• ① The Promotion Agency processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent from the information subject.
  • 1. Korean Food Promotion Agency integrated membership registration and management
  • - Confirmation of intention to become a member, identification and authentication of person according to provision of membership service, maintenance and management of membership, prevention of illegal use of service, confirmation of legal representative's consent when collecting personal information of children under 14 years of age, various notices and notices, handling of grievances, Personal information is processed for purposes such as dispute resolution.
  • 2. Handling civil complaints
  • - Personal information is processed for the purposes of verifying the identity of the complainant, confirming the complaint, contacting and notifying for factual investigation, and notifying the result of processing.
• ② The Promotion Agency processes and retains personal information within the personal information retention and use period pursuant to the law or within the personal information retention and use period upon receipt of personal information collection initiation from the information subject.
• ③ The processing and retention period for each personal information is as follows.

• ① The Promotion Agency processes and retains personal information within the personal information retention and use period pursuant to the law or within the personal information retention and use period agreed upon when collecting personal information from the information subject.
• ② The processing and retention period for each personal information is as follows.
• For detailed disclosure of the Agency's personal information file registration information, please use the Personal Information Protection Committee's Personal Information Protection Comprehensive Support Portal (www.privacy.go.kr) → Personal Information Civil Service → Request to View Personal Information, etc. → Personal Information File List Search menu.
• ※ If there is no log-in record for more than 1 year, the account will be converted to a dormant account, and the integrated membership information of members who have no log-in record for more than 1 year after converting to a dormant account will be deleted.

• ① In principle, the Promotion Agency processes the personal information of the information subject within the scope specified for the purpose of collection and use, and except in the following cases, processes it beyond the scope of the original purpose or provides it to a third party without the prior consent of the information subject. Do not. However, items 5 through 9 are limited to public institutions.
  • 1. When separate consent is obtained from the information subject
  • 2. When there are special provisions in other laws
  • 3. In cases where the information subject or his/her legal representative is unable to express his/her intention or cannot obtain prior consent due to unknown address, etc., it is clearly necessary for the urgent benefit of the life, body, or property of the information subject or a third party. When accepted
  • 4. When personal information is provided in a form that does not identify a specific individual as it is necessary for purposes such as statistical compilation and academic research.
  • 5. If personal information is used for a purpose other than its intended purpose or is not provided to a third party, it is impossible to perform the duties prescribed by other laws and the case has been reviewed and resolved by the Protection Committee.
  • 6. When necessary to provide information to foreign governments or international organizations for the implementation of treaties and other international agreements.
  • 7. When necessary for investigation of crime and filing and maintenance of indictment
  • 8. When necessary to carry out the court's judicial duties
  • 9. When necessary for the execution of punishment, custody, and protective measures.
• ② If the Promotion Agency uses personal information for purposes other than those intended or provides it to a third party pursuant to subparagraphs 1 to 9 above, it will disclose it to the official gazette or website, etc., as prescribed by Ordinance of the Ministry of the Interior and Safety.
• ③ The Promotion Agency provides personal information to third parties as follows. Go to the bulletin board for notification of provision of personal information to third parties

• ① In order to smoothly process personal information, the Promotion Agency entrusts personal information processing as follows.

  • Personal information processing task consignor information

    No	a contracting company	Representative	Purpose of consignment	Consignment Contents	Consignment period
    1	corporation Timonet Korea	Kwon Hoe Chan (070-8268-0549)	Korean food portal system operation support and maintenance	Integrated Membership Informations	2022.2.1.~ 12.31.

• ② When concluding a consignment contract, the Promotion Agency specifies matters related to responsibilities such as prohibition of processing of personal information for purposes other than the purpose of performing consignment work, measures to ensure safety, restrictions on re-entrustment, management and supervision of the consignee, and compensation for damages, in documents such as the contract, and ensures that the consignee is an individual. We supervise whether information is processed safely.
• ③ If the details of the entrusted work or the trustee changes, we will disclose it through this personal information processing policy without delay.

• ① The information subject may exercise his/her rights, such as requesting the Promotion Agency to view, correct, delete, or suspend processing of personal information, at any time.
• ② Rights under Paragraph 1 can be exercised through Article 10 (Request to view personal information) in writing, e-mail, facsimile (FAX), etc., and the Promotion Agency will take action without delay.
• ③ The exercise of rights under paragraph 1 may be done through an agent, such as the information subject's legal representative or a person authorized to do so. In this case, you must submit a power of attorney according to the format.
• ④ Requests to view and suspend personal information processing may limit the information subject's rights under the Personal Information Protection Act.
• 1. In any of the following cases, the reason may be notified to the information subject and viewing may be restricted or refused.
• - When viewing is prohibited or restricted by law
• - If there is a risk of harming another person's life or body, or if there is a risk of unfairly infringing on another person's property or other interests.
• - If it causes significant disruption to the Promotion Agency in carrying out any of the following tasks:
• 2. In any of the following cases, the request for suspension of processing may be rejected by the information subject.
• - When there are special provisions in the law or when it is unavoidable to comply with statutory obligations.
• - If there is a risk of harming another person's life or body, or if there is a risk of unfairly infringing on another person's property or other interests.
• - In cases where the Promotion Agency cannot perform its duties prescribed by other laws if it does not process personal information
• - In cases where it is difficult to fulfill the contract, such as not being able to provide the service agreed upon with the information subject if personal information is not processed, and the information subject does not clearly indicate his/her intention to terminate the contract
• ⑤ Requests for correction and deletion of personal information cannot be requested if the personal information is specified as a collection target in other laws and regulations.
• ⑥ The Agency verifies whether the person making the request, such as a request for viewing, a request for correction or deletion, or a request for suspension of processing, is the person or a legitimate agent in accordance with the information subject's rights.

• ① When personal information becomes unnecessary, such as when the personal information retention period has elapsed or the purpose of processing has been achieved, the Promotion Agency destroys the relevant personal information without delay.
• ② If personal information must continue to be preserved pursuant to other laws and regulations even though the personal information retention period agreed to by the information subject has elapsed or the purpose of processing has been achieved, the personal information (or personal information file) is stored in a separate database (DB) Move it to or store it in a different storage location to preserve it.
• ③ The procedures and methods for destroying personal information are as follows.
  • 1. Destruction procedure The Promotion Agency establishes a personal information destruction plan and destroys personal information (or personal information files) that must be destroyed. The Promotion Agency selects the personal information (or personal information file) that requires destruction, and the Promotion Agency destroys the personal information (or personal information file) with the approval of the person in charge of personal information protection. In addition, personal information whose retention period has expired or whose purpose has been achieved is destroyed in accordance with internal policies and other relevant laws.
  • 2. Method of destruction The Agency permanently deletes personal information recorded and stored in the form of electronic files using a method that cannot be technically restored so that the records cannot be reproduced, and personal information recorded and stored in paper documents is destroyed by shredding or incineration.

• ① The Agency is taking technical, managerial, and physical measures necessary to ensure the safety of personal information as follows.
  • 1. Establishment and implementation of an internal management plan: We have established and implemented an internal management plan for the safe processing of personal information.
  • 2. Minimization and training of personal information handlers: Only the number of people in charge of handling personal information are designated and managed, and training for safe management is provided to handlers.
  • 3. Restriction of access to personal information: Necessary measures are being taken to control access to personal information by granting, changing, and deleting access rights to the database system that processes personal information, and using an intrusion prevention system to prevent intrusion from outside. Unauthorized access is controlled.
  • 4. Storage of access records and prevention of forgery and alteration: Access records (logs) to the personal information processing system are stored and managed for at least one year, and security functions are used to prevent access records from being forged, altered, stolen or lost.
  • 5. Encryption of personal information: The information subject’s unique identification information and password are encrypted and managed. In addition, we apply separate security functions such as encrypting important data when storing and transmitting it.
  • 6. Technical measures against hacking, etc.: To prevent leakage and damage of personal information due to hacking or computer viruses, install a security program and conduct periodic updates/inspections, install the system in an area with controlled access from the outside, and maintain technical/physical security. is being monitored and blocked.
  • 7. Access control for unauthorized persons: We have a separate physical storage location for the personal information system that stores personal information, and we establish and operate access control procedures for this.
  • 8. Conducting regular self-inspections: To ensure stability related to the handling of personal information, we regularly conduct inspections to protect personal information.

• ① The Promotion Agency does not install or operate devices that automatically collect personal information, such as Internet access information files.

• ① The Promotion Agency is responsible for the overall management of personal information processing, and designates a personal information protection officer as follows to handle complaints and provide relief for damage from information subjects related to personal information processing.

  • Personal Information Protection Officer Guide

    Sortation	name	one's position	Phone number	email
    Director of Personal Information Protection	Choi Ye-jeong	Head of Management Planning Department	02-6320-8405	yjchoe@hansik.or.kr

• ② Information subjects may inquire about all personal information protection-related inquiries, complaint handling, damage relief, etc. that arise while using the Promotion Agency's services to the personal information protection manager and responsible department. The Agency will respond and process inquiries from information subjects without delay.

• ① Information subjects may request access to personal information to the departments below. The Agency will strive to promptly process requests for personal information access from information subjects.
  • ▶ Person who receives and processes requests to view personal information
    • Department Name: Information Technology Team
    • Contact person: Kim Hee-su
    • Contact: 02-6320-8481, hsoo1208@hansik.or.kr, Fax) 02-6320-8499
• ② In addition to the viewing request reception and processing department in Paragraph 1, the information subject can also request viewing of personal information through the Personal Information Protection Commission's 'Personal Information Protection Comprehensive Support Portal' website (www.privacy.go.kr). . Personal Information Protection Committee Personal Information Protection Comprehensive Support Portal → Personal Information Complaint → Request to view personal information, etc. (Real name authentication required through public i-PIN)

• ① Information subjects can inquire about damage relief and consultation regarding personal information infringement to the organizations below.
• <The organizations below are separate from the Promotion Agency. If you are dissatisfied with the Agency's own personal information complaint handling and damage relief results or need further assistance, please contact us>
• Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
  • - Responsibilities: Reporting personal information infringement, requesting consultation
  • - Website: privacy.kisa.or.kr
  • - Phone: 118
  • - Address: Personal Information Infringement Report Center, 3rd floor, 9 Jinheung-gil, Naju-si, Jeollanam-do (301-2, Bitgaram-dong) (58324)
• Personal Information Dispute Mediation Committee
  • - Responsibilities: Request for personal information dispute mediation, group dispute mediation (civil resolution)
  • - Website: www.kopico.go.kr
  • - Phone : 1833-6972
  • - Address: (03171) 4th floor, Seoul Government Complex, 209 Sejong-daero, Jongno-gu, Seoul
• Supreme Prosecutors' Office Cyber Crime Investigation Unit: 02-3480-3571 (www.spo.go.kr)
• National Police Agency Cyber Security Bureau: 182 (cyberbureau.police.go.kr)

• ① This personal information processing policy will be revised and applied from July 15, 2022.
• ② The previous personal information processing policy can be found below.

Shortcut to previous content