2019년 6월 8일 이전방침

Personal information Processing Policy

June 1, 2018 ~ June 7, 2019

The Korean Food Promotion Agency (hereinafter referred to as the "Agency") has the following treatment policies to protect users' personal information and rights and to facilitate handling of users' grievances related to personal information in accordance with the Personal Information Protection Act. Privacy policies may change in accordance with changes in government laws and guidelines and changes in the policies of services provided by the Agency. Users should check frequently when visiting the website.

Article 1 (Purpose, Item, and Retention Period of Personal Information)

① The agency handles personal information for the following purposes. The processed personal information will not be used for purposes other than the following, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent.
- 1. Integrated membership registration and management of the Korean Food Promotion Agency
- - Personal information is processed for the purpose of confirming membership intention, identifying and certifying oneself according to the provision of membership service, maintaining and managing membership status, preventing fraudulent use of service, confirming the consent of legal representatives when collecting personal information for children under the age of 14, various notices and notices, grievance handling, and preserving records for dispute mediation.
- 2. Handling of civil complaints
- - Process personal information for the purpose of identifying the complainant, checking the complaint, contacting and notifying the results of the processing, etc.
② The Agency shall process and retain personal information within the period of holding and using personal information under the Act or the period of holding and using personal information agreed upon when collecting personal information from the data subject.
③ The processing and retention periods of each personal information are as follows.

Personal Information Processing and Retention Period Guide
Number	Personal Information File Name	Processing basis	Purpose of processing	Personal information item		Period of retention period	How
Number	Personal Information File Name	Processing basis	Purpose of processing	Essential	Choice	Period of retention period	How
1	Integrated member information	Consent of data subject	Integrated service information provision and membership classification	Name, ID, password, email	Contact (cell phone), Occupation	Until membership is withdrawn	Online
2	Information on Korean food cooking professionals (educator, instructor, job seeker)	Consent of data subject	Trainee management, completion confirmation	Name (Korean, English), home address, email, mobile phone (contact), date of birth, gender	Contact (house, company), photography, educational background, language, career qualification and license, award details, capital stock, sales	10 years	online/offline

※ If there is no login record for more than 1 year, the dormant account will be converted, and after switching to the dormant account, the integrated membership information of members who do not have a login record for more than 1 year will be deleted.
※ For the disclosure of other personal information file registrations, please use the Comprehensive Personal Information Protection Support Portal of the Ministry of Public Administration and Security (www.privacy.go.kr ) → Complaints about personal information → Request for access to personal information → Search for personal information file list menu.

Article 2 (consignment of personal information processing)

① In order to facilitate the processing of personal information, the Agency is entrusted with the processing of personal information as follows.

Personal Information Processing and Retention Period Guide
Number	Personal Information File Name	Content details of entrusted work	Consignment period	Status of trustees
Number	Personal Information File Name	Content details of entrusted work	Consignment period	Company name	Phone call
1	Integrated member information	System Integrated Operation and Maintenance	~2019.12.31	(주)정원엔시스	02-6300-2093
2	Information on Korean cooking professionals (educator, job seeker, instructor)	System Integrated Operation and Maintenance	~2019.12.31	(주)정원엔시스	02-6300-2093

② In accordance with Article 25 of the Personal Information Protection Act, the agency shall specify in the contract documents the responsibilities, such as prohibition of processing personal information other than the purpose of performing the entrusted work, technical and administrative protection measures, restriction of re-entrustment, management and supervision of the trustee, and compensation for damages, The trustee is overseeing the safe handling of personal information.
③ If the contents of the consignment work or the trustee changes, we will disclose it through this personal information processing policy without delay.

Article 3 (rights and obligations of data subjects and methods of exercising them)

① The data subject may exercise the following rights as a personal data subject.
1. The data subject may exercise the right to view, correct, delete, and request suspension of processing at any time to the Korean Food Promotion Agency.
2. The exercise of rights under paragraph 1 may be made to the Korean Food Promotion Agency in writing, e-mail, and fax in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and the agency will take action without delay.
3. The exercise of rights under paragraph 1 may be carried out through an agent, such as a legal representative of the data subject or a person who has been delegated. In this case, you must submit a power of attorney in accordance with attached Form 11 of the Enforcement Regulations of the Personal Information Protection Act.
4. Requests for the suspension of reading and processing of personal information may limit the rights of the data subject under Articles 35 (5) and 37 (2) of the Personal Information Protection Act.
5. A request for correction and deletion of personal information cannot be requested to be deleted if the personal information is specified as a collection target in other laws.
6. In accordance with the rights of the data subject, the Agency will confirm whether the person who made the request, such as request for access, request for correction and deletion, or request for suspension of processing, is the person who made the request or a legitimate agent.

Article 4 (disposal of personal information)

① In principle, if the purpose of processing personal information is achieved, the agency shall destroy the personal information without delay. The procedure, deadline, and method of destruction are as follows.
② The procedure and method of destroying personal information are as follows.
Discard procedure: Information entered by the user will be stored for a certain period of time or immediately destroyed in accordance with internal policies and other relevant laws after the purpose is achieved.
Detection Method: Information in the form of electronic files uses a technical method that does not allow records to be played back. The personal information printed on the paper is destroyed by grinding with a shredder.

Article 5 (installation, operation, and rejection of automatic personal information collection devices)

① To provide individual customized services, the Agency uses "cookies" that store usage information and call it up from time to time.
Cookies are a small amount of information sent by the server used to run the website to the user's computer browser and are sometimes stored on a hard disk on the user's PC computer.
Purpose of using cookies: It is used to provide optimized information to users by identifying the type of visit and use of each service and website visited by the user, popular search terms, security access, etc.
You can refuse to save cookies by setting options in the Tools at the top of the web browser>Internet Options>Personal Information menu. Refusing to save cookies can cause difficulty in using customized services.

Article 6 (Personal Information Protection Officer)

① The agency is responsible for the overall handling of personal information, The person in charge of personal information protection is designated as follows for the handling of complaints and damage relief of the data subject related to the processing of personal information.
▶ Privacy Officer
Success: Woo Seung Wan
Job: Acting Director
Level: Management Planning Department
Contact: 02-6300-2083
※It is connected to the department in charge of personal information protection department.
▶ Department in charge of personal information protection
Department name: Management Planning Department
Manager: Kim Eun-joo
Contact: 02-6300-2069
② The data subject may contact the person in charge of personal information protection and the department in charge of personal information protection for all inquiries, complaints, and damage relief arising from using the service (or business) of the Agency. The agency will respond and process the data subject's inquiries without delay.

Article 7 (safety measure of personal information)

① The data subject can claim damages from the agency if the agency suffers damages for violating the Personal Information Protection Act. In this case, the Agency will not be exempted from responsibility unless it proves that there is no intention or negligence.
② In accordance with Article 29 of the Personal Information Protection Act, the Agency is taking the following technical/managing and physical measures necessary to ensure safety.
- - Establishment and implementation of internal management plans
- ·The Agency for Promotion establishes and implements the Personal Information Internal Management Plan.
- - Minimize and train employees handling personal information
- We designate employees who handle personal information and minimize them to those in charge, and provide training to comply with relevant regulations and guidelines.
- - Technical countermeasures against hacking, etc.
- In order to prevent personal information leakage and damage caused by hacking or computer viruses, security programs are installed, periodic updates and inspections are conducted, systems are installed in areas where access is controlled from the outside, and technical and physical monitoring and blocking are conducted.
- - Encrypting personal information
- The password of the user's personal information is encrypted, stored, and managed.
- - Storage of access records and prevention of forgery
- ·We keep and manage records of access to the personal information processing system for at least 6 months, and use security functions to prevent forgery, theft, and loss of access records.
- - Restrictions on Access to Personal Information
- We take necessary measures to control access to personal information by granting, changing, and canceling access to the database system that processes personal information, and control unauthorized access from outside using an intrusion prevention system.
- - Using locks for document security
- We store documents containing personal information, auxiliary storage media, etc. in a secure place with locks.
- - Access control for unauthorized persons
- We have a separate physical storage place where personal information is stored, and we establish and operate access control procedures for this.

Article 8 (request access to personal information)

① The data subject can request access to personal information through the 'Comprehensive Personal Information Protection Portal' website (www.privacy.go.kr) of the Ministry of Public Administration and Security.
In addition to Paragraph 1 of you may request the department that accepts and processes requests for access to personal information.
▶ Department for receiving and processing requests for access to personal information : Management Planning Department

Article 9 (how to remedy infringement of rights)

The following institutions are separate from the Korean Food Promotion Agency As an institution, please contact us if you are not satisfied with the results of the agency's handling of personal information complaints and damage relief or need more detailed help.
1. Personal Information Infringement Reporting Center: 118 (privacy.kisa.or.kr)
2. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
3. Cybercrime Investigation Team of the Supreme Prosecutors' Office: 02-3480-3573 (www.spo.go.kr)
4. National Police Agency Cyber Safety Bureau: 182 (http://cyberbureau.police.go.kr)