Guidelines on Protection of Personal Information


The following Guidelines on Protection of Personal Information concern protection of personal information obtained in connection with providing Services (the “Services”) from tradeKorea (URL "http://www.tradeKorea.com"), an e-marketplace operated by the Korea International Trade Association (“KITA”). tradeKorea Guidelines on Protection of Personal Information are subject to change in accordance with revisions of relevant acts and guidelines issued by the Government. Therefore, tradeKorea members should visit tradeKorea homepage occasionally to check for revisions in the Guidelines. KITA is committed to protecting the personal information of tradeKorea members and complies with the regulations for protection of personal information established in the “Promotion Of Information and Communications Network Utilization and Information Protection Act.” and “Guidelines on Protection of Personal Information” by the Ministry of Information and Communication.

• Purposes of collection and use of personal data
• Types of personal information collected and methods of collection
• Retention and disposition of personal information
• Disclosure and sharing of personal information
• Management and utilization of cookies
• Withdrawal of consent to provide personal information and revision, review, or deletion of personal information
• Technical and institutional maintenance for protection of personal information, handling of complaints, and personal information controllers

1. Purposes of collection and use of personal information
tradeKorea collects personal information in order to confirm your identification and your intent to use the Services that KITA provides and to provide customized Services to you. The personal information you provide will enable us to offer to you information tailored to your needs.
tradeKorea engages in various promotional activities for its Services. Your personal helps tradeKorea to provide targeted information to each member.
tradeKorea uses specific types of personal information for the purposes shown below. The scope of those purposes may be expanded in order to provide additional Services, in which case members will be informed in advance.

A. Individual members
- Name, residence registration number, ID, pin number: check identification, provide Services, etc.
- Telephone number, address: to secure channels for communication with transaction counterparts, deliver announcements, confirm intent of the member, and secure communication channels for handling complaints.
- Other optional items: information collected when providing specific Services
- IP address, time of visit to website: to prevent illegal access by unqualified members and block unauthorized access.
- Number of visits to website, history of member participation in events or surveys: to improve Services.

B. Corporate members
- Company name, business registration number, ID, pin number: to verify identification and provide Services.
- Telephone number, address: to secure channels for communications with transaction counterparts, deliver announcements, confirm intent of the member, and secure communication channels for handling complaints.
- Other optional items: information collected when providing specific Services
- IP address, time of visit to website: to prevent illegal access by unqualified members and block unauthorized access.
- Company information: to facilitate promotion of the company or its products
- Number of visits to website, history of member participation in events or surveys: to improve Services.

2. Types of personal information collected and methods of collection
tradeKorea collects basic personal information for the provision of Services upon your initial subscription to membership. For individual membership, such information includes name, resident registration number, telephone number, and address.
For company membership, such information includes company name, business registration number, phone number, e-mail address, address, etc. We request additional information for the purposes of providing certain specific Services.
However, we do not request information concerning race, personal beliefs, place of birth or permanent address, political inclination or criminal records, health status or sexual preferences, which may infringe members’ human rights, unless approved by a member or required by relevant statutes.
We may request your personal information in order to perform statistics analysis or deliver gifts when there is a survey or event. We assure you that your personal information will not be used for purposes other than the ones communicated to you in advance.
By agreeing to the Conditions of Use when applying for membership, a member is deemed to have provided approval for collection of his/her personal information.

3. Retention and disposition of personal information

A. Retention of personal information
Your personal information will be retained by tradeKorea and will be used for the purposes of providing Services for as long as you remain a member of tradeKorea and are provided with the Services that it offers.

B. Period of retention and use of personal information
Your personal information will be retained and used from the time of your membership subscription until membership termination (by member request or when withdrawn by tradeKorea).

C. Disposition of personal information
A tradeKorea member may request deletion of ID or membership cancellation under the terms of the ‘revision, review and deletion of personal information’ section or when the stated use of personal information has been achieved.
In such case, personal information is deleted permanently and irrevocably from our hard disks and cannot be recovered or used by any means.
However, such personal information may be retained when relevant statutes including commercial law, Act on Consumer Protection in Electronic Commerce, etc.
require retention of such personal information. In this case, the personal information is retained for the purposes of storage only.
- Records on withdrawal of agreement and subscription: 5 years
- Information on payments and supply of goods, etc.: 5 years
- Records of customer complaints or disputes: 3 years

4. Disclosure and sharing of personal information

A. In principle, tradeKorea does not disclose the personal information of members to other persons, companies or institutions. However, there are following exceptions:
(1) when a member has consented to disclosure of his/her personal information.
(2) when there are sufficient grounds to disclose personal information in order to take legal measures against a person who has violated the terms of tradeKorea Services or who has caused damage to others using tradeKorea Services.
However, personal information is only provided to law enforcement agencies pursuant to relevant regulations and is not disclosed to any individuals.
(3) when there are special regulations specified in Act on Real Name Financial Transactions and Guarantee of Secrecy, Use And Protection Of Credit Information Act, Framework Act On Telecommunications, Telecommunications Business Act, Local Tax Act, Consumer Protection Act, Bank of Korea Act, Criminal Procedure Act, etc.
(4) when it is necessary for settlement of fees for tradeKorea Services.
(5) when personal information is required for statistics / academic research or market surveys. Such data is processed so that specific individuals cannot be recognized.

B. tradeKorea may share your personal information with partner organizations for non-profit purposes to provide better Services.
In this case, we inform our members in advance of which organizations their personal information will be disclosed to, what the information is required for, and until when and how the personal information will be protected/maintained.
We will ask for your consent for such disclosure. If you do not consent to such disclosure, your personal information will not be disclosed to partner organizations in and no additional information will be collected. Furthermore, you may withdraw such consent at any time.

- Organizations that may be provided with personal information: indicated in “Domestic and Overseas Partner Organizations” in the guidelines on use of tradeKorea Services (See partner organizations)
- Purposes: supporting your overseas marketing
- Information provided: company information and its products
- Period of use and retention of personal information: Until the intended purpose is achieved

C. Personal information of KITA corporate members will be disclosed only when the company has consented to such disclosure.
only approved items will be disclosed to the users of the tradeKorea website for the approved period of time for the purpose of facilitating transactions between companies. You may withdraw such consent at any time.

D. In the event that member consent is required to provide to a third party personal information that exceeds that notified in advance or determined by the Conditions of Use, the following information shall be provided to the member in advance by letter, e-mail, or telephone.
(1) Matters that the member has provided consent for in the past.
(2) The extent of personal information intended to be provided to a 3rd party which exceeds the scope notified in advance or determined by the Conditions of Use.
(3) The right of members to refuse to provide consent and how to convey such intent.

E. In the event that KITA outsources the processing of personal information, members shall be informed by letter, e-mail, telephone or a notice on the homepage.
KITA shall ensure full protection of personal information, confidentiality, and prohibition of provision of personal information to 3rd parties through agreement with the service provider or other appropriate methods.
The agreement shall also stipulate responsibilities, outsourcing period, and the return or disposition of personal information upon termination of the agreement. The agreement shall be kept either in paper or electronic form.

5. Operation and utilization of cookies

tradeKorea uses cookies to retrieve and store member information in order to provide personalized and customized Services to each member.
A cookie is a small data package that the server hosting the tradeKorea homepage sends to a user’s Web browser. The data package is stored on the hard disk of the member’s computer.
Members must enable use of cookie in order to use personalized Services such as Mypage and Blog upon logging in to the tradeKorea website.
tradeKorea may use cookies to track members’ IDs and provide customized Services without the need to request additional information from members.
A unique cookie in the user’s browser is helpful in determining the frequency of visits by members or non-members and the total number of users of the tradeKorea website. At the same time, cookies are used to log the history of members’ participation in events or surveys.
By understanding, through use of cookies, the pattern of visits and use of the tradeKorea website, tradeKorea can provide Services that are more useful to its members. Members have the option to allow or refuse the use of cookies.
By choosing the appropriate option in their Web browser, members can allow all cookies, request confirmation each time a cookie is received, or refuse to accept any cookies.

6. Withdrawal of consent to provide personal information and revision, review, or deletion of personal information

A. Members can at any time read or revise their personal information and may request deletion of their member ID. Personal information can be reviewed and revised on Mypage of tradeKorea.
Member ID is deleted automatically upon cancellation of membership or can be manually deleted upon request to tradeKorea.

B. Withdrawal of consent for collection and use of personal information and provision of personal information to a 3rd party is enacted upon receipt of member request by e-mail or letter.
In such a case, the member shall provide member ID and residence registration number or business registration number to confirm identification.

7. Technical and institutional maintenance for protection of personal information, handling of complaints, and personal information controllers

A. Technical management for protection of personal information
KITA prevents its website from being attacked or hacked through a system that blocks intrusion from outside for the purpose of protecting personal information.
Also, KITA has a sensor system installed to detect computer attack 24 hours a day. Systems and data are backed up in case members’ personal information is destroyed.
Your personal information is protected by a PIN number known only to you. No person other than yourself can read your personal information or change your PIN number. Therefore, you shall not disclose your PIN number to others. We advise you to log out and turn off your browser after each session.
This procedure is particularly important in preventing leakage of your personal information when you are sharing your computer with others or when you have logged on to a computer in a public place.
You shall not expose, lend, or provide your personal information to others. At the same time, you should protect your personal information from being collected randomly through methods such as phishing. tradeKorea is not responsible for loss, theft, exposure, phishing, or disclosure of your PIN number or residence registration number.
tradeKorea will never ask for your PIN number by e-mail. Therefore, we advise you not to reveal your PIN number to others. You should also pay special attention not to expose your personal information when you are logged on to the website.
KITA may provide links to other companies’ websites or materials to tradeKorea members. In this case, KITA has no control over such websites or materials and therefore assumes no responsibility for or guarantee or the usefulness of the services or materials provided by such websites.
You may click a website address that is linked to KITA. However, the personal information protection policy of such websites may be different from the Guidelines provided by KITA. It is advisable to check the guidelines that apply to such websites.

B. Institutional management for protection of personal information
KITA has a minimum number of employees who are responsible for controlling personal information. Compliance with the Guidelines is stressed through training sessions.
At the same time, an audit committee reviews whether the Guidelines are properly observed by the responsible employees and takes relevant measures in the event any issues are detected. The control of personal information is managed while strict confidentiality is maintained.
The responsibilities and penalties for accidents concerning disclosure of personal information are clearly defined, even for new and retired employees.

C. Handling of complaints
In the event you wish to file a complaint in regard to personal information, please contact the personal information controller by e-mail (tradeKorea@kita.net) or telephone (02-6000-5406).
Appropriate measures will be taken immediately and we will inform you of such.

D. Personal information controllers
The personal information controllers assume responsibility for accidents that occur in regard to the protection of personal information.
However, KITA is not responsible for unpredictable events such as damage to information or disputes concerning postings by visitors to the website resulting from network hazards such as hacking, despite the security measures in place.
The personal information controllers responsible for your personal information are as follows. They will respond to your inquiries promptly.

Personal information controller (supervisor)
Name: Choi wonho
Title: e-service Team manager
Telephone number: 82-2-6000-5403
E-mail: whchoi@kita.net

Personal information controller
Name: Kang minwoo
Team: e-service Team
Telephone number: 82-2-6000-5406
E-mail: kmw75@kita.net


This revised Guidelines on Protection of Personal Information is effective as of Aprile 08, 2008.