※ Place your mouse cursor over the icon and click to view the details. For more information, please refer to the Personal Information Processing Policy below.
□ Purpose of Processing Personal Information
① The APEC Online International Environmental Technology Education Center processes personal information for the following purpose. Personal information being processed will not be used for purposes other than those specified below, and if the purpose of use changes, necessary measures such as obtaining separate consent will be taken in accordance with Article 18 of the Personal Information Protection Act.
1. Provision of Environmental Professional Education Services for Asia-Pacific Countries
□ Registration Status of Personal Information Files
①
□ Items of personal information processed with the consent of the data subject
①
② The processing purpose, retention period, and items may differ depending on the characteristics of each personal information file. Detailed information on each file can be found via the link below:
□ Processing and Retention Period of Personal Information
①
② The processing and retention periods of each type of personal information are as follows.
□ Procedures and Methods for the Destruction of Personal Information
①
② If the retention period of personal information consented to by the data subject has expired, or the processing purpose has been achieved, but the personal information must continue to be preserved under other laws, the relevant personal information (or personal information file) will be transferred to a separate database (DB) or preserved in a different storage location.
③ The procedures and methods for the destruction of personal information are as follows.
1. Destruction Procedure
The APEC Online International Environmental Technology Education Center establishes a destruction plan for personal information (or personal information files) that must be destroyed. Personal information (or personal information files) subject to destruction is selected, and destruction is carried out with the approval of the Personal Information Protection Officer.
2. Methods of Destruction
The APEC Online International Environmental Technology Education Center destroys personal information recorded and stored in electronic file form so that the records cannot be reproduced, and personal information recorded and stored in paper documents is destroyed by shredding with a shredder or by incineration.
□ Provision of Personal Information to Third Parties
①
□ Criteria for Determining Additional Use or Provision
①
②
1. The personal information provided is for the original purpose of collection, namely the provision of “Environmental Professional Education Services to Asia-Pacific Countries,” and is related to that purpose.
2. The data subject may reasonably expect that, due to the nature of the service, their personal information could be provided in the course of participating in environmental education services for Asia-Pacific countries.
3. The personal information is provided in response to the data subject’s request to receive environmental professional education services for Asia-Pacific countries, and such provision does not unduly infringe upon the interests of the data subject.
4. Measures are taken to minimize exposure of personal information, such as using safe numbers, and to ensure the necessary level of security.
□ Outsourcing of Personal Information Processing
①
②
③ In accordance with Article 26(6) of the Personal Information Protection Act, when the entrusted party re-entrusts the personal information processing tasks of the company, the consent of the
④ In the event of any changes to the details of the entrusted tasks or the entrusted party, such changes will be promptly disclosed through this Privacy Policy.
□ Measures to Ensure the Security of Personal Information
①
1. Administrative Measures: Establishment and implementation of internal management plans, regular employee training
2. Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, management of access logs, encryption of unique identification information, installation of security programs
3. Physical Measures: Access control for computer rooms, system development rooms, and similar facilities
□ Matters Concerning the Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
< Automatic Personal Information Collection Devices Installed and Operated >
①
② A cookie is a small piece of information sent by the server (HTTP) used for website operation to the user’s browser, and it is stored on the user’s PC or mobile device.
③ Data subjects may configure their web browser options to allow or block cookies. However, refusing to store cookies may result in difficulties in using personalized services.
▶ Allowing/Blocking Cookies in Web Browsers
- Chrome (Desktop): Browser Settings > Privacy and Security > Clear Browsing Data
- Edge (Desktop): Browser Settings > Cookies and Site Permissions > Manage and Delete Cookies and Site Data
▶ Mobile Browsers – Allowing/Blocking Cookies
- Chrome (Mobile): Mobile Browser Settings > Privacy and Security > Clear Browsing Data
- Safari (Mobile): Device Settings > Safari > Advanced > Block All Cookies
- Samsung Internet: Mobile Browser Settings > Browsing History > Delete Browsing Data
□ Rights, Obligations, and Exercise Methods of Data Subjects and Legal Representatives
① Data subjects may, at any time, exercise their rights with respect to the Korea Environmental Industry & Technology Institute (KEITI), including requests for access, correction, deletion, suspension of processing, withdrawal of consent regarding their personal information, as well as the right to refuse or request an explanation of automated decisions.
※ Requests for access to the personal information of children under the age of 14 must be made directly by their legal representative. Data subjects who are minors aged 14 or older may exercise their rights regarding their personal information either personally or through their legal representative.
② In accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, the exercise of these rights may be made to the Korea Environmental Industry & Technology Institute in writing, by email, or by fax, and KEITI will take prompt action in response.
- Data subjects may also directly view, modify, or delete their personal information at any time on the website under ‘My Information > Member Information’, or make a request through the department in charge of handling requests for access to personal information as listed below.
[Personal Information Access Request Form] [Download Personal Information Access Request Form]
- Data subjects may withdraw their consent to the collection and use of personal information at any time by selecting 'Withdraw Membership.'
- Data subjects may also, at any time, request an explanation of or object to automated decisions.
③ The exercise of rights may also be carried out through a legal representative or an authorized agent of the data subject. In such cases, a power of attorney must be submitted in accordance with Form No. 11 of the “Notice on the Methods of Processing Personal Information.”
[Power of Attorney Form] [Download Power of Attorney Form]
④ The right of a data subject to request access to personal information or suspension of its processing may be restricted under Article 35(4) and Article 37(2) of the Personal Information Protection Act.
⑤ If other laws explicitly designate the personal information as subject to collection, deletion of such personal information cannot be requested.
⑥ Where the data subject has consented to automated decisions, has been informed in advance through a contract, or where it is clearly stipulated by law, the right to refuse automated decisions is not recognized; only the right to request an explanation and review is available.
- Furthermore, requests to refuse or explain automated decisions may be denied if there are legitimate reasons, such as concerns that granting the request may unduly infringe upon another person’s life, body, property, or other interests.
⑦ The Korea Environmental Industry & Technology Institute (KEITI) verifies whether the individual making the request for access, correction, deletion, suspension of processing, or refusal/explanation of automated decisions is indeed the data subject or a duly authorized representative.
⑧ Data subjects may submit their requests for access to personal information to the department listed below. KEITI will make every effort to ensure that requests for access to personal information are processed promptly.
▶ Department in Charge of Receiving and Processing Requests for Access to Personal Information
⑨ Data subjects may also submit requests for access and related matters through the Personal Information Protection Portalwww.privacy.go.kr) → Personal Services → Request for Access to Personal Information (identity verification required), in addition to the department responsible for receiving and processing such requests. APEC Online International Environmental Technology Education Center will take prompt action in response.
□ Personal Information Protection Officer
① The APEC Online International Environmental Technology Education Center takes overall responsibility for tasks related to personal information processing and designates the following Personal Information Protection Officer to handle complaints and provide remedies related to the processing of personal information.
▶ Personal Information Protection Officer
Name: Kim Moo-Gyeom
Position: Director, Environmental Knowledge and Information Office
Rank: Grade 2
Contact: +82-2-2284-1160, mgkim@keiti.re.kr, Fax: +82-2-2284-1190
※ Connected to the Personal Information Protection Department.
▶ Personal Information Protection Department
Department Name: Environmental Knowledge and Information Office
Contact: +82-2-2284-1163, +82-2-2284-1183, Email: privacy@keiti.re.kr, Fax: +82-2-2284-1190
② Data subjects may contact the Personal Information Protection Officer and the responsible department regarding any inquiries, complaints, or remedies related to personal information protection that arise while using the services (or projects) of the APEC Online International Environmental Technology Education Center. The Center will respond to and handle inquiries from data subjects without delay.
□ Remedies for Infringement of Rights
① To seek remedies for damages caused by personal information infringement, data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency (KISA) Personal Information Infringement Report Center. For reports and consultations regarding other personal information infringements, please contact the following institutions:
1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center (KISA): 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
4. National Police Agency: 182 (ecrm.cyber.go.kr)
②
▶ Customer Consultation and Reporting Related to Personal Information Protection
- Department Name: Environmental Knowledge and Information Office
- Contact: +82-2-2284-1163, +82-2-2284-1183, Email: privacy@keiti.re.kr, Fax: +82-2-2284-1190
③ In accordance with Articles 35 (Access to Personal Information), 36 (Correction and Deletion of Personal Information), and 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act, any person whose rights or interests have been infringed upon due to a disposition or omission made by the head of a public institution may file an administrative appeal in accordance with the provisions of the Administrative Appeals Act.
▶ Central Administrative Appeals Commission: 110 (toll-free) (www.simpan.go.kr)
□ Results of Personal Information Management Level Assessment
① The APEC Online International Environmental Technology Education Center, in accordance with Article 11 of the Personal Information Protection Act, undergoes the annual “Personal Information Protection Level Assessment” conducted by the Personal Information Protection Commission to ensure the safe management of data subjects’ personal information.
※ Until 2023, it was referred to as the “Personal Information Management Level Diagnosis,” and from 2024 onward, it is referred to as the “Personal Information Protection Level Assessment.”
② The APEC Online International Environmental Technology Education Center received an “A” grade in the 2024 Personal Information Protection Level Assessment.
③ The APEC Online International Environmental Technology Education Center, based on the results of the 2024 Personal Information Protection Level Assessment, has implemented the following improvement measures.
- Inspected systems that collect resident registration numbers and improved the process from 'consent' to 'notification.'
- Emphasized third-party provision in the personal information collection and use consent form (e.g., bold text, underlining).
□ Installation and Operation of Fixed Video Information Processing Devices
① In accordance with Article 25(1) of the Personal Information Protection Act, the APEC Online International Environmental Technology Education Centerinstalls and operates fixed video information processing devices for the purposes of facility safety, fire prevention, crime prevention, and the prevention of vehicle theft and damage. For further details, please refer to the Video Information Processing Device Operation and Management Policy. [Go to Video Information Processing Device Operation and Management Policy]
□ Additional Efforts for the Protection of Personal Information
① The APEC Online International Environmental Technology Education Center makes every effort to safely manage users’ personal information and undertakes additional personal information protection measures beyond the security requirements mandated by the Personal Information Protection Act.
② The APEC Online International Environmental Technology Education Center also strives to ensure safe personal information processing and to promote a culture of personal information protection through various activities, such as participating as a partner organization in 'Personal Information Protection Day.'
□ Changes to the Privacy Policy
① This Privacy Policy has been in effect since September 1, 2025. [View Changes][Download]
② Previous versions of the Privacy Policy can be found below.
- 2024. 07. 11. ~ 2025. 08. 30. [Privacy Policy Prior to Implementation]
- 2023. 09. 08. ~ 2024. 07. 11. [Privacy Policy Prior to Implementation]
- 2021. 01. 01. ~ 2023. 09. 07. [Privacy Policy Prior to Implementation]