Privacy Policy
In order to protect the freedom and rights of data subjects, the Korea Center for Regulatory Science (hereinafter referred to as the "Center") legally processes and manages personal information in accordance with the Personal Information Protection Act and related statutes. In accordance with Article 30 of the Personal Information Protection Act, the data subject is guided on procedures and standards for processing personal information, and the personal information processing policy is established and disclosed as follows so that the related grievances can be handled quickly and smoothly.
Article 1 (Purpose of Processing Personal Information)
The Center shall process personal information for the following purposes: The personal information being processed will not be used for any purpose other than the following purposes, and if the purpose of use is changed, necessary measures, such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act, will be implemented.
1. Home page membership and management
Process personal information for the purpose of confirming membership intentions, identifying and authenticating oneself by providing membership services, maintaining and managing membership, preventing illegal use of services, various notices and notices, limiting the number of subscriptions and subscriptions, and preserving records for dispute mediation.
2. provision of goods or services
Process personal information for the purpose of providing news delivery services such as newsletters, events organized by the center, and applications for program participation.
3. User Service Improvement Management
Process personal information for the purpose of improving user service through statistics on user service usage records or access logs.
4. handling complaints
We process personal information for the purpose of confirming the identity of the complainant, confirming the complaint, contacting and notifying for fact-finding, and notifying the results of the processing.
Article 2 (Personal Information Items to be Processed)
The Center shall collect and use the following personal information items to the minimum extent necessary for providing services in accordance with the Personal Information Protection Act.
[Personal information items that are processed without the consent of the data subject]
The center processes the following personal information items without the consent of the data subject.
|
Legal
basis
|
Category
|
Purpose of collection
|
Collected items
|
Period of retention and use
|
|
Article
15 (1) 4 of the Personal Information Protection Act (Implementation of
contract)
|
Home
page membership registration and management
|
Confirmation
of membership intention, identification and certification by providing
membership services, maintenance and management of membership status,
prevention of illegal use of services, various notices and notices,
restrictions on the number of subscriptions and subscriptions, and records
for dispute mediation
|
ID,
password, name, contact number, mobile phone number, email, address,
certificate of employment (corporate members only), date of birth, fax
number, affiliated agency (position)
|
Until
withdrawal of membership
|
|
Improve
user service
|
User
Service Improvement Management
|
IP
address, cookie, MAC address, service usage record, visit record
|
Until
withdrawal of membership
|
|
handling
complaints
|
Identification
of the complainant, confirmation of the complaint, contact and notification
for fact-finding, and notification of the results of processing
|
Name,
Contact, Email, Password, Address
|
Until
the completion of the handling of the civil petition or the request for a
separate request
|
[Personal information items that are processed with the consent of the data subject]
The Center processes the following personal information items with the consent of the data subject pursuant to Article 15 (1) 1 and 5 of the Personal Information Protection Act and Article 22 (1) 7 of the Personal Information Protection Act.
|
Purpose of collection
|
Collected items
|
Period of retention
and use
|
|
Delivering
newsletters and other communication services
|
email,
name, agency
|
Until
the consent to provide services is withdrawn
|
|
Application
for participation in events and programs organized by the Center
|
Name,
contact information, e-mail, affiliated organization (position)
|
Until
withdrawal of membership
|
Article 3 (Period of Processing and Retention of Personal Information)
① The Center shall process and retain personal information within the period of possession and use of personal information under the Act or the period of possession and use of personal information agreed upon when collecting personal information from the data subject.
② The processing and retention periods of each personal information are as follows.
1. Membership registration and management on the website: Until withdrawal of membership
2. Management of user service improvement: until membership withdrawal
3. Complaint handling: Until the completion of the complaint processing or a separate request is made
Article 4 (Procedures and Methods for Destruction of Personal Information)
① When personal information becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the purpose of processing, the Center shall destroy the personal information without delay.
② If personal information must be preserved in accordance with other laws and regulations even though the personal information retention period agreed by the data subject has elapsed or the processing purpose has been achieved, the personal information shall be transferred to a separate database (DB) or stored differently.
※ Items and grounds for preservation of personal information preserved pursuant to other statutes can be found in the "5. Processing and Retention Period of Personal Information" section
③ The procedures and methods for destroying personal information are as follows.
1. a procedure for destruction
The Center selects the personal information in which the reason for destruction occurred and destroys the personal information with the approval of the Center's personal information protection manager.
2. Method of destruction
Personal information recorded and stored in the form of an electronic file is destroyed so that the record cannot be reproduced, and personal information recorded and stored in paper documents is pulverized or destroyed through incineration.
Article 5 (Provided by a third party of personal information)
In principle, the Center does not provide the user's personal information to a third party. However, the following cases are excluded.
– Where it falls under Article 18 (2) of the Personal Information Protection Act
Article 6 (Consignment of Personal Information Processing)
① The Center entrusts the personal information processing work as follows for smooth personal information processing.
-Consignee (Consignee): Three Way Co., Ltd
-Consignment work: Managing member servers for website development and maintenance, and providing website services
-Consignment period: Until the end of the consignment contract
② In accordance with Article 26 of the Personal Information Protection Act, the Center stipulates matters concerning responsibilities such as prohibition of processing personal information other than the purpose of performing consignment work, technical and administrative protection measures, re-entrustment restrictions, management and supervision of trustees, and compensation for damages, and oversees whether the trustee handles personal information safely.
③ In accordance with Article 26 (6) of the Personal Information Protection Act, if the trustee re-entrusts the company's personal information processing work, the consent of the Center is obtained.
④ If the contents of the consignment work or the trustee changes, we will disclose it without delay through this personal information processing policy.
Article 7 (Measures to ensure the stability of personal information)
The Center is taking the following measures to ensure the safety of personal information.
1. Management measures: Establishment and implementation of internal management plans, regular employee training, etc
2. Technical measures: Home page member information access rights management, encryption of unique identification information, security program installation
3. Physical Action: Data Archive File Access Control
Article 8 (Installation, operation, and rejection of automatic personal information collection devices)
< Automatic personal information collection device installed and operated>
① In order to provide individual services and convenience to users, the center uses 'cookie' that stores usage information and calls it from time to time.
② Cookies are a small amount of information sent to the information subject's browser by the server (https) used to operate the website and are stored on the information subject's PC or mobile.
③ The data subject can set settings such as allowing cookies and blocking through web browser option setting. However, refusal to save cookies may cause difficulties in using the service.
|
<How to
allow cookies / block cookies >
▶ Allow/Block
Cookies in Web Browser
- Chrome: Web
Browser Settings > Privacy and Security > Delete Internet Usage History
- Edge : Web
browser settings > Cookies and site privileges > Cookies and site data
management and deletion
▶ Allow/block
cookies from your mobile browser
- Chrome:
Mobile Browser Settings > Privacy and Security > Delete Internet Usage
History
- Safari:
Mobile Device Settings > Safari > Advanced > Block All Cookies
- Samsung
Internet : Mobile Browser Settings > Internet Usage History > Delete
Internet Usage History
|
< Matters concerning the collection, use, provision, and rejection of behavioral information>
① The center collects and uses behavioral information without identifying individuals in the process of using the service.
② The center collects behavioral information from its website as follows.
|
Behavioral
information items collected
|
How to collect
behavioral information
|
Purpose of collecting
behavioral information
|
Period of retention
and use
|
|
Website
visit history and usage behavior
|
Automatic
collection when the data subject visits the website
|
Analysis
of members' access routes and improvement of service use
|
Abandoned
upon withdrawal of membership
|
▶ Department in charge of personal information protection
|
Name of
Department: Public Relations Team / Contact: 02-6959-6763, jiyoo@k-rsc.or.kr
, (FAX) 02-6959-6764
|
Article 9 (Rights, Duties, and Methods of Exercise of Data Subjects and Legal Agents)
① The data subject may exercise the right to read, correct, delete, suspend or withdraw personal information at any time (hereinafter referred to as the "exercise of rights") from the Center.
※ Requests for access to personal information about children under the age of 14 must be made by a legal representative, and the information subject, who is a minor over the age of 14, may exercise his or her right to the personal information of the information subject or through a legal representative.
② The exercise of rights may be made to the Center by writing, e-mail, fax, etc. pursuant to Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and the Center will take measures without delay.
- The data subject can inquire, modify, and delete personal information directly from the website 'My Information > Member Information' at any time.
- The data subject can withdraw the collection and use of personal information through "membership withdrawal" at any time.
③ The exercise of rights may be done through an agent, such as a legal representative of the data subject or a person who has been delegated. In such cases, you shall submit a power of attorney in attached Form 11 of the "Notice on the Method of Processing Personal Information".
④ The right of the data subject to request the suspension of reading and processing of personal information may be restricted under Articles 35 (4) and 37 (2) of the Personal Information Protection Act.
⑤ If the personal information is specified as a collection target in other laws, the deletion of the personal information cannot be requested.
⑥ If the information subject agrees that automated decisions are made, or if they are notified in advance through contracts, etc., or if the law clearly stipulates that automated decisions are not accepted, only explanations and review requests are allowed.
- In addition, requests for rejection or explanation of automated decisions may be rejected if there is a justifiable reason, such as the possibility of unreasonably infringing on the life, body, property, and other interests of others.
⑦ The center verifies whether the person who exercised the rights is himself or a legitimate agent.
⑧ The Center may exercise its rights in the following departments. The Center will endeavor to ensure that the data subject's exercise of rights is handled quickly.
▶ Department of Receiving and Processing Claims for Accessing Personal Information, etc
|
Department name: Public relations team
Address: 70, Sogong-ro, Jung-gu, Seoul,
15th floor of A-dong, Seoul Central Post Office Building, Korea Regulatory
Science Center
Contact: 02-6959-6763, jiyoo@k-rsc.or.kr
, (fax) 02-6959-6764
|
Article 10 (Personal Information Protection Officer)
① The center is in charge of handling personal information and designates a person in charge of personal information protection as follows for the handling of complaints and damage relief of information subjects related to personal information processing.
② The data subject may contact the person in charge of personal information protection and the department in charge for all personal information protection-related inquiries, complaint handling, damage control, etc. that occurred while using the service (or business) of the center. The center will respond to and process inquiries from the data subject without delay.
|
▶ a person in charge of personal
information protection
Name: Lee Go-eun
Position: Public Relations Team Leader
Contact: 02-6959-7161, freetree81@k-rsc.or.kr
▶ Department in charge of personal
information protection
Department name: Public relations team
Contact: 02-6959-6763, jiyoo@k-rsc.or.kr
|
Article 11 (Method of Relief for Infringement of Rights and Interests)
① In order to be regulated by infringement of personal information, the data subject may apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Reporting Center, etc. For other reports and consultations on personal information infringement, please contact the following agencies.
|
1. Personal Information Dispute Mediation
Committee: 1833-6972 / www.kopico.go.kr
2. Personal Information Infringement
Reporting Center: 118 / privacy.kisa.or.kr
3. Supreme Prosecutors' Office: 1301 /
www.spo.go.kr
4. National Police Agency: 182 /
cyberbureau.police.go.kr
|
② The center guarantees the data subject's right to self-determination of personal information and strives to provide counseling and relief for damage caused by personal information infringement, and if you need to report or consult, please contact the department in charge below.
|
▶ Customer consultation and reporting
related to personal information
Department name: Public relations team
Contact: 02-6959-6763, jiyoo@k-rsc.or.kr
|
Article 12 (Change in Personal Information Processing Policy)
This Privacy Policy will take effect on October 14, 2024.
