i think the answer is "WHO" because we are talking about a person, not about a thing
But still, it's correct to use "that" referring to people. It's not insulting.
either is fine even though I never use 'that'
I think either is okay but "who" is more formal and appropriate in this sentence.