① The King Sejong Foundation processes personal information to the minimum necessary for purposes such as providing online services, handling civil complaints, and performing related duties.
  1. Service Provision
    Personal information is processed for the purpose of confirming the intent to register for the King Sejong Institute online service, identifying individuals, and providing customized services based on statistics.
  2. Personal Information Files

② The registration details of the King Sejong Foundation's personal information files can also be accessed by visiting the Personal Information Protection Commission's comprehensive support portal (www.privacy.go.kr) → Personal Information Complaints → Requests for Access to Personal Information → Search Menu for Personal Information File List and enter "King Sejong Foundation" in the organization name field.

The King Sejong Foundation processes the following personal information items.

① The King Sejong Foundation outsources personal information processing tasks as follows to facilitate smooth personal information management for online services.

② When entering into outsourcing contracts, the King Sejong Foundation specifies in documents such as contracts provisions related to the prohibition of processing personal information for purposes other than those of the outsourced tasks, technical and managerial protective measures, restrictions on re-outsourcing, and liabilities for management and supervision damages in accordance with Article 26 of the Personal Information Protection Act. The Foundation also supervises whether the outsourcing company processes personal information securely.

③ In the event of changes in the content of the outsourced tasks or the outsourcing company, the King Sejong Foundation will promptly disclose this information through the relevant personal information processing policy.

To ensure the security of personal information, the following measures are implemented:

1. Minimization and Training of Staff Handling Personal Information
Only necessary personnel are designated and managed to handle personal information, and training is provided to these employees to ensure safe management.

2. Access Restrictions to Personal Information
Necessary measures are taken to control access to personal information through the granting, modification, and deletion of access rights to the personal information processing system. An intrusion prevention system is used to control unauthorized access from external sources.

3. Retention of Access Logs
Records of access to the personal information processing system are retained and managed for more than one year.

4. Encryption of Personal Information
Personal information is securely stored and managed through encryption and other methods. Additionally, separate security features are used on important data such as encrypting during storage and transmission.

5. Installation of Security Programs and Regular Inspections/Updates
To prevent the leakage and damage of personal information due to hacking or computer viruses, security programs are installed and regularly updated and inspected.

6. Access Control for Unauthorized Persons
A separate physical storage location for the personal information processing system is established, and access control procedures are set and operated for this location.

② The information collected by cookies and its purposes are as follows:

• 1. Collected Information: ID, access IP, membership classification, service usage information such as contents used, etc.
• 2. Purpose of Use: To provide differentiated information based on individual areas of interest.

① The KIng Sejong Foundation has designated the following personal information protection officers to oversee all matters related to personal information processing and to handle complaints and remedies related to personal information processing by data subjects:

② Data subjects may contact the personal information protection officer and the responsible department regarding any inquiries, complaints, or remedies related to personal information protection that arise while using the services (or business) of the King Sejong Foundation. The King Sejong Foundation will respond to and address inquiries from data subjects without delay.

① Data subjects may submit requests for access to personal information under Article 35 of the Personal Information Protection Act to the following department. The Ministry of Culture, Sports and Tourism will strive to ensure that requests for access to personal information by data subjects are processed promptly.

② In addition to the department mentioned in paragraph 1, data subjects may also submit requests for access to personal information through the Personal Information Protection Commission's "Comprehensive Portal for Personal Information Protection" website (www.privacy.go.kr).
▶ Personal Information Protection Commission Comprehensive Portal → Civil Complaints → Request for Access to Personal Information (Real-name authentication required via I-PIN or mobile phone verification)

Data subjects may apply for dispute resolution or counseling to the Dispute Mediation Committee, the Personal Information Infringement Reporting Center of the Korea Internet & Security Agency, etc., to seek remedies for damages caused by personal information infringement. The following institutions are separate from the King Sejong Foundation, and if you are not satisfied with the results of the King Sejong Foundation's internal handling of personal information complaints or need more detailed assistance, please contact them.