Privacy Policy

Effective Date: June 26, 2026

Korea Institute for Data, Information, and Society Social Cooperative, hereinafter referred to as the “Institute,” establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act in order to protect the personal information of data subjects and to handle related complaints promptly and smoothly.

Article 1. Purpose of Processing Personal Information

The Institute processes personal information for the following purposes. Personal information processed by the Institute will not be used for purposes other than those stated below. If the purpose of use changes, the Institute will take necessary measures in accordance with applicable laws and regulations.

1. Handling Inquiries and Partnership Proposals

The Institute processes personal information to respond to inquiries, partnership proposals, business-related requests, and other civil matters submitted through the website. This includes verifying the identity of the inquirer, reviewing the inquiry, contacting the inquirer, providing notifications, and informing them of the results.

2. Registration and Operation of Events, Education, and Programs

The Institute processes personal information to receive and manage applications for education programs, events, seminars, forums, contests, programs, and other projects. This includes verifying applicants, providing schedules and results, managing participants, conducting satisfaction surveys, and providing follow-up information.

3. Newsletters and Institute Updates

When a data subject separately consents to receive such communications, the Institute processes personal information to provide updates on research reports, events, education, projects, programs, and other Institute news.

4. Website Operation and Service Improvement

The Institute may process access records and cookie information generated during website use for website operation, security maintenance, error response, service quality improvement, access statistics analysis, and user environment improvement.

Article 2. Processing and Retention Period of Personal Information

① The Institute processes and retains personal information within the retention and use period prescribed by law or within the period agreed upon by the data subject when the personal information is collected.

② The processing and retention periods for each category of personal information are as follows.

1. Inquiries and Partnership Proposals

Retention Period: One year from the date the inquiry or partnership proposal is completed.

2. Event, Education, and Program Applications

Retention Period: Three years from the end date of the relevant event, education program, or program.

3. Newsletter and Updates Subscription

Retention Period: Until consent is withdrawn or the purpose of processing is achieved.

4. Information Generated During Website Use

Retention Period: Processed and destroyed in accordance with applicable laws or the retention standards of the website operation service provider.

The Institute does not provide membership registration, online payment, product sales, delivery, or direct donation payment services through its website, and does not directly collect or process payment information such as credit card numbers or bank account details.

Article 3. Provision of Personal Information to Third Parties

① The Institute processes personal information only within the scope stated in Article 1 and, in principle, does not provide personal information to third parties.

② However, personal information may be provided in accordance with applicable laws in the following cases.

When the data subject has given prior consent.
When there is a special provision under law or when necessary to comply with legal obligations.
When requested by an investigative or supervisory authority through procedures prescribed by law.

Article 4. Outsourcing of Personal Information Processing

The Institute may outsource tasks such as website hosting, form operation, email delivery, and informational message delivery to external service providers for smooth website operation, inquiry and application reception, and event or program guidance.

When outsourcing personal information processing, the Institute specifies in contracts or related documents matters such as prohibition of processing personal information for purposes other than the outsourced work, technical and managerial safeguards, restrictions on re-outsourcing, management and supervision of the trustee, and liability for damages, in accordance with applicable privacy laws.

If the details of outsourced work or the trustee change, the Institute will disclose such changes through this Privacy Policy.

Article 5. Rights of Data Subjects and How to Exercise Them

① Data subjects may exercise the following privacy-related rights against the Institute at any time.

Request to access personal information.
Request correction or deletion of personal information.
Request suspension of personal information processing.
Withdraw consent to the collection and use of personal information.
Unsubscribe from newsletters and informational communications.

② The rights under Paragraph 1 may be exercised through the inquiry function on the website or through other methods separately provided by the Institute. The Institute will take action without delay.

③ If a data subject requests correction or deletion of errors in their personal information, the Institute will not use or provide the relevant personal information until the correction or deletion is completed.

④ The rights under Paragraph 1 may be exercised through a legal representative or an authorized agent.

⑤ Data subjects must not infringe upon the personal information or privacy of themselves or others in violation of applicable laws.

Article 6. Categories of Personal Information Processed

The Institute may process the following categories of personal information.

1. Inquiries and Partnership Proposals

Required : Name, email address, inquiry details

Optional : Affiliation or institution, contact number, area of interest

2. Event, Education, and Program Applications

Required : Name, contact number, email address

Optional : Affiliation or school, position, area of interest, application details, and other items necessary for program operation

3. Newsletter and Updates Subscription

Required : Email address

Optional : Name, affiliation or institution, area of interest

4. Information That May Be Automatically Collected During Website Use

Access logs, IP address, cookies, browser information, device information, service usage records, and access date and time

Article 7. Destruction of Personal Information

① When personal information becomes unnecessary due to the expiration of the retention period, achievement of the processing purpose, or other reasons, the Institute destroys the relevant personal information without delay.

② If personal information must continue to be preserved under other laws even after the retention period agreed to by the data subject has expired or the processing purpose has been achieved, the Institute will transfer such personal information to a separate database or store it in a different location.

③ The procedure and method for destroying personal information are as follows.

1. Destruction Procedure

The Institute selects personal information subject to destruction and destroys it in accordance with internal procedures.

2. Destruction Method

Personal information recorded or stored in electronic file format is deleted in a way that prevents recovery, and personal information recorded or stored in paper documents is shredded or incinerated.

Article 8. Measures to Ensure the Security of Personal Information

The Institute implements the following measures to ensure the security of personal information.

Managerial Measures : Establishment of internal management plans for personal information processing, management of personal information handlers, regular inspections, and education.
Technical Measures : Management of access rights to personal information processing systems, access control, password management, security program operation, access log management, and protective measures during personal information transmission.
Physical Measures : Access control for locations and equipment where personal information is stored.

Article 9. Installation, Operation, and Refusal of Automatic Personal Information Collection Tools

① The Institute may use cookies that store and retrieve usage information from time to time for website operation, service improvement, access statistics analysis, and security management.

② Cookies are small pieces of information sent by a website server to the user’s browser and may be stored on the user’s computer or mobile device.

③ Data subjects may allow, block, or delete cookies through their web browser settings. However, refusing cookies may limit access to certain services.

Allowing or Blocking Cookies in Web Browsers

Chrome : Browser Settings > Privacy and Security > Clear Browsing Data or Cookie Settings

Edge : Browser Settings > Cookies and Site Permissions > Manage and Delete Cookies and Site Data

Allowing or Blocking Cookies in Mobile Browsers

Chrome : Mobile Browser Settings > Privacy and Security > Clear Browsing Data

Safari : Mobile Device Settings > Safari > Advanced > Block All Cookies

Samsung Internet : Mobile Browser Settings > Privacy > Delete Browsing Data

④ The Institute may provide external map services, external donation pages, or links to external services on the website. When using external services, the privacy policy of the relevant service provider may apply.

Article 10. Remedies for Infringement of Rights

Data subjects may contact the following institutions for relief or consultation regarding personal information infringement.

Personal Information Dispute Mediation Committee : 1833-6972
Personal Information Infringement Report Center : 118
Supreme Prosecutors’ Office : 1301
National Police Agency : 182

Article 11. Enforcement and Amendment of this Privacy Policy

This Privacy Policy is effective as of June 26, 2026.

If the Institute amends this Privacy Policy, it will announce the details of the amendment and the effective date through the website.