Article 1. Purpose of processing personal information

• The Korea Textbook Association processes personal information for the following purposes. Personal information shall not be used for purposes other than the following, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act.
• 1. Provision of goods or services
  Personal information is processed for the purpose of delivering goods, etc.
• 2. Handling of civil complaints
  Personal information is processed for the purpose of identifying civil complaints, checking civil complaints, contacting and notifying them for fact-finding, and notifying them of the results of processing.

Article 2. Processing and retention period of personal information

• ① Korea Textbook Association processes and retains personal information within the period of retention and use of personal information in accordance with laws and regulations or within the period of retention and use of personal information agreed upon when collecting personal information from the information subject.
• ② Each processing and retention period of personal information is as follows.
  1. Provision of goods or services
  
  Personal information related to provision of goods or services is retained and used for the above purpose for up to three months from the date of consent for collection and use.
  - Grounds for retention: Order and delivery of products
  - Retention period: Six months
  - Order and tracking period (Period of use): Three months
  - Related laws: Records of the payment of consideration and the provision of goods or services: five years
  2. Handling civil complaints
  
  Personal information related to handling civil complaints is retained and used for the above purpose for up to three months from the date of consent for collection and use.
  - Grounds for retention: Handling civil complaints
  - Retention period: Three months
  - Related laws: Records regarding the settlement of consumers’ complaints or disputes: three years

Article 3. Entrustment of personal information processing

• ① The Korea Textbook Association entrusts personal information processing tasks in order to facilitate the tasks related with personal information processing as follows.
• 1. Delivery of goods
  
  - Entity to be entrusted: CJ Logistics
  - Contents of the entrusted tasks: Delivery of goods or sending of invoices, etc.
  - Entrustment period: One year
• ② In accordance with Article 25 of the Personal Information Protection Act, the Korea Textbook Association specifies documents on responsibilities such as prohibition of personal information processing, technical and administrative protection, re-entrustment restrictions, management and supervision of trustees, and compensation for damages when concluding an entrustment contract, and supervises whether the trustee processes personal information safely.
• ③ If there are any changes with the content of the entrust tasks or the trustee, we will disclose it through this personal information processing policy without delay.

Article 4. The rights and obligations of information subjects and methods of exercising such rights and obligations

• Users can exercise the following rights as the subject of personal information.
• ① The personal information subject can exercise the following personal information protection rights at any time with respect to the Korea Textbook Association.
  1. Request for viewing personal information
  2. Request for correction in case of errors, etc.
  3. Request for deletion
  4. Request for suspension of processing
• ② The rights pursuant to Paragraph 1 may be exercised through the Korea Textbook Association in accordance with Form 8 of the Enforcement Regulations of the Personal Information Protection Act in writing, by e-mail, or by fax, and the Korea Textbook Association will take action without any delay.
• ③ If the personal information subject requests correction or deletion of personal information for errors, the Korea Textbook Association will not use or provide the personal information until the correction or deletion is completed.
• ④ The rights pursuant to Paragraph 1 may be exercised through an agent such as a legal representative of the personal information subject or a person who has been delegated.
• In this case, you must submit a power of attorney in accordance with Form 11 of the Enforcement Regulations of the Personal Information Protection Act.

Article 5. Creation of items of personal information to be processed

• ① The Korea Textbook Association processes the following personal information items.
• 1. Provision of goods or services
  - Required items: Payment information such as home address, home phone number, mobile phone number, name, bank account information, etc.
  - Optional items: None
• 2. Civil complaint handling
  - Required items: Mobile phone number, name
  - Optional items: None

Article 6. Destruction of personal information

• In principle, if the purpose of processing personal information is achieved, the Korea Textbook Association shall destroy the personal information without any delay.
  The procedure, deadlines, and methods of destruction are as follows.
• 1. Destruction procedure
  After achieving the purpose, the information entered by a user shall be transferred to a separate database (DB) (a separate document in the case of paper) and it will be destroyed immediately after being stored for a certain period of time according to internal policies and other relevant laws. At this time, the personal information transferred to the DB shall not be used for any other purposes except by law.
• 2. Destruction deadline
  If the user’s personal information retention period has elapsed, the personal information shall be destroyed within five days from the end of the retention period. If the personal information becomes unnecessary for reasons such as achieving the purpose of processing personal information, abolishing the service, or terminating the business, the personal information shall be destroyed within five days from the personal information processing is deemed unnecessary.
• 3. Destruction method
  Information in the form of electronic files applies a technical method that cannot reproduce the records. Personal information printed on paper is shredded with a shredder or destroyed through incineration.

Article 7. Measures to secure personal information safety

• In accordance with Article 29 of the Personal Information Protection Act, the Korea Textbook Association takes technical, administrative, and physical measures necessary to ensure safety as follows.
• 1. Administrative measures
  Establishment and implementation of internal management plan, regular employee training, etc.
• 2. Technical measures
  Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, and installation of security programs.
• 3. Physical measures
  Access control to computer rooms, data storage rooms, etc.

Article 8. Person in charge of personal information protection

• ① The Korea Textbook Association is in charge of processing personal information, and designates a person in charge of personal information protection as follows for handling complaints and relief of damage for personal information subjects related to personal information processing.
• ▶ Person in charge of personal information protection
  Name: Yoo Sang-hee
  Position: Managing director
  Contact information: Tel: 031-8071-7940, E-mail: privacy@ktbook.com, Fax: 031-8071-7949
  ※ Your call will be directed to the department in charge of personal information protection.
• ▶ Department in charge of personal information protection
  Name of the department: General Affairs Department
  Contact Person: Kim Ji-ho
  Contact information: Tel: 031-8071-7940, E-mail: privacy@ktbook.com, Fax: 031-8071-7949
• ② The information subject may contact the person and the department in charge of personal information protection regarding matters related to inquiries on personal information protection, complaints, and damage relief arising from the service (or business) of the Korea Textbook Association.
  The Korea Textbook Association will respond and handle inquiries from information subjects without any delay.

Article 9. Installation and operation of video information processing equipment

• ① The Korea Textbook Association installs and operates video information processing devices as follows.
• 1. Grounds and purpose of installation of video information processing equipment: Facility safety and fire prevention of the Korea Textbook Association
• 2. Number of installation, location of installation, and recording range: 18 units are installed in major facilities such as distribution centers and offices, and record images of the entire space of major facilities
• 3. Person in charge of management, the department in charge, and person with access to video information: General Affairs Department Director Lee Sang-joo
• 4. Video information recording time, storage period, storage location, processing method
  - Recording time: 24 hours
  - Storage period: 60 days from the time of recording
  - Storage location and processing method: Storage and processing in the computer room in the office building of the distribution center
• 5. Method and place of video information verification: Request to the person in charge of management (General Affairs Department)
• 6. Measures for requests such as viewing video information by the information subject: Application must be made with a request for viewing personal video information and confirming the existence of personal video information, and access is permitted only when the information subject himself/herself is photographed or it is clearly necessary for the benefit of life, body, and property of the information subject.
• 7. Technical, administrative, and physical measures for video information protection: Establishment of internal management plans, restrictions on access control and access rights, safe storage and transmission technology of video information, storage of processed records and measures to prevent forgery and falsification, provision of storage facilities and installation of locking devices, etc.

Article 10. Remedies for infringement of rights

• The information subject may inquire about damage relief and consultations for personal information infringement to the following organizations.
  <The following organizations are separate from the Korea Textbook Association. Contact the following list if you are not satisfied with personal information complaint handling and the results damage relief by the Korea Textbook Association, or if you need more help.>
• ▶ Personal Information Infringement Report Center (Operated by the Korea Internet & Security Agency)
  
  - Responsibilities: Report of personal information infringement, counseling application
  - Website: privacy.kisa.or.kr
  - Tel.: (Without area code) 118
  - Address: (138-950) Korea Internet & Security Agency Personal Information Infringement Report Center, 135, Jung-daero, Songpa-gu, Seoul
• ▶ Personal Information Dispute Mediation Committee (operated by the Korea Internet & Security Agency)
  
  - Responsibilities: Personal information dispute mediation application, collective dispute mediation (Civil settlement)
  - Website: privacy.kisa.or.kr
  - Tel.: (Without area code) 118
  - Address: (138-950) Korea Internet & Security Agency Personal Information Infringement Report Center, 135, Jung-daero, Songpa-gu, Seoul
• ▶ Supreme Prosecutors’ Office Cyber Crime Investigation Team: 02-3480-3573 (www.spo.go.kr)
• ▶ National Police Agency Cyber Terror Response Center: 1566-0112 (www.netan.go.kr)

Article 11. Changes in personal information processing policy

• This personal information processing policy is effective as of May 1, 2012, and if there is any addition, deletion, or correction of changes in accordance with laws and policies, it will be notified 7 days before the enforcement of the changes.