Privacy Policy

FUJIFILM Life Sciences Korea Co., Ltd. (hereinafter referred to as the “Company”) values the privacy of its users and complies with laws and regulations regarding the protection of personal information, including the Personal Information Protection Act (“PIPA”). This Privacy Policy informs you of the purpose and manner in which we use your personal information and measures that are being taken to protect your personal information. We will notify you of any changes to the Privacy Policy through a link on our website (or by a separate notice). This policy will be effective from November 19, 2024.

We collect and process your personal information for the following purposes. The personal information processed will not be used for any purpose other than those specified below. If there is a change in the purpose of use, we will take necessary steps, such as obtaining separate consent from you in accordance with Article 18 of the PIPA.

1. For product consultations and handling inquiries related to product use
   We process personal information to verify your identity and confirm your inquiry. Your personal information may also be used to contact you for consultation to address your inquiry and send relevant notices, and inform you of the results thereof.
2. To provide goods and services upon sample requests and make improvements to our service
   We process personal information to identify and verify our customers, deliver samples, provide services, send documents, provide content, comply with applicable laws and regulations and demonstrate such compliance. The personal information may also be used to compile and analyze statistics to make improvements to our service.
3. For marketing and advertising and making improvements to our service
   We process personal information to send newsletters and text message notifications to our customers, provide information and promote our products and services, inform customers of certain events, conferences, seminars, special events, and exhibitions for a promotional purpose, and to collect statistics regarding customers’ use of our service.

We collect and use personal information to the minimum extent necessary for providing our service.

1. Mandatory collection and use
   
   Items Collected
   • For product consultations and handling inquiries related to product use
     • If received via email: name, email address
     • If received via phone: name, affiliated company, and phone number
   • For product sample requests: name, affiliated company, email address, phone number, research area, research purpose
2. Optional collection and use
   
   Items Collected
   • For marketing and advertising: name, affiliated company, job title, email address, and cell phone number

1. We process and retain personal information in accordance with the retention and use periods stipulated by laws and regulations, or within the period you have consented to at the time your personal information was collected.
2. The processing and retention periods for each processing purpose of personal information are as follows:
   • For product consultations and product use inquiries: Retained for 3 years after the consultation is completed or inquiry is resolved in order to verify history and retain as evidentiary material in case of a future dispute.
   • Providing goods and services: Retained for 5 years from the date the goods or services were provided and the completion of the transaction.
   • For marketing and advertising: Retained until the customer withdraws consent for the processing of personal information for marketing and promotional purpose, via newsletters, text messages, etc.

Company will immediately destroy the personal information when it becomes unnecessary, such as when the retention period required by law has expired, the purpose of processing has been fulfilled, or when the customer withdraws their consent. The procedure and method of destruction are as follows

1. Destruction Procedure
   If the personal information becomes unnecessary due to the expiration of the statutory retention period or if the purpose of processing has been fulfilled, or it is confirmed that the customer has withdrawn consent, the Company will promptly report it to the Chief Privacy Officer, obtain approval for destruction, and destroy it immediately.
2. Destruction Method
   Personal information stored in files are permanently destroyed using technical methods to make impossible any recovery of the records. Personal information stored in paper documents are destroyed by shredding or incineration.

1. Company delegates the processing of personal information to facilitate the handling of personal information as follows.

2. With respect to delegation of personal information processing, Company specifies in a written form, in accordance with Article 26 of the PIPA, matters concerning the prohibition of processing personal information for purposes other than that of performing the delegated task, technical and administrative protection measures, restriction on sub-delegation, management and supervision of the delegatee, and compensation for damages. In addition, the Company supervises the delegatee to ensure that personal information is processed in a safe manner.
3. Company promptly discloses any changes to the details of the delegation or the delegatee through this Privacy Policy.

Company delegates the storage and management of its data to Monday.com, a work management platform provider, and to Mailchimp, an email marketing platform. The relevant overseas transfers of personal information are described below.

Company manages marketing and advertising-related data through this system, so if you refuse to the overseas transfer of your personal information, you will not be able to use the service. You may withdraw consent by using the [Unsubscribe] feature in the corresponding newsletter or text message, and related inquiries (including withdrawal of consent) can be made through the department responsible for receiving and processing requests such as accessing personal information.

Company takes various measures, including the following, to ensure the safety of your personal information.

1. Administrative measures: Establish and implement internal management plans, operate the relevant department in charge, minimize the number of personnel in charge, conduct regular employee training, etc.
2. Technical measures: manage access rights for handling personal information, control access to personal information processing systems, encrypt personal information, and install and periodically update security programs, etc.
3. Physical measures: Restrict physical access to offices, archives, etc.

However, Company is not responsible for any problems caused by the leakage of personal information arising from the user’s own negligence or issues in the Internet.

1. You may exercise your rights to access, correct, delete, suspend processing of and withdraw consent regarding your personal information, and object to or request an explanation of automated decisions at any time (hereinafter referred to as “Exercise the Rights”).
   * Request for access to personal information of children under the age of 14 must be made directly by their legal representative, and data subjects who are minors over the age of 14 may Exercise the Rights in relation to their personal information directly or through their legal representative.
2. You may Exercise the Rights with respect to the Company in writing, by e-mail, or facsimile, etc., pursuant to Article 41(1) of the Enforcement Decree of the PIPA, and Company will take action without undue delay.
3. You may also Exercise the Rights through your agent, such as a legal representative or a proxy. In such a case, you must submit a power of attorney in the form under Annex No. 11 of the “Notification on the Methods of Processing Personal Information (No. 2023-12)”.
4. Your right to request access to or suspend the processing of personal information may be limited by Article 35(4) and Article 37(2) of the PIPA.
5. Your request to delete your personal information may not be granted if such information is mandated as an item for collection by other laws.
6. Company will verify whether the person Exercising the Rights is the data subject or their authorized representative.
7. Company may exercise its rights to the following departments.
   Company will endeavor to promptly process the exercise of the data subject’s rights.

Department responsible for receiving and processing requests such as accessing personal information

• Department name: Sales
• Address: 13F, 308 Gangnam-daero, Gangnam-gu, Seoul, Korea
• Contact: shm-flkr-contact@fujifilm.com
• Fax: 02-2038-2461

1. Company has designated a Chief Privacy Officer who oversees the processing of personal information and is responsible for handling complaints related to personal information processing and providing remedies for data subjects, as follows.
   
   Chief Privacy Officer
   • Full name: Jieun Chung
   • Job Title: Director
   • Contact: jieun.chung@fujifilm.com
   Department in charge of Personal Information Protection
   • Department name: Sales
   • Contact: shm-flkr-contact@fujifilm.com
2. You may direct any inquiries, complaints, or requests for damage relief related to personal information protection, arising from the use of the Company’s services (or business) to the Chief Privacy Officer and the department in charge of personal information protection. Company will promptly respond to and handle such inquiries.

1. In order to seek remedy for infringement of personal information, you may request dispute resolution or consultation from the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency’s Personal Information Infringement Report Center, etc.. For other reporting and consultations on personal information infringement, please contact the following organizations.
   • Personal Information Dispute Mediation Committee: (without area code) 1833-6972 / www.kopico.go.kr
   • Personal Information Infringement Report Center: (without area code) 118 / https://privacy.kisa.or.kr
   • Supreme Public Prosecutor's Office: (without area code) 1301 / www.spo.go.kr
   • National Police Agency: (without area code) 182 / https://ecrm.cyber.go.kr
2. We are committed to ensuring your right to self-determination regarding your personal information and strive to provide consultation and relief resulting from personal information infringements. If you need to report or seek consultation, please contact the department in charge below.
   Customer consultation and reporting on privacy issues
   • Department name: Sales
   • Contact: shm-flkr-contact@fujifilm.com

If there are any changes to the Privacy Policy due to changes in the applicable laws and regulations, etc., we will notify you at least 7 days in advance through a link on our website.

(1) This Privacy Policy is effective as of November 19, 2024.