Privacy Policy
The Youth Path Agency protects the personal information of data subjects in accordance with
Article 30 of the Personal Information Protection Act.
In order to promptly and smoothly handle complaints related to this matter,
we have established and disclosed the following personal information processing policy.
The corporation will legally and appropriately handle personal information collected, retained, and processed in accordance with legal provisions to ensure the proper performance of its business and protect the rights and interests of data subjects. Furthermore, the corporation respects users' rights, including the right to request access to and correction of personal information held by the corporation, as stipulated by relevant laws and regulations. Please note that this personal information processing policy applies to all administrative affairs.
Article 1. General Provisions
Personal information refers to information relating to a living individual that makes it possible to identify the individual by their name, resident registration number, images, etc. (including information that can be easily combined with other information to identify a specific individual even if that information alone does not identify the individual).
Youth Path Agency (hereinafter "the Organization") values the protection of users' personal information and complies with relevant laws, including the Personal Information Protection Act. Through this Privacy Policy, we inform you of the purposes and methods for which the personal information you provide is used and the efforts we make to protect it. The Organization ensures that users can easily access this policy at any time by continuously publishing it on the official website. In the event of significant changes to this policy, the Organization will notify users of the reasons and details of the changes through the website before they take effect.
Article 2. Personal Information Collected
1) Items Collected Access to website content does not require a separate registration process. However, the Organization collects limited personal information for the following specific services:
-
General Operations: Name, date of birth, contact information, email, address.
-
Membership Operations: Name, date of birth, contact information, email, address, affiliation, position, withdrawal bank, account holder name, account number.
-
Recruitment Operations: Name, address, phone number, date of birth, guardianship status, bankruptcy status, criminal record/history, and expiration of suspension periods.
2) Collection Method Official website, Google Docs, written application forms, telephone consultations, email, etc.
Article 3. Purpose of Collection and Use
-
Service Provision: Identity verification for membership, issuance of certificates, handling spam complaints, consultations, and email inquiries.
-
Complaint Handling: Processing requests for access, correction, deletion, or suspension of personal information; reporting and handling information leakage or infringement.
-
Projects & Programs: Personal identification for projects, event entries, surveys, program applications, and attendance management.
-
Service Improvement: Development of new projects and specialized services.
-
Donation Management: Provision and management of donation services.
Article 4. Sharing and Provision of Personal Information
The Organization does not, in principle, provide users' personal information to third parties, except in the following cases:
-
When the user gives prior consent.
-
When requested by law enforcement agencies in accordance with legal procedures for investigation purposes.
Article 5. Retention and Use Period
The Organization destroys personal information without delay once the purpose of collection and use is achieved. However, certain information is retained for the following periods:
1) Based on Internal Policy
-
Event/Service Records: 1 year from consent (to prevent fraudulent use and confirm delivery).
-
HR/Recruitment Records: 3 years (for payroll, settlements, and certificates).
-
Membership Records: 5 years (for service provision and management).
2) Based on Relevant Laws
-
Donation Receipts: 5 years (Corporate Tax Act).
-
Consumer Complaints/Disputes: 3 years (Act on Consumer Protection in Electronic Commerce).
-
Website Visit Records (Log data): 3 months (Protection of Communications Secrets Act).
Article 6. Destruction Procedures and Methods
-
Procedure: Information is stored for a certain period according to internal policies and laws before being destroyed.
-
Method: Electronic files are deleted using technical methods that prevent recovery. Paper documents are shredded or incinerated.
Article 7. Provision of Personal Information to Third Parties
The Organization does not provide personal information to third parties without consent, except when:
-
Separate consent is obtained.
-
Required by special legal provisions or to comply with legal obligations.
-
Necessary for the life, physical safety, or property interests of the subject when prior consent cannot be obtained.
-
Provided in a form that cannot identify specific individuals for statistics or academic research.
Article 8. Outsourcing (Delegation) of Personal Information Processing
The Organization does not outsource personal information processing without consent. If outsourced, it is done in accordance with Article 26 of the Personal Information Protection Act, and details (tasks and trustees) are posted on the website.
Article 9. Rights of Users and Legal Representatives
-
Users and legal representatives (for children under 14) may access or correct their personal information at any time.
-
Requests for access, correction, or deletion can be made via email to the Privacy Officer.
-
If a correction is requested, the information will not be used or provided until the correction is complete.
-
Rights may be exercised through a representative with a valid power of attorney.
Article 10. Automatic Collection of Personal Information (Cookies)
The Organization uses 'cookies' to save and retrieve user information.
-
Purpose: To analyze visit frequency, duration, and preferences for service improvement and targeted information.
-
Rejection: Users can refuse cookie installation through browser settings (e.g., Tools > Internet Options > Privacy). However, some services requiring login may be restricted.
Article 11. Security Measures
-
Encryption: Personal information is stored in an encrypted format. Vital documents are kept in secure physical facilities.
-
Technical Measures: Regular backups and the latest anti-virus software are used to prevent hacking or leaks.
-
Training: Only designated staff handle personal information, and they receive regular security training.
Article 12. Privacy Officer and Contact Information
The Organization has designated officers to protect personal information and handle grievances.
-
Privacy Protection Officer: Secretary General
-
Privacy Manager: Strategic Planning Team Leader
-
Email: info@k-youthpath.org
Remedies for Infringement: For further reports or consultations, contact:
-
Privacy Infringement Call Center: (KISA) privacy.kisa.or.kr / Dial 118
-
Personal Information Dispute Mediation Committee: privacy.kisa.or.kr / Dial 118
-
Supreme Prosecutors' Office Cybercrime Investigation: 02-3480-3573 / www.spo.go.kr
-
National Police Agency Cyber Bureau: 1566-0112 / www.netan.go.kr
Article 13. Disclosure and Changes to Privacy Policy
This policy is established/revised on January 5, 2024. Any additions or deletions due to changes in law or security technology will be notified on the website at least 7 days before the changes take effect.
