charge : SmileShark Operations Group

2) Authorized personnel : SmileShark personnel responsible for personal information management

5. The duration of filming, retention period, retention place and processing method of the visual information;

1) Duration of filming : 24 hours a day

2) Retention period : 30 days from the date of recording

3) Retention place : Stored and managed by the entrusted security provider, S-One(Tel: 02-1588-3112)

4) Processing method : Any access, use beyond original purposes, deletion, or external provision is recorded and managed. Upon expiration of the retention period, recorded data is irreversibly deleted using methods that prevent recovery.

6. Matters concerning the consignment of the installation and management of visual data processing devices (if applicable);

SmileShark  consigns the installation and management of its visual data processing devices to S-One.

7. The method and place where the data subject may request the inspection of visual information;

A data subject who wishes to review their personal visual data must contact the Company in advance. Upon confirmation, inspection may be conducted at the Company's premises.
1) Contact point : SmileShark Operations Group (Tel: 070-4369-2028)

8. The measures taken to deal with the data subject’s request to access the visual information;

A data subject may request inspection, confirmation of existence, or deletion of their personal visual information at any time from the operator of the visual data processing devices.

Such requests are limited to personal visual information in which the individual is identifiable or visual information necessary to protect the urgent interests of the data subject’s life, body, or property.

Upon receiving a valid request, the Company will promptly take the necessary measures.

9. The technical, administrative, and physical measures to ensure the secure management of visual information;

The Company does not collect visual information or use audio functions for any purpose other than those stated in Article 1. Access to collected and stored visual information is strictly restricted to authorized personnel only.​

The Company manages all visual information captured through its devices as “confidential” or higher and prohibits any unauthorized viewing, playback, or external transfer.

When the retention period expires, the visual information is permanently deleted in a manner that makes restoration impossible.

10. Other matters necessary for the operation and management of visual data processing devices

This Policy was established on May 28, 2025. If there are additions, deletions, or amendments due to changes in laws, policies, or security technologies, the Company will announce the reasons and details at least seven (7) days prior to enforcement through its website.

​

  • Data of announcement : May 28, 2025

  • Effective date : June 9, 2025

bottom of page