비엠텍시스템

PRODUCTS

SOFTWARE

We install software along with our own solutions to help our clients achieve improved
performance and the best data-based environment through continuous collaboration
and research and development with our professional partners.

Security Solution

CipherTrust Data Security
Platform

Keeping confidential information safe has become critical to every company as data breaches continue to proliferate. Companies are working to comply as global and local privacy regulations continue to evolve.

CipherTrust Data Security Platform is a next-generation platform that enables rapid and secure cloud migration based on microservice architecture (MSA). BMtech System Co., Ltd. utilizes Thales’ CipherTrust data security to provide high-level security solutions that span from existing on-premise environments to cloud environments.

01

The Global Leader
in the Security Industry,
Thales

Thales provides security and control services in various high-tech industries and is considered to be the best global company in the field of HSM (hardware security modules).

02

The Ultimate Security Solution,
CipherTrust Data Security
Platform

CipherTrust Data Security Platform combines data-centric security products and solutions to effectively integrate data discovery, protection, and control functions.

Benefits

CipherTrust Manager is the core key management solution of CipherTrust Data Secure Platform.
We help companies centrally manage encryption keys and establish access control and security policies.

1

Key Management
Capable of providing centralized key
management and control for
role-based policies.
2

Access Policy Management
Compatible with a variety of Thales
encryption products including file
encryption and integrated management
features.
3

Audit Report
Support for various log formats to
provide improved audit and reporting
functions and customized alarm functions.
4

Flexible API
Supports a variety of flexible
REST APIs for implementing automated
encryption and management functions.

Privacy Policy

In accordance with the Personal Information Protection Act, “BMtech System Co., Ltd." Corporation (hereinafter “Company”) has the following processing policies to protect users' personal information and rights and interests, and to smoothly handle user complaints related to personal information.
The customer's information is both an individual's valuable asset and an important data for company operation. 
Therefore, the company promises to do its best to protect your personal information in all operational processes. 
The company will notify you through the website when revising the privacy policy.

Chapter 1. Personal Information Collection Consent Procedure The Company has prepared a procedure for you to click the (I agree) button or the (I do not agree) button for the contents of the personal information protection policy or terms of use of the website and press the (Agree) button. 
By clicking, you agree to the collection of personal information.

Chapter 2. Purpose of collection and use of personal information The company uses personal information for the following purposes. 
The processed personal information will not be used for purposes other than the following purposes, 
and prior consent will be sought when the purpose of use is changed.

A. Name, ID, and password: Confirmation of the member's subscription, prevention of use of the service, frequency of access, identity identification procedures according to the use of membership services the correct delivery address for the delivery of prizes and goods 
B. E-mail address, phone number (receipt or not): To secure a smooth communication path such as delivering notices, 
confirming personal intentions, handling complaints, etc., providing event and advertising information and providing opportunities to participate, identifying access frequency or using members About statistics
C. Address and phone number: Securing the correct delivery address for the delivery of prizes and goods

Chapter 3. Transmission of advertising information
A. The company does not send commercial information for commercial purposes against your explicit intention to opt out.
B. The Company will notify you of changes to the terms and conditions, changes to the use of other services,
information on new services/new products or events, and other product information by e-mail, mobile phone text transmission, and other omniscient transmission media. In this case, we comply with the provisions and methods specified in relevant laws.
C. When the Company sends advertising information by e-mail, etc. for online marketing, such as product information guidance
Make it easy for you to find out in the subject and body areas of your email.

Chapter 4. Scope of collection of personal information The
company can freely access most of the contents without a separate membership registration process.
If you want to use the membership service, you must enter the following information.
A. Items of personal information collection: name, email, date of birth, ID, password, gender, address, mobile phone number (telephone), e-mail reception Sms reception, service use record, access message, incoming customer information (name, phone number, address, e-mail)
B. Personal information collection method: Membership registration and bulletin board on the website

Chapter 5. Retention and use period
of personal information After the purpose of collecting and using personal information is achieved, the company destroys the information without delay.
However, the following information is retained for the specified period for the following reasons.
-Retention items: name, login ID, password, e-mail, date of birth
-Basis for retention: Prevention of recurrence of illegal use by bad members
-Retention period: 1 month
And, if it is necessary to preserve it in accordance with the provisions of the relevant laws and regulations, 
the company keeps the member information for a certain period specified in the relevant laws and regulations as follows.
Records on consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)

Chapter 6. Destruction procedure and method
of personal information In principle, the company destroys the personal information without delay when the purpose of processing personal information is achieved. The procedure, deadline, and method of destruction are as follows.
-Destruction Procedure
The information entered by the member for membership registration, etc., 
is transferred to a separate DB (separate filing cabinet in the case of paper) 
after the purpose is achieved and according to the reasons for information protection according to internal 
policies and other relevant laws (refer to retention and use period) It is destroyed after being stored for a certain period. 
Personal information transferred to a separate DB is not used for purposes other than retention unless required by law.
-Abandonment period
If the personal information of the user who has been destroyed has elapsed, within 5 days from the end of the retention period, the personal information has become unnecessary, such as achieving the purpose of processing personal information, abolishing the service, and ending the business. When it is deemed unnecessary to process personal information,
the personal information will be destroyed within 5 days.
-Destruction method
Information in the form of electronic files uses a technical method that cannot reproduce the record

Chapter 7. Measures to ensure the safety
of personal information The company takes necessary measures to ensure safety as follows in accordance with 
Article 29 of the Personal Information Protection Act. of Employees Handling Personal Information
We are implementing measures to manage personal information by designating and minimizing employees 
who handle personal information.
A. Minimization and training of personnel handling personal information We are implementing measures 
to manage personal information by designating and minimizing personal information handling staff .
B. Encrypt personal information
The user's personal information is to encrypt, save and manage the password, only I can know, 
the important data is to encrypt files and transfer data, or use the file locking function and other security functions.

Chapter 8. Create a privacy officer
The Company is committed to making your information safe. 
The person responsible for handling your personal information is as follows and responds 
promptly and faithfully to any questions related to personal informatio

▶  Personal Information Protection Personnel
Name: Han-seul Song
Affiliation/Title: Staff
e-mail: bmtsys@bmtsys.com
Phone number:+82-2-3434-2211
information subject handles all personal information protection related inquiries and complaints while using the
company service , You can contact the person in charge of personal information protection and the person in charge
for matters related to damage relief, etc.

Chapter 9. Collecting Opinions and Handling Complaints The company values your opinions, and you have the right to always receive sincere answers from questions.
The company operates a customer center for smooth communication with members.

Real-time consultation and telephone consultation are available only during business hours. 
We will sincerely respond to consultations by email or mail within 24 hours after receipt. 
However, after working hours or on weekends and holidays, it is in principle to process the next business day.
The company's actions on the stolen personal information are as follows.

1. When a user becomes aware that he or she has signed up for membership by stealing other people's personal information, we will take necessary measures, such as suspension of service use or withdrawal of membership, without delay.
2. If a user who is aware of the theft of his or her personal information requests the suspension of service use or withdrawal from the member, take immediate action. If you need to consult with other personal information, you can contact the Personal Information Infringement Report Center, Supreme Prosecutors' Office Internet Crime Investigation Center, and the National Police Agency Cyber Terror Response Center.
Personal Information Infringement Center (http://www.118.or.kr)
Supreme Prosecutors' Office Internet Crime Investigation Center (http://icic.sppo.go.kr)
National Police Agency Cyber Terror Response Center (http://www.police.go .kr/ctrc/ctrc_main.htm)

Chapter 10. Obligations
of notification This personal information processing policy is applied from the effective date, 
and if there are any additions, deletions or corrections of changes in accordance with laws and policies, 
we will notify you through the notice from 7 days before the enforcement of the changes.

Refusal of Unauthorized Collection of Email Addresses

We refuse unauthorized collection of e-mail addresses posted on this website using e-mail collection programs or other technical devices, and please keep in mind that violations will result in criminal penalties under the Information and Communication Network Act

※ Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.

* Article 50-2 (Prohibition of unauthorized collection of e-mail addresses, etc.)

No one shall collect e-mail addresses using a program or other technical device that automatically collects e-mail addresses from an Internet homepage where the intention to refuse collection of e-mail addresses is stated.
No one shall sell or distribute the e-mail addresses collected in violation of the provisions of Paragraph 1.
Anyone who knows that the collection, sale, and distribution of the e-mail address is prohibited in accordance with the provisions of paragraphs 1 and 2 shall not use it for information transmission.

* Article 74 (Penalty) A person who falls under any of the following subparagraphs shall be punished by a fine not exceeding 10 million won.

A person who displays, sells, or displays for sale in violation of Article 8 (4)
A person who distributes, sells, rents, or publicly displays obscene code, words, sound, image, or video in violation of Article 44-7 (1) 1
A person who repeatedly reaches the other party with code, words, sound, image, or video that induces fear or anxiety in violation of Article 44-7 (1) 3
A person who takes technical measures in violation of Article 50 (6)
A person who transmits advertising information in violation of Article 50-8 A person who collects, sells, distributes, or uses e-mail addresses for information transmission in violation of Article 50-2
A person who transmits advertising information in violation of Article 50-8
A person who fails to register changes in registered matters, transfer or acquisition of business, or report merger or inheritance in violation of Article 53 (4)