<Research Institute of Asian Women at Sookmyung Women's University>('https://asianfem.sookmyung.ac.kr/', hereafter, ‘RIAW’) protects personal information and rights of users according to the Personal Information Protection Act. In order to smoothly deal with user complaints, we have the following handling policies.

RIAW will notify you through the website announcement (or individual announcement) when revising the privacy policy.

○ This policy will be effective from September 1, 2018.

1. Purpose of Processing Personal Information

RIAW processes personal information for the following purposes. The processed personal information will not be used for any purpose other than the following purposes.

1. 1.1. Homepage membership and management :
   We will process your personal information for the purpose of membership confirmation, identification and authentication based on the provision of membership service, membership maintenance and management, identification of the person under the restrictive identification system, service illegal use prevention, checking whether or not the legal representative agrees when collecting personal information for children under the age of 14, various notices, grievance, and keeping records for dispute settlement.
2. 1.2. Complaint handling : We will process your personal information for the purpose of identification of the complainant, confirmation of complaints, communication and notification of processing results, etc.
3. 1.3. Providing Goods or Services : We process personal information for shipping goods, service delivery, content delivery, providing customized services, self-certification, and age verification purposes.

2. Personal Information File Status

1. 1) Personal information file name: member management
   • - Personal information items: login ID, password, name, email, home address, home phone number, and mobile phone number
   • - How to collect: Homepage
   • - Viewing Information: Homepage Manager Page
   • - Retention period: 3 years
   • - Related Laws:
     • · Records of consumer complaints or disputes: 3 years
     • · Records on collection, processing and use of credit information: 3 years

3. Processing and Retention Period of Personal Information

1. ① RIAW holds and processes personal information within the retention and processing period of personal information according to the Act, or that is agreed upon when collecting personal information from information subject.
2. ② Each personal information processing and retention period is as follows.
   1. 1) Homepage Registration and Management : Personal information related to “homepage membership and management” shall be retained and used for the above purposes from the date of agreement on collection and use until 1 year.
      • - Retention grounds: homepage administrator page
      • - Relevant legislation: records of consumer complaints or disputes: 3 years
      • - Reason for exception:

4. Matters concerning third party provision of personal information

1. ① RIAW complies with Articles 17 and 18 of the Personal Information Protection Act, including the consent of the information subject and provide information to third parties.
2. ② RIAW provides personal information to third parties as follows.
   1. 1) Company that receives personal information: Nuri Media
      • - Purpose of personal information of recipient: Purpose of homepage management, mass mailing to individual member
      • - Personal information items provided: login ID, password, name, email, home address, home phone number, mobile phone number
      • - Retention and use period of recipients: 1 year

5. Commitment to personal information processing

1. ① RIAW commits the following personal information processing tasks for smooth personal information processing.
   1. 1)
      • - Trustee (consignee): Nuri Media
      • - Contents of commissioned work: Homepage management, sending e-mail
      • - Charging period: 1 year
2. ② Upon signing the contract, RIAW shall state in the documents such as the contracts, etc. about the responsibility such as prohibited processing of personal information for purposes other than commissioned business, technical and administrative safeguards, reconsignment restriction, management oversight of the trustee, damages etc. in accordance with Article 25 of the Personal Information Protection Act, and monitor whether the trustee handles personal information securely.
3. ③ If the contents of the consignment service or the consignee change, we will disclose it through this Privacy Policy without any delay.

6. The rights, duties and methods of the information entity.You may exercise the following rights as a personal information subject.

1. ① The information subject can exercise the right of personal information protection of RIAW at any time.
   1. 1) Personal information view request
   2. 2) An error correction requirements
   3. 3) Delete request
   4. 4) Process stop request
2. ② The exercise of rights under ① above may be done in writing, e-mail, fax etc. in accordance with the Form 8 of the Enforcement Regulations of the Personal Information Protection Act for RIAW and RIAW will take action without delay.
3. ③ When a subject requests correction or deletion of personal information, RIAW will not use or provide the personal information until the correction or deletion is completed.
4. ④ The exercise of rights under ① may be made through a legal representative of the information entity or an agent such as a person who has been delegated. In this case, you must submit a power of attorney according to Form 11 of the Enforcement Regulations of the Personal Information Protection Act.

7. Creating an item of personal information to process

1. ① RIAW processes the following personal information items.
   1. 1) <Homepage membership and management>
      • - Required fields: Login ID, password, name, email, home address
      • - Choice: Home phone number, mobile phone number

8. Destruction of personal information

RIAW will, in principle, destroy personal information without delay when the purpose of processing personal information is achieved. The procedures, deadlines and methods of destruction are as follows.

• - Destruction procedure: The information entered by the user is transferred to a separate DB after completion of the purpose (separate documents in the case of paper), and is stored or destroyed for a certain period of time in accordance with internal policies and other related laws. At this time, the personal information transferred to the DB is not used for other purposes unless it is under the law.
• - Destruction deadlines: In the event that the retention period of personal information has elapsed, the user's personal information will be destroyed within 5 days from the end of the retention period. And when the personal information becomes unnecessary such as achieving the purpose of processing personal information, the abolition of the service, end of business etc., we destroy the personal information within 5 days from the day when the processing of personal information is deemed unnecessary.
• - Destruction method: Information in the form of an electronic file uses a technical method that can not reproduce the record. Personal information printed on paper is crushed by crusher or destroyed by incineration.

9. Measures to ensure the safety of personal information

In accordance with Article 29 of the Personal Information Protection Act, RIAW has the following technical, administrative and physical measures to ensure safety.

1. 1) Minimization and Training of Personnel Handling Personal Information: Personnel who handle personal information are designated and minimized only to the person in charge, and measures are taken to manage personal information.
2. 2) Encryption of personal information: The user's personal information and password are encrypted and stored and managed so that only the user can know, and for important data the system also uses separate security features, such as encrypting file and transfer data, or using file-locking features.
3. 3) Restrict access to personal information: In order to control access to the database system that handles personal information, we take necessary measures such as granting, changing, and canceling access rights. Also, we use intrusion prevention system to control unauthorized access from outside.
4. 4) Use lock device for document security: Documents containing personal information and auxiliary storage media are stored in safe place with lock.

10. Create Privacy Officer

1. ① RIAW is responsible for the handling of personal information, and has designated the person in charge of personal information protection as follows for the complaint handling and damage relief of information subject related to personal information processing.
   • ▶ Personal information protection officer

     Name :

     Contact :

     E-mail :

     ※ It leads to personal information protection department.
   • ▶ Personal information protection department

     Department name :

     Manager :

     Contact :

2. ② The information subject can inquire to the person in charge of personal information protection and the department concerned about all the problems occurring while using the RIAW service (or business) such as privacy concerns, complaint handling, and damage relief. RIAW will respond to inquiries from informational entities without delay and process them.

11. Change of privacy policy

1. ① This Privacy Policy will be effective from the effective date. If there are any additions, deletions or corrections of the changes in accordance with the laws and policies, it will be notified from the announcement 7 days prior to the implementation of the changes.