본문 바로 가기

FaceBook Instagram YouTube Tel Mail

한국어 English

로그인

Login Sign Up

Privacy Policy

Privacy Policy

2. Privacy Policy

Personal information Processing Policy

April 18, 2024 ~ Now

The Korean Food Promotion Institute (hereinafter referred to as the “KFPI”) establishes and discloses the personal information processing policy as follows in order to protect the personal information of information subjects and to quickly and smoothly handle related complaints.

Table of Contents

Article 1
(Purpose of processing personal information)

Article 2
(Processing and retention period of personal information)

Article 3
(provision of personal information to a third party)

Article 4
(Consignment of personal information processing)

Article 5
(destruction of personal information)

Article 6
(Rights, duties, and methods of exercise of data subjects and legal representatives)

Article 7
(Measures to ensure the safety of personal information)

Article 8
(Matters concerning the installation, operation, and rejection of automatic personal information collection devices)

Article 9
(a person information protection officer)

Article 10
(Requesting access to personal information)

Article 11
(Remedy for infringement of rights and interests)

Article 12
(Results of personal information management level diagnosis)

Article 13
(Installation and operation of video information processing equipment)

Article 14
(Change of Personal Information Processing Policy)

[Shortcut to previous content]

Article 1 (Purpose of processing personal information)

• ① KFPI processes personal information for the following purposes.
  • 1. KFPI integrated membership registration and management
  • - We process personal information for the following purposes. Confirmation of intention to become a member, Identification and verification of identity in accordance with the provision of membership services, Maintenance and management of membership, Prevention of illegal use of services, Confirmation of legal representative's consent when collecting personal information of children under 14 years of age, Various notices Handling of grievances, Dispute mediation, etc.
  • - Personal information is processed for the purposes of verifying the identity of the complainant, confirming the complaint, contacting and notifying for factual investigation, and notifying the result of processing.
  • ※ The above is for general processing purposes. Please refer to Article 2, Paragraph 2 for detailed purposes.
• ② The personal information being processed is not used for any purpose other than the following, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent from the data subject.

Article 2(Processing and retention period of personal information)

• ① KFPI processes and retains personal information within the personal information retention and use period pursuant to laws and regulations or within the personal information retention and use period agreed to when collecting personal information from the information subject.
• ② The processing and retention period of each personal information is as follows.

Information table for processing and retention of personal information

No	Personal Information File Name	Processing basis	Purpose of processing	Personal information item		Period of retention period	Way
				Essential	Choice
1	Integrated Member Information	Consent of the data subject	Integrated service information provision and membership classification	Name, email	Home address, contact information (mobile phone)	until the withdrawal of membership	Online
2	List of Korean food portal reservations	Consent of the data subject	Manage Bookers	Name, email, contact information (mobile phone), age range, gender, nationality	-	2years	Online
3	Consent to use portrait rights, copyrights, and personal information	Consent of the data subject	video production	Name, contact information (mobile phone), photo, video	-	10years	Offline
4	Magazine Subscriber email address	Consent of the data subject	Magazine Distribution	Name, email, nationality, gender, age range	-	5years	Online
5	List of participants in the young chef training curriculum support project	Consent of the data subject	Education business operation, follow-up management and information provision, job search information provision	Name, date of birth, contact information (mobile phone), email, education, career, similar achievements	-	5years	Online
6	Korean food professional training information	Consent of the data subject	Business operation, follow-up management and information provision	Name, email, contact information (cell phone), date of birth, home address, affiliation, education, qualifications, career, awards	-	5years	Offline
7	List of Korean food research academic seminar participants	Consent of the data subject	Seminar Notice	Name, email, contact information (mobile phone), affiliation, position	-	1year	Online
8	Information on the person concluding the contract	Consent of information subject, Article 116 of the Enforcement Decree of the Act on Contracts to Which the State is a Party	Processing of contract conclusion work	Name, date of birth, contact information (cell phone), address, resident registration number, email	-	Immediate destruction when the purpose is achieved	Offline
9	Employee personnel information	Labor Standards Act Article 41 and Enforcement Decree Article 20, Employment Insurance Act Enforcement Decree Article 145	Handles internal human resources work	Name, date of birth, home contact information, home address, contact information (cell phone), email, resident registration number, emergency contact information, family information, education, career, qualifications, military service, access information	-	Immediate destruction when the purpose is achieved	Online
10	Hansik space docent information	Consent of information subject	Trainee selection and curriculum operation, 1365 volunteer registration and management, docent activity support and activity fee payment	Name, date of birth, home address, contact information (cell phone), email, affiliation, qualifications, education, career, awards	-	2years	Offline
11	Reporter List	Consent of information subject	Management of KFPI reporters entering and exiting	Name, affiliation, email	-	5years	Offline

• For detailed disclosure of the KFPI's personal information file registration information, please use the Personal Information Protection Commission's personal information portal (www.privacy.go.kr) → Personal service → Request to view personal information, etc. → Personal information file search menu.
• ※ After converting to a dormant account, the integrated membership information of members who have no log-in record for more than one year will be deleted.

Article 3 (Providing Personal Information to a Third Party)

• ① In principle, KFPI processes personal information of information subjects within the scope specified for the purpose of collection and use. Except in the following cases, information will not be processed beyond the scope of its original purpose or provided to a third party without the prior consent of the information subject. However, items 4 through 8 are limited to public institutions.
  • 1. When separate consent is obtained from the information subject
  • 2. When there are special provisions in other laws
  • 3. When it is clearly deemed necessary for the urgent benefit of life, body, or property of the information subject or a third party.
  • 4. If personal information is used for purposes other than the intended purpose or does not provide it to a third party, it is impossible to perform the duties prescribed by other laws and the case has been reviewed and resolved by the Protection Committee.
  • 5. When necessary to provide information to foreign governments or international organizations for the implementation of treaties and other international agreements.
  • 6. When necessary for investigation of crime and filing and maintenance of indictment
  • 7. When necessary to carry out the court's judicial duties
  • 8. When necessary for the execution of punishment, custody, and protective measures.
  • 9. In case of urgent need for public safety and security, such as public health
• ② If kfpi uses personal information for purposes other than the intended purpose or provides it to a third party pursuant to subparagraphs 1 to 9 above, We will disclose it on our website, etc. in accordance with the Ordinance of the Personal Information Protection Commission.
• ③ KFPI provides personal information to third parties as follows.

Shortcut to third party notice bulletin board of personal information

Article 4 (Consignment of Processing of Personal Information)

• ① In order to facilitate the processing of personal information, KFPI　has entrusted the processing of personal information as follows.

  • Personal information processing service consignor information table

    No	a contracting company	Representative	Purpose of consignment	Consignment Contents	Consignment period
    1	corporation Timonet Korea	Kwon Hoe Chan (070-8268-0549)	Korean food portal system operation support and maintenance	Integrated Membership Informations	2024.2.1.~ 12.31.
    2	(Incorporated Association) History and Culture Contents Research Institute	Kang Jin Gap	Oral life history research, recipe research	Narrator information	2023.5.4.~11.30.
    3	KPR	Shin Seong In	Send newsletter email	Subscribers to Hansik Magazine	2023.5.1.~2024.4.30
    			Press Release Media Distribution	Reporter List

• ② When concluding a consignment contract, KFPI specifies the following information in documents such as contracts. Matters related to responsibilities such as prohibition of processing of personal information other than for the purpose of performing consignment work, measures to ensure safety, restrictions on re-entrustment, management and supervision of the trustee, and compensation for damages. We also supervise whether the trustee handles personal information securely.
• ③ If the details of the consignment work or the trustee changes, we will disclose it through this personal information processing policy without delays.
• ④ As a result of inspecting the management status of each 15 items of the checklist targeting personal information trustees, the management level was rated ‘very good＇.

Article 5 (Destruction of Personal Information)

• ① KFPI destroys the personal information without delay when the personal information becomes unnecessary, such as when the personal information retention period has passed or the purpose of processing has been achieved.
• ② If the personal information retention period agreed by the data subject has elapsed or the purpose of processing has been achieved, the personal information (or personal information file) should be transferred to a separate database (DB) or stored at different storage locations.
• ③ The procedure and method for destroying personal information are as follows.
  • 1. Destruction procedure
    KFPI establishes a personal information destruction plan and destroys personal information (or personal information files) that must be destroyed. KFPI selects the personal information (or personal information file) that requires destruction, and KFPI destroys the personal information (or personal information file) with the approval of the personal information protection manager. In addition, personal information whose retention period has expired or whose purpose has been achieved is destroyed in accordance with internal policies and other relevant laws.
  • 2. Method of destruction
    KFPI permanently deletes personal information recorded and stored in the form of electronic files using a technically unrecoverable method so that the records cannot be reproduced, and personal information recorded and stored in paper documents is destroyed by shredding or incineration.

Article 6 (Rights, Duties, and Methods of Exercise of Data Subjects and Legal Representatives)

• ① The information subject may exercise the rights to view, correct, delete, or suspend processing of personal information at any time against KFPI.
  • ※ Requests to view personal information about children under the age of 14 must be made directly by the child's legal representative. If the information subject is a minor over the age of 14, the minor may exercise his or her rights or appoint a legal representative regarding the personal information of the information subject. You can exercise your rights through
• ② Rights pursuant to Paragraph 1 may be exercised through Article 10 (Request to view personal information) in writing, e-mail, facsimile (FAX), etc., and KFPI will take action without delay.
• ③ The exercise of rights under paragraph 1 may be done through an agent, such as the information subject's legal representative or a person authorized to do so. In this case, you must submit a power of attorney according to the format.
• ④ Requests to view and suspend processing of personal information may limit the rights of the information subject under the Personal Information Protection Act.
  • 1. In any of the following cases, the reason may be notified to the information subject and viewing may be restricted or refused.
    • - When viewing is prohibited or restricted by law
    • - If there is a risk of harming another person's life or body, or if there is a risk of unfairly infringing on another person's property or other interests.
    • - If it causes significant disruption to KFPI in carrying out any of the following tasks
  • 2. In any of the following cases, the request for suspension of processing may be rejected by the information subject.
    • - When there are special provisions in the law or when it is unavoidable to comply with statutory obligations.
    • - If there is a risk of harming another person's life or body, or if there is a risk of unfairly infringing on another person's property or other interests.
    • - If KFPI does not process personal information, it cannot perform its duties as prescribed by other laws.
    • - If it is difficult to fulfill the contract, such as not being able to provide the service agreed upon with the information subject if personal information is not processed, and the information subject does not clearly indicate his/her intention to terminate the contract.
• ⑤ Requests for correction and deletion of personal information cannot be requested if the personal information is specified as a collection target in other laws and regulations.
• ⑥ KFPI verifies whether the person making the request, such as a request for viewing, a request for correction or deletion, or a request for suspension of processing, is the person or a legitimate agent in accordance with the information subject's rights.

Article 7 (Measures to ensure the safety of personal information)

• ① KFPI is taking technical, managerial, and physical measures necessary to ensure the safety of personal information as follows.
  • 1. Establishing and implementing an internal management plan: Establishing and implementing an internal management plan for the safe processing of personal information.
  • 2. Minimization and education of personal information handlers: The person in charge of handling personal information is designated and managed only for the necessary personnel, and education for safe management is provided for handlers.
  • 3. Restrictions on Access to Personal Information: We take necessary measures to control access to personal information by granting, changing, and canceling access to database systems that process personal information, and use intrusion prevention systems to control unauthorized access from outside.
  • 4. Keeping and preventing forgery of access records: We keep and manage records (logs) accessed to the personal information processing system for at least a year, and use security functions to prevent forgery, theft, and loss of access records.
  • 5. Encrypting personal information: The data subject's unique identification information and password are encrypted and managed. It also has separate security features, such as encrypting and using sensitive data when stored and transferred.
  • 6. Technical countermeasures against hacking: In order to prevent leakage and damage of personal information by hacking or com puter viruses, security programs are installed, periodic updates/inspection is conducted, systems are installed in areas where access is controlled from the outside, and technical/physical monitoring and blocking are provided.
  • 7. Access control for unauthorized persons: A separate physical storage place for the personal information system that stores personal information is established and operated with access control procedures for access control are established and operated.
  • 8. Conducting regular self-inspection: In order to secure stability related to the handling of personal information, we conduct regular inspections to protect personal information.

Article 8 (Matters concerning the installation, operation, and refusal of automatic personal information collection devices)

• ① KFPI does not install or operate devices that automatically collect personal information such as Internet access information files.

Article 9 (Personal Information Protection Officer)

• ① KFPI is responsible for overall management of personal information processing, and designates a personal information protection officer as follows to handle complaints and provide relief for damage from information subjects related to personal information processing.

  • Personal Information Protection Officer

    Sortation	name	one's position	Phone number	e-mail
    Personal information protection officer	Oh Young ho	Team leader of the Information&Technology Team	02-6320-8480	koreanfood@hansik.or.kr

• ② Information subjects can contact the personal information protection manager and the department in charge regarding all personal information protection-related inquiries, complaint handling, damage relief, etc. that arise while using KFPI's services. KFPI will respond and process inquiries from information subjects without delay.

Article 10 (Request for Access to Personal Information)

• ① Information subjects may request access to personal information to the departments below. KFPI will strive to promptly process the information subject's request to view personal information.
  • ▶ Receiver/processor of request for access to personal information
    • Department name: Information&Technology Team
    • Manager: Kim Hee Soo
    • Contact information : 02-6320-8481, hsoo1208@hansik.or.kr, Fax) 02-6320-8499
• ② In addition to the department receiving and processing the request for access under paragraph 1, the data subject can request access to personal information through the Personal Information Protection Comprehensive Support Portal website of the Personal Information Protection Committee (www.privacy.go.kr) . Personal Information Protection Committee Personal information portal → Personal service → Request to view personal information, etc. → Request to view personal information, etc. (real name authentication required)


Article 11 (Remedy for infringement of rights and interests)

• ① The data subject may ask the following institutions for damage relief and counseling for personal information infringement.
• <The organizations below are separate from KFPI. If you are not satisfied with the KFPI's own personal information complaint handling and damage relief results, or if you need further assistance, please contact us>
  • Personal Information Infringement Reporting Center (operation of Korea Internet & Security Agency)
    • - Tasks in charge: Report personal information infringement, request for counseling
    • - Homepage : privacy.kisa.or.kr
    • - Tel : 118
    • - Address: (58324) Personal Information Infringement Reporting Center, 3rd floor, Jinheung-gil, Naju-si, Jeollanam-do (301-2 Bitgaram-dong)
  • Personal Information Dispute Mediation Committee
    • - Tasks in charge: Application for dispute mediation of personal information, collective dispute mediation (civil resolution)
    • - Homepage : www.kopico.go.kr
    • - Tel: 1833-6972
    • - Address: (03171) 4th floor of Seoul Government Complex, 209 Sejong-daero, Jongno-gu, Seoul, Republic of Korea
  • Cybercrime Investigation Team of the Supreme Prosecutors's Office : 02-3480-3571 (www.spo.go.kr)
  • National Police Agency Cyber Security Department : 182 (ecrm.police.go.kr)


Article 12 (Results of personal information management level diagnosis)

• ① In order to safely manage the personal information of information subjects, the Korean Food Promotion Institute receives an “assessment of the level of personal information protection of public institutions” conducted by the Personal Information Protection Committee every year in accordance with Article 11-2 of the Personal Information Protection Act.
• ② The Korean Food Promotion Institute obtained an ‘A’ grade as a result of the 2023 personal information management level diagnosis evaluation.
  • ※ S grade: 90 points or more, A: 80 points or more, B: 70 points or more, C: 60 points or more, D: 60 points or less
  • ※ Current status for the past 3 years: ('21) Good → ('22) S → ('23) A
  • * Before 2022, “Good” is the highest rating



Article 13 (Installation and Operation of Video Information Processing Devices)

• ① We have established and are operating a separate management policy for image information processing devices.
Shortcut to the bulletin board for the operation and management policy of video information processing devices


Article 14 (Change of Personal Information Processing Policy)

• ① This personal information processing policy will be revised and applied from April 18, 2024.
• ② The previous Personal Information Processing Policy can be found below.
Shortcut to previous content