Privacy Policy

Privacy Policy

Chungcheongnam-do Province (hereinafter referred to as "the Province") has established and publicly disclosed this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act. This policy aims to protect the personal information of data subjects and to handle related complaints quickly and efficiently. This policy applies to all personal information files processed by the Province, unless otherwise specified. If a subordinate organization or department has its own separate privacy policy for its specific work, that policy will take precedence and will be made public on the respective website.

Key Policy Indicators

• "Personal information" refers to any information relating to a living individual that falls under any of the following:
  • Information that can identify an individual through their name, resident registration number, or video footage.
  • Information that, even if it cannot identify a specific individual on its own, can be easily combined with other information to do so. The ease of combination is determined by a reasonable consideration of factors such as the availability of other information, the time, cost, and technology required to identify the individual.
  • Information that has undergone pseudonymization as per Article 1-2, so that a specific individual cannot be identified without the use or combination of additional information needed to restore it to its original state (hereinafter referred to as "pseudonymized information").
• "Pseudonymization" means processing personal information by deleting parts of it or by replacing parts or all of it, so that a specific individual cannot be identified without additional information. ※ For more details, please refer to the Privacy Policy below.

---

Table of Contents

The Chungnam Fire Headquarters website Privacy Policy consists of the following:

• Article 1: Purpose of Processing, Retention Period, and Items of Personal Information
• Article 2: Provision of Personal Information to Third Parties
• Article 3: Entrustment of Personal Information Processing
• Article 4: Rights and Obligations of Data Subjects and Their Legal Guardians, and How to Exercise Them
• Article 5: Procedures and Methods for Personal Information Destruction
• Article 6: Measures to Ensure the Security of Personal Information
• Article 7: Matters Concerning the Installation, Operation, and Rejection of Automatic Personal Information Collection Devices
• Article 8: Remedies for Infringement of Data Subject Rights
• Article 9: Right to Request Access to Personal Information
• Article 10: Personal Information Protection Officer
• Article 11: Processing of Pseudonymized Information
• Article 12: Criteria for Additional Use and Provision
• Article 13: Operation of Video Information Processing Devices
• Article 14: Results of Personal Information Impact Assessments
• Article 15: Results of Personal Information Protection Level Evaluation
• Article 16: Changes to the Privacy Policy

---

Detailed Policy

Article 1 (Purpose of Processing, Retention Period, and Items of Personal Information)

1. The Province processes personal information for the minimum necessary purposes, such as providing public services, handling civil complaints, and performing its duties. In accordance with Article 32 of the Personal Information Protection Act, we register and publicly disclose personal information files.
2. The purpose, retention period, and items of each personal information file under the Province's jurisdiction are determined based on the file's characteristics. You can find a detailed list of personal information files by clicking the link below. ※ For more detailed information on personal information files under the Province's jurisdiction, please visit the Personal Information Portal of the Personal Information Protection Commission (www.privacy.go.kr) → "Personal Service" → "Exercise of Data Subject Rights" → "Personal Information File List Search," and select "Chungcheongnam-do" as the institution name to view detailed information.

Article 2 (Provision of Personal Information to Third Parties)

1. The Province provides personal information to third parties only with the data subject's consent or when a special provision in the law applies, in accordance with Articles 17 and 18 of the Personal Information Protection Act.
2. The Province provides personal information as required by law as follows: (Details are omitted in this summary but are provided in the full policy).

Article 3 (Entrustment of Personal Information Processing)

1. For the efficient handling of personal information, the Province entrusts some personal information processing tasks to third-party contractors as detailed in the attached document. You can check the status of contractors by clicking the link below.
2. When entering into a consignment contract, the Province, in accordance with Article 26 of the Personal Information Protection Act, specifies in the contract that the contractor shall not process personal information for purposes other than the entrusted work, and includes provisions regarding security measures, restrictions on re-entrustment, management and supervision of the contractor, and liability for damages. We also educate and supervise the contractors to ensure they handle personal information securely.
3. Any changes to the content of the entrusted work or the contractor will be disclosed through this Privacy Policy.

Article 4 (Rights and Obligations of Data Subjects and Their Legal Guardians)

1. Data subjects have the right to request access, correction, deletion, or suspension of processing of their personal information from the Province at any time. ※ For children under 14, a legal guardian must make the request. Minors aged 14 or older may exercise these rights themselves or through a legal guardian.
2. You can exercise the rights mentioned in paragraph 1 through written documents, email, or fax, in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act. The Province will take action without delay.
3. You can exercise the rights mentioned in paragraph 1 through a legal guardian or an authorized representative. In this case, you must submit a power of attorney in the form specified in Annex 11 of the "Personal Information Processing Methods Notice."
4. Your right to request access to and suspension of processing of personal information may be restricted by Articles 35 and 37 of the Personal Information Protection Act.
5. You cannot request the deletion of personal information if another law explicitly states that such information must be collected.
6. When a data subject or their legitimate representative requests access, correction, deletion, or suspension of processing, the Province will verify their identity.

Article 5 (Procedures and Methods for Personal Information Destruction)

1. The Province destroys personal information without delay when it is no longer needed, such as when the retention period has expired or the purpose of processing has been achieved. The procedures and methods are as follows:
   1. Destruction Procedure: The Province establishes a plan for the destruction of personal information (or personal information files) that must be destroyed. It selects the personal information (or files) for which a reason for destruction has occurred, and, with the approval of the Personal Information Protection Officer, proceeds with the destruction.
   2. Destruction Method: Personal information stored in electronic file format is destroyed in a way that the records cannot be restored. Personal information stored in paper documents is destroyed by shredding or incineration.
   3. Destruction Log Management: The Province manages a destruction log through a system registered with the Personal Information Protection Commission's integrated support system. The personal information officer reviews and approves the destruction request form submitted by the department in charge.
2. If personal information must be preserved continuously due to other laws even after the retention period has passed or the processing purpose has been achieved, the information will be moved to a separate database or stored in a different location.

Article 6 (Measures to Ensure the Security of Personal Information) The Province takes the following measures to ensure the security of personal information:

1. Administrative Measures: Establishment and implementation of internal management plans and regular employee training.
2. Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, and installation of security programs.
3. Physical Measures: Access controlfor the integrated information center and data storage rooms.
4. In addition to the measures required by law, the Province also holds an annual "Personal Information Protection Day" event to promote security.

Article 7 (Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)

1. The Province uses "cookies" to provide customized services to users by storing their usage information and retrieving it from time to time.
2. A cookie is a small piece of information sent by a web server to a user's computer browser and stored on the user's hard drive.
   • Purpose of Cookies: They are used to understand the user's visit and usage patterns on various services and websites, popular search terms, and secure connection status to provide optimized information.
   • Installation, Operation, and Rejection of Cookies: You can refuse to save cookies by adjusting the options in your web browser settings under "Tools" > "Internet Options" > "Privacy."
   • Note: If you refuse to save cookies, you may experience difficulties using customized services.

Article 8 (Remedies for Infringement of Data Subject Rights)

1. To seek remedies for personal information infringement, a data subject can apply for dispute resolution or counseling with organizations such as the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency's (KISA) Personal Information Infringement Reporting Center. For other reports or consultations, please contact the following organizations:
   1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
   2. Personal Information Infringement Reporting Center (KISA): 118 (privacy.kisa.or.kr)
   3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
   4. National Police Agency Cyber Bureau: 182 (ecrm.police.go.kr)
2. The Personal Information Protection Commission works to ensure the data subject's right to self-determination of personal information and provides counseling and remedies for infringements. If you need to report or consult, please contact the following department:
   • Department: Information Management Division
   • Officer: Byun Byung-pil
   • Contact: Phone: +82-41-635-3730, Fax: +82-41-635-3049
3. If a data subject's rights or interests are violated by a public institution's action or inaction in response to a request under Article 35 (Access to Personal Information), Article 35-2 (Request for Transfer of Personal Information), Article 36 (Correction/Deletion of Personal Information), or Article 37 (Suspension of Processing) of the Personal Information Protection Act, they may file an administrative appeal in accordance with the Administrative Appeals Act. ※ Central Administrative Appeals Commission: 110 (www.simpan.go.kr)

Article 9 (Right to Request Access to Personal Information)

1. Data subjects can request access to their personal information and request its transfer, in accordance with Articles 35 and 35-2 of the Personal Information Protection Act, to the following department. The Province will make every effort to ensure that such requests are handled promptly.
   • Department for Access Requests: Chungnam Fire Headquarters 119 Situation Room
   • Officer: Kim Hwan-se
   • Contact: +82-41-635-5542
2. In addition to the department above, you can also request access to your personal information through the Personal Information Portal website (www.privacy.go.kr) operated by the Personal Information Protection Commission. ※ Personal Information Portal → "Personal Service" → "Request for Access to Personal Information" (Additional one-time authentication may be required for collecting duplicate subscription verification information, mobile phone numbers, etc., depending on the authentication method).

Article 10 (Personal Information Protection Officer)

1. The Province has designated a Personal Information Protection Officer to oversee all personal information processing tasks and to handle complaints and provide remedies for data subjects.
   • Personal Information Protection Officer:
     • Name: Kim Ki-seop
     • Position: Division Head
     • Contact: +82-41-635-5653 (Department in charge)
   • Department in Charge: Chungnam Fire Headquarters 119 Situation Room
     • Officer: Kim Ki-seop
     • Contact: +82-41-635-5653
   • Personal Information Management Officer: The head of the department that processes personal information (e.g., the head of a department at the provincial office or the head of a subordinate agency/business unit).
2. Data subjects can contact the Personal Information Protection Officer or the department in charge for all inquiries, complaints, and remedies related to personal information that arise while using the Province's services. The Province will respond and handle your inquiries without delay.

Article 11 (Processing of Pseudonymized Information) The Province does not currently process pseudonymized information. If we begin to do so, we will disclose the purpose, retention period, third-party provision, entrustment, and security measures for such processing on our website. Article 12 (Criteria for Additional Use and Provision) In accordance with Articles 15 and 17 of the Act, the Province may use or provide personal information without the data subject's consent. The criteria for such additional use or provision are as follows:

1. Whether it is related to the original purpose of collection.
2. Whether the data subject can reasonably predict the additional use or provision of their personal information, given the context of collection and processing practices.
3. Whether it unfairly infringes upon the interests of the data subject.
4. Whether necessary security measures, such as pseudonymization or encryption, have been taken.

Article 13 (Operation of Video Information Processing Devices)

1. In accordance with Article 25 of the Act, the Province installs and operates fixed video information processing devices and has established and publicly disclosed an operation and management policy on its website. You can check the legal basis, purpose, number of devices, installation locations, person in charge of management, and processing methods by clicking the link below.
2. The Province does not currently install or operate mobile video information processing devices as per Article 25-2 of the Act. We will post a notice on the website if we begin to do so.

Article 14 (Results of Personal Information Impact Assessments)

1. In accordance with Article 33 of the Act, the Province undergoes a "Personal Information Impact Assessment" to investigate, analyze, and evaluate the impact that personal information processing systems have on the personal information files of data subjects.
2. If an impact assessment has been conducted on the personal information files operated by the Province, we will post the results on our website. The results of the performed impact assessment are as follows:

Article 15 (Results of Personal Information Protection Level Evaluation)

1. In accordance with Article 11-2 of the Act, the Province undergoes an annual "Personal Information Protection Level Evaluation" conducted by the Personal Information Protection Commission to ensure the safe management of data subjects' personal information.
2. The Province received a "C" grade in the 2023 Personal Information Management Level Diagnosis.
3. The Province will establish and implement an action plan to address the improvement requirements from the 2023 Personal Information Management Level Diagnosis to improve our grade.

Article 16 (Changes to the Privacy Policy)

• The main changes to the Privacy Policy are detailed in the Old vs. New Comparison Table.

1. This Privacy Policy is effective as of May 1, 2024.
2. You can view previous versions of the Privacy Policy below.