Korea Research International (hereinafter referred to as "the Company") complies with the "Act on Promotion of Information and Communication Network Utilization and Information Protection" and Article 30 of the "Personal Information Protection Act" to protect the personal information of data subjects and to promptly and smoothly handle any complaints related to it. We establish and disclose this privacy policy to ensure the protection of personal information and strive to protect user rights.

Through this privacy policy, the Company informs users of the purposes and methods of the personal information provided and the measures taken to protect personal information. Any revisions to this privacy policy will be announced through the Company's website notice (or individual notice).

This policy has been effective since July 1, 2019, and the Company's privacy policy includes the following contents:
1. Items and methods of collecting personal information
2. Purpose of using personal information
3. Processing and retention period of personal information
4. Sharing of personal information and provision to third parties
5. Handling consignment of personal information
6. Procedures and methods of personal information destruction
7. Rights and obligations of data subjects and methods of exercising those rights
8. Installation/operation and refusal of automatic collection devices for personal information
9. Technical/managerial safeguards for the protection of personal information
10. Contact information of the personal information management officer and person in charge
11. Request for access to personal information
12. Remedies for infringement of rights
13. Obligation to notify
14. Changes to the privacy policy on the handling of personal information

1. Items and Methods of Collecting Personal Information
The Company collects the following personal information for various purposes such as research consulting, survey execution, recruitment, and service usage. Users have the right to refuse the collection of personal information. However, the following items have not been categorized as mandatory/optional.

-Korea Research International Website: ID, password, full name, current address, current workplace, mobile phone number, email address, Korea Research International employment details (corporation/department, position, period of employment, Newsletter subscription status, personal photo, name and email address of survey requester, phone number - mobile/landline, company name). Additionally, during the use of the website or service processing, access logs, cookies, IP information, etc., of users may be generated and collected.
-Recruitment Site: ID (when applying through the recruitment site), password (when applying through the recruitment site), full name (Korean/English), email address, application history, phone number (mobile/landline), date of birth, photo, address, nationality, country of residence, alma mater, educational background, major, career history, qualifications, awards received, family information, marital status, military service details (reasons for exemption if applicable), veterans' affairs (including veterans' identification number for eligible applicants), disability status. Additionally, during the use of the website or service processing, access logs, cookies, IP information, etc., of applicants may be generated and collected.
-Application Documents from Job Applicants: Full name (Korean/English), email address, application history, phone number (mobile/landline), date of birth, photo, address, nationality, country of residence, alma mater, educational background, major, career history, qualifications, awards received, family information, marital status, military service details, veterans' affairs (including veterans' identification number for eligible applicants), disability status, recommender/relationship information (name, company, position, relationship, contact information), physical information (height, weight, blood type, eyesight), marital status, wedding anniversary date, religion, hobbies.
Performance of Outsourced Work for Customers or Client Companies (Here, 'outsourced work' refers to specific services provided by the Company at the request of customers or client companies based on legally binding contracts): Full name (Korean/English), nationality, date of birth (solar/lunar calendar), address, phone number (mobile/landline), email address, company registration number, company phone number, company representative name, nationality, domestic residency status, family information (disabled individuals, female head of household, infants, individuals aged 70 or above/number of children, individual disability status), number of family members, types and amounts of salary and deductions, name of previous workplace/business registration number of previous workplace, period of previous employment, current/previous salary/bonus/benefits, determined tax amount/donations/withholding tax, total salary/income deduction for labor income/amount of labor income, family information (foreign/domestic nationality/relationship/name/resident registration number/insurance premium/medical expenses/educational expenses/credit card/donation usage amount).
Payment and Settlement Processing: Name (or company name), phone number (mobile/landline), email address, bank account number, resident registration number.
Please note that this is a translation and may not be an exact legal version. The original Korean version should be referred to for official purposes.


The Company collects personal information through the following methods: user input via the website (kr.co.kr) web documents, paper documents in printed format, email, and file formats. In some cases, the Company may collect some information through methods recognized by relevant laws.

2. Purposes of Using Personal Information
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and in the event of changes to the purposes of use, necessary measures, including obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act, will be taken.
1. Managing the Company's official website, promotion, and network operation
2. Handling survey consultations and requests received through the Company's official website
3. Carrying out recruitment procedures and other related tasks for job applicants, as well as communication related to recruitment matters
4. Facilitating the onboarding process and providing various types of support for new employees
5. Managing personal information of employees, operating internal networks and welfare programs, and providing administrative support related to external activities
6. Performing outsourced tasks for client companies
7. Performing payment and settlement processing tasks

3. Processing and Retention Period of Personal Information
When the purposes of collecting and using personal information have been achieved or when the individual providing the personal information withdraws their consent, the Company will promptly destroy the relevant information. However, if the individual provider of personal information has given separate consent for its use or if the information is subject to the retention period stipulated by law, the Company will retain the personal information for the agreed period.

● Survey Consultations
Retained Items: Name (or company name), contact information (phone number, mobile phone number, or email address, depending on the choice)
Legal Basis for Retention: Protection of Communications Secrets Act
Retention Period: 6 months from the date of collection
● Job Applicants Management
Retained Items: Name, phone number (mobile/landline), email address, date of birth, gender, educational background, career history, etc.
Legal Basis for Retention: Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc.
Retention Period: 6 months from the date of collection
● Records of Receipt of Expense Certificates and Calculation of Taxes, etc.
Retained Items: Name, phone number (mobile/landline), payment information
Legal Basis for Retention: Act on the Preservation of Evidence Related to the Operation of the Company
Retention Period: 5 years from the date of collection
● Records of Payment and Supply of Goods, Etc.
Retained Items: Name, phone number (mobile/landline), payment information
Legal Basis for Retention: Act on Consumer Protection in Electronic Commerce, Etc.
Retention Period: 5 years from the date of collection
Please note that this is a translation and may not be an exact legal version. The original Korean version should be referred to for official purposes.

4. Sharing and Provision of Personal Information to Third Parties
The Company uses personal information within the scope notified in "2. Purposes of Using Personal Information" and generally does not disclose users' personal information to external parties beyond this scope without the user's prior consent. However, there are exceptions as follows:
● When users have given prior consent
● When it is inevitable to use external subcontractors for the intended purpose
● When it is deemed necessary in good faith for legal requests, such as requests from the government or investigative agencies based on proper legal procedures
● When a request for personal information is justified and submitted by a commissioning company, and the internal validity of the reasons is recognized

5. Handling of Personal Information Entrustment
Except with the customer's consent or as required by relevant laws and regulations, the Company will not use or provide customers' personal information to others or other companies or institutions beyond the scope notified in "Article 2: Purposes of Using Personal Information." However, the following cases require attention as personal information is used and provided: In the event of the Company's merger, acquisition, or full transfer of the rights and obligations of the service provider, the Company will provide detailed notification of the valid reasons and procedures in advance and grant the option for customers to withdraw consent for the use of their personal information. Additionally, for system management to enhance services, the Company entrusts personal information as follows and has established necessary provisions to ensure the safe management of personal information in accordance with relevant laws. The agencies and tasks entrusted with personal information are as follows:

6. Personal Information Destruction Procedure and Method
The Company will, in principle, destroy personal information without delay after the purpose of collecting and using such information has been achieved.
The procedures and methods for the destruction are as follows:
A. Destruction Procedure:
The information provided by users for job applications and inquiries on the Korea Research International website will be transferred to a separate database (or a physical document file) after the purpose is achieved. It will be stored for a certain period according to internal policies and other relevant laws (refer to the retention and use period). After this period, the information will be destroyed. This personal information will not be used for any purpose other than retention, except for cases where required by law.
B. Destruction Method:
● Personal information printed on paper will be shredded or incinerated to be irrecoverable.
● Personal information stored in electronic file format will be deleted using a technology that cannot reproduce the records.

7. Rights, Obligations, and Exercise Methods of Data Subjects
Data subjects can exercise the following rights regarding personal information protection against the Company:
A. Right to Request Access to Personal Information
B. Right to Request Correction in case of Errors
C. Right to Request Deletion
D. Right to Request Suspension of Processing
Data subjects can exercise their rights by submitting a request in writing, by phone, email, fax, or other methods to the Company. The Company will promptly take appropriate actions in response to such requests. Additionally, if a data subject requests the correction or deletion of their personal information due to errors, the Company will not use or provide the relevant personal information until the correction or deletion is completed. Data subjects can exercise their rights through their legal representatives or authorized representatives.
In such cases, the data subject's legal representative or authorized representative must submit a letter of delegation in accordance with Annex 11 of the Enforcement Rules of the Personal Information Protection Act. Data subjects must not infringe upon the personal information and privacy of themselves or others or violate relevant laws and regulations in the process.
The Company will handle the terminated or deleted personal information based on the retention and use period specified in "Retention and Use Period of Personal Information" and ensure that it is not accessible or used for any other purposes.

8. Installation/Operation and Refusal of Personal Information Automatic Collection Devices
The Company operates 'cookies' to store and retrieve usage information in order to provide individualized and customized services to users. Cookies are small pieces of information sent by the Company's web server (https) to the user's browser and may be stored on the user's computer's hard disk. The Company uses cookies for the following purposes:
A. Purpose of Using Cookies:
● Cookies are used to track and analyze the visit and usage patterns of each service and website visited by users, popular search terms, and whether secure connections are used. This information is used to provide users with optimized information and services.
B. Installation/Operation and Refusal of Cookies:
● Users have the option to accept or refuse cookies. Therefore, users can choose to allow all cookies, receive a notification each time a cookie is stored, or refuse to store all cookies by configuring the options in their web browser.
● To refuse cookie settings, users can select the option in their web browser to accept all cookies, receive a notification each time a cookie is stored, or refuse to store all cookies.
Example of setting method (for Internet Explorer): Tools at the top of the web browser>Internet Options>Privacy However, if a user refuses to install cookies, there may be limitations on providing customized services.

9. Technical/Administrative Measures for Personal Information Protection
The Company has implemented the following administrative, technical, and physical measures to secure the safety of personal information:
A. Administrative Measures: Establishment and implementation of internal management plans, regular employee training, etc.
B. Technical Measures: Access control to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs, etc.
C. Physical Measures: Access control to computer rooms, data storage rooms, etc.

10. Personal Information Management Manager and Contact Information
You may report all privacy-related complaints that arise during your use of the Company's online job application, membership registration, and other services to the Personal Information Management Manager or the relevant department. The Company will respond promptly and provide sufficient answers to the reported matters.
● Name: Ji Won Seo, Executive
Department: Digital ConversionDivision
Email: jwseo@kric.com
● Name: Park Junseong, Senior Manager
Department: Digital Conversion Group, Development Group
Email: dhkim@kric.com

11. Request for Access to Personal Information
Information subjects may request access to their personal information in accordance with Article 35 of the Personal Information Protection Act to the following department. The Company will make efforts to promptly handle information subjects' requests for access to personal information.
Department for Receiving and Processing Access Requests:
Department Name: Digital Conversion Group, Development Team
Name: Park Junseong, Senior Manager
Department: Digital Conversion Group, Development Group
Email: dhkim@kric.com

12. Remedies for Rights Violation
Information subjects may contact the following organizations for inquiries regarding remedies for personal information breaches and consultations. The following organizations are separate from the Company, and if you are not satisfied with the Company's internal handling of privacy complaints or need more detailed assistance, please contact these organizations:
Personal Information Breach Report Center
-Relevant Tasks: Report of Personal Information Breach, Consultation
-Website: privacy.kisa.or.kr
-Phone: 118 (No area code required)
-Address: 3rd Floor, 9 Jinheung-gil, Naju-si, Jeollanam-do, Republic of Korea (Postal Code: 58324)
Personal Information Dispute Mediation Committee
-Relevant Tasks: Application for Personal Information Dispute Mediation, Group Dispute Mediation (Civil Resolution)
-Website: www.kopico.go.kr
-Phone: 1833-6972 (No area code required)
-Address: Supreme Prosecutors' Office, Cyber Crime Investigation Unit: 02-3480-3573 (www.spo.go.kr)
-Cyber Safety Bureau, National Police Agency: 182 (http://cyberbureau.police.go.kr)

13. Obligation of Notification
This Privacy Policy may be changed due to changes in related laws or guidelines. Therefore, Korea Research International Co., Ltd. takes measures to make it easy for customers to recognize any changes in the privacy policy.

14. Changes to the Privacy Policy
This Privacy Policy is effective from April 3, 2015.
1st Revision on May 13, 2016
2nd Revision on May 11, 2018
3rd Revision on May 2, 2019
4th Revision on October 16, 2020
5th Revision on June 1, 2023