BioOne

Article 1. Purpose of Personal Information Processing, Collection Items, Retention and Use Period

The Korea Institute of Bioscience and Biotechnology processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the intended ones, and in case of any changes in the purposes of use, necessary actions will be taken, including obtaining separate consent in accordance with Article 18 of the 「Personal Information Protection Act.」
The Korea Institute of Bioscience and Biotechnology processes personal information within the personal information retention and usage period stipulated by the law or within the period consented by the data subject at the time of collecting the personal information, as required by law.

The Korea Institute of Bioscience and Biotechnology processes the personal information of data subjects as follows.

※ However, in cases where the following reasons apply, until the cessation of the relevant reason.

Article 2. Registration Status of Personal Information Files and Items of Processed Personal Information

1. Korea Institute of Bioscience and Biotechnology registers and discloses personal information files in accordance with Article 32 of the 「Personal Information Protection Act.」 as follows.

   The Korea Institute of Bioscience and Biotechnology processes the personal information of data subjects as follows.

   Personal Information File Name	Basis of Operation	Processing Purposes	Items of personal information recorded in personal data files	Retention period
   KOBIC SSO	Consent of Data Subjects	For the purpose of verifying the identity of individuals, personal identification, prevention of unauthorized and fraudulent use by malicious members, confirmation of intent to join, online reservation/application for programs related to courses and educational events, surveys, etc., associated with the use of membership-based services.	- Mandatory: ID, password, name (Korean/English), date of birth, affiliation name, department, nationality, address, email address, phone number - Optional: National Researcher Number, position, mobile phone number	Until the withdrawal of membership

2. Detailed disclosure of personal information file registration information for The Korea Institute of Bioscience and Biotechnology can be accessed through the Personal Information Portal (https://www.privacy.go.kr) → Personal Services → Personal Information Access Requests → Search Personal Information File List menu.

Article 3. Provision of Personal Information to Third Parties

1. The Korea Institute of Bioscience and Biotechnology provides personal information to third parties only in cases corresponding to Article 17 and Article 18 of the 「Personal Information Protection Act,」 such as special legal provisions or the consent of the data subject.

Article 4. Outsourcing of Personal Information Processing

1. The Korea Research Institute of Bioscience and Biotechnology (KRIBB) does not outsource the processing of personal information. Should any outsourcing occur, we will disclose the details without delay through this Privacy Policy.

Article 5. Procedures and Methods for the Disposal of Personal Information

1. The Korea Institute of Bioscience and Biotechnology promptly disposes of the information when personal information becomes unnecessary due to the expiration of the retention period or the achievement of the processing purpose.
2. In cases where personal information must be retained under other laws despite the expiration of the retention period or the achievement of the processing purpose, the relevant personal information is transferred to a separate database (DB) or stored in a different location. The basis for retention and the items of personal information to be retained, including the details, are disclosed in this Privacy Policy.
3. The procedure and method for the disposal of personal information are as follows.
   1. Procedure for destruction

      The Korea Institute of Bioscience and Biotechnology establishes a plan for the destruction of personal information (or personal information files) that must be destructed.
      The Korea Institute of Bioscience and Biotechnology selects the personal information (or personal information file) for which a disposal reason has arisen and disposes of the personal information (or personal information file) with the approval of The Korea Institute of Bioscience and Biotechnology's Personal Information Protection Officer.

   2. Methods of Destruction

      The Korea Institute of Bioscience and Biotechnology ensures that electronically stored personal information is destroyed in a manner that cannot be regenerated, while personal information recorded and stored in paper documents is shredded or incinerated.

   3. Destruction Deadline

      When the retention period of personal information has elapsed, it will be destructed within five days from the end date of the retention period. When personal information becomes unnecessary due to the achievement of the processing purpose, termination of the relevant service, closure of the business, or for any other reasons, it will be destructed within five days from the date it is determined to be unnecessary for processing.

Article 6. Rights and Obligations of Data Subjects and Their Exercise Methods

1. Data subjects may exercise their rights, such as accessing, correcting, deleting, or requesting the suspension of personal information processing, from the Korea Institute of Bioscience and Biotechnology at any time.

   ※ Requests for accessing, etc., personal information regarding children under the age of 14 must be made by their legal representatives. Data subjects who are minors aged 14 or older may exercise their rights regarding their personal information themselves or through their legal representatives.

2. The exercise of rights can be carried out by the Korea Institute of Bioscience and Biotechnology in accordance with Article 41, Paragraph 1 of the 「Personal Information Protection Act,」 through written communication, email, facsimile transmission (FAX), and the like. The Korea Institute of Bioscience and Biotechnology will promptly take action in response to this.
3. Rights may also be exercised through a legal representative or a delegate authorized by the data subject. In such cases, a power of attorney according to the format specified in the “Notice on Methods of Personal Information Processing” must be submitted.
4. The right to access personal information and request the suspension of processing may be limited under Article 35, Paragraph 4 of the 「Personal Information Protection Act.」
5. Requests for correction and deletion of personal information cannot be made if the personal information is specified as a collection target under other laws.
6. The Korea Institute of Bioscience and Biotechnology verifies whether the person requesting access, correction, or deletion of personal information is the data subject or a legitimate representative.
7. The Korea Institute of Bioscience and Biotechnology must create a processing result notification and inform the data subject of the results within 10 days.

Article 7. Measures to Ensure the Security of Personal Information

Korea Institute of Bioscience and Biotechnology implements necessary technical, managerial, and physical measures for security, as required by Article 29 of the 「Personal Information Protection Act.」 as follows.

1. Establishment and implementation of internal management plans in accordance with the Korea Institute of Bioscience and Biotechnology's personal information protection guidelines
2. Minimization of employees handling personal information and regular education
3. Restriction of access to personal information
   • Access control for the database system processing personal information, including granting, modifying, and revoking access rights, ensuring access control for personal information, and using intrusion prevention systems to control unauthorized external access
5. Preservation of access records and prevention of forgery
   • Preservation and management of records of access to personal information processing systems for more than one year
   • Use of security functions to ensure that access records are not tampered with, stolen, or lost
6. Encryption of personal information : Storage and management of important personal information, such as user passwords, in an encrypted form
7. Technical measures against hacking, etc
   • Installation and periodic updates and checks of security programs
   • Installation of systems in areas with controlled access from the outside and monitoring and blocking through technical and physical means
8. Control of entry and exit by unauthorized persons
   • Separate installation and operation of physical storage locations for personal information
   • Control of access to physical storage locations, such as computer rooms and data storage rooms, and installation and operation of CCTV

Article 8. Installation, Operation, and Refusal of Devices Automatically Collecting Information

1. The Korea Institute of Life Science and Biotechnology uses ‘cookies’ to store and periodically retrieve usage information in order to provide personalized services to users.
2. Cookies are small pieces of information sent by the server (HTTP) operating the website to the user's computer browser. They may be stored on the user's PC hard drive and may cause difficulties in using the service if cookie storage is refused or blocked.
   • Purpose of Using Cookies Cookies are used to track and analyze user visits and usage patterns on each service and website visited, as well as to determine the security of access, in order to provide users with optimized information.
   • How to Install, Operate, and Refuse Cookies For Chrome: Select More Settings > Site settings > Cookies and site data to enable or disable cookies
     For Internet Explorer: Click Tools > Internet options > Privacy tab > Settings > Choose whether to allow, block, or prompt for third-party cookies
     For Firefox: Go to the Settings menu >Privacy & Security > Cookies and Site Data > select Accept cookies and site data from websites
     For Edge: Click the three dots on the address bar > Settings > Site permissions > Cookies and site data to enable or disable cookies
   • If cookies are refused to be saved, difficulties in using customized services may be caused.

Article 9. Personal Information Protection Officer and Personal Information Access·Request

1. Korea Institute of Bioscience and Biotechnology has designated a personal information protection manager and personnel to protect the personal information of data subjects and handle complaints related to personal information.
2. Data subjects may request access to and claim personal information in accordance with Article 35 of the 「Personal Information Protection Act.」 to the following departments.
3. The Korea Institute of Bioscience and Biotechnology will make every effort to promptly process requests for access to personal information.
4. The right to access personal information and request the suspension of processing may be limited under Article 35, Paragraph 4 of the 「Personal Information Protection Act.」

Article 10. Remedies for Infringement of Data Subject's Rights and Interests

The following organization is a separate entity from the Korea Research Institute of Bioscience and Biotechnology. If you are dissatisfied with the Korea Research Institute of Bioscience and Biotechnology's internal handling of personal information complaints or damage relief, or if you require more detailed assistance, please contact the organization listed below.

In addition, individuals who have suffered infringements on their rights or interests due to actions taken by the head of a public institution or by arbitrary means in response to requests made under Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), and Article 37 (Suspension of Processing of Personal Information) of the Personal Information 「Protection Act.」 may file an administrative appeal in accordance with the Administrative Appeals Act.

※For more information on administrative adjudication, please refer to the Central Administrative Appeals Commission (www.simpan.go.kr) website.

Article 11. Matters Concerning the Operation and Management of Video Information Processing Equipment

Korea Institute of Bioscience and Biotechnology installs and operates video information processing equipment in accordance with Article 25, Paragraph 7 of the 「Personal Information Protection Act.」 For detailed information, please click Learn more.

Article 12. Changes to the Privacy Policy

1. This privacy policy will be effective fromApril 16, 2025.
2. The previous privacy policy can be reviewed below.