Article 1 (Purposes of Collection and Use of Personal Information, Items and Retention Periods)
The Company collects and uses the minimum personal information necessary for membership registration and the smooth provision of the Service, and the collected information is not used for any purpose other than those set out below.
① Personal information processed without the consent of the data subject
The Company processes the following personal information without the consent of the data subject in order to perform the service agreement with Members and to prevent misuse.
| Legal basis | Purpose of collection and use | Items collected | Collection method | Retention and use period |
|---|---|---|---|---|
| Personal Information Protection Act, Article 15(1)4 | Membership registration and management, verification of eligible age, identification and authentication of the individual | (Mandatory) First name, last name, date of birth, email address, password | Membership registration | Until withdrawal of membership |
| Personal Information Protection Act, Article 15(1)4 | Determination of universities eligible for application and customized recommendations | (Required) Highest level of education, year of graduation (expected), language test scores (whether TOPIK / King Sejong Institute / IELTS / TOEFL is held, and its level or score), desired study conditions (study program, field of major, preferred conditions) | Profile completion | Until withdrawal of membership |
| Personal Information Protection Act, Article 15(1)4 | Provision of functions for saving and viewing universities, majors and announcements of interest | Saved list (information on saved universities, majors and announcements; date and time of saving) | Generated when the user uses the save function | Until withdrawal of membership |
| Personal Information Protection Act, Article 15(1)4 | Prevention of fraudulent use of the Service through repeated registration and withdrawal | Email address (value converted into a form that cannot be restored) | Withdrawal of membership | 30 days from the date of withdrawal |
The above items are information essential for providing the Service and are processed without separate consent.
② Personal information processed with the consent of the data subject
The Company processes the following items of personal information with the consent of the data subject.
| Legal basis | Purpose of collection and use | Items collected | Collection method | Retention and use period |
|---|---|---|---|---|
| Personal Information Protection Act, Article 15(1)1 | Determination of universities eligible for application and customized recommendations | (Optional) Gender | Membership registration, profile completion | Until withdrawal of membership or withdrawal of consent |
| Personal Information Protection Act, Article 15(1)1 | Statistical analysis of service usage status, such as the distribution of users by country | (Optional) Nationality | Membership registration, profile completion | Until withdrawal of membership or withdrawal of consent |
| Personal Information Protection Act, Article 15(1)1; Network Act, Article 50 | Transmission of promotional information such as service news, events and admissions information | (Optional) Email address | Membership registration | Until withdrawal of membership or withdrawal of consent to receive |
③ Information automatically collected in the course of using the Service
| Legal basis | Purpose of collection and use | Items collected | Collection method | Retention and use period |
|---|---|---|---|---|
| Personal Information Protection Act, Article 15(1)4 | Provision and operation of the Service, prevention of misuse of the Service, handling of inquiries and complaints | Login access records (including country of access), viewing history (universities, majors, announcements; time of viewing), records of verification code transmission | Automatically generated in the course of using the Service | 3 months |
If a function supporting the preparation of university applications is introduced in the future, unique identifying information such as passport numbers may be collected with separate consent. When such a function is introduced, this Privacy Policy will be amended and notice will be given in advance.
Article 2 (Procedures and Methods for Destruction of Personal Information)
- When personal information becomes unnecessary, such as upon the expiration of the retention period or the achievement of the processing purpose, the Company destroys the relevant personal information without delay. However, in order to prevent fraudulent use of the Service through repeated registration and withdrawal, the email address is converted into a form that cannot be restored and stored separately for 30 days, and is destroyed upon the expiration of that period.
- Method of destruction
- Personal information stored in the form of electronic files is deleted using technical methods that make the records unrecoverable.
- Personal information printed on paper is destroyed by shredding with a shredder or by incineration.
- Where it is necessary to preserve personal information pursuant to the relevant laws and regulations, it is retained for the period prescribed by such laws as set out below.
- Records of service use and access records (login records): 3 months (Article 41(2)2 of the Enforcement Decree of the Protection of Communications Secrets Act)
Article 3 (Provision of Personal Information to Third Parties and Outsourcing of Processing)
- The Company does not currently provide users' personal information to third parties. However, where such provision is permitted or required by law, the Company complies with the relevant laws. If provision to third parties arises in the future, the Company will disclose the recipient, the purpose of provision, the items provided, and the retention and use period in this Privacy Policy and obtain the consent of the data subject.
- The Company currently does not outsource the processing of personal information to any external company. If outsourcing occurs in the future, the Company will disclose the outsourced party and the details of the outsourced work in this Privacy Policy and give prior notice.
Article 4 (Rights of Data Subjects and How to Exercise Them)
① Data subjects may exercise the following rights against the Company at any time.
- Request to access personal information
- Request to correct or delete personal information
- Request to suspend the processing of personal information
- Withdrawal of consent to the collection and use of personal information
- Withdrawal of membership
② The rights under Paragraph 1 may be exercised directly by the following methods.
- Access and correction of personal information: My Page > Profile
- Withdrawal of consent to optional items: My Page > Settings > Manage optional consents
- Withdrawal of consent to receive marketing information: My Page > Settings > Manage optional consents
- Withdrawal of membership: My Page > Settings > Withdraw membership
③ The rights under Paragraph 1 may also be exercised by email, and the Company will take action without delay. Requests are received at [email protected].
④ The rights under Paragraph 1 may also be exercised through an agent, such as the legal representative of the data subject or a duly authorized person.
When exercising rights through a legal representative or an authorized person, a power of attorney in the form of Annexed Form No. 11 of the 「Public Notice on Methods of Processing Personal Information」 must be submitted.
⑤ If a data subject requests the correction of an error in their personal information, the Company will not use or provide the relevant personal information until the correction is completed.
⑥ However, pursuant to Article 35(4) and Article 37(2) of the 「Personal Information Protection Act」, the measures requested by the data subject may be restricted in cases such as infringement of another person's rights, difficulty in performing a contract, or restrictions under the law. Further details can be found at the National Law Information Center or the Personal Information Portal.
Article 5 (Installation and Operation of Automatic Collection Devices and Refusal Thereof)
- The Company uses cookies for the following purposes.
- Maintaining login sessions (valid for 3 hours)
- Security (defense against CSRF attacks)
- Saving language settings (valid for 1 year)
- Users may allow or block the storage of cookies in the settings of the web browser they are using. Most browsers provide cookie-related settings under the "Privacy" or "Security" section of the settings menu.
- Chrome: Settings > Privacy and security
- Edge: Settings > Cookies and site permissions
- Safari: Settings > Privacy (on mobile, device Settings > Safari)
Since the exact path differs depending on the browser type and version, please refer to the help section of the relevant browser. Please note that if you refuse the storage of cookies, you may experience difficulties in using some services, such as logging in.
Article 6 (Measures to Ensure the Security of Personal Information)
The Company takes the following measures to ensure the security of personal information.
- Administrative measures
- Establishment and implementation of an internal management plan, operation of a dedicated organization, regular employee training
- Technical measures
- Management of access rights to the personal information processing system, installation of an access control system, encryption of personal information, installation and updating of security programs
- Physical measures
- Access control for the computer room, data storage room, etc.
Article 7 (Personal Information Protection Officer and Grievance Services)
- The Company designates a Personal Information Protection Officer as set out below, who takes overall responsibility for matters relating to the processing of personal information and handles users' complaints and remedies for damage in connection with the processing of personal information.
Personal Information Protection Officer
- Department
- Jinhak.com Business Division
- Name
- Oh Hye-kyung
- Contact
- 1544-7715
- [email protected]
- Users may contact the Personal Information Protection Officer regarding any matters relating to personal information protection, complaint handling, or remedies for damage that arise while using the Company's services.
- If you need to report or consult on any other infringement of personal information, please contact the organizations below.
| Organization | Website | Phone |
|---|---|---|
| Personal Information Dispute Mediation Committee | www.kopico.go.kr | 1833-6972 |
| Korea Internet & Security Agency Privacy Infringement Report Center | privacy.kisa.or.kr | 118 (no area code required) |
| Supreme Prosecutors' Office, Cybercrime Investigation Division | www.spo.go.kr | 1301 (no area code required) |
| Korean National Police Agency, Cyber Investigation Bureau | ecrm.police.go.kr | 182 (no area code required) |
Article 8 (Amendment of the Privacy Policy)
- This Privacy Policy applies from its effective date.
- If there are any additions, deletions or modifications to the contents, notice will be given on the initial screen of the Service or via the email registered by the Member at least 7 days prior to the amendment (30 days prior in the case of changes that are unfavorable to users or material).
- This Privacy Policy is originally written in Korean. If it is translated into and provided in another language and the contents of the translation conflict with the Korean original, the Korean original shall prevail.