Gwangju Metropolitan City Tarangge Operations Center Privacy Policy

In accordance with Article 30 of the Personal Information Protection Act, the Gwangju Tarangge Operations Center establishes and discloses the following personal information processing guidelines to protect the personal information of the data subjects and to quickly and smoothly deal with the grievances related to it.

Article 1 (Purposes of processing personal information)

The Tarangge Operation Center of Gwangju City processes personal information for the following purposes. Personal information that is being processed is not used for any other purpose than the following. If the purpose is changed, the company will implement necessary measures such as obtaining a separate consent in accordance with Article 18 of the Personal Information Act.

Article 2 (Duration of the processing and retention of personal information)

• 1. The Tarangge Operation Center of Gwangju City processes and maintains personal information within the period of personal information possession and use under the Act or the period agreed upon by the information subject when collecting personal information.
• 2. The processing and retention period of each item of personal information is as follows:
  • Reasons for Information Retention by Internal Policy

    Reasons for Information Retention by Internal Policy

    Classification	Reasons for preservation	Preservation period
    Faulty use record	Prevention of faulty use	1 year

  • Reasons for Information Retention by Related Laws

    In the event where it is necessary to hold the member information for a certain period of time as specified in the related statutes, such as the Commercial Act or the Electronic Commerce Act, the personal information shall be used for that purpose only, and the retention period shall be as follows.

    내부방침에 의한 정보보유 사유 안내

    Classification	Reasons for preservation	Preservation period
    Records regarding visit	Communications Secrets Protection Act	3 months
    Personal identification record	Act on Promotion of Information and Communication Network Utilization and Information Protection	6 months
    Records on consumer complaints and dispute handling	Act on Consumer Protection in e-commerce, etc.	3 years
    Records on Payment and Supply of goods, etc	Act on Consumer Protection in e-commerce, etc.	5 years

Article 3 (Providing personal information to third parties)

The Tarangge Operation Center of Gwangju handles the personal information of the information subject within the scope specified in Article 1 (Purpose of personal information processing) and provides the personal information of the information subject to a third party only if it applies to the specifics of Article 18 of Personal Information Protection Act, such as having the consent from the information subject or the special provisions of the law.

Article 4 (Assignment of personal information processing)

• 1. In the case of consignment of personal information, the Tarangge Operation Center of Gwangju handles the processing with the documents that contain the contents of the following paragraphs.
  • 1. Matters concerning the prevention of processing personal information for other than the purpose of consignment
  • 2. Matters on management and technical protection of personal information
  • 3. Matters related to personal information safety management: matters concerning the purpose and scope of consignment work, restrictions on reconsignment, measures to secure personal information safety, supervision matters such as inspection of the management status of personal information held in connection with consignment work, and matters concerning liability for damages in case of breach of duty by trustee
• 2. The Tarangge Operation Center of Gwangju documents personal information processing and consigns it as follows.

  개인정보처리의 위탁 안내

  Consignment department	Name of consignment Service	Recipient (Consignee)
  Road department	Provision of Tarangge rental service	oooo

Article 5 (Rights, duties and methods of exercise of information subjects)

• 1. Information subject may exercise his/her right to personal information protection in each of the following sections at any time regarding the website of Gwangju's Tarangge.
  • 1. Requiring access to personal information
  • 2. Correcting errors
  • 3. Requirng deletion
  • 4. Stop processing
• 2. The exercise of rights pursuant to paragraph 1 can be done through written, telephone, e-mail, and FAX of Gwangju Metropolitan City. It will be taken care by the homepage of Tarangge without delay.
• 3. If the information subject requires correction or deletion of personal information errors, etc., Gwangju Metropolitan City shall not use or provide such personal information until correction or deletion is completed. However, it is not allowed to ask for deletion if the personal information is specified as a collection target under other statutes.
• 4. The person exercising the rights pursuant to paragraph 1 shall be confirmed to be the person himself/herself, and the exercise may be carried out through an agent, such as a legal representative or a person who has been entrusted by the information subject. In this case, you must submit a letter of attorney according to Annex 11, Enforcement Regulations of the Privacy Act.
• 5. Information subject shall not infringe the personal information and privacy of the information subject himself/herself or others which Gwangju Metropolitan City is processing, in violation of the related statutes, such as the Privacy Act.

Article 6 (Personal information items processed)

Gwangju Metropolitan City's homepage handles the following personal information items.

Article 7 (Disposal of Personal Information)

Gwangju Metropolitan Government shall dispose of personal information that has been processed for the purpose of personal information use, with the following destruction procedures, deadlines, and methods:

• 1. Disposal Procedure : Personal information is immediately transferred to a separate space or stored for a certain period of time in accordance with the internal policy and other relevant laws and regulations before being destroyed. Personal information transferred to a separate space shall not be used for any other purpose except by law.
• 2. Disposal term and Disposal Method : Personal information is disposed without delay if the period of retention has expired, the purpose of personal information processing has been achieved or the work has been abolished.
  • A. Information in electronic file types uses technical methods in which records cannot be reproduced.
  • B. Personal information printed on paper shall be destroyed by grinding or incineration.

Article 8 (Measures for securing personal information)

Gwangju Metropolitan Government is taking the following steps to secure personal information safety.

• 1. Minimizing and training the personnel handling the personal information :
  The handlers of personal information is designated and managed only in a necessary scale, and trained for safe management.
• 2. Restricting access to personal information :
  The company takes necessary measures to control access of DB servers that process personal information and controls unauthorized access from outside using the intrusion prevention system.
• 3. Storage of access records:
  Access records to the DB server(web logs, summary information, etc.) that processes personal information are kept and managed for at least six months.
• 4. Personal information encryption :
  Personal information is stored and managed securely through encryption, etc. Also, separate security features such as encryption for storing and transferring sensitive data.
• 5. Installation of security equipment and periodic inspection·renewal :
  To prevent leakage and damage of personal information by hacking or computer viruses, we install security equipment and update and inspect them periodically.
• 6. Access control for unauthorized personnel :
  The DB server where personal information is stored is placed in a separate physical location. Access control procedures are established and operated.

Article 9 (Relief Methods for Infringement of Rights)

If the information subject is not satisfied with Gwangju Metropolitan City's own handling of personal information complaints or the results of a damage relief, or if more detailed help is needed, he/she can inquire the following organizations for counseling and for damage relief from personal information infringement.

• 1. Personal Information Violation Reporting Center (run by Korea Internet & Security Agency)
  • A. Subcontract work: Personal Information Violation Report and Consultation Application
  • B. Homepage: privacy.kisa.or.kr
  • C. Phone: 118 (without a national number)
  • D. Address: Personal Information Violation Reporting Center of Korea Internet & Security Agency
• 2. Personal Information Dispute Settlement Committee (Operated by the Korea Internet & Security Agency).
  • A. Subcontract work: Personal information dispute settlement application, collective dispute settlement (private settlement)
  • B. Homepage: privacy.kisa.or.kr
  • C. Phone: 118 (without a national number)
  • D. Address: (138-950) Personal Information Dispute Coordinating Committee of the Korea Internet & Security Agency
• 3. Cyber Crime Investigation Team of the Supreme Public Prosecutor's Office: 02-3480-3573 (www.spo.go.kr)
• 4. The Cyber Terror Response Center of the National Police Agency: 1566-0112 (www.netan.go.kr)

Article 10 (Personal Information Protection Officer)

Gwangju Metropolitan City is responsible for the handling of personal information. The city designates personnel responsible for personal information protection as shown below, for handling complaints and damage relief of information subjects that are related to personal information processing.

• 1. Personal information protection officer: OOO, Head of planning and Coordination Office
• 2. Personal information protection sector officer: OOO, Director of Road Safety
• 3. Handler of personal information
  • a. Department name: Road department
  • b. Officer: OOO
  • c. Contact: 062-613-4731, hanpan@korea.kr, FAX 062-613-4729.

Article 11 (Changing the Privacy Policy)

This Privacy Po licy applies from 2020. 3. 2