DDP

Personal information shall be processed for the purposes below. The processed personal information shall not be used for purposes other than those listed below; if the purpose of use is changed, the necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act shall be implemented. The Seoul Design Foundation shall process and retain the personal information consented to when collecting personal information from the information subject within the personal information retention and use period in accordance with laws and regulations. The information subject may refuse the collection of personal information, in which case access to the relevant information and services may be limited, and the right to access and participate in related businesses may be lost.

1. ① Scope of application: Website member information, customer inquiry, irrational integrated report, safety risk report and suggestion
2. ② Collection method: website

1. ① Scope of application: Website member information
2. ② Collection method: website

The Seoul Design Foundation shall process and retain the personal information consented to when collecting personal information from the information subject within the personal information retention and use period in accordance with laws and regulations.

1. ① Scope of application: Website member information, customer inquiry, irrational integrated report, safety risk report and suggestion

1. ① Scope of application: Website member information, customer inquiry

In the process of collecting personal information, the Seoul Design Foundation collects it after notifying that "If personal information is collected with the consent of the information subject, you may not agree to the collection of personal information other than the minimum required information."

The collection of resident registration numbers is fundamentally prohibited, and collection even with the consent of the information subject is also prohibited. If it is clear that the information is being collected for the imminent life/body/property benefit of the information subject or a third party, however, collection and use will be carried out only as prescribed by the Ordinance of the Ministry of Government Administration and Home Affairs.

The Seoul Design Foundation shall provide personal information to a third party only with the consent of the information subject or when it falls under Articles 17 and 18 of the Personal Information Protection Act, including special provisions of the law. The Seoul Design Foundation provides personal information to the following organizations and persons, and the purpose and scope of provision are as follows. The information subject may reject the provision of personal information to a third party, in which case access to the information and services may be limited, and the right to access and participate in related businesses may be lost.

As of May 04, 2022, below are matters entrusted for processing personal information. In the entrustment contract, compliance with laws related to personal information protection, prohibition of provision of personal information to a third party, and responsibilities shall be clearly stipulated (including administrative and technical protective measures). In principle, the contents of the contract shall be kept in writing and electronically. The entrustment contract shall prohibit processing other than for the purpose of entrustment and specify items for safety measures and supervision, such as restrictions on re-entrustment and access restrictions. Training and security pledges shall be required for handlers, and when changing entrustment companies, they shall be notified through the personal information protection policy. The contents for management are shown in the table below.

Users may exercise the following rights as the subject of personal information:

1. 1.Request for viewing of personal information: The user may request for viewing in accordance with Article 35 (Access to Personal Information) of the Personal Information Protection Act. However, viewing may be restricted in accordance with Article 35, Paragraph 4 of the Act.
2. 2.Request for correction/deletion of personal information: The user may request correction/deletion in accordance with Article 36 (Correction/Deletion of Personal Information) of the Personal Information Protection Act. If the personal information is specified as a collection target in other laws, however, the deletion shall not be requested.
3. 3.Request to suspend processing of personal information: The user may request the suspension of processing in accordance with Article 37 (Suspension of Personal Information Processing, etc.) of the Personal Information Protection Act.
4. 4.Procedures for viewing, correction/deletion, and suspension of processing of personal information
   1. A.Requests for viewing, correction, deletion, or suspension of processing of personal information shall be processed as follows:
      1. 1)Request for personal information file list search

         viewing

         1. ① Confirmation of claiming subject and scope of personal information access
         2. ② Confirmation of restrictions on personal information access
         3. ③ Notification of decision on access (allow/restrict/delay or deny)
         4. ④ Reading (unable to read if rejected)

         Request for correction/deletion or suspension of processing

         1. ① Confirmation of claiming subject and scope of correction/deletion of personal information and suspension of processing
         2. ② Confirmation of restrictions on the correction/deletion of personal information and suspension of processing
         3. ③ Notification of correction/deletion, processing suspension result or notification of correction/deletion, processing suspension restrictions (rejection, other matters related to laws, etc.)
   2. B.How to request personal information access, etc.
      1. 1)Online (Internet) request

         The user can apply online at http://www.privacy.go.kr.

      2. 2)Offline (in writing) request

   The information subject may file a request for access to personal information pursuant to Article 35 of the Personal Information Protection Act to the departments below.
   The Seoul Design Foundation will make every effort to process requests for access to personal information from information subjects promptly.

   1. Receipt/Processing department of personal information access request
      Department Name: General Affairs Team
      Person in Charge: Huh Go-eun
      Contact: 02-2096-0093
      Email: hgoeun@seouldesign.or.kr
5. 5.Protection of personal information of minors
   When collecting personal information from children below 14 years, the Seoul Design Foundation shall obtain the consent of the legal representative in advance and manage personal information thoroughly during related work in accordance with the personal information protection policy of the Seoul Design Foundation.

The Seoul Design Foundation shall destroy the personal information when it becomes unnecessary, such as when the retention period has lapsed or the purpose of processing has been achieved.
Except for website member information, however, the history of issuance of civil documents, etc., shall follow the destruction procedure in accordance with the “Public Institutions Records Management Act.”

1. 1.Destruction procedure
   1. A.The Seoul Design Foundation shall establish a personal information destruction plan for personal information that needs to be destroyed. The personal information for which the reason for destruction occurred shall be selected and destroyed with the approval of the person in charge of personal information protection for each field.
   2. B.The Seoul Design Foundation shall destroy the donor's personal information without delay without any exceptions after the purpose of collection and use of personal information has been completed (termination of the donation agreement).
2. 2.How to destroy
   Personal information recorded and stored in the form of electronic files shall be destroyed so that the record cannot be reproduced, and personal information recorded and stored in paper documents shall be destroyed by shredding with a shredder or by incineration.

In accordance with Article 29 of the Personal Information Protection Act, the following technical, administrative, and physical measures shall be taken to ensure safety:

1. 1.Administrative measures
   Establishment and implementation of internal management plan, regular employee training
2. 2.Technical measures
   Management of access rights such as personal information processing system, installation of access control system, encryption of unique identification information, installation of security program
3. 3.Physical Measures
   Access control to computer room, data storage room, etc.

1. A. The information subject may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Center of the Korea Internet & Security Agency in order to receive relief from personal information infringement. For other personal information infringement reports and consultations, the subject may contact the following organizations:
   1. 1) Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
   2. 2) Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)
   3. 3) Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)
   4. 4)National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)
2. B.「As for requests under Article 35 (Viewing of Personal Information), Article 36 (Correction/Deletion of Personal Information), and Article 37 (Suspension of Personal Information Processing, etc.) of the Personal Information Protection Act, a person whose rights or interests have been infringed due to any disposition or omission taken by the head of a public institution may file an administrative appeal in accordance with the Administrative Appeals Act.
   
   1. 1)Central Administrative Judgment Committee: (without area code) 110 (www.simpan.go.kr)

1. 1.Seoul Design Foundation Personal Information Protection Officer
   Name: Lee Kyung-don
   Position: CEO
   Email: kdr@seouldesign.or.kr
2. 2.Seoul Design Foundation Personal Information Protection Manager
   Name: Huh Go-eun
   Position: Deputy head of the general affairs team
   Phone:02-2096-0093
   Email: hgoeun@seouldesign.or.kr

In the event of a reason for change due to a change in the quantity of personal information files managed by field, notification shall be omitted.
This Personal Information Protection Policy shall be applied from December 01, 2021. The previous Personal Information Protection Policy can be found below.

• Enactment date : 2011. 12. 28
• Revision date : 2012. 11. 15
• Revision date : 2012. 12. 24
• Revision date : 2013. 09. 12
• Revision date : 2014. 02. 03
• Revision date : 2014. 03. 12
• Revision date : 2014. 05. 30
• Revision date : 2014. 07. 11
• Revision date : 2016. 07. 25
• Revision date : 2021. 12. 01
• Revision date : 2022. 5. 04