Personal Information Management Policy
All personal information collected, retained, and managed by Korea University Business School (hereinafter referred to as “KUBS”) is done so pursuant to and in full compliance with the personal information protection rules of relevant Acts and subordinate statutes, such as the Personal Information Protection Act.
- KUBS has implemented the management policy detailed below to protect personal information, rights and interests and to effectively resolve complaints raised in connection with personal information pursuant to the Personal Information Protection Act.
- KUBS, in particular, has set forth the Personal Information Management Policy specifically for its online records database that manages personal information pursuant to Article 30, Paragraph (1) of the Personal Information Protection Act and Article 31, Paragraph (1) of its Enforcement Ordinance.
- Whenever KUBS revises its Personal Information Management Policy, it shall make public the timing of the implementation and the revised content via its online database (or a separate notice) to allow those who are the subject of information to reliably and conveniently verify it.
Article 1. (Purpose of Managing Personal Information)
KUBS processes personal information for the following purposes: Personal information that is being processed shall not be used for any other purpose.
- 1. In applying for scholarships, international exchange students, international internships, and internships in Korea, personal information is processed for the purpose of screening and notification of results.
- 2. Handling Civil Complaints: Personal information is processed for the purpose of identification of applicants, confirmation of complaints, contact, notification of facts, and notification of results.
- 3. Personal information is processed for the purpose of receiving, screening, and notification of the results of applications for admission to MBA (Master of Business Administration), AMP (Advanced Management Program), and MSP (Management Studies Program).
- 4. Personal information is processed for the purpose of donation agreement to Korea University Development Fund and KUBS Dream Scholarship.
- 5. Personal information is processed for the purpose of KUBS alumni profile management.
Article 2. (Management and Retention Period of Personal Information)
① Personal information processed by KUBS is done so within the limits of the management and retention period promulgated in the Act or the period that is agreed upon in the collection of personal information from the information subject.
② The list of management and retention period of personal information is as follows:
- 1. Personal information used in applying for scholarships, international exchange students, international internships, and internships in Korea will be retained until the end of the course.
- 2. Personal information used in handling civil service shall be retained for three years after completion of civil service.
- 3. Personal information used in applying for the MBA (Master of Business Administration), AMP (Advanced Management Program), and MSP (Management Studies Program) shall be kept for five years after application. Data that has passed five years will be destroyed without delay.
- 4. In accordance with Article 15 of the Personal Information Protection Act, contents of information submitted in donation forms are preserved before the donor’s request to remove the data.
Article 3. (Managed Information)
KUBS collects and manages the following categories of personal information.
- 1. Scholarship Application: name, student number, grade year, phone number, mobile number, address
- 2. Exchange Program, International Internship, Domestic Internship Application
-
· Mandatory Contents: name (KOR, ENG), student number, gender identification, nationality, place of birth, majoring department, enrollment status, military service information, email address, mobile number, parents’ contacts, current address, parents’ address, GPA
- 3. General Services Administrations
-
· Mandatory Contents: name, email address, phone number
- 4. MBA Application
-
· Mandatory Contents: name (KOR, CHN, ENG), profile photo, nationality, identification number, marriage information, gender identification, phone number, mobile number, address, email address, bank account certification, bank account number, military service information, education profile (date of entrance, date of graduation, name of educational institution, location, major, GPA, certification number)
· Optional Contents: language certification (category, score, test date, date of expiration), career information (name of institution, date of joining, date of leaving, job description, position, position description, annual salary, employed department, certification of employment), degreed skill certification (category, date of certification, credential), list of award received (category, date of granted, credential)
- 5. AMP Application
-
· Mandatory Contents: name (KOR, ENG), profile photo, date of birth, phone number, mobile number, email address, gender identification, address, hobby, paths and sources of program reference, education profile (date of entrance, date of graduation, location of educational institution, name of educational institution, major and department, graduation certification), company information (name of institution, position, company registration number, industry description, product category, sales revenue, amount of equity, amount of total asset, number of employers, company address, company phone number)
· Optional Contents: career information (name of institution, date of joining, date of leaving, name of employer, employed department, position, certification of employment)
- 6. MSP Application
-
· Mandatory Contents: name (KOR, ENG), profile photo, phone number, mobile number, email address, gender identification, address, hobby, paths and sources of reference, education profile (date of entrance, date of graduation, location of educational institution, name of educational institution, major and department, graduation certification), company information (name of institution, position, company registration number, product category, industry description, sales revenue, amount of equity, amount of total asset, number of employers, company address, company phone number, FAX)
· Optional Contents: career information (name of institution, date of joining, date of leaving, name of employer, employed department, position, certification of employment)
- 7. Donation
-
· Mandatory Contents: name of donor, date of birth, mobile number, address, amount of donation, payment method, payment period, bank account details in case of using CMS (bank account certification, bank account number, name of account holder, first 6 digits of Identification number), uses of fund
· Optional Contents: email, phone number, career information (name of institution, employed department, position), relationship with KU, major, student number, request receipt for tax deduction (Identification number or Business registration number is needed), agreement for disclosure
- 8. Some fraction of personal information may be automatically created and collected during the online service usage (in case there be auto-fill information)
-
· Mandatory Contents: name of donor, date of birth, mobile number, address, amount of donation, payment method, payment period, bank account details in case of using CMS (bank account certification, bank account number, name of account holder, first 6 digits of Identification number), uses of fund
· Optional Contents: email, phone number, career information (name of institution, employed department, position), relationship with KU, major, student number, request receipt for tax deduction (Identification number or Business registration number is needed), agreement for disclosure
Article 4. (Provision of personal information to third parties)
KUBS may manage personal information to fulfill the intended purpose(s) of collection and use in principle and may not handle it beyond the intended purpose(s) nor provide it to a third party without the prior consent of the subject(s) of the information except for any of the following cases:
- 1. Based on Articles 17 and 18 of the Personal Information Protection Act, when applying for donation, collected information is provided to third parties for processing donation income, tax deduction and donation payment.
- 1) Name of institution and purpose of provision
- 2) Period of retention: Semi-permanent
- 2. Where personal information is provided in a form that a specific individual cannot be recognized, as necessary for the purpose of statistical preparation and academic research, etc.;
- 3. Where it is impossible to perform the duties prescribed by other laws unless personal information is used for the purpose other than intended or provided to a third party, and it has been deliberated and resolved by the Protection Committee;
- 4. Where it is necessary to provide foreign counter-parties or international organizations for the implementation of treaties or other international agreements;
- 5. Where necessary for the investigation of a crime and for the raising and maintaining of a public prosecution;
- 6. Where necessary for the performance of the court’s trial work;
- 7. Where necessary for the execution of sentence, detention, and protective disposition;
· National Tax Service (For the purpose of deducting year-end income/tax)
· Financial Telecommunications & Clearings Institute (For the purpose of fund transfer through automatic transfer)
Article 5. (Entrusting of personal information processing)
- ① When the personal information processing is entrusted, related matters are posted on the homepage of each department so that the subject of information can check them, and KUBS entrusts the processing of personal information as follows for efficient managing of each affairs.
-
· Whom in charge: FIART SID Co.
· Responsibility: Managing of KUBS homepage including design and development
- ② In terms of the contract for entrustment, KUBS retains the contract clearly stipulating the details complying with the regulations related to the Personal Information Protection Act, and if the company get changed, KUBS will notify it through Personal Information Management Policy on the homepage announcement.
Article 6. (Matters Concerning Rights and Duties of a Subject of Information, and How to Exercise Them)
- ① A subject of information can exercise the rights for access, correction, and deletion of personal information at any time.
- ② The exercise of rights pursuant to Paragraph ① can be performed in writing via email or FAX etc. accordance with the Enforcement Rules to Personal Information Protection Act, and KUBS will process it without delay.
- ③ The exercise of rights pursuant to Paragraph ① can be performed by proxy by the agent of a subject of information such as a legal representative or delegated individual. In such cases, the [Attached Form 11] of the Enforcement Rules to Personal Information Protection Act regarding the power of attorney should be submitted.
- ④ The right of a subject of information to request the suspension of the accessing and processing of personal information can be restricted pursuant to Articles 35(5) and 37(2) of the Personal Information Protection Act.
- ⑤ A request to correct or delete personal information cannot be accepted when such personal information is stipulated as the object of collection in other Acts.
- ⑥ When access, correction or deletion, and suspension of the processing of information is requested based on the rights of a subject of information, the person requesting access should be verified as a relevant party or a lawful representative.
Article 7. (Personal Information Destruction Process and Methods)
① When the purpose of the management of personal information has been achieved, KUBS, in principle, should destroy the personal information without delay, unless otherwise specified in other Acts for retention.
② The procedures for, timing of, and methods for destroying personal information are as follows:
- 1. Procedures of Destruction: After or as soon as the purpose of retaining personal information has been achieved, it shall be transferred to a separate storage unit, stored for a certain period of time, and then destroyed pursuant to internal policies and other Acts and subordinate statutes. The personal information transferred to the separate storage unit shall not be used for any other purpose(s) except as stipulated in Acts.
- 2. Timing of and Methods for Destruction: When the retention of personal information becomes unnecessary upon its reaching its expiration date, either its management purpose is considered achieved or the relevant service is deemed abolished. Accordingly, the personal information shall be destroyed without delay.
- 3. Methods for Destruction: Information in the form of an electronic file shall be destroyed via technical methods so as to prevent its recycling. Printed or hardcopy versions of personal information shall be shredded or incinerated.
Article 8. (Measures to secure safety of personal information)
- 1. Management measures: Establishment and implementation of internal management plans, regular staff training, etc.
- 2. Technical measures: Restriction of access to personal information processing system, installation of access control system, encryption of identification information, installation of security program
- 3. Physical measures: Control access to computer rooms, data storage rooms, etc.
Article 9. (Resolution for Infringement on Rights and Interests)
- ① A subject of information may apply for conflict resolution or consultation for damage relief against personal information violation(s) at the agencies listed below:
- 1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- 2. Privacy Violation Reporting Center : (without telephone exchange number) 118 (privacy.kisa.or.kr)
- 3. Cyber Criminal Investigation Division of the Supreme Prosecutors’ Office : (without telephone exchange number) 1301 (cybercid@spo.go.kr) www.spo.go.kr
- 4. Cyber Bureau of the National Police Agency : (no telephone exchange number) 182 (cyberbureau.police.go.kr).
- ② A person whose personal information-related rights or interests have been infringed upon by measures taken by the head of a public institution against a request by such a person for the inspection, correction/deletion, and the suspension of management of personal information may make an administrative appeal pursuant to the Administrative Appeals Act.
Article 10. (Personal Information Protection Managers)
- ① Personal Information Chief Manager: Dean, KUBS
- ② Personal Information Manager: Mikyoung Kim, KUBS Public Relations Team
- ③ Inquiries: 02-3290-1689, mmmg08@korea.ac.kr
Article 11. (Collection of e-mail addresses)
KUBS collects the e-mail addresses of homepage users in accordance with Article 50-2 of the Act on Promotion of Information Network Utilization and Information Protection.
Act on Promotion of Information and Communication Network Utilization and Information Protection
Article 50-2 (No unauthorized collection of e-mail addresses, etc.)
- ① No person shall collect e-mail addresses using programs or other technical devices that collect e-mail addresses automatically from the webpage without prior consent from the webpage operator or administrator.
- ② No person shall sell or distribute e-mail addresses collected in violation of paragraph 1.
- ③ No person shall use this address in the transmission of information knowing that it is an e-mail address which is prohibited from collection, sale and distribution under paragraphs 1 and
Updates on Personal Information Management Policy
- ① Changes are effective from September 1st, 2024.
- ② Please check out the previous policy below.