Nakdonggang National Institute of Biological Resources Privacy Policy
This Privacy Policy will take effect from September 16, 2025.
The Nakdonggang National Institute of Biological Resources complies with the Personal Information Protection Act and other relevant laws and regulations to protect the freedom and rights of data subjects, lawfully process personal information, and manage it securely.
In accordance with Article 30 of the Personal Information Protection Act, this Privacy Policy is established and disclosed to inform data subjects of the procedures and standards regarding the processing of personal information, and to ensure that related grievances can be addressed promptly and effectively.
※ This Privacy Policy applies to the personal information processing systems operated by the Nakdonggang National Institute of Biological Resources (main website, management information system).
Key indicators of personal information processing (labeling)
Key indicators of personal information processing (labeling)
Personal information items processed
Purposes of processing personal information
Retention and disposal
Personal information files: 31 (name, mobile phone number, email, etc.)
Files collecting unique identification information: 2
※ For details, please refer to the full text of this Privacy Policy.
Provision of public services Handling of civil petitions and execution of related duties
※ For details, please refer to the full text of this Privacy Policy.
Personal information is retained or disposed of based on the data subject’s consent or relevant laws for each file.
Key indicators of personal information processing (labeling)
Outsourcing of personal information processing
Personal information grievance handling department
Personal information protection level assessment
Current outsourced services: 13 cases
※ For details, please refer to the full text of this Privacy Policy.
Strategic Planning Office, Information Management Division
☎: +82-54-530-0902
2024 Personal Information Protection Level: Rated “A”
Table of contents
Table of contents
The Nakdonggang National Institute of Biological Resources Privacy Policy is organized as follows:
※ Click on each section to move directly to the corresponding provision.
Article 1 (Purpose of Processing Personal Information and Registration Status of Personal Information Files) Go to Table of Contents
① The Nakdonggang National Institute of Biological Resources processes only the minimum amount of personal information necessary for the following purposes.
② The Nakdonggang National Institute of Biological Resources processes personal information as described below. The personal information being processed will not be used for purposes other than those specified. If the purpose of use changes, the Nakdonggang National Institute of Biological Resources will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
③ Details of the Nakdonggang National Institute of Biological Resources personal information files registered and disclosed under Article 32 of the Personal Information Protection Act are available on the Personal Information Portal (www.privacy.go.kr).
Personal Information Portal(www.privacy.go.kr)→Personal Services→Exercise of Data Subject Rights→Request for Access to Personal Information→Search for Personal Information File List→Enter Institution Name: “Nakdonggang National Institute of Biological Resources Direct Link
① The Nakdonggang National Institute of Biological Resources processes and retains personal information within the period of retention and use consented to by the data subject at the time of collection, or within the retention and use period prescribed by law.
② Details of the Nakdonggang National Institute of Biological Resources personal information files registered and disclosed under Article 32 of the Personal Information Protection Act are available on the Personal Information Portal (www.privacy.go.kr).
Personal Information Portal(www.privacy.go.kr)→Personal Services→Exercise of Data Subject Rights→Request for Access to Personal Information→Search for Personal Information File List→Enter Institution Name: “Nakdonggang National Institute of Biological Resources Direct Link
① The Nakdonggang National Institute of Biological Resources processes only the minimum amount of personal information necessary for each task. The Institute processes the following items of personal information with the consent of the data subject in accordance with Articles 15(1)(1) and 22(1)(7) of the Personal Information Protection Act.
② Details of the Nakdonggang National Institute of Biological Resources personal information files registered and disclosed under Article 32 of the Personal Information Protection Act are available on the Personal Information Portal (www.privacy.go.kr).
Personal Information Portal(www.privacy.go.kr)→Personal Services→Exercise of Data Subject Rights→Request for Access to Personal Information→Search for Personal Information File List→Enter Institution Name: “Nakdonggang National Institute of Biological Resources Direct Link
③ In the course of using internet services, the following information may be automatically generated and collected: IP address, cookies, MAC address, service usage records, visit records, records of improper use.
Article 4 (Processing of Personal Information of Children Under Age 14) Go to Table of Contents
① When the Nakdonggang National Institute of Biological Resources needs consent to process the personal information of children under age 14, it obtains consent from the child’s legal guardian.
② When obtaining consent from the legal guardian for processing the personal information of a child under age 14, the Institute may request minimal information such as the name and contact information of the guardian. The guardian is informed of the fact that the child’s personal information is being collected, and the Institute may collect the guardian’s name and mobile phone number in order to obtain consent.
① When the personal information retention period has expired or the purpose of processing has been achieved, making the personal information no longer necessary, the Nakdonggang National Institute of Biological Resources shall promptly destroy the relevant personal information.
② If personal information must be retained pursuant to other laws despite the expiration of the retention period or achievement of the purpose of processing to which the data subject consented, the Institute will store such personal information (or personal information files) in a separate database or preserve it in a different storage location.
※ The items and legal grounds for personal information retained pursuant to other laws can be found in Article 2 (Processing and Retention Period of Personal Information)
③ The procedures and methods of personal information disposal are as follows:
Disposal procedure
The Institute establishes a disposal plan for personal information (or files) that must be destroyed. The personal information (or files) subject to disposal are selected, and destruction is carried out with the approval of the Personal Information Protection Officer.
Disposal method
Personal information recorded/stored in electronic file format is destroyed so that the records cannot be restored.
Personal information recorded/stored on paper documents is shredded or incinerated.
① The Nakdonggang National Institute of Biological Resources does not provide the personal information of data subjects to third parties beyond the scope specified for collection and use purposes. However, personal information may be provided to third parties in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or under special provisions of the law, including:
1. When separate consent is obtained from the data subject
2. When specifically required by another law
3. When necessary to protect the life, body, or property interests of the data subject or a third party
4. When necessary to perform duties prescribed by other laws and regulations and it is impossible to perform such duties without using or providing personal information for purposes other than intended, subject to deliberation and resolution by the Protection Commission
5. When necessary to provide to a foreign government or international organization for the implementation of treaties or other international agreements
6. When necessary for criminal investigation, prosecution, or maintenance of indictment
7. When necessary for the performance of judicial proceedings
8. When necessary for the execution of sentences, protective custody, or protective disposition
9. When urgently required for public safety and public health
② In cases where personal information is provided to third parties within the scope of collection and use purposes under Article 17(1) of the Personal Information Protection Act, the Institute will disclose the fact of such provision.
① The Nakdonggang National Institute of Biological Resources entrusts the processing of personal information as follows in order to ensure smooth handling of personal information. View entrusted tasks and companies
② When entering into outsourcing contracts, the Institute specifies in writing (e.g., contracts) the prohibition of processing personal information for purposes other than performing outsourced tasks, the requirement of technical and managerial safeguards, restrictions on subcontracting, supervision of trustees, and liability for damages, in accordance with Article 26 of the Personal Information Protection Act. The Institute supervises trustees to ensure safe processing of personal information.
③ Pursuant to Article 26(6) of the Personal Information Protection Act, if a trustee intends to subcontract the Institute’s personal information processing tasks, the trustee must obtain the Institute’s consent. ※ Status of subcontracting: Through inspections of personal information management practices, the Institute verifies subcontracting status and confirms that no subcontracting is currently taking place.
④ If the details of outsourced tasks or the trustees change, the Institute will promptly disclose the changes through this Privacy Policy.
① To ensure the security of personal information, the Nakdonggang National Institute of Biological Resources takes the following measures:
Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
Technical measures: Access authority management for personal information processing systems, installation of access control systems, management of access logs, encryption of unique identifiers, installation of security programs, etc.
Physical measures: Access control of computer rooms, archives, and other facilities.
Article 9 (Matters Concerning the Installation, Operation, and Refusal of Automatic Personal Information Collection Devices) Go to Table of Contents
<Installed and Operated Automatic Personal Information Collection Devices>
① The Institute sometimes uses cookies that store and retrieve user information in order to provide users with personalized services.
② A cookie is a small piece of information sent by the website’s operating server (https) to the user’s browser and stored on the user’s PC or mobile device.
③ Users may allow or block cookies by adjusting their web browser settings. However, refusal to store cookies may result in difficulties in using customized services.
<How to Allow/Block Cookies>
On web browsers:
Chrome: Select “⋮” (menu) at the top-right corner > New Incognito Window (Shortcut: Ctrl+Shift+N)
Edge: Select “…” (menu) at the top-right corner > New InPrivate Window (Shortcut: Ctrl+Shift+N)
On mobile browsers:
Chrome: Select “⋮” (menu) at the top-right corner > New Incognito Tab
Safari: Device Settings > Safari > Advanced > Block All Cookies
Samsung Internet: Select “Tab” icon at the bottom > Turn on Secret Mode > Start
① The Institute does not process pseudonymized information pursuant to Article 28(2) of the Personal Information Protection Act. Should pseudonymized information be processed, the Institute will disclose the relevant details in this Privacy Policy.
Article 11 (Rights and Obligations of Data Subjects and Legal Representatives, and Methods of Exercising Rights) Go to Table of Contents
② Rights may be exercised by submitting requests via written documents, e-mail, or fax in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act. The Institute will respond without delay.
③ Rights may also be exercised through a legal representative or a delegated proxy. In such cases, a power of attorney form (Annex No. 11 of the “Public Notice on Personal Information Processing Methods”) must be submitted.
※ For children under age 14, their legal guardian must exercise rights directly. Data subjects aged 14 or older (but still minors) may exercise rights themselves or through a guardian. [Form: Power of Attorney] Download
④ The right to request access to personal information or suspension of processing may be restricted under Articles 35(4) and 37(2) of the Personal Information Protection Act.
⑤ Where other laws expressly require the collection of certain personal information, deletion of such information may not be requested.
⑥ If data subjects have consented in advance, been informed through a contract, or where explicitly required by law, automated decisions cannot be refused but will be explained or reviewed upon request.
Requests for refusal or explanation of automated decisions may be denied if such requests would unfairly infringe on the life, body, property, or other rights of others.
⑦ The Institute shall verify whether the requester is the data subject or an authorized representative when processing requests for access, correction/deletion, suspension of processing, or refusal/explanation of automated decision-making.
① Requests for access to personal information may be submitted to the following departments. The Institute strives to process such requests promptly. View Department Handling Access Requests
Within 10 days of receiving an objection, the Institute will review it and take appropriate action. The data subject will be notified of the result via a written response.
In addition to the departments above, data subjects may also request access through the Personal Information Portal (www.privacy.go.kr)
Personal Information Portal (www.privacy.go.kr) → Personal Services → Exercise of Data Subject Rights → Request Access to Personal Information. Direct Link
① The Nakdong River National Institute of Biological Resources takes overall responsibility for the handling of personal information, and has designated the following Personal Information Protection Officer to handle complaints and provide relief for damages related to processing of personal information. View Personal Information Protection Officer and Staff
② Data subjects may contact the above officers and departments for all privacy-related inquiries, complaints, or damages. The Institute will respond promptly.
① The Nakdong River National Institute of Biological Resources guarantees the right of the data subject to self-determination of personal information, and strives to provide consultation and relief for damages caused by personal information infringement. If you need to file a report or request consultation, please contact the department below. View customer consultation and reports related to personal information protection
② The data subject may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency (KISA) Personal Information Infringement Report Center, etc., in order to receive relief from damages caused by personal information infringement. For reports or consultations on other personal information infringements, please contact the institutions below:
Personal Information Dispute Mediation Committee: 1833-6972 (without area code) (www.kopico.go.kr)
Personal Information Infringement Report Center: 118 (without area code) (privacy.kisa.or.kr)
Supreme Prosecutors’ Office: 1301 (without area code) (www.spo.go.kr)
National Police Agency: 182 (without area code) (ecrm.cyber.go.kr)
③ A person whose rights or interests have been infringed upon due to a disposition or omission by the head of a public institution in response to a request under Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), or Article 37 (Suspension of Processing of Personal Information, etc.) of the Personal Information Protection Act may file an administrative appeal in accordance with the Administrative Appeals Act.
Central Administrative Appeals Commission: 110 (without area code) (www.simpan.go.kr)
Article 15 (Results of Personal Information Protection Level Evaluation) Go to Table of Contents
① To ensure the safe management of personal information, the Institute undergoes an annual “Personal Information Protection Level Evaluation” conducted by the Personal Information Protection Commission pursuant to Article 11(2) of the Personal Information Protection Act.
② In the 2024 evaluation, the Institute received a grade of “A”.
※ S: 90+ points, A: 80-89 points, B: 70-79 points, C: 60-69 points, D: below 60 points.
Article 16 (Operation and Management of Fixed and Mobile Visual Data Processing Devices) Go to Table of Contents
① Pursuant to Article 25(1) of the Personal Information Protection Act, the Institute installs and operates video information processing devices for facility safety, fire prevention, and crime prevention. Detailed information is available in the Operation and Management Policy for Fixed and Mobile Visual Data Processing Devices. Direct Link
Article 4 (Processing of Personal Information of Children Under Age 14) Go to Table of Contents
Article 5 (Procedures and Methods of Personal Information Disposal) Go to Table of Contents
Article 6 (Provision of Personal Information to Third Parties) Go to Table of Contents
Article 7 (Outsourcing of Personal Information Processing) Go to Table of Contents
Article 8 (Measures to Ensure the Security of Personal Information) Go to Table of Contents
Article 9 (Matters Concerning the Installation, Operation, and Refusal of Automatic Personal Information Collection Devices) Go to Table of Contents
Article 10 (Processing of Pseudonymized Information) Go to Table of Contents
Article 11 (Rights and Obligations of Data Subjects and Legal Representatives, and Methods of Exercising Rights) Go to Table of Contents
Article 12 (Requests for Access to Personal Information, etc.) Go to Table of Contents
Article 13 (Personal Information Protection Officer and Staff) Go to Table of Contents
Article 14 (Remedies for Rights Infringements) Go to Table of Contents
Article 16 (Operation and Management of Fixed and Mobile Visual Data Processing Devices) Go to Table of Contents
Article 17 (Changes to the Privacy Policy) Go to Table of Contents
Nakdonggang National Institute of Biological Resources