Smart Cities Index Report (hereinafter referred to as "the Company") establishes and discloses the following personal information processing policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following purposes. If the purpose of use is changed, necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act, will be implemented.
1. Membership registration and management on the website
Personal information is processed for the purposes of confirming the intention to register as a member, identifying and authenticating oneself according to the provision of membership services, maintaining and managing membership qualifications, implementing the restricted identity verification system, preventing fraudulent use of services, verifying the consent of legal guardians when processing personal information of children under 14 years old, notifying and informing various matters, and handling grievances.
2. Provision of goods or services
Personal information is processed for the purposes of delivering goods, providing services, sending contracts and invoices, providing content, providing customized services, identity verification, age verification, payment and settlement of fees, and debt collection.
3. Handling grievances
Personal information is processed for the purposes of identifying the complainant, confirming complaints, contacting and notifying for fact-finding, and notifying the results of processing.
Article 2 (Processing and Retention Period of Personal Information)
① The Company processes and retains personal information within the period of retention and use of personal information agreed upon by the data subject or as prescribed by law.
② The processing and retention periods for each category of personal information are as follows:
1. Membership registration and management on the website: Until the business entity/organization withdraws from the website.
However, in the following cases, until the relevant reason is resolved:
1) If there is an ongoing investigation or inquiry due to a violation of related laws, until the investigation/inquiry is concluded.
2) If there are remaining debt and credit relationships arising from the use of the website, until the relevant debt and credit relationships are settled.
Article 3 (Rights of Users and Legal Representatives and How to Exercise Them)
① Data subjects can exercise the following personal information protection rights against the Company at any time:
1. Request to access personal information
2. Request for correction if there are errors, etc.
3. Request for deletion
4. Request to stop processing
② The exercise of rights pursuant to Paragraph 1 can be done through written, telephone, electronic mail, fax, etc., and the Company will take action without delay.
③ If the data subject requests correction or deletion of personal information due to errors, the Company will not use or provide the personal information until the correction or deletion is completed.
④ The exercise of rights pursuant to Paragraph 1 can be done through a legal representative of the data subject or a delegated person. In this case, a power of attorney in accordance with the form prescribed in Annex 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
⑤ The data subject must not infringe on the personal information and privacy of the data subject or others that the Company processes in violation of the Personal Information Protection Act and other related laws.
Article 4 (Items of Personal Information Processed)
The Company processes the following personal information items:
1. Membership registration and management on the website
Required items: name, date of birth, ID, password, affiliation, phone number, email address
2. Provision of goods or services
Required items: name, date of birth, ID, password, affiliation, phone number, email address
3. In the process of using internet services, the following personal information items may be automatically generated and collected:
IP address, cookies, MAC address, service usage records, visit records, records of fraudulent use, etc.
Article 5 (Destruction of Personal Information)
① The Company will destroy personal information without delay when the retention period of personal information has expired, the processing purpose has been achieved, or the personal information is no longer necessary.
② If the retention period of personal information agreed upon by the data subject has expired or the processing purpose has been achieved, but the personal information must be preserved according to other laws, the personal information will be moved to a separate database (DB) or stored in a different storage location.
③ The procedures and methods for destroying personal information are as follows:
1. Destruction procedures
The Company selects personal information for which the reason for destruction has occurred and destroys the personal information with the approval of the Company's personal information protection officer.
2. Destruction methods
The Company destroys personal information recorded and stored in electronic file form using methods such as low-level format to ensure that the records cannot be reproduced. Personal information recorded and stored in paper form is destroyed by shredding or incinerating.
Article 6 (Measures to Ensure the Safety of Personal Information)
The Company takes the following measures to ensure the safety of personal information:
1. Administrative measures: Establishment and implementation of internal management plans, regular employee education, etc.
2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
3. Physical measures: Access control to computer rooms, data storage rooms, etc.
Article 7 (Matters Concerning the Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)
① The Company uses 'cookies' to store and retrieve user information from time to time to provide personalized services to users.
② Cookies are small amounts of information sent by the server (HTTP) used to operate the website to the user's computer browser and are sometimes stored on the user's computer hard disk.
a. Purpose of using cookies: To provide optimized information to users by understanding the visit and usage patterns of users on each service and website, popular search terms, secure connection status, etc.
b. Installation, operation, and rejection of cookies: You can reject the storage of cookies by setting options in the privacy menu of the tools>internet options> at the top of the web browser.
c. If you refuse to store cookies, there may be difficulties in using customized services.
Article 8 (Personal Information Protection Officer)
① The Company designates the following personal information protection officer to take full responsibility for personal information processing, handle complaints, and provide relief to data subjects related to personal information processing.
▶ Personal Information Protection Officer
Name: Kyubo Han
Position: Researcher
Contact: hkbrian0907@yonsei.ac.kr
※ Connected to the person in charge.
② Data subjects can contact the personal information protection officer and the department in charge for all inquiries, complaints, and damage relief related to personal information protection that occur while using the Company's services (or business). The Company will respond and handle the inquiries without delay.
Article 11(Request for Access to Personal Information)
Data subjects can request access to personal information under Article 35 of the Personal Information Protection Act to the following person in charge. The Company will make efforts to promptly
