A SeMA shall process personal info. for the following purposes. The processed personal info. will not be used beyond the purposes stated herein and, if there are any changes to the purposes, SeMA shall take necessary measures such as obtaining a separate agreement pursuant to Article 18 of the Personal Information Protection Act.
B Purposes, specifics, and retention periods of personal info. files are as follows.
| Personal info. files | Purpose of processing | Specifics | Retention period |
|---|---|---|---|
| Applicants for lectures | Confirmation of applicants for lectures & management of lectures | Name, date of birth, mobile No., email, & address | 2 years |
| Applicants for events | Confirmation of event applicants, feedback survey | Name, gender, date of birth, mobile No., email, address, academic background | 2 years |
| Emerging Artists applicants | Emerging Artists applicant management | Name, gender, date of birth, mobile No., email, address, academic background | 2 years |
| Applicants for the SeMA Nanji Residency | Confirmation of applicants for the residency | Name, date of birth, mobile No., email, address, history | 2 years |
| Citizen Curators the final successful candidate | Citizen Curators management, Avoiding duplicate support | Name, date of birth, mobile No., email, address, history | 20 years |
| Emerging Artists the final successful candidate | Emerging Artists management, Avoiding duplicate support | Name, date of birth, mobile No., email, address, history | 20 years |
| Artist & Researcher members of the Nanji Residency | Management of Artist & Researcher & promotion of the website | Name, date of birth, mobile No., email, address, history | 20 years |
A SeMA shall process personal info. of the applicant /data provider within the scope of prescribed purposes and will neither process it outside the scope of purposes nor provide it to a third party without the prior consent of applicant/ data provider, excluding the following cases:
1. Where consent of the applicant/ data provider is separately obtained
2. Where special provisions exist by relevant laws
3. Where it is deemed apparently necessary for the protection of life, body or property interests of the applicant/ data provider or a third party against imminent danger where the applicant/ data provider or his/ her legal representative is not in a position to express explicit intention, or prior consent cannot be obtained due to unknown addresses, etc.
4. Where pseudonymized information is provided for statistical or scientific research purposes, etc.
5. Where a public institute/ organization cannot perform its duties thereunder unless personal information is used outside the purposes or provided to a third party, and where deliberation or resolution of the Protection Committee is warranted
6. Where it is necessary to provide personal information to a foreign government or international organization to adhere to a treaty or other international convention
7. Where it is necessary for the investigation of a crime, indictment, or prosecution
8. Where it is necessary for a court to proceed with trial-related duties
9. Where it is necessary for the enforcement of punishment, probation, or custody
A SeMA outsources personal information processing as follows.
| No. | Personal data file name | Details of outsourced/ delegated task | Outsourcing/ delegated agent | ||
|---|---|---|---|---|---|
| Company name | Address | Contact No. | |||
| 1 | Applicants for lectures | Reestablishment & maintenance of website | PCN Co., Ltd. | 157 Hakdong-ro, Gangnam-gu, Seoul, Republic of Korea | 02-565-7740 |
| 2 | Applicants for events | ||||
| 3 | Up-and-coming artist applicants | ||||
| 4 | Applicants for the SeMA Nanji Residency | ||||
| 5 | Artist & Researcher members of the Nanji Residency | ||||
B SeMA shall explicitly stipulate compliance with the personal information protection laws, prohibition of personal information provision to a third party and liabilities regarding the same, etc. in the outsourcing contract and shall keep the contract in custody. When the outsourcing/ delegated agent is changed, SeMA shall notify of such changes via our private policy.
A An applicant/ data provider may exercise the following rights and, if an applicant/ data provider requests to access, rectify, erase, or suspend processing of personal information, the results of processing shall be notified within 10 days from the date when such request is received, and usage and provision of the personal information is limited until the requested process is completed.
1.
Request for access to personal information
An applicant/ data provider may request for access to personal information pursuant to Article 35 of the Personal Information Protection Act (Access to Personal Information). However, the access may be limited in the following cases under Article 35 (5) of the Act.
A. Where access is prohibited or limited by Acts
B. Where access may put the life or body of a third party in danger, or cause unjustified infringement of property and other interests of any other persons
C. Where a public institute/ organization has major difficulties in performing any of the following duties
1) Imposition, collection or refund of taxes
2) Evaluation of academic achievements or admission matters at the schools of each level established under the Elementary and Secondary Education Act and the Higher Education Act, lifelong educational facilities established under the Lifelong Education Act, and other higher educational institutions established under other Acts
3) Testing & qualification examination concerning academic competence, technical capability, and employment
4) Ongoing evaluation or decision-making concerning compensation or grant assessment
5) Ongoing audit and examination under other Acts
2.
Request for rectification or erasure of personal information
An applicant/ data provider may request for rectification or erasure of personal information pursuant to Article 36 of the Personal Information Protection Act (Rectification or Erasure of Personal Information). However, the erasure is not permitted where the said personal information shall be collected by other statutes.
3.
Request for suspension of personal information processing
An applicant/ data provider may request for suspension of personal information processing pursuant to Article 37 of the Personal Information Protection Act (Suspension of Processing of Personal Information). Unless where any of the following is applicable, the request for suspension may be rejected pursuant to Article 37 (2) of the Act.
A. Where special provisions in other laws require it, or it is inevitable to observe legal obligations
B. Where access may put the life or body of a third party in danger, or cause unjustified infringement of property and other interests of any other persons
C. Where a public institute/ organization cannot perform its work as prescribed by any Act without processing the personal info.
D. Where it is impracticable to perform a contract such as the provision of services as agreed upon with the said applicant/ data provider without processing the personal info. in question, and the person concerned has not explicitly expressed the intent to terminate the agreement
A SeMA shall destroy personal info. upon the expiry of the retention period, attainment of the purpose of processing the personal info., etc.
1. Destruction procedure: personal info. to be destroyed is selected, a destruction plan is established, and the personal info. is destroyed under the approval of the privacy officer for each field.
2. Destruction method: personal info. recorded or stored in electronic files are permanently deleted, so that it cannot be restored/ replicated, and personal info. recorded or stored as hard copies are shredded or incinerated.
A SeMA shall take technical, managerial, and physical measures to ensure safety, pursuant to Article 29 of the Personal Information Protection Act.
1. Encryption of personal info., technical measures to anti-hacking, etc., limitation of access to the personal information processing system, retention of access records and prevention of forgery and falsification, measures to restrict any access by non-authorized persons, etc. are applied based on the management standards of Seoul Special Metropolitan City.
2.
Minimization and education of personal information controlling staff
SeMA shall minimize personal information staff by designating staff in charge of personal information and restricting relevant tasks to such staff, and shall carry out regular training on such staff to comply with the relevant regulations and provisions.
A
An applicant/ data provider may apply for conflict settlement or consultation to Personal Information Dispute Mediation Committee or KISA Personal Information Infringement Report Center in order to receive compensation for any liabilities/ loss incurred due to personal information infringement.
To report or get consultation for other personal information infringement, please contact the following institutes:
1. Personal Information Infringement Report Center: Tel No. 118 (privacy.kisa.or.kr)
2. Personal Information Dispute Mediation Committee: Tel No. 1833-6972 (www.kopico.go.kr)
3. Supreme Prosecutors' Office Cyber Crime Investigation Division: Tel No. 1301(www.spo.go.kr)
4. National Police Agency Cyber Bureau: Tel No. 182(police.go.kr)
B
Any person whose right or benefit is infringed due to performance or omission by the head of a public institute/ organization upon an applicant/ data provider's request for access, rectification, erasure, suspension of processing, etc. of personal information may file an administrative appeal as stipulated by the Administrative Appeal Act.
For information on administrative appeals, please refer to the Central Administrative Appeals Commission (www.simpan.go.kr)
* SeMA Privacy Officer: LEE Sang-guk, head of management support team, Tel No. 02-2124-8810
* SeMA Privacy Officer in each field: head of each department
* SeMA Privacy Administrative Officer
- Division and Name: education promotion division, KIM Eun-Young
- Contact: Tel. 02-2124-8923
- Email: verti78@seoul.go.kr
- FAX : ☎ 02-2124-8950
An applicant/ data provider may file a request for access to personal information under Article 35 of the Personal Information Protection Act to the following department, and SeMA will make best effort to promptly respond to such a request.
* Reception/processing of request for access to personal information
- Department: Education Promotion Division
- Staff: KIM Eun-Young
- Office Tel.: 02-2124-8923 or verti78@seoul.go.kr
This privacy policy shall be enforced on April 20, 2021.
61, Deoksugung-gil, Jung-gu, Seoul, Republic of Korea (04515)
82-2-2124-8800