Privacy Policy
The Korean Education Center in New York (hereinafter referred to as the “Center”) complies with the Personal Information Protection Act and other applicable laws and regulations in order to protect the rights and freedoms of data subjects. Accordingly, pursuant to Article 30 of the Personal Information Protection Act, the Center provides data subjects with information on the procedures and standards for the processing and protection of personal information.
1. Purpose of Processing Personal Information
The Center uses personal information only for the following purposes:
Provision of goods or services (e.g., application/registration and overall operation of Korean language courses; application/registration and overall operation of the TOPIK test)
Providing notices, educational information, and educational materials; and promoting and 안내ing projects and events
Providing event information and opportunities to participate
Statistics on service use, analysis of usage status, and service improvement
Development of new services
Handling inquiries and complaints
2. Items of Personal Information Processed
The Center processes the following information:
Name, nationality, date of birth, gender, contact information, address, ID, and a photo of the ID (when using goods or services)
Automatically collected items: access logs, IP address information, service usage records, and cookies
Users may refuse to provide the above personal information. However, if users refuse to provide personal information, some or all services may not be available.
3. Retention and Use Period of Personal Information
The Center processes and retains personal information within the retention and use period prescribed by applicable laws or within the period agreed to by the data subject at the time of collection.
However, in the following cases, the Center will process and retain personal information until the relevant reason has ended:
1) Records related to contracts or withdrawal of subscription (cancellation)
Legal basis: Act on Consumer Protection in Electronic Commerce, Etc.
Retention period: 5 years
2) Records related to payment and supply of goods, etc.
Legal basis: Act on Consumer Protection in Electronic Commerce, Etc.
Retention period: 5 years
3) Records related to consumer complaints or dispute resolution
Legal basis: Act on Consumer Protection in Electronic Commerce, Etc.
Retention period: 3 years
4) Access logs, IP address information, service usage records
Legal basis: Protection of Communications Secrets Act
Retention period: 3 months
5) If an investigation or inquiry is in progress due to violations of applicable laws, until such investigation or inquiry is completed
6) If there are outstanding claims and/or debts arising from use of the website, until the relevant claims and/or debts are settled
4. Provision of Personal Information to Third Parties
In principle, the Center does not provide personal information to external parties.
However, personal information may be provided exceptionally in the following cases:
When the user has given consent
When necessary for the operation of Korean language courses
When necessary for the administration of the TOPIK test
When requested by a court, investigative agency, or other administrative authority through lawful procedures
When there is sufficient reason to believe that disclosure of personal information is necessary to take legal action because a user has caused mental or material harm to others through use of the service
5. Procedures and Methods for Destruction of Personal Information
When personal information is no longer necessary—such as upon expiration of the retention period or fulfillment of the purpose of processing—it will be destroyed without delay. The procedures and methods for destruction are managed in accordance with the standards below.
1) Destruction Procedure
Information entered by users and other information collected/used by the Center will be stored for the retention period required under internal policies and applicable laws after the purpose of use has been fulfilled, and will then be destroyed.
2) Destruction Method
Personal information stored in electronic file form will be destroyed in a manner that makes it impossible to restore or reproduce. Personal information printed on paper will be destroyed by shredding or incineration.
6. Measures to Ensure the Security of Personal Information
To prevent users’ personal information from being leaked or damaged due to hacking, computer viruses, or other threats, the Center uses security (anti-virus) programs, encrypts personal information, and regularly checks access logs. The Center also uses secure servers to control unauthorized external access, restricts access to its computer/server room, and stores documents and auxiliary storage media in locked locations.
7. Rights of Users and Legal Representatives, and How to Exercise Them
Users and their legal representatives may request at any time that the “Center” withdraw consent to the provision of personal information. If consent is withdrawn, some or all services may not be available.
If a user requests correction of errors in personal information, the Center will not use or provide the relevant personal information until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, the Center will notify the third party of the correction results without delay so that the correction can be made.
Personal information that has been terminated or deleted at the request of a user or legal representative will be handled in accordance with “3. Retention and Use Period of Personal Information,” and will be processed so that it cannot be accessed or used for any other purposes.
8. 개인정보 보호책임자
The Center has appointed the Director of the Center as the Personal Information Protection Officer and is committed to protecting users’ personal information. (For inquiries: 646-674-6000, nykoredu@mofa.go.kr)
9. Miscellaneous
The Center’s Privacy Policy may be revised due to changes in laws, guidelines, or internal policies. If the Center revises this Privacy Policy, it will specify the date of revision and effective date, the details of the changes, and the revision history.
10. Addendum
This Policy shall take effect on January 1, 2026.