Article 1. Purposes of Processing Personal Information

 

The company may process the information subject’s personal information for the purpose specified below. Their personal information shall not be utilized for any purpose other than the following purposes specified below, and should their information be used for a different purpose, we shall implement measures such as obtaining additional consent in accordance with Article 18 of the Personal Information Protection Act.

 

- Personal data from website users : Confirming and processing inquiries and proposals

 

 

 

Article 2. Personal Information Items to be Processed

 

The company may process and retain the following personal information items.

 

- Personal data of the information subject, including his/her name, phone number (including mobile number), e-mail address, affiliated company, etc., that was included in the inquiries and suggestions raised by website users and has thus been provided to the company.

 

 

 

Article 3. Period of Processing and Retaining Personal Information

 

The company processes and retains personal data within the duration of personal data retention/use stipulated by applicable laws and regulations or within the duration of personal data retention/use as agreed upon at the time of collecting personal data from the information subject.

 

- Retention time for personal data provided by users posting inquiries or proposals on the website: Data is kept until the processing of inquiries/proposals is completed.

 

 

 

Article 4. Rights and Obligation of the Information Subject and Legal Representative; Exercise of Rights and Performance of Obligations

 

1. The information subject may exercise their right to inspect, correct, delete, or suspend the processing of their personal information to the company at any time.

2. The information subject may exercise the rights provided in paragraph (1) by post, email or fax according to Article 41 Paragraph 1 of the Enforcement Decree to the 『Personal Information Protection Act』, and the company shall promptly take necessary measures.

3. The information subject may exercise the rights provided in paragraph (1) through an agent, including a legal representative or one with power of attorney. In such cases, the information subject must submit a letter of delegation according to attached Form 11 of the 『Enforcement Rule of the Personal Information Protection Act』 [No. 2020-7].

4. When the information subject exercises their right to inspect or demand the suspension of personal information processing, the information subject’s rights may be limited by Article 35 (4) or 37 (2) of the 『Personal Information Protection Act』.

5. The information subject cannot demand the correction or deletion of personal information when said personal information is subject to collection as provided by other statutes.

6. When the information subject exercises their right to demand inspection, correction, deletion or suspension of personal information processing, the company shall verify whether the request was made by the actual user or a legitimate representative.

 

 

 

Article 5. Provision of Personal Information to Third Parties, Etc.

 

The company shall not provide or entrust the personal data provided by the information subject to a third party for the purpose of confirming and processing inquiries·proposals.

 

 

 

Article 6. Destruction of Personal Information

 

1. The company destroys the information subject’s personal information immediately after the period of retaining personal information ends or the purposes of processing personal information are attained.

2. Even when the period of retaining the personal information provided by the information subject has ended or the purposes of processing personal information are attained, if it is required to preserve the personal information under other statute, the company shall preserve the personal information by storing it in a separate database or storage.

3. The procedures and methods for destroying personal information are as follows.

- Procedures for destruction: The company selects the personal information with cause for destruction, and destroys them with the approval of the company’s personal information protection manager.

- Methods for destruction: The personal information recorded and stored in electronic files will be destroyed to render data recovery impossible, while personal information recorded and preserved in paper documents shall be shredded or incinerated.

 

 

Article 7. Measures for Ensuring the Safety of Personal Information

 

KendallSquare REIT Management Inc., the company’s asset management company, takes the following measures to ensure the safety of personal information.

 

1. Administrative measures : Formulation and implementation of internal management policy, regular training for employees

2. Technical measures : Management of access and authorization to personal information processing systems, installing security software

3. Physical measures : Controlling access to data archives

 

 

 

Article 8. Matters Related to Installation·Operation and Rejection of Automated Personal Information Collection Devices

 

The company does not use ‘cookies’, a means of storing and retrieving the information subject’s information.

 

 

 

Article 9. Personal Information Protection Manager

 

1. The company’s asset management company, KendallSquare REIT Management Inc., is responsible for the overall handling of personal information and has designated the person in charge of personal information protection as follows to handle complaints and damage relief of information subjects related to personal information processing.

 

Person in charge of personal information protection

- Name: Miae Park

- Position: KendallSquare REIT Management Inc.’s Compliance Officer

- Contact: +82-2-6205-0476, ksrm_comp@ks-reit.com 

 

Department in charge of personal information

- Department name: KendallSquare REIT Management Inc.’s IR Headquarters

- Person in charge: Jaisung Im

- Contact: +82-2-6205-0517, ir@ks-reit.com 

 

2. The information subject may direct all questions, complaints, and remedies regarding personal information when using the company homepage to the personal information manager and management division. The company will answer the information subject’s questions without delay.

 

 

 

Article 10. Changes to the Privacy Policy

 

This Privacy policy shall be effective starting on February 1, 2023.