kossda-korea social science data archive

KOSSDA manages personal information as follows.

1. 1KOSSDA manages the personal information only within the scope specified in the purpose of processing personal information. The personal information will not be provided to a third party, except in cases where the subject of information consents or in cases that fall under Articles 17 and 18 of the Personal Information Protection Act, such as special provisions of the law.
2. 2In the following cases, KOSSDA obtains the consent of the subject of information and provides it only to the minimum extent necessary.

   Third party	Purpose	Information provided	Period of retention and use
   A data depositor that sets the conditions for use of deposited data to use after approval by the depositor.	Safe use of sensitive data	Applicant's name, Affiliation, Position, Purpose and plan for data use	Until the review of whether or not the use of the data has been approved is completed.

1. 1In order to manage personal information on the KOSSDA website, KOSSDA entrusts the processing of personal information as follows.

   Trustee name	Entrusted work	Phone number
   ARGONET	Maintenance and management of KOSSDA website system	042-864-1436

2. 2When signing an entrustment contract, KOSSDA stipulates the matters concerning prohibiting a third person from managing personal information for any purposes other than for the performance of the entrusted affairs, matters concerning technical and administrative protection measures, limiting any re-entrustments of the personal information, management and supervision of the entrusted party, and matters concerning liabilities to compensate for damage in the contract with regard to Article 26 of the Personal Information Protection Act. KOSSDA is regularly checking and supervising whether the entrusted party is safely managing personal information.
3. 3If the contents of the entrusted work or the trustee changes, KOSSDA will disclose it through the relevant privacy policy without delay.

1. 1KOSSDA will classify users who have not utilized our services for one year as inactive accounts, storing their personal information separately. Separately stored personal information will be retained for a period of 3 years and then promptly destroyed.
2. 2KOSSDA will notify members scheduled to become dormant, 30 days in advance of the transition to dormancy, regarding the separation of their personal information, the scheduled dormancy date, and the specific personal information that will be stored separately. This notification will be sent via email or other methods suitable for user notification.
3. 3If you do not wish for your account to be converted into an inactive account, please log in to the service before the transition. Additionally, even if your account has been converted to an inactive account, you can reactivate it by logging in with your consent, thereby restoring access to the normal service.

1. 1KOSSDA will destroy personal information without delay when its management purposes are achieved.
2. 2The information input by the user is moved to a separate database after its management purposes are achieved (in case of paper documents, moved to a separate document), then is stored for a certain period pursuant to relevant Acts or is destroyed without delay. The personal information moved to another database during this process will not be used for any other purposes unless stipulated by law.
3. 3The procedures and methods of destruction are as follows.
   1. 1.Destruction Procedures: KOSSDA establishes a personal information destruction plan and destroys personal information (or personal information files) that must be destroyed. KOSSDA selects the personal information (or personal information file) that requires destruction and destroys the personal information (or personal information file) with the approval of KOSSDA's personal information protection manager.
   2. 2.Methods of Destruction: Information in electronic form will be destroyed by using technical methods which would prevent the files from being recovered. Information printed in paper form will be shredded by using a shredder or be incinerated.

1. 1The subject of information can exercise rights such as inspection, correction, deletion, and transaction suspension of personal information
   1. ※ For children under the age of 14, their legal guardian may request inspection to personal information, and minors over the age of 14 may exercise their rights directly or through their legal guardian.
2. 2The rights of subject of information can be exercised through writing, e-mail, etc. in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act. KOSDA will take action on this without delay.
3. 3Rights can also be exercised through an agent, such as legal guardian of the subject of information or a person authorized to do so. In this case, you must submit a power of attorney in accordance with the form in Annex No. 11 of the "Notice on Personal Information Processing Methods (No. 2020-7)."
4. 4Requests to inspect and suspend personal information processing may limit the rights of subject of information pursuant to Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.
5. 5Requests for correction or deletion of personal information cannot be requested if the personal information is specified as the subject of collection in other laws and regulations.
6. 6When an subject of information requests inspection, correction, deletion, or suspension of processing of personal information in accordance with his/her rights, KOSSDA verifies whether the requester is the person himself or a legitimate agent.

KOSSDA is taking the following measures to ensure the safety of personal information.

1. 1Management measures: Establishment and implementation of internal management plan, regular employee training.
2. 2Technical measures: Management of access rights to personal information processing system, installation of access control system, encryption of unique identification information, etc., installation of security program.

1. KOSSDA has established the following technological, managerial, and physical measures to secure the safety of personal information pursuant to Article 29 of the Personal Information Protection Act.
   1. 1.Purposes of Using Cookies: To provide optimized service KOSSDA uses "cookies (x_cookie)," which saves and frequently retrieves the information of a subject of information. Cookies are small files that are sent from the server (HTTP) that are used to run websites the browser of the user's computer and are at times saved in the hard disk of the user's personal computer.
   2. 2.Installation, Operation, and Rejection of Cookies: Users have a choice over installing cookies. A subject of information can thus set an option on his/her web browser to allow all cookies, or to check them every time they are saved, or to reject the saving of all cookies.
      • How to Setup (for Internet Explorer users): Go to Tools on the upper part of the web browser > Internet Options > Privacy
2. If you choose to reject cookies, you cannot use the services that require login.

1. 1KOSSDA is designating personal information managers and persons in charge by field to protect the personal information of its users and respond to relevant complaints, and to secure the legitimacy and appropriateness of the personal information for the protection of the rights and interests of the citizens and the appropriate performance of public affairs.
2. 2KOSSDA is operating the following divisions that are in charge of requests for inspecting personal information, and their contact information is as follows.

   	Department in charge	Person in charge	Phone number	E-mail
   Personal Information Protection Managers	Department of data archiving	Sang-Wun Lee	02-880-2112	kossda@snu.ac.kr
   Division in Charge of Requests for Inspecting Personal Information	Department of data archiving	Sang-Wun Lee	02-880-2112	kossda@snu.ac.kr

3. 3To request an inspection of your personal information, please contact the division in charge of requests. You will be connected to the division in charge of the relevant personal information files and ensure that your request is processed within the period stipulated by Acts.

1. 1A subject of personal information may apply for dispute mediations or counseling at the Personal Information Dispute Mediation Committee or the Personal Information Protection Center at the Korean Internet Security Agency (KISA) or other organizations to remedy any infringement of personal information. Please contact the institutions below to report and consult for any other infringements of personal information.
   1. 1.Personal Information Dispute Mediation Committee : 1833-6972 (www.kopico.go.kr)
   2. 2.Cybercrime Investigation Division, Supreme Prosecutor’s Office : (Without Exchange Number) 118 (privacy.kisa.or.kr)
   3. 3.Cyber Bureau of the Korean National Policy Agency : (Without Exchange Number) 1301 (www.spo.go.kr)
   4. 4.Personal Information Infringement Report Center, Korean Internet Security Agency : (Without Exchange Number) 182 (ecrm.cyber.go.kr)

This privacy policy is effective from October 4, 2023.