(Article 1) Purpose of Processing Personal Information
INUE processes personal information for the following purposes.
Processed personal information will not be used for purposes other than the following, and if the purpose of use changes, we plan to obtain prior consent in accordance with the Personal Information Protection Act.
Purpose of Processing Personal Information
| No. |
Item |
Purpose of Processing |
| 1 |
Homepage Registration & Management |
Processing personal information for confirmation of intention to join, maintenance and management of membership qualification, etc. |
| 2 |
Participation in Real-time Evaluation |
Processing personal information for obtaining information according to evaluation participation progress |
(Article 2) Status of Personal Information Files
The status of personal information files is as follows.
Status of Personal Information Files
| File Name |
Purpose |
Items |
Processing Method |
Basis for Retention |
Retention Period |
| Member Info |
Member Management |
ID, Name, Email, Contact Info |
DB & Encryption on Server |
Personal Info Protection Act Art. 15-1 "Consent Obtained" |
Destroyed upon service termination or withdrawal request |
(Article 3) Provision of Personal Information to Third Parties
INUE processes personal information within the scope specified for the purpose of collection and use, and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as obtaining consent from the data subject or special provisions of the law.
- When separate consent is obtained from the data subject.
- When there are special provisions in the law or it is unavoidable to observe legal obligations.
- When the data subject or their legal representative is unable to express intention or prior consent cannot be obtained due to unknown address, etc., and it is clearly deemed necessary for the urgent benefit of the life, body, or property of the data subject or a third party.
- When necessary for the investigation of crimes and the filing and maintenance of prosecution.
- When necessary for the performance of the court's trial work.
- When necessary for the execution of punishment, care, and protective custody.
(Article 4) Rights and Obligations of Data Subjects and How to Exercise Them
-
The data subject (referring to a legal representative in the case of a person under the age of 14) may exercise the following personal information protection-related rights at any time.
- Request to view personal information
- Request for correction if there is an error
- Request for deletion
- Request for suspension of processing
- The exercise of rights pursuant to Paragraph 1 may be made in writing, by e-mail, facsimile (FAX), etc., after filling out the Request for Reading Personal Information (Form No. 8 of the Notice on Personal Information Processing Methods), and INUE will take action without delay.
- If a data subject requests correction or deletion of errors in personal information, the personal information will not be used or provided until the correction or deletion is completed.
- The exercise of rights pursuant to Paragraph 1 may be done through an agent such as the legal representative of the data subject or a person who has been delegated. In this case, you must submit a Power of Attorney (Form No. 11 of the Notice on Personal Information Processing Methods).
- Requests for access to and suspension of processing of personal information may be restricted under Article 35 (5) and Article 37 (2) of the Personal Information Protection Act.
- Requests for correction and deletion of personal information cannot be requested if the personal information is specified as a collection target in other laws.
- Upon request for access, correction/deletion, or suspension of processing according to the rights of the data subject, we verify whether the person making the request is the person themselves or a legitimate agent.
(Article 5) Consignment of Personal Information Processing
INUE entrusts personal information processing tasks to the following institutions (companies).
- Consignor: University Assessment Research Institute (INUE)
- Consignee: -
- Consigned Task: -
- Retention and Use Period: Until the end of the consignment contract
(Article 6) Procedures and Methods for Destruction of Personal Information
- INUE destroys the personal information without delay when the personal information becomes unnecessary, such as the lapse of the personal information retention period or achievement of the processing purpose.
- If personal information must continue to be preserved in accordance with other laws and regulations despite the lapse of the personal information retention period agreed to by the data subject or the achievement of the processing purpose, the personal information (or personal information file) is moved to a separate database (DB) or preserved in a different storage location.
-
The procedure and method of personal information destruction are as follows:
- INUE establishes a personal information destruction plan for personal information (or personal information files) that must be destroyed.
- INUE selects the personal information (or personal information file) for which the cause of destruction has occurred and destroys the personal information (or personal information file) with the approval of INUE's Personal Information Protection Officer.
- INUE destroys personal information recorded and stored in the form of electronic files using methods such as low-level formatting so that the records cannot be reproduced, and personal information recorded and stored in paper documents is destroyed by shredding with a shredder or incinerating.
-
The procedure and method of personal information destruction are as follows:
If the retention period of the user's personal information has elapsed, the personal information is destroyed within 5 days from the end date of the retention period. If the personal information becomes unnecessary due to the achievement of the purpose of processing, abolition of the service, termination of the business, etc., the personal information is destroyed within 5 days from the date when the processing of personal information is recognized as unnecessary.
(Article 7) Measures to Ensure Safety of Personal Information
INUE takes the following measures to ensure the safety of personal information.
- Administrative measures: Establishment and implementation of internal management plans, regular education, etc.
- Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs.
- Physical measures: Access control to personal information storage facilities (computer rooms, etc.), control of entry/exit of USBs containing personal information.
(Article 8) Remedies for Infringement of Rights
The data subject may inquire about damage relief and consultation for personal information infringement to the following organizations.
The following organizations are separate from INUE. Please contact them if you are not satisfied with INUE's own personal information complaint handling and damage relief results or if you need more detailed help.
- Personal Information Infringement Report Center (operated by KISA): 118 (without area code)
- Personal Information Dispute Mediation Committee: 1833-6972
- Supreme Prosecutors' Office Cyber Crime Investigation Unit: 1301 (without area code)
- National Police Agency Cyber Safety Bureau: 182 (without area code)
(Article 9) Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
INUE website does not use separate 'cookies' to provide services to users.
(Article 10) Contact Information of Personal Information Protection Officer and Manager
INUE is responsible for overall personal information processing tasks and designates a Personal Information Protection Officer as follows for complaint handling and damage relief of data subjects related to personal information processing.
Personal Information Protection Officer: CEO Kim Seung-woo
Data subjects may inquire about all personal information protection-related inquiries, complaint handling, damage relief, etc., generated while using INUE services to the Personal Information Protection Officer and the department in charge. INUE will answer and process the inquiries of data subjects without delay.
(Article 11) Request for Access to Personal Information
The data subject may make a request for access to personal information pursuant to Article 4 to the Personal Information Protection Officer, and INUE will ensure that the data subject's request for access to personal information is processed promptly.
(Article 12) Matters Concerning Pseudonymization Processing
If INUE processes personal information under a pseudonym, we guide the data subject so that they can check the relevant matters.
(Article 13) Change of Privacy Policy
This Privacy Policy is effective from February 24, 2025.