Privacy Policy

The Korean Youth Educational Development Institute (the “Institute”) establishes and publishes this privacy policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea, in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.

The Institute processes personal information for the following purposes only, and for no other purpose.

1. 1.Acknowledging and replying to email enquiries and informing the sender of the outcome
2. 2.Providing information and consultation on the Institute's work, research, and programmes
3. 3.Retaining a record of enquiries in order to respond in the event of a dispute

Should the purpose of processing change, the Institute will obtain separate consent and take any other measures required under Article 18 of the Personal Information Protection Act.

This website has no membership registration and no online application or submission forms. Simply browsing the website does not result in the collection of personal information.

The Institute collects personal information only in the following case.

1. 1.Email enquiries: the sender's email address, together with any information the sender chooses to include in the message (name, contact details, affiliation, and the like)

In the course of using an internet service, the access IP address, date and time of access, browser and device information, and requested path may be generated and recorded automatically on the server that delivers the service.

The Institute processes and retains personal information within the retention period required by law or the period consented to at the time of collection.

Retention periods are as follows.

1. 1.Information relating to email enquiries: one year from the date the enquiry is resolved
2. 2.Automatically generated access logs: three months from the date of creation

Where information must be preserved under other legislation even after the retention period has elapsed, it is kept for that period and then destroyed.

The Institute processes personal information only within the scope set out in Article 2 and does not provide it to third parties without the data subject's consent.

Exceptions apply in the cases set out in Articles 17 and 18 of the Personal Information Protection Act — in particular where there is a special provision in law, or where an investigative authority makes a request under the procedures and methods prescribed by law.

To keep the website running reliably, the Institute outsources website hosting as set out below. Personal information may be transferred outside the Republic of Korea in the course of this arrangement.

1. 1.Processor (transferee): Netlify, Inc. (United States)
2. 2.Scope of the outsourced work: website hosting and content delivery
3. 3.Items transferred: the automatically generated access logs described in Article 3(3)
4. 4.Timing and method of transfer: transmitted over the network when the website is accessed
5. 5.Retention and use period: until the outsourcing agreement ends or the purpose of the transfer is achieved

When entering into an outsourcing agreement, the Institute specifies the requirements for the safe management of personal information in the contract and supervises whether the processor handles that information securely.

Any change to the outsourced work or to the processor will be disclosed through this policy without delay.

A data subject may exercise the following rights in relation to the Institute at any time.

1. 1.The right to request access to their personal information
2. 2.The right to request correction of any errors
3. 3.The right to request deletion
4. 4.The right to request that processing be suspended

Requests under paragraph 1 may be made in writing or by email using the contact details in Article 11, and the Institute will act on them without delay.

Where a data subject requests correction of an error, the Institute will not use or provide the personal information concerned until the correction is complete.

These rights may also be exercised through a legal representative or an authorised agent, in which case a letter of authorisation must be submitted.

Where personal information becomes unnecessary — because the retention period has elapsed, the purpose of processing has been achieved, or for a similar reason — the Institute destroys it without delay.

Personal information is destroyed as follows.

1. 1.Information held as electronic files: permanently deleted by a technical method that makes recovery and reproduction impossible
2. 2.Information recorded on paper: shredded or incinerated

The Institute takes the following measures to keep personal information secure.

1. 1.Administrative: keeping the number of staff who handle personal information to a minimum, and training those staff
2. 2.Technical: managing access rights to systems that process personal information, retaining access logs, and encrypting data in transit (HTTPS)
3. 3.Physical: storing documents and storage media in a location fitted with a lock

This website does not install or operate cookies for the purpose of behavioural analytics or advertising.

Should cookies be used in future, their purpose and the means of refusing them will be reflected in this policy and disclosed in advance. Users may refuse the storage of cookies through their web browser settings.

The Institute has designated the following privacy officer to take overall responsibility for personal information processing and to handle complaints and remedy damage in connection with it.

1. 1.Privacy officer: Head of the Administration Department
2. 2.Department: Administration Department
3. 3.Contact: contact@kyedi.re.kr

Data subjects may direct any enquiry, complaint, or request for remedy arising from their use of the Institute's services to the privacy officer, and the Institute will respond and act without delay.

To obtain redress for infringement of personal information, a data subject may apply to the following bodies for dispute resolution or consultation.

1. 1.Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
2. 2.Privacy Infringement Report Centre: 118 / privacy.kisa.or.kr
3. 3.Cybercrime Investigation Division, Supreme Prosecutors' Office: 1301 / www.spo.go.kr
4. 4.Cybercrime Reporting System, National Police Agency: 182 / ecrm.police.go.kr

This privacy policy applies from its effective date.

Where content is added, deleted, or amended in response to changes in legislation, policy, or security technology, the revised policy will be announced on the website at least seven days before it takes effect.

This privacy policy takes effect on 1 January 2024.