Privacy Policy

All personal information handled by buyKOREA has been collected, stored and managed based on relevant Acts and Articles.

The 「Personal Information Protection Act」 provides general criteria for the handling of personal information, and buyKOREA will handle personal information, to be collected, stored and managed in accordance with the Article of the Act, legally and appropriately for proper performing of public services and for protecting user’s right and interest.

In addition, buyKOREA respects the interests of users such as access, correction, deletion and suspension of personal information as prescribed by relevant Acts and Articles. Users may request an administrative appeal in accordance with the Administrative Appeal Act in relation to the infringement of rights and interests in this Act.

buyKOREA formulates and discloses the following personal information management policy to protect the personal information and the rights and interests of owner of information according to Article 30 of the "Personal Information Protection Act" in order to seamlessly handle user's complaints related to personal information.

The Article 1 (Purpose of Personal Information Management)

① buyKOREA manages personal information for following purpose. Management of personal information won’t be used for any purposes other than the following purposes and will take necessary measures such as obtaining separate consent, etc according to the Acticle 18 of Personal Information Protection Act in case the purpose of usage is altered.

② buyKOREA, the purpose of the personal information file management to be registered and disclosed in accordance with the Article 32 of the Personal Information Protection Act is specified as follows.

Personal Information Processing Consignment
No Name of Personal
information file
Operating grounds Purpose of management
1 Overseas buyers
information
Owner of
information’s consent
Supporting Korean companies’
export
2 KOTRA memberships Owner of
information’s consent
Providing service, handling
complaints, etc

The Article 2 (Personal Information Management and Retention Period)

① buyKOREA manages and retains personal information within the period of retaining or using personal information in accordance with the article and the Act or during the period of using or retaining personal information consented from owner of information when to collect personal information.

② The management and retention period of each of personal information is specified as follows.

Personal Information Processing Consignment
No Name of Personal
information file
Operating grounds Purpose of management
1 Overseas buyers
information
Owner of
information’s consent
Until the membership
withdrawal
2 KOTRA memberships Owner of
information’s consent
Until the membership
withdrawal

The Article 3 (Providing Personal Information to a Third Party)

buyKOREA shall, in principle, manage the personal information of the owner of information within the scope specified for the purpose of collection and usage, and except for the following cases, will not manage beyond the scope of its original purpose or not provide to a third party without the prior consent of the owner of information.

1. The case to obtain separate consent from owner of information

2. The case special articles are prescribed in the Act and the Articles.

3. As the case where owner of information or legal representative is unable to give the declaration of his/her consent or is unable to obtain prior consent due to unknown address, the case clearly admitted to be necessary for the benefit of owner of information or third party's imminent life, body, property

4. As the case necessary for statistical writing and academic research purposes, the case to provide personal information in a form that can’t identify a specific individual

5. As the case the personal information is used for intended purposes other than the purpose or if not provided to a third party, the duties stipulated by other Act cannot be performed, the case to pass through deliberation and resolution of the protection committee

6. The case to be necessary to provide to foreign governments or international organizations for performing treaties or other international agreements

7. The case to be necessary for investigating crimes, and filing and maintaining the prosecution

8. The case to be necessary to perform the court’s trial

9. The case to be necessary to execute punishment as well as custody, probation

The Article 4 (Entrustment of Personal Information Management)

① buyKOREA has entrusted personal information management as below for a seamless personal information management.

Personal Information Processing Consignment
No Entrusted affairs Entrusted company name Telephone number Working Hour
1 KOTRA information system
operation and maintenance
SGA 070-7308-1004 09:00~18:00
2 Operating customer service center Leading i 02-390-4200 09:00~18:00
 
② buyKOREA has been storing the content of contract to clearly prescribe to comply with Personal Information Protection Act, to prohibit providing personal information to a third party as well as liability, etc when buyKOREA sign on the entrustment contract, and will inform through the notice as well as Personal Information Protection Policy when the company is altered.

The Article 5 (Matters on Rights and Responsibilities of Owner of Information and Methods of the Usage)

① The owner of information (the legal representative can exercise the right under 14 years of age) can exercise the right of personal information protection of following each subparagraph at any time.

  1. Request to access personal information

  2. If there is an error, request correction

  3. Request to delete

  4. Request to suspend management

② The execution of right under Paragraph 1 may be made in writing, e-mail, or fax (FAX) after completing Attached Form 8 of the Enforcement Rules of the Personal Information Protection Act, and the institution will take measures without delay.

③ When owner of information has requested correction or deletion of personal information, it will not be use or provided that year personal information until the correction or deletion is completed.

④ The execution of right under Paragraph 1 may be done through the legal representative of owner of information or the agent, etc such as the person who has been delegated. In this case, he/she must submit a power of attorney according to Attached Form 11 of the Enforcement Rules of the Personal Information Protection Act.

⑤ The request of the personal information access and suspension of management of, the right of owner of information may be restricted by the Personal Information Protection Act Article 35 Paragraph 5, Article 37 Paragraph 2.

⑥ Requests for the correction and deletion of personal information cannot be requested to be deleted if the personal information is specified as to be collected object in the other Act and Articles.

⑦ We verify whether the person to request for access, correction, deletion, suspension, etc according to the owner of information’s right, is the person himself or a legitimate representative.

 * Present identity card to identify yourself (identity card, driver's license, passport, etc.)

 * In case of a representative, present your identity card and a power of attorney to identify your representative

  * [Personal Information Protection Act Enforcement Rules, Attachment No. 8] Requesting letter for Personal Information (Access, Correction, Deletion, Suspension of Management)
  * [Enforcement Rules of Personal Information Protection Act Attachment 11] Power of Attorney

⑧ Requests for access, correction, deletion, and suspension of personal information management will be processed in the following procedure.
85 contries, 10 regions, 125 trad centers

The Article 6 (Items of Personal Information Management)

buyKOREA manages following personal information items.

Personal Information Processing Consignment
No Name of personal
information file
Personal information items recorded in the personal
information file
1 Overseas buyers
information
Required: Email, Password, Name, Tel, Company Information(Company Name, CEO, Address)
Optional : Job Position, Mobile, Fax
2 KOTRA membership Required : ID, Password, Name in Korean, Tel, Email
Optional : Name in English, Mobile, Fax, Department, Job Position, Address, Address in English

The Article 7 (Procedures and Methods of Personal Information Destruction)

① buyKOREA will, in principle, destroy personal information without delay when the purpose of personal information management is achieved.

However, when it is necessary to preserve it in accordance with other Acts, this is not the case. The procedures, deadlines and methods of destruction are specified as follows.

  A. Destruction procedure

  Unnecessary personal information and personal information files are managed under the responsibilities of personal information manager according to the internal policy procedure as follows.

  - Destruction of personal information

  Personal information that has passed the retention period will be destroyed without delay from the end date

  - Destruction of personal information files

  When the personal information file becomes unnecessary such as the purpose of personal information file management being achieved, abolition of service, or the end of the business, the personal information file is destroyed without delay from the date when personal information management is recognized as unnecessary.

  B. How to destroy

    1) Electronic forms of information use technological methods that cannot reproduce the records.

    2) Personal information printed on paper is shredded by shredder or destroyed by incineration.

The Article 8 (Measures to Ensure the Safety of Personal Information)

buyKOREA, pursuant to Article 29 of the 「Personal Information Protection Act」, takes the technical, administrative and physical measures necessary for ensuring safety as follows.

1. Minimization and training of personal information managers

We have designated and minimized the person in charge of personal information management and implemented measures to manage personal information.

2. Controlled and restricted access to personal information

We take necessary measures to control access to personal information through granting, modifying, and deleting access rights to the database system that manages personal information, and also control unauthorized access from outside by using an intrusion prevention system.

3. Storing access records

We have designated and minimized the person in charge of personal information management and implemented measures to manage personal information.

4. Encryption of personal information

The user’s personal information is encrypted and stored and managed. In addition, important data use separate security function such as using to be encrypted, etc when to store and transmit.

5. Security program installation and periodic inspection · update

buyKOREA installs and is periodically updated and inspected a security program to prevent personal information from being divulged or damaged by hacking or computer viruses,

6. Access control to unauthorized persons

The physical storage place of the personal information system that stored personal information is separately set up, and access control procedures are formulated and operated accordingly

The Article 9 (Each Contact Person and Contact Points in charge of Personal Information Protection)

Personal Information Processing Consignment
Division Name of
department
Name Contact point
BuyKOREA personal
information management
manager
Management
support department
Taesik Lee
Vice president
Tel. : 02-3460-7200
BuyKOREA general customer
information each sector
manager
Customer Cooperation
Team
Bonkyung Koo
Team leader
Tel. : 02-3460-7312
BuyKOREA general customer
information management
manager
Customer Cooperation
Team
Younghee Shim
Manager
Tel. : 02-3460-7326
Fax : 02-3460-7917
email :yhshim@kotra.or.kr
**SME stands for small and medium sized enterprises

The Article 10 (Personal Information Access Request)

① The owner of information can request to access personal information pursuant to Article 35 of the Personal Information Protection Act to the following department. KOTRA will endeavor to promptly handle owner of information’s request to access personal information.

▶ The department of reception and handling of request to access personal information

Name of department : Customer Cooperation Team

Contact person : Younghee Shim, manager

Contact point : Tel. 02-3460-7326 / email. yhshim@kotra.or.kr / Fax. 02-3460-7917

② In addition to the reception and handling department of access request of Paragraph 1, the owner of information can also request personal information access through the website of the comprehensive support for personal information protection (www.privacy.go.kr) of the Ministry of the Interior.

▶ The Ministry of the Interior’s comprehensive support portal for personal information protection → Complaints of personal information → Request for personal information access (requires real name verification through public Ipin)

The Article 11 How to Relieve Infringement

The owner of information can inquire damage relief, consultation, and others about infringement of personal information to the following institutions.

(As the following institutions are separate from KOTRA, when you are not satisfied with KOTRA's own personal information complaints handling, damage relief results, or need further assistance, please contact them.)

▶ Reporting Center for Infringements on Personal Information (operated by The Korea Internet and Security Agency)

  - Affairs : Reporting personal information infringement, application for consultation

  - Homepage : privacy.kisa.or.kr

  - Telephone : (Without an area code) 118

  - Address : (138-950), 135 Joongdae Road, Songpa-gu, Seoul, The Korea Internet & Security Agency Personal Information Infringement Reporting Center

▶ Personal Information Dispute Mediation Committee (The Korea Internet and Security Agency)

  - Affairs : Personal information dispute mediation application, collective dispute mediation (civil settlement)

  - Homepage : www.kopico.go.kr

  - Tel : 1833-6972

  - Address : (03171) 209 Sejong Daero Road, Jongno-gu, Government Seoul Office 4F Personal Information Dispute Mediation Committee

▶ Supreme Prosecutors' Office Cyber Crime Investigation Department: 1301 (www.spo.go.kr, cid@spo.go.kr)

▶ Cyber Terror Response Center of National Police Agency : 182 (cyberbureau.police.go.kr)

In addition, a person who is infringed the rights or interests due to administrative disposition or omission by the head of public institution for the request of owner of information on personal information correction, deletion or suspension, etc, can request the administrative appeals as provided by the Administrative Appeals Act

☞ Refer to the telephone number of the Central Administrative Appeals Commission(www.simpan.go.kr)

The Article 12 (Matters on the Installation and Operation of Automatic Collection Device of Personal Information and Rejection thereof)


buyKOREA can use cookie which stores users information and detect them at any time (COOKIE, automatic collection device of personal information such as internet access information file, etc). A cookie, as a small amount of information that a server to be used to run an institution's website sends to a user's browser, is also stored on the user's computer's hard disk. When a user accesses a website, the institution’s computer can read the contents of the cookie on the user's browser and detect user’s additional information in your computer, and can provide the service without further input such as the name of the contact, and others. Cookies identify your computer but do not personally identify yourself. In addition, the user has the option of installing cookies. As a result, by that the user can install the options in the web browser, the user accept all cookies, or check each time when a cookie is saved, or refuse to save all cookies. However, when you refuse to install cookies, you might turn to be uncomfortable with using the web and to have difficulty in using some services that require login.

(Example of how to install)

1. Internet Explorer : Tools menu at the top of web browser ▷ Internet options ▷ Personal information ▷ Cookie blocking level installation

2. Chrome : Installation menu on the right side of Web browser ▷ Advanced installation display at the bottom of the screen ▷ Contents installing button of personal information ▷ Cookie blocking level installation

The Article 13 Modification of Personal Information Management Policy

① This policy shall enter into force on June 2, 2017.
CUSTOMER
CENTER
top

QUICK MENU
QR