1. Seoul International School will retain and protect your personal information in accordance with the law. This includes the collection and storage of personal information given at the time of consent.
2. The handling and storage of personal information is as follows:
   1. Handling of website registration information: (Not applicable, as Seoul International School does not require sign-in)
      1. The only exceptions are:
         1. investigation and/or inquiry due to violation of the relevant laws and regulations, and/or the completion of any investigation/inquiry into misdeeds.
         2. claim/obligation relationship to use the site in accordance with the relationship remaining until settlement
         3. In an exception, until stated retention period
   2. Civil petitions to be processed: three (3) years after the end of the grievance

1. Seoul International School will handle all information regarding personal information processing given to third parties, only within the limits set forth in Article 1 (purpose of the processing of personal information), the consent of the data subject, the special provisions of the law, the Personal Information Protection Law in Article 17.
2. Handling of personal information given to third parties by Seoul International School:
   1. Person(s) receiving personal information: (Title, name and corporate identity)
   2. Outline how personal information will be used: (details on how personal information will be used)
   3. Clause/provision for personal information: (each clause)
   4. Outline of storage and terms of usage: (0 year)

1. 1. Seoul International School shares personal information with third parties as outlined below:
      1. Travel Insurance - Name of third party: Top Travel Agency
      2. Responsibility of third party: coordination of airline seating for traveling Seoul International School students
   2. At the conclusion of the contract with the third party, in accordance with Article 25 of the Personal Information Protection Law, Seoul International School will monitor the commissioned work performed and prohibit the use of personal information for other purposes outside of previous arrangements. The processing of personal information without permission is prohibited, technical/managerial safeguards, extension of contract with third party vendor, the trustee for the management/supervision, damages and liability on matters specified in the contract documents, such as personal information.
   3. Work commissioned by Seoul International School to third party vendors is subject as well as the trustee of commissioned work in accordance with the Personal Information Protection Act.
   4. A written contract from third parties is kept on file for commissioned work that involves personal information processing tasks entrusted to all third parties.

1. For the Seoul International School Information Subject can exercise at any time the following sub paragraphs of the Privacy Rights.
   1. Access Personal information
   2. Make corrections if there are errors
   3. Deletion request
   4. Request halt of handling
2. Seoul International School will act on requests in accordance with paragraph 1, and all requests may be submitted through written, telephone, electronic mail, facsimile (Fax) without delay.
3. During the request correction or deletion of personal information, Seoul International School will not share or use the information the personal information.
4. Under paragraph one, data may be shared with a designated legal representative of the data subject or authorized party representative. In this case, the power of attorney must be submitted according to Form No. 11 in Appendix Privacy Protection Act rules.
5. Personal information handled by Seoul International School must not impede on personal privacy of yourself and others as outlined in the Personal Information Protection Law and other related laws.

The following items of personal information are processed at Seoul International School.

1. Website membership and maintenance (Seoul International School's web site is not membership based, therefore this does not apply)
2. Handling of civil petitions
   1. Required items: signature (passport name), date of birth, and year of employment, address, and telephone number
   2. Additional information: Email Address
3. In the course of using the internet, personal information items may be automatically generated and collected.
   1. IP address, cookies, MAC address, service record, browsing history

1. After the retention period has expired, Seoul International School will promptly destroy all personal information that is no longer needed.
2. After the retention period has expired, the law may require Seoul International School to store personal information. In this case, the personal information will be stored in a separate database (DB) maintained by Seoul International School.
3. Personal information will be destroyed and disposed of in the following ways:
   1. Termination procedures: Seoul International School must have a set plan on the destruction of personal information/files. After the collections of personal information to be destroyed, the person(s) in charge of handling of personal information must approve of the destruction before the personal information/files is destroyed.
   2. Destruction of personal information procedures: Electronic files recorded and stored must be destroyed using the Low Level Format technique, which assures that the information destroyed cannot be recovered. Personal information stored and recorded on paper will be destroyed using a paper-shredder.

Seoul International School, has taken the following measures to ensure the safety of your personal information.

1. Maintenance: internal management planning/implementation, regular staff training, etc.
2. Technical: personal information processing systems, such as access management, access control system installation, encryption, security programs installed.
3. Physical measures: material storage room, computer room, access control.

1. Seoul International School oversees the processing of personal information by assigning an individual/department to be in charge of the handling and maintenance of personal information.
   1. Privacy Officer
      Name:  Dr. James Gerhard

      Position: Head of School
      Email: gerhardj@siskorea.org
      Phone: 031-750-1305
      Fax: 031-759-5133

   
   
   2. Personal information protection department
      Contact Person: Mr. Shin
      Email: shinbs@siskorea.org
      Phone: 031-750-1331
      Fax: 031-759-5471

       

2. All issues related to the usage, handling, storage of personal information will be handled by the assigned officer and department as stated above. Please direct all inquiries and concerns to the contact information of individual/department above. Seoul International School promises to handle all matters regarding personal information expediently.

All other personal information pursuant to Article 35 of the Personal Information Act, will be handled by the department below:

General Affairs Office

Contact Person: Mr. Shin
Email: shinbs@siskorea.org
Phone: 031-750-1331

1. Please contact the individuals/departments above regarding issues relating to the invasion of privacy, counseling. The following organization outside of Seoul International School Seoul International School, is available to assist you. If you have any questions or complaints and feel that your inquiry has not been handled properly by Seoul International School, you may request assistance to the organization below.
   1. Privacy Complaint Center (Korea Internet & Security Agency operation)
      1. reporting misuse of personal information and consultation request
      2. Homepage: privacy.kisa.or.kr
      3. Phone: (without area code) 118
      4. Address: Songpa-gu Joondae-ro, Korea Internet and Security Agency Privacy Complaint Center (138-950)
   2. Personal Information Dispute Mediation Committee (Korea Internet and Security Agency)
      1. Personal information dispute arbitration, civil groups dispute resolution
      2. Homepage: privacy.kisa.or.kr
      3. Phone: (without area code) 118
      4. Address: Songpa-gu Joondae-ro, Korea Internet and Security Agency Privacy Complaint Center (138-950)
   3. Public Prosecutor's Office Cyber Crime Division: 02-3480-3573 (http://www.spo.go.kr)
   4. Cyber Terror Response Center: 1566-0112

1. Seoul International School installs and operates video equipment under the following guidelines:
   1. Video processing and equipment installation / Purpose: Safety of students, faculty and staff/fire prevention
   2. Installation location/shooting range: major facilities at 156 installation points, 69 camera total in school buses
   3. Information management officer in charge of the department and video
      - IT Office (Lee, Joon Bae)
   4. Video recording time, storage duration, storage areas, processing methods
      1. Recording time: 24 hours (cameras inside bus are recording as soon as the buses are operating)
      2. Storage of video: 7~10 days (storage times may change due to recording capabilities), the video footage from buses are stored for one (1) month
      3. Location of stored video: IT Department
   5. How to check request viewing of video: IT Department
   6. How to request viewing of video:
      1. Acceptable identification is needed to view videos personal items must be documented before the viewing of videos.
   7. Protection and storage of video:
      1. Internal management, planning, access control and access restrictions, safe storage of video information/transfer technology, record keeping/anti-tamper measures, storage facilities, and raising lock installation, etc.

Section 1 General Rules

1. (Legal Base & Purpose of School Telephone Recording System)
The Seoul International School (SIS) operates and administers the School Telephone Recording System for the below-listed purposes pursuant to Article 3 (Protection of Secrets of Communications and Conversation) of the Protection of Communications Secrets Act, Para (1) subparagraph 6 of Article 15 (Collection & Use of Personal Information) of the Personal Information Protection Act, and the Seoul International School Personal Information Processing Policies:

The School Telephone Recording System is installed to safeguard the rights and interests of the school's complaint handling officers by securing voice recording files in preparation for handling possible disputes between the officers and any outside persons filing complaints or petitions.

2. (Definition of Terms)

1. “Administrative Telephones” refers to all school telephone lines provided through the SIS telephone switchboard system for its business operations.
2. “School Telephone Recording System” refers to all devices that can save conversation contents on any of the Administrative Telephones.
3. “Recorded Files” are files of recorded conversations from the School Telephone Recording System.
4. “Supervising Department” corresponds to the Information Technology Team (ITT) that operates and administers the Recording System.

3. (Scope of Operations)

Classification	Location	Telephone Calls  Subject to Recording	Recording Method
Administrative Telephone Voice-Recording System	Main Building Server Room	All telephone lines at SIS	Automatic recording of all incoming calls from outside of SIS. (No internal calls are subject to recording.)

4. (Appointment of Competent Personnel with Authorized Access to the School Telephone Recording System)
In order to protect the personal information and data related to the Recorded Files, SIS strictly limits access to the Recorded Files to below persons.
 
Key personnel in charge of management of School Telephone Recording System.

Position	Organization	Title/ Job Grade	Contact Information	Main Responsibilities
Supervisor	Administration Supervision Office	Business Manager	031-750-1302	Supervision and management
Administrator	IT	Director of IT	031-750-1338	Scrutiny and provision of recorded files [to third parties]; Development of policies for operation and administration of the recording system

Additional person authorized to access School Telephone Recording Systems.

Position	Organization	Title/Job Grade	Contact Information	Main Responsibilities
Designated staff authorized to access Recorded Files	IT	Staff	031-750-1339	Data management of the Recorded Files

Section 2 Data Management

5. (Principles for Operation and Administration of the School Telephone Recording System)

1. All inbound calls from outside of SIS to the Administrative Telephones shall be recorded and collected within the parameters of the purpose of the School Telephone Recording System. No calls can be recorded without notification to all callers.
2. Any recording of telephone conversations will be made after informing the caller that the call will be recorded before start of the call. Additional request for consent will be made for collecting relevant personal information (i.e. full name, contact telephone number, date of birth, etc.) during the recording of a telephone conversation.
3. As a general rule, the recorded files will be archived for a year, and will be deleted when the archival period expires.
4. To ensure the safe protection of personal information in the Recorded Files, personnel who are authorized to access the files shall be strictly limited with protection measures taken to prevent any theft or leakage.
5. For the operation or administration of other related matters, the Personal Information Protection Act and SIS Personal Information Processing Policies shall be followed.

6. (Procedure for Scrutiny or Provision of Recorded Files)

1. SIS may provide the Recorded Files [to third parties] in the below-listed cases:
   1. When any faculty or staff taking outside calls require the Recorded Files as evidentiary data for litigation against abusive language by any caller;
   2. When the faculty or staff who took the call needs it to verify the response due to difference of opinion on the content of the call between the caller and the receiver.
   3. When the Recorded Files are required for official investigation, indictment and court proceedings by law-enforcement agencies; or
   4. When the Supervisor or Team Directors deems it necessary in order to protect the rights of any staff or claimants.
2.  Anyone who wants to view or receive a copy of the Recorded Files must request by filing this form.
3. Anyone who has applied to view or receive copy of the Recorded Files pursuant to subparagraph 2 must visit the school in person to verify identity. All Recorded Files will then be viewed or copy provided on a USB device upon approval of the request.
4. Upon approval and verification of identity, the Designated staff authorized to access Recorded Files will grant access to the Recorded Files and maintain an accurate log of all access.
5. The SIS shall not allow the scrutiny or provision of any recorded files to a third party that is not the calling party. However, the below-listed cases are exceptions to the rule:
   1. When agreed to by all parties on the call;
   2. When otherwise provided under statutes; or
   3. When the case falls under Article 18 (2) of the Personal Information Protection Act among cases other than those under the preceding subparagraphs.

7. (Duty Maintain Confidentiality)

SIS personnel authorized to access the Recorded Files shall not process, leak, provide to any third parties, nor use for any unlawful purpose the contents of any Recorded Files they have acquired while performing their duties.

8. (SystemMaintenance and Security)

1. The server room where the School Telephone Recording Systems is installed shall be protected to deter access by any unauthorized personnel as it is a restricted zone.
2. SIS will take steps to control or restrict access authority to the Recorded Files.
3. The password of the administrator account shall be updated regularly to ensure the safe and secure storage of the recorded files.

9. (Amendments or Revisions to the Guidelines for the School Telephone Recording Systems Policies)

Any addition, deletion or correction of the policies for the operation and maintenance of the School Telephone Recording Systems pursuant to related statutes or modification of SIS’ policies should be published on the school's official website.

 

The above handling of the Personal Information is retroactive to March 1st, 2012.