Privacy Policy

Purpose of processing personal information, period of processing and holding personal information, and items of personal information to be processed.

All personal information handled by the Vaccine Global Industrialization Foundation is collected, held, and processed in accordance with relevant laws and regulations. The Personal Information Protection Act provides general norms for the handling of such personal information, and the Vaccine Global Industrialization Foundation will treat personal information collected, held, and processed according to these laws and regulations legally and properly to protect users' rights and interests. In addition, the Vaccine Global Industrialization Foundation users' rights and interests, such as access, correction, deletion, and suspension of processing of personal information.

Providing personal information to a third party.
In principle, the Vaccine Global Industrialization Foundation shall process the personal information of the data subject within the scope specified for the purpose of collection and use, and shall not exceed the original scope of purpose or provide it to third parties without prior consent of the information subject.

  • In the case of obtaining separate consent from the data subject,

  • If there are special provisions in the law,

  • In a case where the data subject or legal representative is unable to express his/her intention or cannot obtain prior consent due to unknown address, etc., and is clearly deemed necessary for the benefit of urgent life, body, or property of the information subject or third party.

  • Where personal information is provided in a form where a specific individual cannot be recognized as a case necessary for the purpose of statistics preparation and academic research.

  • In a case where personal information cannot be performed under the jurisdiction prescribed by other laws if it is not used for purposes other than its purpose or provided to a third party, and has undergone deliberation and resolution by the Protection Committee.

  • Where it is necessary to provide foreign information or international organizations for the implementation of treaties and other international agreements.

  • Where it is necessary to file and maintain criminal investigations and prosecutions.

  • Where necessary for the court's performance of judicial affairs,

  • Where necessary for the execution of punishment, custody, and protection disposition,

Consignment of personal information processing.
the Vaccine Global Industrialization Foundation entrusts the processing of personal information by documents containing the following information.

  • Matters concerning the prohibition of processing personal information other than the purpose of performing consignment work.

  • Matters concerning technical and administrative protection measures for personal information.

  • Other matters prescribed by Presidential Decree for the safe management of personal information.

The rights and obligations of the data subject and the method of exercising them.
The data subject may exercise the following rights, and the legal representative of a child under the age of 14 may request access, correction, deletion, and suspension of the child's personal information.

Request to read personal information.
Personal information files held by the Vaccine Global Industrialization Foundation may require access to their personal information pursuant to Article 35 (reading personal information) of the Personal Information Protection Act. However, the request for access to personal information may be restricted by Article 35 (5) of the Act as follows.

  • In cases where access is prohibited or restricted by law,

  • Case where there is a fear of harming another person's life and body or unfairly infringing on another person's property and other interests.

  • In a case where a public institution causes serious disruption when performing any of the following tasks.

  • A. Business related to the imposition, collection, or refund of taxes.

  • B. Work on ongoing evaluation or judgment of compensation, payment, etc.

  • C. Affairs concerning audits and investigations in progress pursuant to other laws.

Request for correction and deletion of personal information.
Personal information files held by the Vaccine Global Industrialization Foundationmay be requested to be corrected or deleted pursuant to Article 36 (correction or deletion of personal information) of the Personal Information Protection Act. However, if the personal information is specified as the object of collection in other laws and regulations, the deletion cannot be requested.

Request for suspension of personal information processing.
Personal information files held by the Vaccine Global Industrialization Foundation may be requested to be suspended pursuant to Article 37 of the Personal Information Protection Act (suspension of personal information processing, etc.). However, if a request for suspension of personal information processing is requested, the request for suspension of processing may be rejected pursuant to Article 37 (2) of the Act.

  • Where there are special provisions in the law or it is inevitable to comply with the obligations under the law.

  • Case where there is a fear of harming another person's life and body or unfairly infringing on another person's property and other interests.

  • In a case where a public institution cannot perform its duties prescribed by other laws unless personal information is processed.

  • If personal information is not processed, it is difficult to fulfill the contract, such as not being able to provide services agreed with the information subject, and if the information subject does not clearly express his/her intention to terminate the contract,

Destruction of personal information.
In principle, the Vaccine Global Industrialization Foundation destroys personal information that has been achieved for personal information processing without delay. The procedure, deadline, and method of destruction are as follows.

The process of destroying it.
Personal information will be transferred immediately after the purpose is achieved or in a separate space, stored for a certain period of time in accordance with internal policies and other related laws and regulations, and then destroyed. Personal information transferred to a separate space is not used for any other purpose except in accordance with the law.

Period of destruction and method of destruction.
If the retention period has expired, the personal information becomes unnecessary, such as achieving the purpose of processing personal information, or abolishing the relevant work, it will be destroyed without delay. Electronic file-type information uses a technical method that cannot play records.
Personal information printed on paper is crushed with a grinder or destroyed through incineration.

Collection and retention of personal information.
Unlike general administrative information, personal information collected and held is strictly restricted in use and provision. Article 10 (Restriction of Use and Provision) of the Act on the Protection of Personal Information by Public Institutions stipulates as follows.

  • In the case where it is used inside the holding organization or provided to a person other than the holding organization under other laws.

  • If there is the consent of the data subject or if it is provided to the data subject,

  • Where there is considerable reason to use the relevant processing information to perform the duties prescribed by other laws.

  • In the case of providing treaties or other international agreements to foreign governments or international organizations for the implementation of international agreements,

  • In the case of providing a specific individual in an unidentifiable form for the purpose of statistics preparation and academic research, etc.

  • In a case where the data subject or its legal representative is unable to express his/her intention or is unable to agree due to unknown address, etc., and it is clearly recognized as beneficial to the data subject.

  • Where it is necessary to file and maintain a criminal investigation and prosecution.

  • Where necessary for the court's performance of judicial affairs,

  • Where there are other special reasons prescribed by Presidential Decree,

  • the Vaccine Global Industrialization Foundation will make efforts to comply with related laws and regulations in the use and provision of personal information to prevent unfair use.

Measures to secure personal information safety.
In accordance with Article 29 of the Personal Information Protection Act, the Vaccine Global Industrialization Foundation is taking technical, administrative, and physical measures necessary to secure safety as follows.

Minimization and training of personal information handling staff.
Employees who handle personal information are designated and managed only for the necessary personnel, and training is provided for safe management for handling staff.

Restricting access to personal information.
By granting, changing, or canceling access to the database system that processes personal information, necessary measures are taken to control access to personal information, and unauthorized access from the outside is controlled using the intrusion blocking system.
Records of accessing the personal information processing system (web log, summary information, etc.) have been stored and managed for at least 6 months.

  • access records.

Encryption of personal information.
Personal information is safely stored and managed through encryption. It also uses separate security features such as encryption and use of important data when storing and transmitting.

Installation and periodic inspection and renewal of security programs.
In order to prevent personal information leakage and damage caused by hacking or computer viruses, security programs are installed and updated and checked periodically.

Access control for unauthorized persons.
There is a separate physical storage place for personal information systems that store personal information, and access control procedures are established and operated.

How to relieve infringement of rights and interests.
Personal information subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency's Personal Information Infringement Report Center to relieve damage caused by personal information infringement.

  • Personal Information Dispute Mediation Committee: (without a national number) 118 (privacy.kisa.or.kr)

  • Personal Information Infringement Report Center: (without a national number) 118 (privacy.kisa.or.kr)

  • Supreme Prosecutors' Office Cybercrime Investigation Team: 02-3480-3571 (cybercid@spo.go.kr)

  • National Police Agency Cyber Terror Response Center: 1566-0112 (www.netan.go.kr)

In addition, a person who has been infringed on rights or interests due to disposition or omission made by the head of a public institution may request an administrative trial as prescribed by the Administrative Appeals Act.
For more information on administrative trials, please refer to the website of the Anti-Corruption and Civil Rights Commission. (www.acrc.go.kr)

Person in charge of personal information protection.

  • the Vaccine Global Industrialization Foundation.: Project Leader

  • Person in charge of personal information of the Vaccine Global Industrialization Foundation.

  • Contact: 054-842-4605