Article 1 Purpose of Processing Personal Information

• ① The King Sejong Institute Foundation processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those specified, and in the case of a change in the purpose of use, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

  1. Service Provision
  Personal information is processed for the purposes of confirming the intent to register for the King Sejong Institute's online services, verifying identity, providing personalized services, conducting surveys, and managing learning history.
  2. Personal Information Files
  

  Purpose of Processing Personal Information

  No.	Personal Information File Name	Legal Basis for Operation	Purpose of Processing
  1	King Sejong Institute Foundation Online Service Member Information	Consent by Data Subject (Article 15 of the Personal Information Protection Act)	Use of King Sejong Institute Foundation Online Services - Online King Sejong Institute - Nuri King Sejong Institute - King Sejong Institute Foundation Website - King Sejong Institute Digital Library - AI-Based Korean Language Learning Support Service Statistics on Service Usage Customer Surveys Provision of Personalized Services and Additional Services Management of Learning History

  ② The registration details of personal information files at the King Sejong Institute Foundation can be accessed by visiting the Personal Information Protection Commission's Comprehensive Support Portal (www.privacy.go.kr) → Personal Services → Exercise of Data Subject Rights → Request for Access to Personal Information → Search Personal Information Files menu and enter "King Sejong Institute Foundation" in the institution name field.

Article 2 Processing and Retention Period of Personal Information

• ① The personal information processed by the King Sejong Institute Foundation is handled and retained within the retention period specified by the Personal Information Protection Act and related laws, or within the period of retention and use consented to by the data subject at the time of collection.
  
  ② The processing and retention periods for personal information are as follows:

  Processing and Retention Period of Personal Information

  No.	Service Name	Retention Period	Department	Website Address
  1	King Sejong Institute Foundation Online Service Member Information	2 years (Immediately deleted upon membership withdrawal)	Online Information Team	https://www.ksif.or.kr https://www.iksi.or.kr https://nuri.iksi.or.kr https://nuri.iksi.or.kr/library
  2	Online King Sejong Institute Course Enrollment and Completion History	Semipermanent (Stored separately)

  ※ In cases where investigations or inquiries related to violations of relevant laws are ongoing, they will continue until the conclusion of the investigation or inquiry.

Article 3 Registration of Personal Information Files and Items of Processed Personal Information

① The King Sejong Institute Foundation processes the following personal information items.

② The King Sejong Institute Foundation may request minimal information, such as the name and contact details of the legal representative, when collecting personal information from children under the age of 14. The Foundation will verify whether the legal representative has given consent through the following method:

☞ Guide the legal representative to indicate their consent on the website where the consent information is posted, and their identity will be verified through mobile phone verification or I-PIN authentication.

Article 4 Provision of Personal Information to Third Parties

• ① The King Sejong Institute Foundation will, in principle, process personal information only within the scope specified for the purpose of processing. Personal information will only be provided to third parties in cases that fall under Article 17 and Article 18 of the Personal Information Protection Act, such as with the consent of the data subject or special provisions of the law. The Foundation will not provide personal information to third parties in any other circumstances.
• ② If the King Sejong Institute Foundation uses personal information for purposes other than those specified or provides it to third parties, it will notify the data subject and seek consent by publishing the information in the official gazette or on its website in accordance with the law.

Article 5 Matters Concerning the Outsourcing of Personal Information

• ① The King Sejong Institute Foundation outsources personal information processing tasks as follows to facilitate smooth personal information management for online services.

  Matters Concerning the Outsourcing of Personal Information

  Outsourcing Company Name	Outsourced Tasks	Phone Number
  Sangsang Story Co., Ltd.	Maintenance of King Sejong Institute Foundation Online Service System	02-6677-3082
  Storm Media Co., Ltd.	Acting on behalf of the King Sejong Institute Foundation Online Service Operations	02-3443-8571
  Visang Education Co., Ltd.	Management of King Sejong Institute Foundation Online Service Curriculum	1544-0554
  Irtech Co., Ltd.	Operation of AI-Based Korean Language Learning Support Service	042-824-1108

• ② When entering into outsourcing contracts, the King Sejong Institute Foundation specifies in documents such as contracts provisions related to the prohibition of processing personal information for purposes other than those of the outsourced tasks, technical and managerial protective measures, restrictions on re-outsourcing, and liabilities for management and supervision damages in accordance with Article 26 of the Personal Information Protection Act. The Foundation also supervises whether the outsourcing company processes personal information securely.
• ③ In the event of changes in the content of the outsourced tasks or the outsourcing company, the King Sejong Institute Foundation will promptly disclose this information through the relevant personal information processing policy.

Article 6 Procedures and Methods for Destroying Personal Information

• ① The King Sejong Institute Foundation will promptly destroy personal information when it is no longer necessary, such as after the retention period has expired or the purpose of processing has been achieved.
• ② In case where the retention period for personal information consented by the data subject has expired or the purpose of processing has been achieved, but the personal information must be retained according to other laws, the relevant personal information is transferred to a separate database (DB) or stored in a different location.
• ③ The procedures and methods for destroying personal information are as follows:

  1. Destruction Procedures
  The King Sejong Institute Foundation selects the personal information for which a destruction reason has occurred and destroys the personal information after obtaining approval from the personal information protection officer of the King Sejong Foundation.

• 2. Destruction Methods
  The King Sejong Institute Foundation will destroy personal information recorded or stored in electronic file format in a way that data cannot be recovered, and personal information recorded or stored in paper documents will be shredded or incinerated.

• ④ The King Sejong Institute Foundation destroys the information of users who have not used the service for two years. However, personal information may be stored and managed separately from other users' information until the retention period specified by other laws has expired.
• ⑤ The King Sejong Institute Foundation notifies users via email of the fact that their personal information will be destroyed, the expiration date, and the items of personal information to be destroyed at least 30 days before the destruction.
• ⑥ If you do not wish for your personal information to be destroyed, you can log into the service before the expiration date.

Article 7 Rights and Obligations of Data Subjects and Legal Representatives, and Methods of Exercising Those Rights

• ① Data subjects may exercise their rights to request access, correction, deletion, or suspension of the processing of personal information from the King Sejong Institute Foundation at any time.

  ※ Requests for access to personal information regarding children under the age of 14 must be made directly by their legal representatives. Data subjects who are minors aged 14 or older may exercise their rights regarding their personal information themselves or through their legal representatives.

• ② The exercise of rights under paragraph 1 can be made in writing, by email, or by facsimile (FAX) in accordance with Article 41, Section 1 of the Enforcement Decree of the Personal Information Protection Act, and the King Sejong Institute Foundation will take prompt action in response.
• ③ Rights may also be exercised through a legal representative or an authorized person. In this case, a power of attorney must be submitted in accordance with Annex 11 of the "Notice on the Methods of Processing Personal Information (No. 2020-7)."
• ④ Requests for access to personal information and requests for suspension of processing may be restricted under Article 35, Section 4, and Article 37, Section 2 of the Personal Information Protection Act.
• ⑤ If a data subject requests correction or deletion of personal information due to errors, the relevant personal information will not be used or provided until the correction or deletion is completed.
• ⑥ Requests for correction and deletion of personal information cannot be made if the personal information is explicitly specified as a subject of collection under other laws.
• ⑦ The King Sejong Institute Foundation will verify whether the requester of access, correction, deletion, or suspension of processing is the data subject or a legitimate representative.

  * [Template No. 8 of the Personal Information Protection Commission] Request for Access to Personal Information

    Download Request for Access to Personal Information
  

  * [Template No. 11 of the Personal Information Protection Commission] Power of Attorney

    Download Power of Attorney

Article 8 Measures to Ensure the Security of Personal Information

• ① The King Sejong Institute Foundation takes the following administrative, technical, and physical measures to ensure the security of personal information:

  1. Establishment and Implementation of Internal Management Plans
  An internal management plan is established and implemented to ensure the safe processing of personal information.

  2. Management of Access Rights
  Employees handling personal information are designated and managed only among those who are absolutely necessary. Records of granting, modifying, and deleting access rights to the personal information processing system are kept and managed for at least three years.

  3. Access Control
  Unauthorized access from external sources is controlled using an intrusion prevention system.

  4. Retention and Inspection of Access Logs
  Records of access to the personal information processing system are retained and managed for more than two years, and access logs are periodically inspected.

  5. Encryption of Personal Information
  Personal information is encrypted when transmitted over information and communication networks. When storing passwords, one-way encryption is used to ensure they cannot be decrypted.

  6. Installation of Security Programs and Regular Inspections/Updates
  Security programs are installed and regularly updated, and inspected to prevent the leakage and damage of personal information due to hacking or computer viruses.

  7. Physical Security Measures
  Locations where personal information is stored, such as computer rooms and document storage rooms, are equipped with secure locking mechanisms, and access is controlled.

Article 9 Methods for Installation, Operation, and Refusal of Automatically Collected Devices

• ① The King Sejong Institute Foundation uses "cookies" to store user information and retrieve it frequently in order to provide personalized services to users on its website.
• ② A cookie is a small amount of information sent by the server operating the website to the user's browser, which may be stored on the hard disk of the user's computer.
• ③ Users can refuse the storage of cookies through their web browser's security settings.

  1. Purpose of Using Cookies: To provide optimized information based on users' content usage information.

  2. Installation, Operation, and Refusal of Cookies
  ㅇ For Internet Explorer 11:
  - Go to [Tools] - [Internet Options] - [Privacy] - [Advanced] to allow or refuse cookie security settings.
  
  ㅇ For Chrome:
  - Go to [Settings] - [Privacy and Security] - [Third-party Cookies] to allow or block cookies.
  
  ㅇ For Microsoft Edge:
  - Go to [Settings] - [Cookies and Site Permissions] - [Manage and Delete Cookies and Site Data] to allow or block cookies.

  
  

  3. However, if you refuse the installation of cookies, you may experience difficulties in using the content.

Article 10 Matters Concerning the Personal Information Protection Officer

• ① The King Sejong Institute Foundation has designated the following personal information protection officers to oversee all matters related to personal information processing and to handle complaints and remedies related to personal information processing by data subjects:

  리스트 테이블

  Position	Name, Title, etc.	Contact Information
  Personal Information Protection Supervisor	Position: Head Director of Division Name: Park Chung-sik	Tel : 02-3276-0780 Email : parkcs@ksif.or.kr Fax : 0303-3130-0707
  Personal Information Protection Officer	Department Name: Online Information Team Name: Park Jin-seok	Tel : 02-3276-1105 Email : jinseok@ksif.or.kr Fax : 0303-3130-0707
  Online Service Manager	Department Name: Online Information Team Name: Lee Sun-young	Tel : 02-3276-1101 Email : sylee@ksif.or.kr Fax : 0303-3130-0707

  ② Data subjects may contact the personal information protection officer and the responsible department regarding any inquiries, complaints, or remedies related to personal information protection that arise while using the services of the King Sejong Institute Foundation. The King Sejong Institute Foundation will respond to and address inquiries from data subjects without delay.

Article 11 Department for Receiving and Processing Requests for Access to Personal Information

• ① Data subjects may submit requests for access to personal information in accordance with Article 35 of the Personal Information Protection Act to the following department. The King Sejong Institute Foundation will strive to ensure that requests for access to personal information by data subjects are processed promptly.

  리스트 테이블

  Request for Access to Personal Information Receiving and Processing Department	Department: Online Information Team, Content Business Division Tel : 02-3462-1121 Email: online@ksif.or.kr Fax : 02-3130-0707

• ② In addition to the department mentioned in paragraph 1, data subjects may also submit requests for access to personal information through the Personal Information Protection Commission's "Comprehensive Portal for Personal Information Protection" website (www.privacy.go.kr).

  ▶ Personal Information Protection Commission Comprehensive Portal → Personal Services → Request for Access to Personal Information (Real-name authentication required via I-PIN or mobile phone verification)

Article 12 Remedies for Infringement of Data Subject Rights

• ① Data subjects may apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Reporting Center of the Korea Internet & Security Agency, etc., to seek remedies for damages caused by personal information infringement. For other reports and consultations regarding personal information infringement, please contact the institutions listed below.

  리스트 테이블

  Institution Name	Responsibilities	Website	Contact Information
  Personal Information Infringement Reporting Center (Operated by Korea Internet & Security Agency)	Reporting personal information infringement, requesting counseling	privacy.kisa.or.kr	(Toll-free) 118
  Personal Information Dispute Mediation Committee	Application for personal information dispute resolution, collective dispute mediation (civil resolution)	www.kopico.go.kr	(Toll-free) 1833-6972
  Supreme Prosecutors' Office Cyber Crime Investigation Division	Inquiries and reports regarding criminal cases related to personal information infringement	www.spo.go.kr	(Toll-free) 1301
  National Police Agency Cyber Investigation Bureau	Inquiries and reports regarding criminal cases related to personal information infringement	ecrm.cyber.go.kr	(Toll-free) 182

  ② Persons who have suffered infringement of rights or interests due to actions or omissions by the head of a public institution in response to requests under Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information), and Article 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act may file an administrative appeal in accordance with the Administrative Appeals Act.
  ☞ Central Administrative Appeals Commission: (Toll-free) 110 (www.simpan.go.kr)

Article 13 Changes to the Personal Information Processing Policy

This personal information processing policy has been in effect since October 2023.

* Comparison Table of Old and New Personal Information Processing Policy