엔씨커리어 (NC career) — Privacy Policy
Last Updated : 14 November 2026
NC career (“Company”) complies with the Personal Information Protection Act (PIPA), the Fair Hiring Procedure Act, and the Employment Security Act of the Republic of Korea, and publishes this Privacy Policy to safeguard the personal data and statutory rights of visitors, job applicants, and corporate partnership contacts across our official websites (ncandcareers.com, positions.ncandcareers.com, partnership.ncandcareers.com).
Article 1 (Data Controller & Privacy / Security Officers)
The Company designates the following Representative, Chief Privacy Officer (CPO), and Web & Security Administrator to oversee personal data protection and handle inquiries, access requests, and grievance resolution.
| Role | Name | Responsibilities | Official Email |
|---|---|---|---|
| Representative | Eun-chae Noh | Executive Search, RPO & Recruitment Operations Lead at NC career | mail@ncandcareers.com |
| Chief Privacy Officer | Jisung Han | Personal data governance, access, correction, deletion & suspension requests | x@phoenix.seoul.kr |
| Web & Security Admin | Jisung Han | Web architecture, Cloudflare Edge infrastructure & information security operations | x@phoenix.seoul.kr |
Article 2 (Categories of Personal Data Collected)
We do not require user account registration and do not deploy third-party advertising or behavioral tracking scripts (such as Google Analytics or ad pixels). We process only the following items:
- Job Application & Open Talent Pool [Required] : Full name, date of birth, mobile phone number, email address, current residential area, highest education level, major, preferred role 1, preferred work region, shift-work availability, dormitory requirement, earliest start timeframe, current employment status, and referral channel
- Job Application & Open Talent Pool [Optional] : Military service status, school name, graduation date, certifications, career summary, preferred role 2, 1:1 career counseling preference, preferred contact hours, CV/portfolio URL, and additional notes
- Corporate Executive Search, RPO & Strategic MOU Inquiries : Inquiry category, company/institution name, contact person & title, phone number, official business email, and mandate or partnership details
- Direct Email Inquiries : Sender email address, name, and message contents
- Edge Security Metadata : Client IP address, request timestamp, and User-Agent string (processed strictly for DDoS mitigation and bot protection)
Article 3 (Purposes & Legal Basis of Processing)
| Processing Activity | Purpose & Statutory Legal Basis |
|---|---|
| Job application review, Talent Pool registration, tailored role matching & 1:1 career/onboarding consultation | Explicit consent of the data subject (PIPA Art. 15(1)(1)) and fair recruitment administration (Fair Hiring Procedure Act) |
| Candidate referral, CV forwarding & interview coordination with hiring partner enterprises | Prior third-party provision consent after confirming candidate intent (PIPA Art. 17(1)(1)) |
| Responding to candidate, corporate search, and data-rights inquiries | Fulfilment of data subject requests and statutory obligations |
| Edge security logging & malicious bot mitigation | Legitimate interest — service availability, DDoS defense, and information security |
Article 4 (Cookies & Local Storage Disclosure)
We never use advertising or cross-site tracking cookies. Only strictly necessary security/availability cookies from Cloudflare and functional theme preferences are used as disclosed below:
| Name | Purpose | Retention | Category |
|---|---|---|---|
__cf_bm |
Cloudflare bot management and automated abuse mitigation | Up to 30 minutes | Essential Security Cookie |
__cflb |
Global load balancing for high availability | Session | Essential Availability Cookie |
nc_theme_v3 / nc_liquid_theme_v3 |
Persists user-selected UI theme (Pink / Blue) across subdomains | Up to 1 year / until cleared | Functional Preference |
nc_admin_session |
Authenticated email-OTP session for the administrator portal (/admin; never set for visitors or applicants) |
Up to 14 days (HttpOnly · Secure · SameSite=Strict) |
Admin Security Cookie |
Article 5 (Third-Party Provision & Post-Quantum Encryption Safeguards)
- Strict Prior-Consent Principle for Third-Party Provision : We never disclose candidate data to external companies without prior consent. Only after informing the candidate of the specific client company (e.g., TSE, FNS, Neuromeka, Korea Circuit, Amphenol Sensing Korea, or other mandated partners) and confirming intent to apply do we share relevant profile details solely for recruitment evaluation until completion of the hiring process.
- Post-Quantum Cryptography (PQC) Safeguards (PIPA Art. 29) : Every Talent Pool registration, application, and corporate inquiry is transmitted over SSL/HTTPS (TLS 1.3) directly to our official representative email (
mail@ncandcareers.com) and protected by German Tuta Post-Quantum Cryptography (PQC) encrypted mail. - Edge Infrastructure & International Transfer : This platform runs on Cloudflare, Inc. (Cloudflare Workers, D1 & Email Routing) under the Cloudflare Data Processing Addendum (DPA) and international security standards.
Article 6 (Retention Period & Irreversible Destruction)
- Job Applications & Talent Pool Registrations : Retained for up to 24 months from registration or completion of screening, then permanently destroyed—or destroyed immediately upon withdrawal/deletion request.
- Corporate Search, RPO & Strategic MOU Inquiries : Retained for up to 24 months from submission and destroyed immediately upon request.
- Direct Email Correspondence : Retained for up to 24 months from final correspondence.
- Cloudflare Security Logs : Automatically purged within approximately 30 days.
Article 7 (Data Subject Rights & Remedies)
You may request access, correction, immediate deletion, suspension of processing, or withdrawal of consent at any time by emailing our Chief Privacy Officer (x@phoenix.seoul.kr) or Representative Email (mail@ncandcareers.com). Requests are processed promptly upon identity verification.
For independent dispute resolution or statutory reporting in the Republic of Korea, you may also contact:
- Personal Information Infringement Report Center (KISA) : +82-118 / privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee (KOPICO) : +82-1833-6972 / kopico.go.kr
- Supreme Prosecutors’ Office Cyber Investigation : +82-1301 / Korean National Police Agency Cyber Bureau : +82-182
Article 8 (Protection of Minors)
Our recruitment and Talent Pool services are intended exclusively for adults aged 18 and over. We do not knowingly collect personal information from minors under 18.