Privacy Policy

Article 1 (General Provisions)

  1. The East Asia Institute (the “Institute”) complies with the Personal Information Protection Act and other applicable laws, and this Privacy Policy explains for what purposes and by what means users' personal data is processed.
  2. This Policy applies to the EAI Global service (the “Service”) provided by the Institute.

Article 2 (Personal Data We Collect)

  1. The Institute collects the following personal data for registration and provision of the Service.
    1. Required: email address, password.
    2. For paid transactions: information necessary for payment (payment-method details are processed through a payment service provider and are not stored directly by the Institute).
    3. Automatically generated/collected during use: access logs, cookies, IP address, and device/browser information.
  2. The Institute does not, in principle, collect sensitive data such as beliefs or health information.

Article 3 (Methods of Collection)

  1. Data is collected as entered directly by the user during registration, use of the Service, and inquiries.
  2. Data may be generated and collected through automatic collection tools during use of the Service.

Article 4 (Purposes of Collection and Use)

  1. The Institute processes personal data for the following purposes.
    1. Identifying and authenticating members; providing membership-based services.
    2. Processing payments and settlement for Paid Content and Custom Reports.
    3. Responding to inquiries and delivering notices.
    4. Analyzing usage statistics and improving the Service.
    5. Preventing misuse and operating the Service safely.

Article 5 (Retention and Use Period)

  1. In principle, the Institute destroys personal data without delay upon a member's withdrawal.
  2. However, where retention is required by applicable law, the data is kept for the period prescribed by such law.
    1. Records on contracts or withdrawal of subscription: 5 years.
    2. Records on payment and supply of goods, etc.: 5 years.
    3. Records on consumer complaints or dispute resolution: 3 years.
    4. Access logs and other communication-fact data: the period prescribed by applicable law.

Article 6 (Provision to Third Parties)

  1. The Institute does not use users' personal data beyond the scope stated in this Policy or provide it to third parties.
  2. Exceptions apply where there is a legal basis or the user's prior consent.

Article 7 (Entrustment of Processing)

  1. For smooth provision of the Service, the Institute may entrust certain tasks, such as payment processing, to external specialists.
  2. When entrusting, the Institute stipulates and supervises the necessary matters so that personal data is managed securely in accordance with applicable law.

Article 8 (Procedure and Method of Destruction)

  1. When the retention period expires or the purpose of processing is achieved, the data is destroyed without delay.
  2. The methods of destruction are as follows.
    1. Information in electronic file form is permanently deleted by irrecoverable means.
    2. Printed materials are destroyed by shredding or incineration.

Article 9 (Rights of Users and Legal Representatives and How to Exercise Them)

  1. Users may at any time request access to, correction or deletion of, or suspension of processing of their personal data.
  2. Rights may be exercised through account settings within the Service or by contacting the Personal Data Protection Officer, and the Institute will act without delay.
  3. Personal data of children under 14 is not collected without the consent of their legal representative.

Article 10 (Operation of Cookies)

  1. The Institute may use cookies to provide user convenience and analyze usage statistics.
  2. Users may refuse the storage of cookies through their web browser settings, in which case the use of some services may be restricted.

Article 11 (Security Measures)

  1. The Institute takes the following measures to ensure the security of personal data.
    1. Encrypted storage and transmission of passwords.
    2. Minimization and management of access rights to personal data.
    3. Retention of access logs and prevention of forgery or alteration.

Article 12 (Changes to This Privacy Policy)

  1. This Policy may be amended in line with changes to law and the Service.
  2. Any amendment will be announced through the Service.

Personal Data Protection Officer

Oh In-hwan  |  ihoh@eai.or.kr

← Back