스타필드 하남이 국내 대형쇼핑몰 중 최초로 국제표준화기구(iso)의 사업연속성경영시스템(iso 22301: 2019) 인증을 획득, 고객과 직원 모든 방문객이 언제나 안심하고 이용할 수 있는 안전한 환경을 제공한다.
iso 22301은 국제표준화기구(iso)가 마련한 사회안전 분야의 국제표준규격이다. 재난·재해·테러 등 예기치 못한 비상 상황 발생으로 업무 중단 위험이 발생할 경우 최단 시간 복구해 운영 정상화, 업무의 연속성 유지 시스템을 갖춘 기업에 부여한다.
스타필드 하남은 지난 2021년 iso 45001 안전보건경영시스템, 2022년 iso 14001 환경경영시스템 인증에 이어 올해에는 iso 22301 사업연속성경영시스템 인증 획득을 통해 esg 역량을 한층 더 강화했다. 회사와 고객, 직원 및 지역사회를 위해 안전, 보건, 환경, 위기대응 등 전방위적인 지속가능경영을 펼치고 있다.
특히. 스타필드 하남은 이번 iso 22301 국제표준규격에 맞춰 위기관리체계를 대폭 개선해 전체 관계사를 대상으로 세분화된 업무영향 분석 및 리스크 평가를 진행했다. 이를 통해 업무 중단 사고 발생에 대비한 방어책과 회복 및 복구 내용을 담은 업무 연속성 계획을 수립하고 다양한 모의훈련을 실시해 효과적인 대응 능력을 강화했다.
먼저 스타필드를 구성하는 전체 관계수급사를 대상으로 직무 분석을 진행해 110가지의 업무 영역을 발췌했으며, 이 중 영업 중단을 야기할 수 있는 17가지 핵심업무를 찾아 개별 업무 연속성 계획을 수립했다. 또한, 자연재난, 사회재난, 안전재난 등 53가지 재난 및 사고 유형의 관련성을 분석해 핵심업무를 중단시킬 수 있는 중점 관리 대상 리스크를 정의하고 대응 방안을 수립했다.
위기대응능력 강화와 안전의식 함양을 위해 전 직원 및 관계자를 대상으로 다양한 상황에 대비한 위기대응 활동도 적극적으로 실행하고 있다. 화재 대피, 심폐소생술, 전기차 화재 등 소방 안전 활동을 실시하고, 대테러, 승강기, 주차장 사고, 폭설, 폭우 등 다양한 재난 및 재해에 대한 대응 훈련을 진행한다.
신세계프라퍼티는 스타필드 하남뿐 아니라 고양, 안성 등 스타필드 전 점을 대상으로 iso 22301 인증 획득을 확대 추진해, 위기 대응 능력을 강화하고 안전 문화가 정착될 수 있도록 노력할 계획이다.
This “Policy on the Handling of Personal Information” concerns the protection measures taken by the Company to protect the personal information of the customers using Starfield, Starfield City, and The Shops at Centerfield operated by the subsidiaries (“Company”) of Shinsegae Property including Shinsegae Property Inc. or Starfield Hanam Inc. The company values its customer’s personal information most of all and always puts all-out efforts to protect it safely.
The Company complies with the relevant laws including PERSONAL INFORMATION PROTECTION ACT and the ACT ON THE PROMOTION OF INFORMATION AND COMMUNICATIONS NETWORK UTILIZATION AND INFORMATION PROTECTION, ETC. and has established and released the Policy on the Handling of Personal Information on its website accessible by its customers. Since the Policy on the Handling of Personal Information may be amended due to changes in governmental law and policy or in the corporate policy, it is recommended for its customers to frequently visit the Notice on the website.
The Company collects the following personal information from the customers for the provision of services.
Item | Collected Item | Purpose of Usage | Storage Period | |
---|---|---|---|---|
Member(membership) management | Required | Name, date of birth, gender, email address, mobile phone number, permanent address, point card number, connected information (CI) | Identity the verification and member management pursuant to the use of the membership service and facilities, the issuance and the management of Shinsegae Point, the earning and use of card points, the calculation of all points from its affiliated franchises | Until the withdrawal of membership or the duration of the legally required storage period |
Name, mobile phone number, permanent address, email address | Secure a seamless communication channel for the notification and consultation on the use of its service, the handling of customer complaints, etc. | |||
Record of using the service, IP address, access log, cookie, mobile devices, payment | Verify the details in using the service and follow the information management obligation pursuant to the relevant laws. | |||
Optional | Name, date of birth, gender, mobile phone number, email address, permanent address | Inform products and services provided by the Company and its affiliates; provide newsletters; provide information on events(text message, email, DM, TM); use marketing materials to promote collaborative events and its services; analyze information for marketing purposes; and develop services. | ||
Company name, company address, evidence material(business card) | Offer the “Starfield Office(SO) CLUB” service. | On the membership withdrawal or withdrawal of the consent for the storage | ||
Non-member management | Required | Name | Receive and handle customer inquiries and inconveniences and improve its services. | For three(3) years from the inquiry date or the duration of the legally required storage period |
Optional | Email address, phone number, password | |||
Proposal on business & investment | Required | Name, phone number, email address | Reply to the proposal on business & investment and franchising inquiries. | For two(2) years from the collected date or the duration of the legally required storage period |
Ethics report ("HOT-LINE") | Required | Name | Check and process facts upon the receipt of a report and inform the results. | |
Optional | Phone number, email address(if reply is necessary) | |||
Voice of Partner ("VOP") | Required | Name | Check and process the facts upon the receipt of VOP and inform the results. | |
Optional | Phone number, email address(if reply is necessary) | |||
Starfield app | Optional | Notification | Push notification service for the provision of information | On the deletion of the app or membership withdrawal |
Camera, gallery | Upload an evidence material when joining SO CLUB; verify its user by using a QR code. | |||
Vehicle registration plate | Use the service of "Locate My Car." |
The Company does not collect sensitive information (race and ethnicity, ideology and doctrine, political orientation, health status, etc.) that may infringe on the basic human rights of the customers.
The Company only uses the customer’s personal information strictly within its originally intended scope prescribed by the Policy on the Handling of Personal Information and does not provide it to any third party (person or company) without consent except in the following cases:
The Company may provide the following subsidiaries or affiliates with the personal information under the consent of the customers for the provision of a better service. The customers may withdraw such consent at any time.
Entity to receive information | Purpose of usage of the entity | Personal information items to be provided | Storage and usage period of the entity |
---|---|---|---|
Shinsegae Inc., Gwangju Shinsegae Inc., Shinsegae Inc. | Provide members with various convenient services; inform products and services provided by each affiliate; offer information on events(text message, email, DM, TM); use marketing materials to promote collaborative events and its services; analyze information for marketing purpose; and develop services; add up all performances to provide the VIP service of Shinsegae Department Store(limited to a certain brand and customer consent to the provision of personal information to a third party). | Result value of verifying the identity of the person concerned(householder, family member), the membership card number, purchase information(date of purchase, amount purchased) | Until the withdrawal of membership or the duration of the legally required storage period |
The Company consigns the handling of personal information to the following outside agencies to provide its services.
Entrusted contents | An entrusted company |
---|---|
Operate the membership service. | Shinsegae Property Inc., Starfield Hanam Inc., Starfield Goyang Inc., Starfield Anseong Inc. |
Operate & manage membership information; operate the website service. | PULIP COMMUNICATIONS Co., Ltd. |
Operate a digital marketing channel. | THE SMC GROUP Co., Ltd. |
Operate and maintain the information system; send DM; manage the registration, order, and the delivery of online products. | Shinsegae I&C, Inc. |
Provide an identity verification service. | Korea Credit Bureau Co., Ltd. |
Operate the customer and PP center for each store. | Hyosung ITX Co., Ltd., Unies Co., Ltd., Gng Line |
Deliver and manage the products ordered online. | Sales partner: (See partner) |
Deliver the products. | CJ Logistics Corp. |
Operate the security system of each store. | THE GUARDIANS, Nasa Industrial Safety, Misung S&P, Samkoo Inc Co., Ltd. |
Customers may view, delete, and withdraw their membership anytime with the following methods.
The Company has assigned an officer and a division responsible for personal information protection as below to protect the customers’ personal information and respond to inquiries, complaints, remedy measures related to their personal information.
Item | Person in charge | Name | Division/Job | Phone number | |
---|---|---|---|---|---|
Shinsegae Property Inc. | Chief Personal Information Protection Officer | Jeon Sang-jin | General Manager of the Support Division | 1833-9001 | ssgproperty_privacy@shinsegae.com |
Personal Information Protection Manager | Leader of the Compliance Team | ||||
Starfield Hanam | (Store) Officer Responsible for Personal Information Protection and Management | Hanam Branch Manager | |||
Starfield Goyang | Goyang Branch Manager | ||||
Starfield COEX Mall | COEX Mall Branch Manager | ||||
Starfield Anseong | Anseong Branch Manager | ||||
Starfield City Wirye | Wirye Branch Manager | ||||
Starfield City Bucheon | Bucheon Branch Manager | ||||
Starfield City Myeongji | Myeongji Branch Manager | ||||
Centerfield | Centerfield Branch Manager |
Customers may ask for the settlement of a dispute or consultation to the Personal Information Dispute Mediation Committee, Personal Information Infringement Report Center of the Korea Internet & Security Agency (KISA), etc. on the remedy for the infringed rights. For the report or consultation on other infringement cases, they are recommended to ask for help in the following institutions.
회사는 고객의 개인정보를 보호하기 위해 아래와 같이 기술적 대책과 관리적 대책을 마련하여 이를 적용하고 있습니다.
The Company does not collect the personal information of a child under the age of fourteen(14) who shall obtain the consent of his / her legal representative.
The Company does not transfer commercial type information without the customer's prior consent.
When sending commercial type information via email and others for the purpose of online marketing including the product guide information, the Company obtains prior consent from the customers on the sending of such information and takes the measures as below for each means, allowing the customers to recognize it easily.
Pursuant to the relevant laws, the criteria of the Company on the use or provision of the additional personal information without a customer’s consent is as follows:
Should there be information to be added, deleted and edited according to the government policies or the policies of the Company, the notification on such changes will be provided via the website at least seven(7) days before the revision.
This Policy on the Handling of Personal Information takes effect as of November 25, 2021, and the previous version will be replaced with the current version.