Privacy Policy
Last updated: 09/04/25
(Website visitors browsing from within the EU, click here to view our GDPR Privacy Policy.)
For our Privacy Policy in Korean Language, please click here.
JAC Recruitment Korea Co., Ltd. (hereinafter referred to as “JAC”, "the Company, “we” or “our”) processes and manages personal information lawfully and safely in compliance with the Personal Information Protection Act (hereinafter “PIPA”) and related laws and regulations to protect the freedom and rights of information subjects. Accordingly, in accordance with Article 30 of the Personal Information Protection Act, the Company have established and disclosed the following privacy policy to inform information subjects of the procedures and standards for processing personal information and to promptly and smoothly handle grievances related thereto. As our Services are not intended for use by minors, we typically do not collect personal information relating to individuals under the age of 18.
Personal Information We Collect
We collect and process the following types of personal information from candidates, clients and suppliers:
Candidates
Personal Identification Information | · Full name · Date of birth · Gender · Nationality · Identification numbers (e.g., Passport number, Driver license number) · Photograph |
Contact Information
| · Home address · Email address · Phone number · Emergency contact details |
Employment and Education Information
| · Resume/CV · Employment history (job titles, dates of employment, employers) · Educational background (degrees, certifications, institutions attended) · Professional qualifications and certifications |
Financial Information
| · Salary expectations and history · Bank account information (for payroll purposes if applicable) · Tax-related information (e.g., Withholding tax receipts and four major insurance reports) |
Legal Information | · Visa and work permit information · Criminal background checks (if required by law or job position) · Immigration status |
Other Information | · Job preferences (desired role, location, type of employment) · Availability for work · Interview notes and assessments · Results from aptitude or skills tests (if applicable) · Disability status (Whether it will be disclosed or not depends on the candidate's will) · Diversity data (e.g., race, ethnicity) if voluntarily disclosed and required for monitoring diversity. |
Clients
Business Information | · Company name · Business registration number · Industry sector · Business address · Company website |
Contact Information | · Names and job titles of key contacts (e.g., HR managers, hiring managers) · Work email addresses · Work phone numbers · Preferred method of contact |
Contractual Information | · Details of services requested · Terms of contracts and agreements · Billing and payment information · History of past engagements and services provided · Feedback and satisfaction ratings |
Legal and Compliance Information | · Compliance requirements (e.g., non-disclosure agreements, data protection agreements) · Information related to legal disputes or claims (if any) |
Suppliers
Business Information | · Company name · Business registration number · Industry sector · Business address · Company website |
Contact Information | · Names and job titles of key contacts (e.g., account managers, service providers) · Work email addresses · Work phone numbers · Preferred method of contact |
Contractual Information | · Details of services provided · Terms of contracts and agreements · Billing and payment information · Service level agreements (SLAs) · History of past engagements and services provided · Feedback and performance evaluations |
Legal and Compliance Information | · Compliance certifications (e.g., quality standards, safety regulations) · Information related to legal disputes or claims (if any) |
How We Collect Your Data
We collect data from candidates, clients and suppliers in the following ways:
Collection from Candidates
Direct Collection | · Online Applications and Portals: Candidates may submit their resumes, cover letters, and other personal information through our website or job portal. This could also include filling out forms with personal details such as contact information, employment history, and job preferences.
· Email or Paper Submissions: Candidates can send their application documents via email or physical mail. We ensure that the process is secure and that information is handled according to privacy standards.
· Interviews and Assessments: During in-person, virtual, or phone interviews, candidates may provide additional personal information.
· Job Fairs and Recruitment Events: We may collect personal information from candidates during job fairs or recruitment events, often through sign-up sheets, forms, or digital submissions at kiosks. |
Third-Party Sources | · Professional Networks and Job Boards: We may collect candidate information from third-party job boards, social media platforms (e.g., LinkedIn), and other professional networks where candidates have made their profiles publicly available. · Referrals: Information may be collected through referrals from other candidates, employees, or industry contacts, provided that the referred candidate has consented to this process. |
Collection from Clients
Direct Collection | · Client Meetings and Consultations: Personal and business information is often collected during face-to-face meetings, phone calls, or virtual consultations with clients. This includes details about the client’s staffing needs, company culture, and contact information. · Contracts and Agreements: When entering into service agreements or contracts, agencies collect necessary business and personal data to facilitate the recruitment process, billing, and communications. |
Online Forms and Portals | · Service Requests: Clients may provide information through online forms or client portals where they detail their requirements for specific job roles, including the qualifications and characteristics they are looking for in candidates. · Surveys and Feedback Forms: We may collect client feedback or additional business information through surveys or follow-up forms to improve our services. |
Collection from Suppliers
Direct Collection | · Contractual Agreements: Personal information from suppliers is often collected during the negotiation and signing of contracts, which may include contact details, business registration numbers, and other relevant data. · Meetings and Communications: Information may also be gathered during meetings, phone calls, or email exchanges where the specifics of the services provided by the supplier are discussed. |
Purpose of Data Collection
We collect and process data from candidates, clients and suppliers for the following purposes:
Facilitating Recruitment Processes
Candidates: Collecting personal and professional information to assess candidates' suitability for job vacancies, match them with appropriate roles, and assist them in applying for positions. This includes gathering resumes, job history, educational background, skills, and references.
Clients: Gathering data to understand the staffing needs and requirements of clients, ensuring that the candidates presented meet their specific criteria.
Suppliers: Collecting information to manage business relationships with suppliers who provide services such as background checks, training, and other support services essential to the recruitment process.
Compliance with Legal and Regulatory Obligations
Candidates: Ensuring legal compliance with hiring, including verifying candidates' legal right to work, conducting necessary background checks, and processing visa applications if required.
Clients and Suppliers: Complying with contractual, legal, and regulatory requirements related to business operations, such as tax reporting, contract management, and ensuring adherence to data protection regulations.
Providing Career and Employment Services
Candidates: Offering career advice, job alerts, and recruitment services, including matching candidates to suitable job openings, facilitating interviews, and providing ongoing support during the recruitment process.
Clients: Delivering tailored recruitment services, including the selection and recommendation of candidates that best fit the client's needs.
Suppliers: Ensuring efficient coordination and communication with suppliers to support the delivery of services related to recruitment and staffing.
Business Operations and Improvement
Candidates: Analyzing candidate data to enhance recruitment strategies, improve service offerings, and understand market trends.
Clients: Using client data to improve client relationship management, customize recruitment services, and enhance overall client satisfaction.
Suppliers: Managing supplier relationships, optimizing hiring processes, and ensuring the quality and efficiency of services provided.
Marketing and Communication
Candidates: Informing candidates about relevant job opportunities, industry developments, events, and promotions that may be of interest.
Clients: Providing clients with updates on industry trends, market conditions, and the availability of suitable candidates.
Suppliers: Maintaining communication with suppliers regarding service needs, contract updates, and collaboration opportunities.
Security and Crime Prevention
Candidates, Clients, and Suppliers: Collecting and processing data to prevent or detect fraud, abuse, or other illegal activities, and to ensure the security of the recruitment process.
Managing Diversity and Inclusion
Candidates: Monitoring diversity within recruitment processes to promote equal opportunities and ensure compliance with anti-discrimination laws.
Conducting Statistical Analysis and Reporting
Candidates, Clients, and Suppliers: Analyzing data for reporting, research, and statistical purposes to improve recruitment strategies, understand market trends, and make informed business decisions.
Emergency Data Processing
Under Article 18 of the amended PIPA, in cases where it is urgently necessary to collect, use, or provide personal data in order to protect people from personal threats, including loss or life or property, such as in an emergency rescue operation, or to mitigate public health crises. In such event, appropriate safeguards will be applied to ensure the security and confidentiality of your data.
Disclosure of Personal Information to Third Parties
We may disclose Personal Information to third parties to achieve the purposes of data collection with the following categories of third parties:
Potential employers and hiring managers
Background verification service providers
Professional advisors such as lawyers or auditors
Regulatory and government authorities, if required by law.
Retention Period for Personal Information
JAC will retain your confidential and personal information for as long as necessary to fulfill the aforementioned purposes for obtaining and processing your personal informationin accordance with Article 21 of the PIPA. Please kindly be ensured that the retention of personal information after the expiry date of retention period will only occur in the necessary circumstance. When the retention period has ended or the retention of such information is no longer necessary (whichever is applicable), JAC will destroy or erase such information from our system.
However, if it is necessary to preserve it in accordance with the provisions of the relevant laws and regulations, JAC will retain the information for a certain period of time as specified in the relevant laws as follows:
(e.g.,) Act on Protection of Consumers in Electronic Commerce Transactions, etc.
Records related to display advertisements: 6months
Records concerning consumer complaints or dispute resolution: 3 years
Records concerning withdrawal of contract or application: 5 years
International Transfers of Personal Information
In order to provide users with overseas employment placement services, if the user wishes to find a job outside Korea, the company will transfer users' personal information outside of the Republic of Korea as follows:
Destination | JAC Group (affiliate company) |
Destination country | Japan, Singapore, Malaysia, Indonesia, Thailand, Vietnam, India, UK, Germany, USA |
Purpose of use by the party to which personal information is transferred | To support job seekers in finding employment and to facilitate recruitment procedures for employees |
Personal information to be transferred | All personal information items collected for the provision of job placement services as described in this Privacy Policy. |
Time and method of transfer | After obtaining your explicit consent, the information and communication network according to the recruitment conditions. |
Period of retention and use by the transferee | JAC will retain the confidential and personal information for as long as necessary to fulfill the aforementioned purposes for obtaining and processing your personal information. |
Method of Destruction of Personal Information
Destruction method
Electronic Data:
Deletion: Using a technical method to delete all data that makes it impossible to reproduce the records.
Physical Destruction: If physical media (e.g., hard drives, CDs) is used, ensure that it is physically destroyed using methods such as shredding or degaussing to prevent any possibility of data recovery.
Paper Records:
Shredding: Use cross-cut shredders to destroy paper records containing personal information.
Your Rights as a Data Subject
You have the following rights regarding personal information obtained and processed by us. In order for us to process with your request, we will need to verify your identity and may request further information about your request. We may refuse your request where we are legally permitted to do so and give you such reasons.
Right to withdraw a consent | You have the right to withdraw your consent at any time by the method separately designated by us at the timing of obtaining your consent.However, your withdrawal of consent will not affect the legality of processing conducted based on your consent before its withdrawal. |
Right to access to personal information | You have the right to access and obtain a copy of the processed personal information concerning you and to ask us to disclose where JAC obtained such personal information from. We may refuse access to your personal information if it would affect the privacy rights of other persons or if it breaches any confidentiality that attached to that information. You should be aware that it may take a reasonable time to process your application for access as we may need to retrieve information from storage and review information in order to determine what information may be provided. |
Right to obtain or transfer your personal information | You have the right to receive personal information concerning you in a structured, commonly used, and machine-readable format that can be automatically accessed or disclosed, and the right to transfer those data to another controller. |
Right to object the collection, the use, or the disclosure of personal information | You have the right to object to the processing of the personal information concerning you |
Right to erase your personal information | You have the right to have us delete or destroy personal information concerning you, or to make such personal information to become the information that cannot identify your identity. Personal information stored in the form of electronic files will be deleted using a technical method that makes it impossible to reproduce the records. Once your information is deleted, JAC might not be of service to you anymore such as not able to assist in matching our open job vacancies to you. If you want to use our services in the future, you will need to re-submit your information to JAC. |
Right to restrict on the processing of personal information | You have the right to have us stop the processing of personal information concerning you. However, if this involves a request of deletion of your file, please be aware that we may not be required or able to do so, particularly where your file also holds information about our clients. Where permitted to do so, we may charge a fee to cover our administrative costs when accessing and updating requests. |
Right to rectify on the processing of personal information | You have the right to have us rectify inaccurate personal information concerning you to be a completed and updated information that will not cause any misunderstanding. We generally update your customer information over the telephone. Please advise your consultant when your personal details change. If you have created a profile with JAC through our website, then you are able to update or delete your personal information whenever you apply for a new position advertised. In order to do this, log into your profile and edit or delete the information you have submitted. |
Right to lodge complaints | You have the right to lodge a complaint with a competent data protection supervisory authority when JAC violates or not complies with the laws concerning of personal data protection. |
If you intend to exercise any of the aforementioned rights, please inquire using the contact details at the end of this privacy policy.
If you wish to withdraw your consent to the use of your personal information collected by us, please contact us at the contact details provided at the end of this privacy policy.
Automated Decision-Making and Profiling
What is Automated Decision Making
Automated decision-making refers to decisions made by automated means without any human involvement. This can include profiling, which is the automated processing of personal data to evaluate certain aspects about an individual, such as their performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.
How JAC use Automated Decision-Making
JAC may use automated decision-making and profiling in the following ways:
Recruitment Process: To evaluate candidates’ suitability for job vacancies based on qualifications, experience and other relevant criteria.
Marketing: To tailor marketing communications to preferences and interests.
Fraud Prevention: To detect and prevent fraudulent activities.
Your Rights Regarding Automated Decisions
As a data subject, you have the following rights regarding automated decision-making and profiling:
Right to Obtain Human Intervention | You have the right to request human intervention if you believe that an automated decision has significantly affected you. |
Right to Express Your Point of View | You have the right to express your point of view and contest the decision. |
Right to Obtain an Explanation | You have the right to obtain an explanation of the decision and the logic involved in the automated processing. |
Right to Object | You have the right to object to automated decision-making and profiling in certain circumstances. |
If you intend to exercise any of the aforementioned rights, please inquire using the contact details at the end of this privacy policy.
Measures to ensure the Safety of Personal Information
JAC takes the following measures to ensure the safety of personal information.
Management measures | Data Protection Policies and Procedures · Policy Development: Develop and implement comprehensive data protection policies and procedures in line with PIPA. · Regular Review: Regularly review and update policies and procedures to address changes in legal requirements and industry best practices.
Employee Training and Awareness · Training Programs: Provide regular training to employees on data protection principles, secure handling of personal data, and recognizing potential security threats. · Awareness Campaigns: Conduct awareness campaigns to keep employees informed about data protection policies and best practices. |
Technical measures
| Access Controls · Authentication: Implement strong authentication mechanisms (e.g., multi-factor authentication) to ensure that only authorized personnel can access personal data. · Authorization: Define and enforce access controls based on roles and responsibilities, limiting access to personal data to those who need it for their job functions. Secure Systems and Networks · Firewalls and Intrusion Detection Systems: Use firewalls and intrusion detection/prevention systems to protect networks from unauthorized access and cyber threats. · Regular Updates and Patch Management: Keep software, applications, and operating systems up to date with the latest security patches and updates. Data Backup and Recovery · Regular Backups: Perform regular backups of personal data to ensure that it can be recovered in case of data loss or system failure. · Secure Storage: Store backup data in secure locations and ensure it is also encrypted. |
Physical measures | Secure Facilities · Access Control: Implement physical security measures such as access control systems (e.g., key cards, biometric scanners) to restrict access to areas where personal data is stored or processed. Document Handling · Secure Storage: Store physical documents containing personal data in locked cabinets or safes. · Shredding: Shred documents that are no longer needed or contain sensitive information before disposal. |
Cookies
JAC uses 'cookies' that store and retrieve usage information from time to time to provide individualized customized services to users.
Cookies are small amounts of information sent to the user's computer browser by the server (http)
used to operate the website and are stored on the hard disk of the user's PC computer.
Purpose of use of cookies | Cookies are used to provide optimized information to users by identifying the type of visit and use of each service and website visited by users, popular search terms, secure connection, etc. |
Installation, operation and rejection of cookies | You can reject the storage of cookies by setting the options in the Tools>Internet Options>Privacy menu at the top of your web browser. If you refuse to save cookies, you may experience difficulties in using our personalized services. |
About the Privacy Officer
JAC is responsible for the processing of personal information in general and designates a personal information protection officer as follows to handle complaints and damage relief of information subjects related to the processing of personal information.
Data Protection Officer (DPO)
Name: Kato Masahi
Title: Managing Director
Contact email :privacyofficer.kr@jac-recruitment.com
Tel:+82 (0) 2 2183 0511
If you have questions about this Policy, our privacy practices, or if you would like to submit a request exercising your privacy rights, please contact us.
JAC aims to accept the receipt of your right request or complaints either via email or whichever visible methods and shall provide a reply within 21 working days of acceptance. Should the matters require more time, we will provide updates and inform you of the situation.
Remedies for User Rights Violations
The information subject may apply for dispute resolution or counseling to the Personal Information
Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea
Internet & Security Agency, etc. to receive relief due to personal information infringement. For other reports and consultations on personal information infringement, please contact the following organizations.
Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)
General Prosecutor's Office: 1301 (without area code) (www.spo.go.kr)
National Police Agency: 182 (without area code) (ecrm.cyber.go.kr)
JAC guarantees the right of self-determination of personal information of the information subject and strives to provide counseling and damage relief due to personal information infringement, and if you need to report or consult, please contact the department in charge below.
Customer consultation and report regarding personal information protection
Name: Kato Masahi
Title: Managing Director
Contact email: privacyofficer.kr@jac-recruitment.com
Tel:+82 (0) 2 2183 0511
A person whose rights or interests have been infringed upon by an action or omission taken by the head of a public institution in response to a request pursuant to the provisions of Articles 35 (Access to Personal Information), 36 (Correction and Deletion of Personal Information), and 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act may file an administrative appeal in accordance with the Administrative Appeals Act.
Central Administrative Appeals Commission: 110 (without area code) (www.simpan.go.kr)
Changes to this Privacy Policy
This Privacy Policy is applicable from 2025.04.09 the time of its publication on our company's website, and all previous Privacy Policy versions provided below has become invalid as of the date of publication of this Privacy Policy.
Regular Reviews and Training
JAC will review this privacy policy regularly to ensure compliance with the latest legal requirements and industry best practices. Additionally, JAC will conduct regular training sessions for our staff to ensure they are aware of and adhere to data protection policies and procedures.