Privacy Policy
AimedBio Inc. (the “Company”) complies with relevant laws and regulations, including the “Personal Information Protection Act” and the “Act on Promotion of Information and Communications Network Utilization and Information Protection,” to process personal information lawfully and manage it securely.
Through this Privacy Policy, the Company establishes and discloses the following processing guidelines to protect personal information collected from data subjects and to handle related grievances promptly and smoothly
Through this Privacy Policy, the Company establishes and discloses the following processing guidelines to protect personal information collected from data subjects and to handle related grievances promptly and smoothly
- 1. Purpose of Collection and Use of Personal Information
-
The Company processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than those stated, and if the purpose of use changes, we will take necessary measures, such as obtaining separate consent.
1. Talent Pool Operation and Recruitment Management: Identity verification and administrative processing related to Talent Pool registration and modification; verification of the authenticity of registered educational background and work experience; assessment of suitability for recruitment for ongoing hiring; and provision of guidance during future recruitment processes.
2. Provision of Information Services: Provision of academic and corporate materials such as research papers, press releases, and announcements; management of resource center usage records.
3. Processing of Cyber Complaint Center Inquiries: Identity verification for proposals for technical cooperation and general inquiries; contact for fact-checking; notification of processing results.
- 2. Items of Personal Information Processed
-
The Company collects only the minimum amount of personal information necessary to provide services.
1. General Items: Name, email address, contact information, affiliated organization, job title.
2. Recruitment Items: Educational background, work experience, certifications, and information provided in the application, such as the cover letter.
3. Automatically Collected: IP address, cookies, service usage history, and access logs.
- 3. Provision of Personal Information to Third Parties and Overseas Transfer
-
3. Provision of Personal Information to Third Parties and Overseas Transfer
The Company shall use the personal information of data subjects only within the scope notified in Article 1 of the “Purpose of Collection and Use of Personal Information” and shall not use personal information beyond this scope or share or provide it to third parties without the prior consent of the data subject.
However, exceptions apply in cases where there are grounds specified in each subparagraph of Article 18(2) of the “Personal Information Protection Act,” including instances where a request for the provision of information is made in accordance with procedures prescribed by law. Examples of such exceptions are as follows:
- When a request is made in accordance with the procedures and methods prescribed by laws and regulations
- When a request is made by an investigative agency in accordance with the procedures and methods prescribed by laws and regulations for purposes such as investigation
- 4. Retention and Use Period of Personal Information
-
The Company processes and retains personal information within the retention and use period prescribed by laws and regulations or within the retention and use period agreed upon by the data subject at the time of collection.
1. Talent Pool Operation and Recruitment Management: 3 years from the date of registration
2. Visitor Records: Immediately after the purpose is achieved, or for 1 year in accordance with internal security regulations.
3. Other Inquiries: 1 year after completion of processing.
4. Other cases: Destroyed without delay if the data subject requests destruction or if the purpose of collection has been achieved.
- 5. Rights, Obligations, and Methods of Exercise for Data Subjects/dt>
- Data subjects may exercise their rights, such as requesting access to, correction of, deletion of, or suspension of processing of personal information, at any time, and the Company shall take action without delay.
- 6. Installation and Operation of Devices for Automatic Collection of Personal Information and Matters Concerning Refusal
-
1. The Company uses “cookies” to store and periodically retrieve usage information for the convenience of users.
2. Cookies are small pieces of information sent by the server (HTTP) used to operate the website to the user’s computer browser and may be stored on the user’s computer hard drive.
3. Processing of Behavioral Information: The Company processes behavioral information in a manner that does not identify individuals by utilizing automatic collection devices such as cookies to provide convenient services to data subjects during the service usage process.
- Items Collected: IP address, cookies, visit history
- Collection Method: Automatically collected when accessing and using the website
- Purpose of Collection: Used to enhance user convenience by storing relevant information to prevent notification pop-ups from repeatedly appearing when users visit the website
- Retention and Usage Period: Destroyed 30 days after collection
| Type | Configuration Method |
|---|---|
| Chrome |
|
| Edge |
|
| Safari |
|
| Firefox |
|
| Naver Whale |
|
- 7. Measures to Ensure the Security of Personal Information)
-
The Company takes the following measures to ensure the security of personal information.
1. Administrative Measures: Establishment and implementation of internal management plans; regular employee training.
2. Technical Measures: Management of access rights to personal information processing systems; encryption of unique identifiers; installation of security software.
3. Physical Measures: Controlling unauthorized access to computer rooms, data storage rooms, etc.
- 8. Data Protection Officer
-
1. The Company has designated a Data Protection Officer as follows to oversee all matters related to the processing of personal information and to handle complaints from data subjects and provide remedies for damages related to such processing.
- Department: Operations Department
- Name: Taekyeong Kim
- Position: Chief Operating Officer
- Contact Information: Email tkkim@aimedbio.com, Phone Number 02-6285-0743
- 9. Request for Access to Personal Information
-
Data subjects may submit requests for access to personal information pursuant to Article 35 of the “Personal Information Protection Act” to the following department.
- Department Name: Operations Department
- Contact Person: Mihyun Kim, Director
- Contact Information: Email mhkim@aimedbio.com, 02-6285-0740
- 10. Remedies for Infringement of Rights
- Data subjects may report any complaints related to personal information protection arising from the use of the Company’s services to the Data Protection Officer or the responsible department. If you need to report or consult regarding other personal information infringements, please contact the following organizations.
| Organization Name | Contact Information | Website |
|---|---|---|
| Personal Information Dispute Mediation Committee | 1833-6972 | www.kopico.go.kr |
| Personal Information Infringement Reporting Center | 118 | privacy.kisa.or.kr |
| Supreme Prosecutors’ Office | 1301 | www.spo.go.kr |
| National Police Agency | 182 | ecrm.cyber.go.kr |
- 11. Matters Concerning Changes to the Privacy Policy
-
1. This Privacy Policy shall take effect on March 31, 2026.
2. In the event that this Privacy Policy is amended due to changes in laws, regulations, or policies, we will notify you of such changes through announcements on our website and via a separate pop-up window.