Privacy Notice

MARSH KOREA PRIVACY POLICY

㈜마쉬코리아보험중개 개인정보 처리방침

Effective date: Jul 22, 2024

This Privacy Policy covers the information practices of websites that link to this Privacy Policy (each referred to as a "Site"). This Privacy Policy explains the personal information Marsh Korea, Inc.(“We” or “Marsh”) collect about you as a user of this Site, how we use, share, and protect that personal information, and what your rights are with respect to your personal information that we gather.

The Privacy Policy is subject to change at any time.  If we make changes to this Privacy Policy, we will update the “Effective date” at the top of this page. Any changes we make to this Privacy Policy become effective immediately, so you should review this Privacy Policy regularly for changes.

You must be at least 18 years old and possess the legal authority to form legally binding contracts under applicable law to use this Site and the services provided on it.

To notify you about our practices, we have developed this Privacy Policy, and personal information collected on or through this Site on our behalf will be treated in accordance with this Privacy Policy.  Whenever we process (which includes but is not limited to collecting, using or disclosing) your personal information, we do so in compliance with the applicable data protection laws and regulations, such as by obtaining the necessary consent.

This Privacy Policy is subject to the Site's WEBSITE TERMS AND CONDITIONS OF USE (the "Terms").

In some specific circumstances we do pass your personal information outside of Asia. Please see the section on transferring information overseas below for more information.

We use cookies on this Site.  Cookies are pieces of information shared between your web browser and a website.  For more information on how we use cookies, types of cookies that we use and how to opt out to cookies, please see the website navigational information and cookies sections below and our Cookie Notice.

You have the right to access personal information held about you, and may do so by contacting us at LCPA.Korea@marsh.com. In accordance with the local applicable laws of your jurisdiction, any such access request may be subject to a fee to meet our costs in providing you with details of the personal information that we hold about you.  Subject to local applicable laws, you also have the right to object to any processing that is likely to cause you damage or distress and you also have the right to rectify, block, erase or destroy inaccurate data. 

Provided that you have given your consent, we may use your personal information for marketing purposes.  For more information on marketing and how to adjust your preferences, please see the section on marketing below.

Collection, use and disclosure of personal information

The information gathered by Marsh from this Site falls into two categories: (1) information voluntarily supplied by visitors to our Site and (2) tracking information gathered as visitors navigate through our Site.  

(1) Information voluntarily provided by you

When using this Site, you may choose to provide us with information to help us serve your needs.  The personal information that we collect will depend on how you choose to use this Site.

Where you request a brochure

If you request a brochure or further information from us, we require you to submit your name, e-mail address, job title, industry, phone number, the name of your organization(company), annual revenue, your business needs and the country in which you are based so we may send you the material you have requested, and to enable us to identify if you are an existing client of Marsh.

Where you register with us and/or request an insurance quote

If you register with the Site, or request an insurance quote, we may ask you for your name, e-mail address, country, telephone number and the reason for your communication, as well as information about your position and organization . We may ask you for the following items of personal information, for the purposes listed below:

• Information necessary for you to access and use our website(s): Name, website member ID, password, telephone number, email address
• Information necessary to process your insurance claim: bank account information, resident registration number, foreign registration number
• Information necessary for additional benefits: Information about your family members, wage information
• Sensitive personal information necessary to file and process your insurance claim: Basis of your claim, name of illness, name of treatment facility/institution, treatment period.

On the data submission form, we shall indicate by way of an asterisk, which information is optional and which information is mandatory.  Any personal information that you send us will be used only for the purpose indicated on the Site or in this Privacy Policy.

Following the quote, if you decide to proceed, we will collect personal information necessary to finalize the relevant quote and proceed with the transaction, such as your name, address, post code, contact telephone number, e-mail address, billing address or payment details, as relevant to the product.  We will use your personal information to administer your policy, process claims etc. and generally manage your relationship with us.  Please see the Disclosure of Your Information section for information on the categories of recipients of the personal data. 

Where you submit comments

Finally, if you submit a comment on any of the content that you view on our Site, we will ask for your name and e-mail address, so that, if you choose, we can update you by e-mail when others also comment on the content, and also so that we can moderate the comments in line with our acceptable use policy. You should be aware that the information you provide there will be made publicly available to Marsh employees and other users of the Site.

(2) Tracking/Website Navigational Information

As you navigate the Site, we may also collect information through the use of commonly-used information-gathering tools, such as cookies and web beacons (collectively "Website Navigational Information"). Website Navigational Information includes standard information from your web browser (such as browser type and browser language), your Internet Protocol ("IP") address, and the actions you take on the Site (such as the web pages viewed and the links clicked).  We describe this Website Navigational Information in more detail below.

Marketing

When Marsh wishes to transmit information for marketing purposes must comply with the relevant regulations, such as article 50 of The Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc. Provided that you have granted your consent, we may use your personal information to provide you with information about other services and products that are offered by Marsh in the field of insurance and financial services, risk management and consulting services or our affiliated companies that we think may be of interest to you. We may contact you by post, by telephone, e-mail or other means.

Retention Period and Destruction of Personal information

Once Marsh has completed using your personal information for the purposes for which it was collected, Marsh will immediately destroy such personal information.  In addition, your personal information will be destroyed immediately upon your cancelling your account at Marsh's MCare Web Portal or MCare Mobile Application, withdrawing your consent to the processing of your personal information, or requesting that your personal information be deleted.  However, in cases where Marsh is required to retain certain items of your personal information to comply with relevant laws, Marsh will retain such personal information for the period required by law.  During that time, Marsh will use the personal information solely for the purpose of fulfilling its obligations under such laws.

The followings are major examples of such retention:

• Records on personal credit information : After termination of business agreement + 5 years (Article 20-2 (2) of Credit Information Act)
• Records on insurance documents : After expiration of policy + 10 years (Article 92 (1) of Insurance Business Act, Article 4-25.2 of Insurance Business Supervisory Regulations)
• Records on handling consumer complaints or disputes: 3 years (Act on Consumer Protection in Electronic Commerce)

Procedure for Destruction: 

We will select personal information whose retention period has expired and destroy such information in accordance with applicable laws and our policies. Marsh Korea identifies the personal information for which a reason for destruction has occurred, and then destroys them with approval from the Chief Privacy Officer.

Method of Destruction : 

When deleting your personal information, we will take reasonable and technically feasible measures to ensure that the personal information is irrecoverable. Personal information in print media will be shredded or incinerated, while personal information in electronic files will be deleted permanently using a technical method which makes the files irrecoverable.

Opting Out

If you have previously indicated that you wish to receive marketing communications but no longer want to receive these communications from Marsh, please contact us using the contact details at the bottom of this Privacy Policy or let us know when you speak to one of our representatives. You can also click on the 'unsubscribe' button at the bottom of the communication or log on to the Site and uncheck any alerts you have previously opted to receive; as of the following day, you will no longer receive the alerts. If the alerts are necessary to provide you with services you have requested and those alerts contain no marketing information, you will not be able to opt out of alerts.

Website Navigational Information

Cookies

Like many companies, we may use cookies on this Site (please see our Cookie Notice). Cookies are pieces of information shared between your web browser and a website.  Use of cookies enables a faster and easier experience for the user. The only personal information a cookie can contain is information you supply. A cookie cannot read data off your computer's hard drive.

There are different kinds of cookies with different functions:

(i) Session cookies: these are only stored on your computer during your web session. They are automatically deleted when the browser is closed.  They usually store an anonymous session ID allowing you to browse a website without having to log in to each page. They do not collect any information from your computer.

(ii) Persistent cookies - a persistent cookie is one stored as a file on your computer, and it remains there when you close your web browser. The cookie can be read by the website that created it when you visit that website again. 

(iii) First-party cookies: the function of this type of cookie is to retain your preferences for a particular website. They are stored and sent between the server and your computer's hard drive. They are not used for anything other than for personalisation as set by you.

We never use third-party or unsatisfactory cookies on our Sites, although we do use third party provided web beacons (please see the section on Web Beacons).

For information on all of these categories of cookies, and for more information generally on cookies please refer to aboutcookies.org.

We use cookies for the following purposes:

Where strictly necessary

These cookies are essential in order to enable you to move around the Site and use its features, such as accessing secure areas of the Site. Without these cookies, services you have asked for, such as obtaining a quote or logging into your account, cannot be provided. These cookies do not gather information about you that could be used for marketing or remembering where you have been on the internet.

Performance

These cookies collect information about how visitors use a Site, for instance which pages visitors go to most often, and if they get error messages from web pages.  They also allow us to record and count the number of visitors to the Site, all of which enables us to see how visitors use the Site in order to improve the way that our Site works.  These cookies do not collect information that identifies a visitor, as all information these cookies collect is anonymous and is only used to improve how our Site works.

Functionality

These cookies allow our Site to remember choices you make (such as your user name, language or the region you are in) and provide enhanced features. For instance, a Site may be able to remember your log in details, so that you do not have to repeatedly sign in to your account when using a particular device to access our Site. These cookies can also be used to remember changes you have made to text size, font and other parts of web pages that you can customize. They may also be used to provide services you have requested such as viewing a video or commenting on an article. The information these cookies collect is usually anonymized. They do not gather any information about you that could be used for advertising or remember where you have been on the internet.

Please consult your web browser's 'Help' documentation or visit aboutcookies.org for more information about how to turn cookies on and off for your browser.

We use Google Analytics to help us collate Site statistics. For further details on the cookies set by Google Analytics, please refer to the Google Code website

Web Beacons

This Site may also use web beacons (including web beacons supplied or provided by third parties) alone or in conjunction with cookies to compile information about users' usage of the Site and interaction with e-mails from Marsh. Web beacons are clear electronic images that can recognize certain types of information on your computer, such as cookies, when you viewed a particular Site tied to the web beacon, and a description of a Site tied to the web beacon. We use web beacons to operate and improve the Sites and e-mail communications.   We may use information from web beacons in combination with other data we have about our clients to provide you with information about Marsh and our services.  We will conduct this review on an anonymous basis.

Disabling Method for Cookies

You may adjust the cookie settings on your web browser to automatically accept all cookies, require the system to notify you when cookies are installed, or reject all cookies.  If you choose to reject all cookies, you may experience certain errors in receiving the services provided through this website.

How to modify cookie settings (for Internet Explorer): Tools (see bar at top of web browser > Internet options > Privacy

IP Addresses

When you visit our Sites, Marsh collects your Internet Protocol ("IP") addresses to track and aggregate non-personal information. For example, Marsh uses IP addresses to monitor the regions from which users navigate the Sites.  IP addresses will be stored in such a way so that you can not be identified from the IP address.  If you do not wish your IP address to be stored, please opt out using one of the methods set out in section Opting out above.

Disclosure or use of your information

Provision of your personal information to third parties

If we transfer part or the whole of our business or merge with another organization or spin-off, your information such as name, email address and any other information collected through the Site may be among the items sold or transferred.  In such case, we will first notify you in accordance with the Act on Promotion of Information and Communication Network Utilization and Information Protection, Etc., (the "Network Act"), regarding those items of personal information that will be sold or transferred, the name and contact details of the recipient, and inform you of how you can withdraw consent thereto.  The buyer or transferee will have to honour the commitments we have made in this Privacy Policy.

Outsourcing the processing of your personal information

Overseas Transfer (Outsourcing) of Personal Information

You can refuse the overseas transfer of personal information by contacting the privacy department and in such case, your access to our services and events may be restricted.

We will not exchange or sell or otherwise distribute your personal information outside the Marsh & McLennan Companies, Inc. group ("MMCo") without your consent except in accordance with your instructions (including to provide the services you have contracted with us to provide to you) or as identified in this Privacy Policy.  This Privacy Policy is not applicable to personal information that is already in the public domain.   Where we have personal information received independently from a third party, even where this is on the understanding that the individuals to whom the personal information relates have been informed of the reason(s) for obtaining the personal information and the fact that it may be disclosed to third parties such as MMCo, the terms of this Privacy Policy shall apply to such personal information.

We may use or distribute your personal information to the extent required by law, and as described below:

(i)               Providing Services. In the normal course of performing services for our clients, personal information may be shared within MMCo for research and statistical purposes, system administration and crime prevention or detection. When you supply us with information containing third party personal information (names, addresses, or other information relating to living individuals), we will hold and use that personal information to perform general insurance and other services for you on the understanding that the individuals to whom the personal information relates have been informed of the reason(s) for obtaining the personal information and the fact that it may be disclosed to third parties such as MMCo.

(ii)             Obtaining quotes and proceeding with cover. In order to generate an insurance quote as requested by you, and in the event that you proceed with such cover, it is necessary for us to share the personal information that we have collected from you with the relevant insurance providers, agents and service providers, consultants and market research and quality assurance companies.  Where these third parties use and process your personal information, we will require them to only use your personal information in a way which is compatible with this Privacy Policy.  If these third parties wish to use your personal information for any other purpose, they will have a legal obligation to notify you of this and, where required, to obtain your consent. Contact us on asia.information@marsh.comfor more information on these third parties.

(iii)           Agents and Service Providers. We sometimes contract with other companies and individuals to perform functions or services on our behalf, such as hosting this Site, sending e-mail messages and making phone calls on our behalf. They may have access to personal information, such as addresses, needed to perform their functions, but are restricted from using it for purposes other than providing services for Marsh.

(iv)       Business Transfers, etc. If we transfer part or the whole of our business or merge with another organization or spin-off, your information such as name, email address and any other information collected through the Site may be among the items sold or transferred. In such case, we will first notify you in accordance with the Network Act, regarding those items of personal information that will be sold or transferred, the name and contact details of the recipient, and inform you of how you can withdraw consent thereto.  The buyer or transferee will have to honor the commitments we have made in this Privacy Policy.

(v)        Legal Matters. Marsh may preserve and has the right to disclose without your prior permission any personal information about you or your use of this Site if Marsh has a good faith belief that:

(1) it is necessary to provide your personal information to a third party (i) for settlement of fees for provision of information communications services; or (ii) when there is a specific statutory basis for transferring the information; and

(2) if outsourcing (delegating) the processing of your personal information is necessary to perform an agreement relating to provision of information communications service or to enhance user convenience, etc.

(3) We may also disclose personal information as we deem necessary to satisfy any applicable law, regulation, legal process or governmental request.

(vi)       Marsh Employees: We will transfer your personal information to our employees and to other employees within MMCo who will process your personal information on our behalf and in doing so, will fulfil the following functions: the marketing department will carry out all marketing activity.  If it is a legal matter, this will be handled by the legal team.  If it is a recruitment and / or ongoing employment matter, it will be handled by the HR team.  If the processing relates to moderation of the website, this will be passed to the IT team and then on to the relevant business units.  Further, the business will process personal information in order to evaluate employees, or to consider them for promotion or raises, or transfers.  IT may process employee personal information and customer personal information in the course of managing systems or applications where access to such personal information is unavoidable.

Transferring information overseas

Your personal information may be transferred to any country, including countries which may not have as robust a data protection regime, to achieve any of the purposes stated above and for systems administration.  Marsh has offices in more than 100 countries around the world, please click here for a list of our group companies to whom we may transfer your personal information. It is possible that your details or personal information collected may be passed to these offices.– but only where you request that we provide services to you in another country. You consent to the collection, processing and use of the personal data you have provided, its disclosure and transfer as described in this Privacy Policy.

Personal information collected through this Site may be processed and stored in the United States. Marsh's web hosting supplier complies with the EU Safe Harbor framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of data from the European Union.  Where a recipient is not Safe Harbor self-certified, we shall ensure that your personal information is adequately protected using other measures.  

If you submit any personal information relating to another person on or through the Site to Marsh and such personal information is protected by another state or country, you will be responsible for compliance with the applicable laws in so far as they relate to your right to use such personal information, your transfer of it to Marsh, Marsh's storage of that personal information in electronic form on the Site and collection, use, processing and transfer of that personal information in performing brokerage and other services for your organization in accordance with this Privacy Policy.

Updating your personal information

It is important that the personal information that we hold about you is accurate, complete and up to date.  If any of your details change you can update us by amending your personal details on your account page.  You can also do this by e-mailing us at LCPA.Korea@marsh.com. 

Acceptable use policy

If you leave a comment on any Marsh content or participate in a Marsh discussion forum or chat room, we ask that you must do so in accordance with spirit of the following standards:

*   Please be accurate and/or genuine in your comments.

*   Please stay within the applicable law of your country – don't use this Site to post defamatory, obscene, offensive, hateful or inflammatory content.

*   Don't infringe the intellectual property rights (for example copyright, trademarks or database rights) of others.

Each participant's opinion is his or her own and should not be considered as reflecting the opinion of Marsh.  

We will transfer your comments to employees of MMCo who shall monitor the comments made on the website. For more information on how MMCo employees will process your personal information, please see Section Disclosure or use of your information; paragraph (vi) Marsh Employees for more information.

External links

Marsh includes links to other websites whose privacy policies we do not control. Once you leave our servers (you can tell where you are by checking the URL in the location bar on your web browser), use of any personal information you provide is governed by the privacy policy of the operator of the website you are visiting. That policy may differ from ours. If you can't find the privacy policy of any of these websites via a link from the website's homepage, you should contact the website directly for more information.

Security

We have adopted the technical and organizational, physical measures necessary to ensure the security of the personal data we collect, use and maintain, and prevent their alteration, loss, unauthorised processing or access, having regard to the state of the art, the nature of the data stored and the risks to which they are exposed by virtue of human action or physical or natural environment. However, as effective as our security measures are, no security system is impenetrable. We cannot guarantee the security of our database, nor can we guarantee that personal information you supply will not be intercepted while being transmitted to us over the internet. We ask that you do your part by maintaining in strict confidence any computer passwords you use to access the Internet or this Site.  We encourage responsible reporting of any vulnerabilities that may be found in our Sites or any application available through our Sites.

Information related to employment

This Site may provide an opportunity to submit your curriculum vitae or an application form to us or apply for a position through this Site.  We may collect your personal information (including, but not limited to, name, date of birth, nationality, address, age, gender, phone number, photo, e-mail address, veteran & patriot information, educational background, work experiences, qualifications, history of awards/sanctions, military service, health related information including medical checkup results and disability information) that is described in any document which is submitted to us.  If you submit the information for such purposes, we will use (which may include transferring) the personal information you provide to evaluate your qualifications and contact you regarding any positions at Marsh or any of its affiliated companies in which we believe you may be interested.

We may pass your personal information to other members of MMCo for the purposes of considering your application.  This will involve transferring your personal information to our employees who will process your application on our behalf.  For more information on how MMCo employees will process your personal information, please see Section Disclosure or use of your information; paragraph (vi) Marsh Employees for more information.

Rights of users and their legal guardians, and how those rights may be exercised

You have the right to request to view, have corrected or deleted, or have suspended the processing of your personal information or that of the minor (below 14 years) for whom you are the legal guardian. Upon receiving such request, we will verify whether the request was submitted by yourself (and, if applicable, you are the legal guardian of the minor you claim you represent), and will take the actions requested unless we have a statutory basis for doing otherwise or other comparable grounds for refusing to take such actions.

If you wish to review, correct, update or delete the personal information you provided via this website, please contact us through the channels indicated in the section below.

Contact information

Questions regarding this Privacy Policy should be directed to us via this form: contact form or by writing to the following address:

Legal, Compliance, and Public Affairs Department

Marsh Korea, Inc.

38F Three IFC, 10 Gukjegeumyung-ro,

Yeongdeungpo-gu, Seoul, Korea 07326

- Email: LCPA.Korea@marsh.com

Remedies for Violation of Data Subject's Rights

Where granted by applicable law, you may have the right to lodge a complaint with a competent data protection authority as a secondary measure.

1.      Personal Information Dispute Resolution Committee: 1833-6972 (www.kopico.go.kr)

2.      Personal Information Breach Report Center: 118 (privacy.kisa.or.kr)

3.      Supreme Prosecutors' Office: 1301 (www.spo.go.kr)

4.      National Policy Agency: 182 (ecrm.cyber.go.kr)

Privacy Policy updates

We may update this Privacy Policy from time to time. When we do so, changes in our Privacy Policy will be effective immediately. If you are a regular visitor to this Site, we recommend that you check this Privacy Policy on a regular basis.

- June 14, 2022 ~ July 21, 2024: Click

- April 16, 2018 ~ June 13, 2022: Click