Privacy Policy

The Platform processes only the minimum personal information necessary for the following purposes and does so in an appropriate manner. The personal information being processed is not used for any purpose other than that for which it was collected. If the purpose of use changes, the Platform will take the necessary measures, including obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.

The Platform processes the following categories of personal information, distinguishing between required and optional items in accordance with the data subject’s freely expressed wishes. Providing optional information is not necessary to register as a member or to use the Platform’s basic services.

Personal Information Processed with the Consent of the Data Subject (Article 15(1)(1) of the Personal Information Protection Act)

The Platform automatically collects information when visitors access the website in order to track their visits.

• ① The Platform registers and discloses the categories of personal information it processes in accordance with Article 32 of the Personal Information Protection Act. The status of registered and disclosed personal information files can be checked by searching for “Korea Institute of Human Resources Development in Science and Technology” on the Personal Information Protection Commission’s Personal Information Portal (www.privacy.go.kr) under Personal Services → Exercise of Data Subjects’ Rights → Requests for Access to Personal Information, etc. → Search Personal Information File List. Shortcut to Personal Information File Search on the Personal Information Portal

• ① To ensure efficient processing of personal information, the Platform outsources the following personal information processing tasks:

  Outsourcing of personal information processing, consisting of entrusted party (service provider) and details of outsourced tasks.

  Entrusted party (service provider)	Details of outsourced tasks
  Plani Co., Ltd.	Development, maintenance, and operational support of the Platform system
  Popbill (Linkhub Co., Ltd.)	Sending KakaoTalk notifications related to the service

• ② When entering into an outsourcing agreement, the Platform specifies in the contract or other written documents, in accordance with Article 26 of the Personal Information Protection Act, matters concerning the prohibition of processing personal information for purposes other than those for which the tasks have been entrusted, technical and administrative safeguards, restrictions on further outsourcing, management and supervision of the entrusted party, and liability for damages. The Platform also supervises the entrusted party to ensure that personal information is processed securely.
• ③ If the details of the outsourced tasks or the entrusted party change, the Platform will disclose such changes in this Privacy Policy without delay.

• ① To ensure that data subjects are clearly informed when their personal information is transferred outside Korea to a country with a personal information protection framework different from that of Korea, the Platform provides the following information on the collection and transfer of personal information outside Korea, separately from the provision of personal information to third parties and the outsourcing of personal information processing.

1. Transfer of Personal Information Outside Korea: Use of Web Analytics Tool (Google Analytics)

The Platform transfers information collected from members outside Korea for the purpose of analyzing usage patterns and improving services, pursuant to Article 28-8(1)(3) of the Personal Information Protection Act. Members may refuse such transfers by configuring their web browser to block cookies (see Article 7) or by installing (see Article 8) the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout). Refusing such transfers will not restrict the use of the Platform’s services.

2. Information on the Use of Cloud Infrastructure

The Platform uses cloud services provided by NHN Cloud Co., Ltd. (NHN Cloud) for its operation. Users’ personal information is stored and processed at data centers (regions) located in Korea. Accordingly, the use of cloud services does not involve the transfer of personal information outside Korea.

3. Collection of Personal Information Outside Korea

The Platform does not directly collect personal information on servers located outside Korea. Even when users access the Platform from overseas to register as members, their personal information is collected and processed on servers located in Korea.

• ① When personal information is no longer necessary, including upon expiry of the retention period or fulfilment of the purpose of processing, the Platform destroys such personal information without delay.
• ② Where personal information for which consent has been obtained from the data subject must be retained in accordance with other laws and regulations, despite the expiry of the retention period or fulfilment of the purpose of processing, the Platform retains such information by transferring it to a separate database (DB) or storing it in a separate location.
• ③ The procedures and methods for destroying personal information are as follows:
  • Destruction procedure: The Platform identifies personal information for which grounds for destruction have arisen and destroys it with the approval of the Personal Information Protection Officer.
  • Destruction method: Personal information recorded and stored in electronic file format is destroyed using methods such as low-level formatting to prevent the records from being restored. Personal information recorded and stored in paper documents is destroyed by shredding or incineration.

The Platform implements the following measures to ensure the security of personal information in accordance with Article 29 of the Personal Information Protection Act and the Standards for Measures to Ensure the Security of Personal Information.

• Administrative measures: Establishment and implementation of an internal management plan; minimization of the number of employees handling personal information and provision of regular training; and operation of a dedicated department.
• Technical measures: Management of access rights to personal information processing systems, including granting, changing, and revoking such rights; installation and operation of access control systems and implementation of other relevant safeguards; measures to block access from the internet network; encryption of personal information, including one-way encryption of passwords before storage; retention of access logs and prevention of their falsification or alteration; installation, operation, and periodic updating of security software; and inspection and remediation of vulnerabilities.
• Physical measures: Access control for computer rooms, document storage rooms, and other facilities; storage of documents and auxiliary storage media containing personal information in secure locations equipped with locks; safety measures against disasters and emergencies; and control over the removal and return of auxiliary storage media.

• ① The Platform uses cookies, which store usage information and retrieve it from time to time, to provide users with individually tailored services and convenience.
• ② Cookies are small amounts of information sent by the server (HTTP) used to operate a website to a user’s browser. They are stored on the user’s computer or mobile device and are automatically transmitted from the user’s browser to the server when the user accesses the website.
• ③ Users can configure their web browser settings to allow or block cookies. However, refusing to allow cookies to be stored may make it difficult to use certain services that require login.

  ▶ How to block cookies in a web browser

  • Chrome: Select the three-dot menu in the upper-right corner of the browser → Settings → Privacy and security → Delete browsing data.
  • Edge: Select the three-dot menu in the upper-right corner of the browser → Settings → Cookies and site permissions → Manage and delete cookies and site data.

  ▶ How to block cookies in a mobile browser

  • Chrome: Mobile browser settings → Privacy and security → Delete browsing data.
  • Safari: Mobile device settings → Apps → Safari → Advanced → Block all cookies.
  • Samsung Internet: Mobile browser settings → Browsing data → Delete browsing data.

• ① To analyze usage statistics and improve its services, the Platform permits third parties to collect behavioral information through automatic personal information collection devices as follows:

  Behavioral information collected by third parties, consisting of name of collection device, type of collection device, business collecting the information, behavioral information collected, and purpose of collection.

  Name of collection device	Type of collection device	Business collecting the information	Behavioral information collected	Purpose of collection
  Google Analytics tag	JavaScript (web page)	Google LLC	Website visit and usage history, browser and device information, and cookies	Analysis of usage statistics

• ② Data subjects may configure their web browser settings to allow or block the collection of behavioral information by third parties, including by changing their cookie settings.

  ▶ How to block third-party cookies

  • Chrome: Settings → Privacy and security → Third-party cookies → Block third-party cookies
  • Edge: Settings → Privacy, search, and services → Tracking prevention (Balanced or Strict) or Cookies → Block third-party cookies
  • Mobile devices: Use the relevant browser’s settings to block third-party cookies or browse in private/incognito mode.

  ▶ Opting out of Google Analytics collection: Install the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout)

• ① Data subjects may, at any time, request access to their personal information, its correction or erasure, suspension of processing, and withdrawal of consent.

  ※ The rights of children under the age of 14 must be exercised directly by their legal representatives. Data subjects who are minors aged 14 or older may exercise their rights concerning their personal information themselves or through their legal representatives.

• ② Data subjects may exercise the rights set forth in Paragraph 1 by submitting a written request, making a telephone call, or sending an email to KIRD, or by other means. KIRD will take action without delay. Data subjects may also directly access or correct their personal information, or withdraw their membership (withdraw their consent), through the My Page → Edit Member Information / Withdraw Membership menu on the Platform.
• ③ The rights set forth in Paragraph 1 may be exercised through a representative, such as the data subject’s legal representative or an authorized agent. In such cases, a power of attorney in the form prescribed in Attached Form No. 11 of the Public Notice on the Methods of Processing Personal Information must be submitted.
• ④ Requests for access to personal information or suspension of processing may be subject to restrictions on the data subject’s rights pursuant to Article 35(4) and Article 37(2) of the Personal Information Protection Act.
• ⑤ A request for the correction or erasure of personal information may not be made where the personal information is expressly specified as subject to collection under other laws and regulations.
• ⑥ When receiving a request to exercise the data subject’s rights to access, correct or erase personal information, or suspend its processing, the Platform verifies whether the person making the request is the data subject or a duly authorized representative.

• ① The Platform processes pseudonymized information for purposes including improving services through educational research, such as learning analytics, research and analysis, and statistical compilation, as well as preserving records in the public interest.
• ② The Platform does not outsource the processing of pseudonymized information or provide such information to third parties. The Platform takes necessary technical and administrative safeguards, including storing and managing pseudonymized information separately to prevent re-identification and preparing and retaining records of the processing of pseudonymized information.
• ③ For further details on technical and administrative safeguards, please refer to Article 6, Measures to Ensure the Security of Personal Information, of this Privacy Policy.

• ① The Platform has designated the following Personal Information Protection Officer and responsible departments to oversee personal information processing and handle data subjects’ complaints and provide remedies for damages relating to personal information processing.

  Personal Information Protection Officer and responsible departments, consisting of category, department/position, name, and contact information.

  Category	Department/Position	Name	Contact Information
  Personal Information Protection Officer	Strategic Management Office	Bongrak Lee	brlee@kird.re.kr / 043-251-7010
  Personal Information Protection Contact	Infrastructure Management Division	Seonjae Kim	kimsj@kird.re.kr / 043-251-7019
  Department Responsible for Platform Operations	Career Support Division	Marie Kim	mrkim@kird.re.kr / 042-820-4018

• ② Data subjects may direct any inquiries, complaints, or requests for remedies relating to personal information protection that arise while using the Platform’s services to the Personal Information Protection Officer or the responsible department. The Platform will respond to and address such inquiries without delay.

• ① Data subjects may submit requests to access their personal information pursuant to Article 35 of the Personal Information Protection Act to the department listed below. The Platform will make every effort to ensure that such requests are handled promptly.

  ▶ Department responsible for receiving and handling requests to access personal information: Career Support Division / Person-in-charge: Marie Kim, Research Fellow / Contact: 042-820-4018

• ② In addition to submitting requests to the department listed above, data subjects may request access to their personal information through the Personal Information Portal (www.privacy.go.kr) under Personal Services → Exercise of Data Subjects’ Rights → Requests for Access to Personal Information, etc. → Access Requests. Shortcut

• ① To seek remedies for infringements of personal information, data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency’s Personal Information Infringement Report Center, or other relevant organizations. For other reports or consultations concerning personal information infringements, please contact the following organizations:
  • Personal Information Dispute Mediation Committee: (no area code) 1833-6972 (www.kopico.go.kr)
  • Personal Information Infringement Report Center: (no area code) 118 (privacy.kisa.or.kr)
  • Supreme Prosecutors’ Office: (no area code) 1301 (www.spo.go.kr)
  • Korean National Police Agency: (no area code) 182 (ecrm.cyber.go.kr)
• ② Any person whose rights or interests have been infringed by an administrative disposition or failure to act by the head of a public institution in response to a request made under Article 35 (Access to Personal Information), Article 36 (Correction or Erasure of Personal Information), or Article 37 (Suspension of Processing, etc. of Personal Information) of the Personal Information Protection Act may file an administrative appeal in accordance with the Administrative Appeals Act. (Central Administrative Appeals Commission: (no area code) 110, www.simpan.go.kr)

• ① This Privacy Policy shall take effect on 27 October 2026.
• ② Whenever the Platform amends this Privacy Policy, it will publish a comparison of the previous and revised versions on the Platform’s website so that data subjects can easily identify whether changes have been made, when the changes take effect, and what has changed. The Platform will also maintain a record of previous versions of this Privacy Policy.