Article 1 (Purpose of Processing Personal Information, Categories of Personal Information Processed, and Retention Period)

The Korea Information Industry Association collects the minimum amount of personal information for the purpose of performing its tasks and handling related inquiries. The personal information items collected in the ICT-linked Project Internship program, the purpose of processing, and the retention period are as follows:

Article 2 (Provision of Personal Information to Third Parties)

The Federation of Korean Information Industries (FKII) processes personal information within the scope specified for collection and usage purposes, and it does not process or provide personal information to third parties without prior consent from the data subject, except in the following cases:
When separate consent is obtained from the data subject.
When there are special provisions in other laws.
When it is necessary to protect the life, body, or property interests of the data subject or a third party in cases where the data subject or their legal representative cannot express their intent or where prior consent cannot be obtained due to unknown addresses, etc.
When it is necessary for statistical compilation or academic research purposes, provided that the personal information is processed in a form that does not allow identification of any specific individual.
When it is necessary to perform tasks specified by other laws and failing to provide or utilize personal information for purposes beyond the original scope would prevent the performance of such tasks, subject to deliberation and resolution by the Protection Committee.
When it is necessary to provide personal information to foreign governments or international organizations for the execution of treaties or other international agreements.
When it is necessary for criminal investigations and the initiation or maintenance of public prosecution.
When it is necessary for the performance of judicial tasks by a court.
When it is necessary for the execution of punishments, care, or protective measures.

Article 3 (Destruction of Personal Information)

The Korea Information Industry Association shall destroy personal information without delay when the retention period has expired or the processing purpose has been achieved. However, in cases where preservation is required under other laws, the personal information will not be destroyed.
Personal information recorded and stored in electronic file formats will be destroyed in a manner that makes the records unrecoverable, while personal information recorded and stored on paper will be shredded.

Article 4 (Outsourcing of Personal Information Processing)

The Korea Information Industry Association may outsource personal information processing tasks to ensure smooth service provision, as follows:

The Federation of Korean Information Industries (FKII) includes in its outsourcing contracts, in accordance with the Personal Information Protection Act, stipulations regarding prohibiting personal information processing beyond the purpose of performing outsourced tasks, technical and managerial protection measures, restrictions on re-outsourcing, management and supervision of the contractor, compensation for damages, and other responsibilities. KIIA also supervises the contractors to ensure that personal information is safely handled. Should there be any changes to the contents of outsourced tasks or the contractors, KIIA will promptly disclose the information through this Personal Information Processing Policy.

Article 5 (Measures to Ensure the Safety of Personal Information)

The Korea Information Industry Association implements technical, managerial, and physical security measures necessary to ensure the safety of personal information, protecting against loss, theft, leakage, falsification, alteration, or destruction of personal information in compliance with the Personal Information Protection Act.
Managerial Measures: Establishment and enforcement of internal management plans, regular employee training, etc.
Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs.
Physical Measures: Access control for unauthorized persons.

Article 6 (Installation, Operation, and Rejection of Automated Data Collection Devices)

The Korea Information Industry Association uses 'cookies' to store and retrieve user information to understand website visit records. It does not use the information for purposes other than intended nor provide it to third parties.
Cookies are small pieces of data sent from the website's server (HTTP) to the user's computer browser, which may be stored on the user's hard disk.
Purpose of Cookie Use: Cookies are used to provide optimized information to users by understanding the visit and usage patterns of services and websites visited by users, popular search terms, and secure connections, among others.
Installation, Operation, and Rejection of Cookies: Cookie storage can be rejected through the settings in the browser (Tools > Internet Options > Privacy Menu).
Impact of Cookie Refusal: Refusing to store cookies may lead to difficulties in using personalized services.

Article 7 (Rights and Obligations of the Data Subject and Methods of Exercising Them)

Data subjects may request access, correction, deletion, or suspension of processing of their personal information from the Federation of Korean Information Industries (FKII) at any time through written request, telephone, e-mail, or fax. KIIA will promptly take action regarding such requests.
If a data subject requests correction or deletion of errors in their personal information, KIIA will neither use nor provide the relevant personal information until the correction or deletion is completed.
The rights of data subjects, such as requesting access and correction of personal information, may be exercised through a legal representative or an authorized agent of the data subject. In this case, a power of attorney form according to the format prescribed in Appendix 11 of the Personal Information Protection Act Enforcement Rules must be submitted.
Data subjects must not infringe upon the personal information and privacy of themselves or others by violating the Personal Information Protection Act or other related laws during their interactions with KIIA.

Article 8 (Personal Information Protection Officer)

KIIA appoints a Personal Information Protection Officer to oversee the handling of personal information, address data subject complaints, and manage any incidents of harm related to personal information processing. Personal Information Protection Officer
Junghyun Moon, Senior Executive (Tel: 02-2046-1401, Email: jasonmoon@fkii.org)
Personal Information Protection Manager
Seonyoung Lee, Senior Staff, Industry-Academia Cooperation Office, Internship Project Team (Tel: 02-2046-1468, Email: lsy@fkii.org)

Article 9 (Department for Receiving and Processing Requests for Access to Personal Information)

Requests for access to personal information under Article 35 of the Personal Information Protection Act may be directed to the following department:
Seonyoung Lee, Senior Staff, Industry-Academia Cooperation Office, Internship Project Team
(Tel: 02-2046-1468, Email: lsy@fkii.org)

Article 10 (Remedies for Data Subject's Infringement of Rights)

Data subjects may contact the following agencies for relief and consultation concerning personal information infringements. (These agencies are separate from KIIA.)
For relief from damages caused by personal information infringement or for consultation, data subjects may apply to the Personal Information Dispute Mediation Committee or the Personal Information Infringement Reporting Center at the Korea Internet & Security Agency.

Article 11 (Changes to the Privacy Policy)

This Privacy Policy is effective as of March 10, 2023. Previous versions of the Privacy Policy can be viewed below:
Previous Privacy Policy Versions:
Effective from August 19, 2019, to May 11, 2021 [View]
Effective from May 12, 2021, to August 8, 2022 [View]
Effective from August 9, 2022, to March 10, 2023 [View]