skip to main contents skip to main menu

Privacy Policy_221225

  • Home
  • Website Information
  • Privacy Policy
  • Privacy Policy_221225
All private information handled by the official website of the Foreign Investment Ombudsman (hereafter referred to as the Ombudsman Website) is collected, retained and managed in accordance with relevant Acts, including the Personal Information Protection Act. Ombudsman Website shall treat the collected and retained information in order to conduct public affairs properly and to protect the rights and interests of the users. To this end, Ombudsman Website established the following regulations for the processing of the personal information and shall disclose them to protect the personal information and rights and interests, and smoothly handle the grievances of the users related to their personal information.

Article1 (Purpose of the personal information processing)

The Office of the Foreign Investment Ombudsman uses personal information for the following purposes and does not use it for purposes other than the specified purpose. If the purpose of use is changed, we will have your prior consent.
  • Ombudsman Website processes the least amount of the personal information for limited purposes such as providing services, addressing grievances, and conducting necessary works.
  • Membership and Collection of Personal Information
    Ombudsman Website is operated by a non-member system so that all foreign-invested companies can use it freely. However, the least amount of personal information (e-mail, phone number, address) is collected in order to response to online consultation.

Article 2 (Processing and retention period of the personal information)

Ombudsman Website collects and retains personal information according to the Internet website operation guidelines and consent of the information subject, and the personal information files are as follows. (As of March 15, '21)
  • Ombudsman Website processes the personal information within the scope specified for the purpose of collection and use, and the retention period is applied as stipulated by the Personal Information Protection Act and related laws.
  • The processing and retention period of the personal information shall be as follows:
The processing and retention period of the personal information shall be as follows:
Name of the personal information file Grounds for operation Retention period
1 Company information of consultation applicant Consent by data subject 2 years
2 News letter Mailing member Consent by data subject 2 years
  • The Personal Information Protection Center provides a process to check the personal information files operated by KOTRA.
※ Visit the website of the Personal Information Protection Center(www.privacy.go.kr) to make an request to access to the personal information files of KOTRA.

Article 3 (Providing the personal information to the third party)

Ombudsman Website processes the personal information of a data subject within the scope defined in Article1 (Purpose of the personal information processing), and shall not process the information that exceeds the scope of the purpose or provide the information to the third party without the consent from the data subject excluding the following exceptions:
  • When Ombudsman Website obtains a separate consent from the data subject;
  • When there is a special regulation specified under the Act;
  • When Ombudsman Website clearly recognizes the need to provide the personal information to the third party for the interests of the life, physical body or property of the data subject or the third party as the data subject or legal representative is in a situation where he cannot express his intention or Ombudsman Website cannot obtain prior consent of the data subject due to the unclear address and other reasons;
  • When the personal information that is required for statistics and academic research is unrecognizable;
  • When the protection committee has reviewed and decided the case where the matters under the jurisdiction defined by a different Act cannot be executed as the personal information has been used for other purposes or has not been delivered to the third party;
  • When the information is needed to provide it to foreign governments or international organizations to carry out treaties and other international agreements;
  • When it is necessary for investigation of a crime or prosecution;
  • When it is necessary for a court to perform its judicial affairs; and
  • When it is necessary for executing a punishment, care and custody or protective disposition.

Article 4 (Entrustment of the personal information processing)

  • Ombudsman Website entrusts the following affairs related to the processing of the personal information to smoothly process the personal information:
Article 4 (Entrustment of the personal information processing)
No. Entrusted affairs Company Name Tel no. Working Hours Maintenance review for service provider entrusted
1 Operation and maintenance of the KOTRA information system SYSONE Co., Ltd. 02-6090-6800 09:00~18:00 passed
2 System maintenance Neoplus Co.,ltd 02-2082-0500 09:00~18:00 passed
3 Operation of the customer information center UcessPartners Co., Ltd. 02-3439-7600 09:00~18:00 passed
  • In accordance with Article 26 of the Personal Information Protection Act, Ombudsman Website, when outsourcing personal information processing to a third party, effect such outsourcing through a document that states prevention of personal information processing for other purposes than the outsourced purpose, technical and managerial safeguards of personal information, restricions in extending contracts, management and supervision over the entrusted companies, and responsibility for demage compensation. Additionally, Ombudsman Website is monitoring the entrusted comapnies to ensure the safety of the personal information
  • Ombudsman Website shall notify any changes in the entrusted companies and its works via Ombudsman Website's privacy policy in a timely manner.

Article 5 (Rights and duties of data subject and how to exercise them)

  • A data subject (a legal representative shall exercise the rights if the data subject is less than 14 years old) shall exercise the following rights related to the protection of the personal information at any time:
    • Request for inspection of the personal information
    • Request for modification where there is an error
    • Request for deletion
    • Request for suspension of the processing.
  • The data subject shall exercise his rights in accordance with Section 1 by submitting the document as provided by Annex 8. Enforcement Ordinance of the Personal Information Protection Act via mail, e-mail or fax and Ombudsman Website shall respond to the request without delay.
  • If the data subject of the personal information requests for modification or deletion of his personal information, Ombudsman Website shall not use or provide the personal information of the player until such modification or deletion is completed.
  • The data subject shall present his legal representative or agent to exercise his rights as provided by Section 1. In such case, the data subject is required to submit the power of attorney in accordance with Annex 11. Enforcement Ordinance of the Personal Information Protection Act.
  • The request for suspending the process and inspection of the personal information could be limited in accordance with Article 35.5 and Article 37.2 of the Personal Information Protection Act.
  • For modification and deletion of personal information, if other Acts stipulate the particular personal information be collected, the information plyer shall not request for deletion thereof.
  • For request to inspect, modify, delete or suspend the process in accordance with the rights of the data subject, Ombudsman Website shall confirm if the requested person is himself or his legal representative.
  • Procedures for inspecting, modifying, deleting and suspending the personal information are as follows:

Article 6 (Items for processing the personal information)

  • Ombudsman Website processes the following items for the personal information:
Article 6 (Items for processing the personal information)
Name of the personal information file Items for the personal information
1 Company information of consultation applicant Required Compnay name, foreign-invested enterprise no. (business registration no.), name of applicant, department/job title, phone number, email address, password
2 News letter Mailing member Required real name (Korean or English), company name, email address
  • When you visit Ombudsman Website, the information below could be generated and collected automatically.
    • Information automatically collected by Ombudsman Website : Cookie, IP Address, MAC Address, Service records, visiting history, Malfunction record
Please refer to below Large view of images
Search of personaI Information file list
  • Request for personal information inspection
    1. Request for personal information inspection
    2. Confirmation of the subject of information and scope of his/her right of personal information inspection
    3. Confiirmation of restrictions on the right of personal information inspection
      • Notification of decision on personal information inspection (approval / limitation / postponement)
        1. Inspection
      • Notification of decision on personal information (refusal)
  • Request for correction, deletion, suspension of managing the personal information
    1. Request for correction, deletion, suspension of managing the personal information
    2. Confiirmation of the subject of information and scope of his/her rights of correction,deletion, suspension of managing the personal information
    3. Confirmation of restriction on the rights of correction, deletion, suspension of managing the personal information
      • Notification of decision on correction, deletion, suspension of managing the personal information (approval / limitation / postponement)
      • Notification of restriction on correction, deletion, suspension of managing the personal information (refusal, matters related to other Acts, etc.)

Article 7 (Procedures and methods of destructing the personal information)

Ombudsman Website, in principle, shall delete the personal information without delay if its purpose to process the personal information is achieved.
However, it shall not be applied for the personal information that needs to be preserved in accordance with other Acts. The procedures, terms and methods of destructing the personal information are as follows:
  • A. Procedures
    Any unnecessary personal information and personal information file shall be destroyed in accordance with the below procedure of the inside policy under the responsibility of the person in charge of the personal information.
    • Destruction of the personal information
      The personal information shall be destroyed without delay from the end date of its holding period.
    • Destruction of the personal information file
      If the personal information file becomes unnecessary due to the achievement of the processing of the personal information file, abolition of the relevant service and the end of the business, the personal information file shall be destroyed without delay from the day that recognizes the processing of the personal information is no longer needed.
  • B. Methods
    • Electronic data shall be destroyed by using technical methods to make it impossible to restore such data.
    • Paper documents that contain the personal information shall be shredded or incinerated.

Article 8 (Measures to secure the safety of the personal information)

Ombudsman Website shall implement the following technical, managerial and physical measures to secure the safety of the personal information in accordance with Article 29 of the Personal Information Protection Act.
  • Establishment and implementation of management plan
    Ombudsman Website shall establish and implement its management plan in accordance with the Criteria for Securing Sagety of Personal Information by the Ministry of the Interior and Safety
  • Minimum number of staff in charge of the personal information processing and training
    Ombudsman Website shall designate the minimum number of staff to handle the personal information.
  • Restricted access to the personal information
    Ombudsman Website shall carry out necessary measures to restrict access to the personal information through empowerment, change and cancellation of access authorities for the database system that processes the personal information. It shall also operate intrusion prevention systems to deny any unauthorized external access.
  • Preservation of the access records and anti-forgery
    Ombudsman Website shall store access records (weblog data, summarized information, etc.) to the personal information data system for at least 1 year. Yet, the retention period for personal information processing systems that handle personal information from more than 50,000 people or process identification information and sensitive information is at least 2 years.
  • Encryption of the personal information
    The personal information of the users are stored and managed in an encrypted manner. Ombudsman Website also implements special security measures including encrypting important data when storing or transferring.
  • Installation and periodic updates of computer security programs
    Ombudsman Website shall install and periodically update the computer security programs to prevent the personal information from leakage and damage due to hacking or computer viruses.
  • Access control of the unauthorized personnel
    Ombudsman Website shall operate a separate physical storage facility for its personal information data systems and establish and operate relevant access control procedures

Article 9 (Contact points for Ombudsman Website’s personal information protection)

Article 9 (Contact points for Ombudsman Website’s personal information protection)
Personal Information Protection Director Foreign Investment Department Personal Information Protection Director Personal Information Protection Manager Personal Information Protection Officer
Trade-Investment Data
EXECUTIVE VICE PRESIDENT
JAEWON LYU
Tel: 82-2-3460-7400
Department in charge: Foreign
Investment OMBUDSMAN
Department in charge: Foreign
Investment OMBUDSMAN
Director-General
HONGKYUN LEE
Tel: 82-2-3497-1822
Department in charge: Foreign
Investment OMBUDSMAN
KEUMLAN PARK
E-mail: kl.park@kotra.or.kr
Tel: 82-2-3497-1823
Fax: 82-2-3497-1699

Article 10 (Request for inspection of the personal information)

  • A data subject shall request for the inspection of the personal information in accordance with Article 35 of the Personal Information Protection Act via the following team. KOTRA shall strive to swiftly handle the request of the data subject for the inspection of the personal information.
    ▶ Department in charge
    • Team: Foreign Investment OMBUDSMAN
    • Officer: KEUM LAN PARK
    • Contact: Tel 82-2-3497-1823 / E-mail kl.park@kotra.or.kr / Fax 82-2-3497-1699
  • The Personal Information Protection Center(www.privacy.go.kr), operating by the Personal Information Protection Commission, provides a process to access and check the personal information files.
    ▶ The Personal Information Protection Center → Civil affairs on the personal information → Request for the inspection of the personal information (real name authentication via public I-pin service is required.)

Article 11 (Remedies for infringement on rights and interests)

A data subject shall consult the following organizations for remedies regarding the infringement on the personal information
  • Personal Information Infringement Report Center (Run by the Korea Internet & Security Agency)
    • Description: Report infringement on the personal information, request for consultation
    • Website: http://privacy.kisa.or.kr
    • Tel: 118 (without area code)
    • Address: (58324) 9, Jinheung-gil, Naju-si, Jeollanam-do, Republic of Korea, the Korea Internet & Security Agency
  • Personal Information Dispute Resolution Committee (Run by the Korea Internet & Security Agency)
    • Description: apply for the personal information dispute resolution, collective dispute resolution (civil resolution)
    • Webiste: http://www.kopico.go.kr
    • Tel: 1833-6972
    • Address: (03171) 209, Sejong-daero, Jongno-gu, Seoul, Republic of Korea
  • Cybercrime Investigation Department: 1301(without area code) (www.spo.go.kr, cid@spo.go.kr), 182(without area code) (cyberbureau.police.go.kr)
Also, the data subject reserves the right to demand administrative appeals in accordance with the Administrative Appeals Act for any infringement on rights and interests occurred due to the nonfeasance or measures taken by the head of a public institution for the request of the data subject for inspection, modification, deletion or suspension of the personal information processing.
- Please refer to the telephone numbers via the website (www.simpan.go.kr) of the Central Administrative Appeals Commission.

Article 12 (Amendment to the personal information processing policy)

  • The policy shall take into effect on JUNY 18, 2022.
  • The previous document could be found below :
    • Privacy policy, January 1, 2016 ~ June 8, 2020 
    • Privacy policy, June 9, 2020 ~ September 22, 2020
    • Privacy policy, September 23, 2020 ~ February 19, 2021 
    • Privacy policy, February 20, 2021 ~ July 5, 2021 
    • Privacy policy, July 6, 2021 ~ August 31, 2021 
    • Privacy policy, September 1, 2021 ~ February 9, 2022(Click)
    • Privacy policy, February 10, 2021 ~ JULY 17, 2022(Click)