CCTV Guidelines
Management Strategy Headquarters established on November 6, 2020
Article 1.Purpose
The purpose of this Rule is to use and manage CCTV video information of NH Nonghyup REITs Management Co., Ltd. (hereinafter referred to as the "Company").
Article 2.Reasons for Installation and Purpose of Installation of CCTV
The Company shall install and operate CCTV for the following purposes pursuant to Article 25 (1) of the Personal Information Protection Act.
- 1)Facility safety and fire prevention
- 2)Crime Prevention and Occasional Use
- 3)Other tasks
Article 3.Number of Installations, Location of Installation, and Scope of Filming
CCTV shall be installed at the head office, and the number and location of installation shall be as follows.
| Sortation | Number of installations | Installation location and shooting range |
|---|---|---|
| the head office | four generations | entrance door |
Article 4.Management Officer and Management Department
To protect video information and handle matters related to personal video information, a CCTV management officer shall be designated as follows.
- 1)Management manager: Compliance officer
Article 5.Taking time, storage period, storage place, and processing method of video information
| Filming time | Storage period | Installation location and shooting range |
|---|---|---|
| 24 hours | From the date of filming to 2 months | In and out of the communication rack |
Article 6.Matters concerning the confirmation and location of personal video information
Contact the person in charge of management in advance and confirmation can be made in the presence of the person in charge of management.
Article 7.Measures to Respond to Data Subject's Request to View Video Information
- 1)information subject (the principal) may request the CCTV management manager at any time if he/she desires to view, confirm, or delete personal video information.
- 2)Video information that the data subject may request to view, etc. is clearly limited to personal video information necessary for the urgent life, body, and property of the data subject or a third party, without obtaining consent from the data subject.
- 3)The company shall take necessary measures without delay when requesting to view, confirm, or delete personal video information. However, the request may be rejected if the data subject's request, such as the access to personal video information, falls under any of the following matters.
- 1.When personal video information is destroyed after the storage period has elapsed
- 2.Where there are other justifiable reasons to reject the request, such as access by the data subject, etc
Article 8.Measures to ensure the safety of video information
- 1)Measures necessary to secure stability through encryption measures shall be taken to prevent personal video information processed by the company from being lost, stolen, leaked, altered, or damaged.
- 2)As a management measure for personal image information protection, the company limits access to personal information to a designated minimum number of people.
- 3)Storage facilities or locking devices shall be installed for the safe physical storage of personal image information.