Seoul National University Human Rights Center Personal Information Processing Policy In accordance with the Personal Information Protection Act, the Seoul National University Human Rights Center (http://www.hrc.snu.ac.kr) has established the following processing policy to protect the personal information and rights and interests of users of the online human rights education system and to process smoothly difficulties experienced by users in relation to personal information. In case the Seoul National University Human Rights Center revises the personal information processing policy, it will announce the revision in advance through "Notices". The present policy is to be implemented starting August 12, 2013. Article 1 (Purposes for Processing Personal Information) The Seoul National University Human Rights Center processes users' personal information for the following purposes. The personal information processed will not be used for purposes other than the following ones, and users' consent will be requested in advance when there are changes to the purposes for the use of personal information: A. Online membership application and management Users' personal information is processed for purposes including civil petition processing and official notice transfer such as the confirmation of users' wish for membership, identification and verification of users for the use of the services, maintenance and management of membership status, prevention of wrongful use of the services, management of the education completion ratio, issuance of certificates of education completion, preservation of records for dispute mediation, and processing of complaints. B. Provision of services The Seoul National Human Rights Center processes users' personal information for purposes related to the provision of services such as the provision of human rights education contents including sexual harassment, sexual violence, and prostitution prevention education, verification of users' identities, and issuance of certifications of education completion. Article 2 (Collection Categories and Method for, Grounds for the Retention of, and Retention Period for Personal Information) The Seoul National University Human Rights Center processes and retains personal information within the personal information retention and use periods consented to by subjects of information upon its collection. The personal information files that the Seoul National University Human Rights Center registers and discloses in accordance with Article 32 of the Personal Information Protection Act are as follow: A. Member management - Personal information file name: Member management - Personal information categories * Mandatory categories: Name (Korean script/Roman alphabet), date of birth, status/post, affiliation, user name, password * Optional categories: E-mail address, gender, mobile telephone number - Collection method: Homepage - Grounds for retention: Consent of the subjects of information - Retention period: Two years B. Education completion management - Personal information file name: Education completion management - Personal information categories * Mandatory categories: Name (Korean script/Roman alphabet), date of birth, status/post, affiliation, details of the education completed, time/date of education - Collection method: Homepage - Grounds for retention: Article 17(2) of the Framework Act on Women's Development; Article 4 of the Act on the Prevention of Sexual Traffic and Protection, Etc. of Victims Thereof; and Article 5 of the Act on the Prevention of Sexual Assault and Protection, Etc. of Victims Thereof - Retention period: One year from the date of the completion of education -To confirm the registration of your personal information file, please make use of the following: Ministry of Security and Public Administration privacy information protection portal (http://www.privacy.go.kr) -> Petition for personal information-> Request to view personal information, etc.->Search the list of personal information files. Article 3 (Provision of Personal Information to Third Parties) In principle, the Seoul National University Human Rights Center processes users' personal information for purposes within the scope stipulated in Article 1 above and does not process it in excess of the original scope or provide it to third parties. However, personal information may be provided to third parties in the following cases: - When users have consented in advance to disclosure and provision to third parties - When provision is necessitated by law, etc. - When it is considerably difficult to obtain users' customary consent on the provision of personal information to third parties as necessary for the fulfillment of the contract regarding the provision of services due to economic/technical reasons - When personal information is processed and used in a form that makes it impossible to identify the relevant individuals Article 4 (Rights and Obligations of Subjects of Information and Means of Their Exercise) As subjects of information, users may exercise the following rights with respect to the Seoul National University Human Rights Center: 1. Demands for the viewing of personal information 2. Demands for correction in cases of errors, etc. 3. Demands for deletion 4. Demands for the termination of processing Demands for viewing personal information may be restricted or rejected in accordance with Article 35 of the Personal Information Protection Act. When subjects of information demand the correction or deletion of personal information, the Seoul National University Human Rights Center is not to use or to provide the relevant personal information until the completion of the correction or deletion. Article 5 (Destruction of Personal Information) In principle, the Seoul National University Human Rights Center destroys the relevant personal information without delay after the termination of the retention period. The destruction procedures and deadline are as follow: - Destruction procedures Information entered by users is transferred to a separate database (or to a separate document in the case of hard copies) after the termination of the retention period and is destroyed after storage for a certain period in accordance with internal policy and other related laws or immediately. Here, the personal information transferred to the database (or document) is not used for other purposes except when necessitated by law. - Destruction deadline Users' personal information is to be destroyed within five days from the date of termination of the personal information retention period when the retention period has expired and within five days from the date of acknowledgement of the absence of the necessity for processing it when the personal information is no longer necessary due to reasons including the achievement of the goal for processing the personal information, discontinuation of the relevant services, and/or termination of the project. Article 6 (Measures to Secure the Safety of Personal Information) In accordance with Article 29 of the Personal Information Protection Act, the Seoul National University Human Rights Center takes the following technical/managerial and physical measures necessary for securing safety: 1. Minimization and education of staff members dealing with personal information The Seoul National University Human Rights Center restricts to a minimal number and manages staff members dealing with personal information and periodically implements personal information protection education on the individuals in charge. 2. Technical measures against hacking, etc. The Seoul National University Human Rights Center has established a security program to prevent leakage of and/or damage to personal information through means including hacking and computer viruses, periodically performs updates and inspections, has established its system in an area restricted from access from the outside, and monitors and blocks the system technically/physically. Article 7 (Designation of the Personal Information Protection Officer) The Seoul National University Human Rights Center has designated the following personal information protection officer to be generally responsible for duties related to personal information processing and to process complaints from and redress damages of subjects of information related to personal information processing: ▶ Personal information protection officer Name: Seon-a Yi Contact numbers: 02-880-2421, angel5017@snu.ac.kr Article 8 (Means to Redress Violations of Personal Information) When they want redress for violations of personal information, subjects of information can request the following organs for assistance: ▶ Personal Information Incident Report Center (operated by the Korea Internet and Security Agency) - Duties: Reports of violations of personal information, requests for consultation - Homepage: http://www.privacy.kisa.or.kr - Telephone: (without a telephone exchange number) 118 - Address: Personal Information Incident Report Center, Korea Internet and Security Agency, 135 Jungdae-ro, Songpa-gu, Seoul (postal code: 138-950) ▶ Personal Information Dispute Mediation Committee (operated by the Korea Internet and Security Agency) - Duties: Requests for mediation of disputes regarding personal information, mediation of collective disputes (resolution through civil proceedings) - Homepage: http://www.privacy.kisa.or.kr - Telephone: (without a telephone exchange number) 118 - Address: Personal Information Incident Report Center, Korea Internet and Security Agency, 135 Jungdae-ro, Songpa-gu, Seoul (postal code: 138-950) ▶ Supreme Public Prosecutors Office Cybercrime Investigation Center: 02-3480-3573 (http://www.spo.go.kr) ▶ Korean National Police Agency Cyber Terror Response Center: 1566-0112 (http://www.netan.go.kr) Article 9 (Changes to the Personal Information Processing Policy) The present personal information processing policy is to be applied from the effective date, and when there are revisions, additions, deletions, and/or corrections in accordance with laws and policies, they will be announced through Notices from seven days before the implementation of the changes.
