The K-PaaS Portal (hereinafter referred to as the “Portal”) establishes and discloses the following 「Personal Information Protection Policy (hereinafter referred to as the Privacy Policy」 to protect users' personal information in accordance with the Personal Information Protection Act and other relevant laws and regulations, and to ensure prompt and smooth handling of related grievances.

Article 1 (Purpose of Processing Personal Information)

The portal processes personal information for the following purposes:.

■ To manage signed-in users
■ To manage trainees
■ To provide trial services
■ To announce events and seminars

The personal information being processed will not be used for any purpose other than those stated above. Should the purpose of use change, we will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

Article 2 (Processing and Retention Period of Personal Information)

The 'portal' retains and uses personal information from the time of collection until the purpose of collection and use is achieved. However, this does not apply when information must be retained for a specified period under relevant laws and regulations.

■ Personal Information Processing and Retention Period

   

Collected Items	Purpose of Collection	Holding Period
Name, ID, PW, e-mail Address, Mobile number, Agency	Membership Registration and Service Provision	Until membership termination

Article 3 (Provision of Personal Information to Third Parties)

The 'portal' processes the personal information of data subjects only within the scope specified in Article 1 (Purpose of Processing Personal Information). It provides personal information to third parties only in cases falling under Article 17 of the Personal Information Protection Act, such as with the data subject's consent or under special provisions of law.

Article 4 (Personal Information Disposal Procedures and Methods)

The 'portal' destroys personal information without delay once the retention period has expired or the processing purpose has been fulfilled. The Disposal procedures and methods are as follows.

■ Disposal Procedure : A personal information disposal plan is established for personal information (or personal information files) that must be deleted, and the disposal is carried out. Personal information (or personal information files) for which a reason for disposal has arisen is selected, and upon approval by the personal information protection officer, the personal information (or personal information files) is disposed.
■ Disposal Method : Personal information printed on paper shall be disposed by shredding or incineration, and personal information stored in computer file format shall be deleted using technical methods that prevent the recovery of the records.

Article 5 (Rights/Obligations of Data Subjects and Method of implementation)

Data subjects (or their legal representatives if under 14 years of age) may exercise the following personal information protection rights at any time:

① Request for access to personal information
② Request for correction of errors
③ Request for delation
④ Request for process suspension

he exercise of rights under Paragraph 1 may be made in writing, via email, or by facsimile transmission (FAX) after completing the form specified in Appendix No. 8 of the Enforcement Rules of the Personal Information Protection Act. The institution shall take action without delay in response.
When a data subject requests the correction or deletion of personal information due to errors or other issues, the company shall not use or provide such personal information until the correction or deletion is completed.
The exercise of rights under Paragraph 1 may be conducted through an agent, such as the data subject's legal representative or a person authorized by delegation. In such cases, a power of attorney in the format specified in Appendix No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted..
Requests for access to personal information and suspension of processing may be restricted under Article 35(5) and Article 37(2) of the Personal Information Protection Act..
Requests for correction or deletion of personal information cannot be made if such information is explicitly designated as subject to collection under other statutes.
- [Personal Information Protection Act Enforcement Rules, Appendix No. 8] Personal Information Request Form (Access, Correction/Deletion, Processing Suspension)
- [Personal Information Protection Act Enforcement Rules, Annex No. 11] Power of Attorney

Article 6 (Personal Information Protection Officer)

The portal assumes overall responsibility for personal information processing and has designated a personal information protection officer for matters related to personal information processing. Data subjects may contact the personal information protection officer and the responsible department regarding inquiries, complaint handling, damage relief, access requests, and other matters related to personal information protection.

■ Privacy Policy Chief Officer
Name: Choi Yong Tae
Position: Open Cloud Platform Alliance(OPA) Director
Contact: cyt@opakorea.org

■ Privacy Policy Officer
Department: Open Cloud Platform Alliance(OPA)
Person in Charge: Lee Seo Hyun Junior
Contact: hyun@opakorea.org

Article 7 (Personal Information Being Processed In)

The ‘Portal’ uses Personal Information for the following

■ Name, User Name, ID, PW, e-mail Address, Mobile Number, Agency, Birth year and date

Article 8 (Measures to Ensure the Security of Personal Information)

The 'Portal' is taking the following measures to ensure the security of personal information..

■ Administrative Measures: Establishment and implementation of internal management plans, regular employee training, etc.
■ Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identifiers, installation of security programs
■ Physical Measures: Access control for computer rooms, data storage rooms, etc.

Article 9 (Remedies for Infringement of Rights and Interests)

① Data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Reporting Center, and other relevant bodies to seek redress for personal information infringements. For other reports or consultations regarding personal information infringements, please contact the institutions listed below.

1. Personal Information Dispute Mediation Committee : (Without area code) 1833-6972 (www.kopico.go.kr)
2. Privacy Call Center : (Without area code) 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office Republic of Korea : (Without area code) 1301 (www.spo.go.kr)
4. Korea National Police Agency : (Without area code) 182 (ecrm.cyber.go.kr)

②Any person whose rights or interests have been infringed upon by a disposition or omission made by the head of a public institution in response to a request under Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), or Article 37 (Suspension of Processing of Personal Information, etc.) of the Personal Information Protection Act may file an administrative appeal in accordance with the provisions of the Administrative Appeal Act.

▶ Central Administrative Appeals Commission : (Without area code) 110 (www.simpan.go.kr)

Article 10 (Department Responsible for Receiving and Processing Requests for Access to Personal Information)

Requests to access personal information pursuant to Article 35 of the 「Personal Information Protection Act」 may be submitted to the department listed below.

                                                                                                         

Department	Open Cloud Platform Alliance(OPA) Secretariat
Person in Charge	Lee Seo Hyun Junior
Contact Number	02-6372-5004

Article 11 (Matters Concerning Changes to the Personal Information Processing Policy)

This Privacy Policy takes effect on February 17, 2025. Any additions, deletions, or modifications to its contents will be notified in advance.