All personal information handled by the International Education Team at Korea University is collected, retained, and processed in compliance with the provisions of the Personal Information Protection Act and other relevant laws and regulations.

The International Education Team has established the following Privacy Policy to protect the personal information and rights of data subjects and efficiently respond to their complaints related to personal information according to the Personal Information Protection Act. In particular, the International Education Team website, which processes personal information, is required under the provisions of the Personal Information Protection Act to establish and operate a separate “Privacy Policy” for the website. In case of any modification to the Privacy Policy, the International Education Team will notify the data subject through notification on the website (or individual notice) so that the data subject can easily identify the time of implementation and the details of the changes.

Article 1. Purpose of personal information processing

• The International Education Team collects and processes personal information to the minimum extent necessary for the purpose of processing admission, providing educational services and processing requests, performing administrative duties, etc.
• The personal information processed will not be used for purposes other than the above, and necessary measures, such as obtaining separate consent, will be taken upon any modification in the purpose.

Article 2. Personal information processing and retention period

• The personal information processed by the International Education Team is processed within the scope specified for the purpose of collection and use, and in compliance with the retention period prescribed by the Personal Information Protection Act and related laws and regulations.
• The following is a list of personal information files collected and retained by the International Education Team.

※ The specific details of the personal information files collected and retained by the International Education Team can be verified by accessing the Personal Information Protection General Support Portal (www.privacy.go.kr)
▷ civil complaints ▷ personal information access request ▷ list of personal information files search ▷ entering “Korea University” in the organization name search box.

Article 3. Provision of personal information to a third party

• In principle, the Korea University International Education Team may manage personal information of the data subject within the scope specified for the purpose of collection and use and may neither handle it beyond the intended purposes nor provide it to a third party without the prior consent of the data subject except for any of the following cases:

  • Where separate consent is obtained from the data subject
  • Where there are special statutory provisions
  • Where it is deemed manifestly necessary for the protection, from imminent danger, of life, bodily and property interests of a data subject or a third party when the data subject or the legal representative thereof cannot give prior consent because he/she is unable to express his/her intention or by reason of his/her lack of current address, etc.
  • Where personal information is necessary for compiling statistics or scientific research purposes, etc., and the personal information is provided in a form in which specific individuals cannot be identified.
  • Where a failure to either use personal information for a purpose other than that intended or provide a third party with such information renders performance of the duties under its jurisdiction, as provided for in any Act, impossible and deliberation and resolution by the Personal Information Protection Committee has been undertaken
  • Where providing personal information to a foreign government or international organization is necessary to comply with requirements stipulated in a treaty or other international convention
  • Where it is necessary for investigation of a crime, institution and sustainment of public prosecution
  • Where it is necessary for the performance of a court’s judicial functions
  • Where it is necessary for the enforcement of punishment, probation or custody

Article 4. Outsourcing of personal information processing

• The International Education Team manages personal information of the data subject within the scope specified for both the purpose of collection and use and in compliance with the retention period prescribed by the Personal Information Protection Act and related laws and regulations.

  Outsourcee	Details of outsourced work
  Korean Council for University Education	Management and delivery of common applications for college admissions, proactive prevention of multiple applications and dual enrollment provisions and detection of violators thereof, searching and reporting of the total number of college application
  Uway Apply Co., Ltd.	Processing by proxy internet application for Korea University admission Management and operation of the Korea University International Education Team document evaluation system Management and operation of the Korea University International Education Team website
  Foredu	Management and operation of the international student special admission assessment system
  U-plus System Co., Ltd.	Scanning of international student special admission application documents

• The International Education Team clearly stipulates matters related to compliance with personal information protection laws and regulations in the consignment contract, and the provisions of the agreement are maintained separately. If the contracted outsource or the details of the outsourced work is to be changed, such matters shall be made public without delay via this Privacy Policy.

Article 5. Rights and duties of data subjects and ways to exercise them

• Data subject (a legal representative for those under age 14) can exercise the following rights related to personal information protection at any time:

  • Request access to personal information
  • Request correction of errors in personal information
  • Request erasure of personal information
  • Request suspension of personal information processing
• The exercise of rights pursuant to Paragraph (1) can be performed by completing the [Attached Form 8] of the Enforcement Rules to Personal Information Protection Act and submitting a hard copy, via email or facsimile, on which basis the appropriate department or institution shall take immediate measures.
• When a subject of information requests correction or deletion, etc. of an error in personal information, that personal information shall not be used or provided until the correction or deletion, etc. has been completed.
• The exercise of rights pursuant to Paragraph (1) can be performed by proxy by an agent of the data subject such as a legal representative or delegated individual. In such cases, the [Attached Form 11] of the Enforcement Rules to Personal Information Protection Act regarding the power of attorney should be submitted.
• The right of a data subject to request the suspension of access to and processing of personal information can be restricted pursuant to Articles 35(5) and 37(2) of the Personal Information Protection Act.
• A request to correct or delete personal information cannot be accepted when such personal information is stipulated as the object of collection in other statutes.

• When access, correction or deletion, and suspension of the processing of information is requested based on the rights of a data subject, the person requesting access should be verified as either the data subject personally or a lawful representative.

  • [Attached Form 8 of the Enforcement Rules to Personal Information Protection Act] Personal information (access, correction or erasure, or suspension of processing) request form
  • [Attached Form 11 of the Enforcement Rules to Personal Information Protection Act] Power of attorney

Article 6. Personal information destruction procedure and methods

• When the purpose of the management of personal information has been achieved, the Korea University International Education Team, in principle, shall destroy the personal information without delay, unless otherwise specified for retention in other statutes.

• The procedures, deadline, and methods for destruction are as follows:

  • Destruction procedure: When the purpose of personal information had been attained, such personal information is either destroyed immediately after or transferred to a separate storage unit to be stored pursuant to internal policies and other statutes for a certain period of time before destruction. The personal information transferred to the separate storage unit shall not be used for any other purpose except as stipulated in statutes.
  • Destruction deadline: When the retention of personal information becomes unnecessary upon its reaching its expiration date, its management purpose has been achieved, or the relevant service has been abolished, the personal information shall be destroyed without delay.
  • Destruction method: Information in the form of an electronic file shall be destroyed via technical methods that make reproduction of the records impossible. Printed or hardcopy versions of personal information shall be shredded or incinerated.

Article 7. Safeguards to ensure the security of personal information

• Minimization of the Number of Staff Managing Personal Information and Staff Training: The number of employees handling personal information is designated and managed only to the number required, and training is provided to those employees for secure management.
• Access Restriction of Personal Information: Necessary measures to control access to personal information by granting, revising, and eliminating access rights to the database system that manages personal information are imposed, and unauthorized access from external parties is controlled through the use of firewall systems.
• Storage of Access Records: Access records to the personal information management system is stored and managed for a minimum of 1 year (2 years or longer for personal information management systems that process personal information of 50,000 data subjects or more, personally identifiable information, or sensitive information).
• Installation and Regular Inspection/Update of Security Programs: Security programs are installed and updated/inspected on a regular basis to prevent unauthorized outflow or damage of personal information from hacking or computer viruses.
• Access Control against Unauthorized Persons: The physical storage place for the personal information system that stores personal information is installed at a separate location, and an access control procedure is established and operated.
• Encryption of Personal Information: Personal information is safely stored and managed via methods such as encryption. Additional security features, such as encryption of sensitive data at storage and in transmission, are installed.

Article 8. Installation and operation of an automatic personal information collection system and denial thereof

• To provide users with personalized services, the International Education Team uses a cookie that stores and frequently retrieves user information.

• A cookie is a small amount of information that the server uses to operate the website that is sent to the user’s computer browser, and it can be stored on the hard disk of the user’s device (PC, mobile phone, etc.).

  • Purpose of cookie usage: Monitor pop-up activation; maintain Q&A search results
  • Installation and operation of a cookie and denial thereof: An individual may opt out of cookie storage through option settings in the upper part of the web browser (Tools > Internet options > Personal information).
  • Denying cookie storage may result in difficulties when using the service.

Article 9. Remedies for infringements of rights

• A data subject may apply for dispute settlement or consultation to remedy damage caused by personal information infringement with the Personal Information Dispute Mediation Committee or Personal Information Infringement Report Center at the Korea Internet & Security Agency, etc.

  • Personal Information Dispute Mediation Committee: (without extension) 1833-6972 (www.kopico.go.kr)
  • Personal Information Infringement Report Center: (without extension) 118 (privacy.kisa.or.kr)
  • Cybercrime Investigation Division, Supreme Prosecutor’s Office: (without extension) 1301 (www.spo.go.kr)
  • Cyber Security Division, National Police Agency: (without extension) 182 (ecrm.cyber.go.kr)

• In addition, an individual whose rights or interests have been infringed due to a disposition or omission made by the head of a public institution in response to a request by the data subject for access to, correction or erasure of, or suspension of processing of personal information, etc., may file an administrative appeal in accordance with the Administrative Appeals Act.

  • Central Administrative Appeals Commission: (without extension) 110 (www.simpan.go.kr)

Article 10. Chief privacy officer and department in charge

• Chief privacy officer: Director of the International Education Team
• Department in charge: International Education Team / Office 02-3290-5156~7
• A data subject may contact the chief privacy officer of the department in charge to handle any inquiry, grievance and remedial compensation related to personal information protection arising from using the services of the International Education Team. The International Education team will respond to and deal with any inquiries from data subjects without delay.

Notification of changes to the privacy policy

• This policy is effective August 31, 2022.

• Previous Privacy Policies can be found below.

  • March 12, 2012 – August 30, 2015 2012. 03. 12~ 2015. 08. 30 적용 방침
  • August 31, 2015 – May 3, 2016 2015. 08. 31~ 2016. 05. 03 적용 방침
  • May 4, 2016 – February 28, 2017 2016. 05. 04~ 2017. 02. 28 적용 방침
  • March 1, 2017 – December 11, 2017 2017. 03. 01~ 2017. 12. 11 적용 방침
  • December 12, 2017 – August 30, 2022 2017. 12. 12~ 2022. 08. 30 적용 방침
  • List of personal information files collected and retained by the International Education Team

※ This privacy policy was originally drafted in Korean and translated into English. In the event of any discrepancies in interpretation between the two versions, the Korean version shall take precedence.