YEST Co., Ltd. ("the Company") installs and operates fixed video information processing devices (CCTV) pursuant to Article 25 of the Personal Information Protection Act, and establishes and discloses this policy to protect the personal video information of data subjects.
Under Article 25(1) of the Personal Information Protection Act, the Company installs and operates CCTV for the following purposes:
The number of cameras, installation locations, and coverage at each of the Company's sites are as follows:
| Site | Cameras | Location | Coverage |
|---|---|---|---|
| Head Office | 210 | 27, Masan 12-ro, Jinwi-myeon, Pyeongtaek-si, Gyeonggi-do | Entire company premises |
Detailed installation points are managed in a separate register. Please contact the officer named in Article 3 if you need to confirm them.
To protect personal video information and handle data subjects' requests concerning it, the Company designates a Personal Video Information Protection Officer as follows:
| Category | Personal Video Information Protection Officer |
|---|---|
| Affiliation / Position | Management Support Team, YEST Co., Ltd. |
| Contact | Tel. +82-31-612-3333 | yest@yest.co.kr |
Access to video information is granted only to the minimum number of persons designated by the officer, and access rights are withdrawn without delay when an authorised person changes.
| Recording hours | 24 hours, continuous |
|---|---|
| Retention period | 30 days from the date of recording |
| Storage location | Controlled area (server room) at each site |
The Company records and manages matters concerning use beyond the purpose, provision to third parties, destruction, and access requests. Video information whose retention period has expired is permanently deleted by a method that prevents recovery; printed outputs are shredded or incinerated.
The Company does not currently outsource the installation or operation of its CCTV systems. Should outsourcing occur, the trustee and the scope of the entrusted work will be disclosed through this policy and supervised in accordance with the Personal Information Protection Act.
A data subject may request access to, confirmation of the existence of, or deletion of personal video information in which they themselves appear, or which is clearly necessary for the life, body, or property interests of the data subject. The Company takes the necessary measures within 10 days of receiving such a request and notifies the result.
A request may be refused, with written notice of the grounds, in the following cases:
Any addition, deletion, or modification of this policy will be announced on the website notice board at least 7 days before it takes effect.
Effective date: 25 August 2026
