Personal Information Management Policys
“Weform” has established and published the personal information management policy as follows in accordance with Article 30 of the Personal Information Protection Act to protect personal information and to handle any related problems that the information subject may face.
“Weform” processes personal information for the following purposes. Processed information is not used for any purposes other than the following. If the purpose of use needs to be changed, necessary measures will be taken such as asking prior consent in accordance with Article 18 of the Personal Information Protection Act.
Website membership registration and management
“Weform” processes personal information for the following purposes - to verify the user’s intention to register the website; to identify and certify the user’s identity to provide membership services; to maintain and manage the membership status; to prevent unauthorized use of service; to verify consent of a legal agent for the users under 14; to provide public announcement and notice; and to handle complaints.
Provision of services
“Weform” processes personal information for the purposes of provision of contents or customized services, etc.
Marketing and provision of information
“Weform” processes personal information for the purposes of asking to participate in an event of
“Weform” processes and retains personal information within the period stipulated by law or consented by the subject of the information upon collection of personal information.
Personal information processing and retention period are as below.
Registration and management of the website membership : until membership withdrawal However,
if an investigation is ongoing due to a violation of a related law, personal information is retained until the investigation ends. However, if an investigation is ongoing due to a violation of a related law, personal information is retained until the investigation ends.
Marketing or provision of information : membership withdrawal
“Weform”processes the personal information in accordance with the Article 1 (Purpose of Personal Information Management), and provides personal information to a third party only when it is stipulated by Articles 17 and 18 of the Personal Information Protection Act, for example the consent of the information subject, special provision of law, etc.
“Weform” provides personal information to a third party as follows.
nformation is provided to
Proposer of petition
Relevant organization and press
Intended use of the information
To share petition
To share petition
Contents of provided information
Name, nationality
Name, nationality
Period of retention and use of the information
Until membership withdrawal
Until membership withdrawal
“Weform” does not entrust personal information.
If personal information is entrusted, it will be immediately disclosed through this Personal Information Management Policy.
The information subject may exercise the rights to access, correct, delete and suspend the processing of personal information with “Weform” at any time.
The rights referred to in Paragraph
may be exercised by submitting a document, e-mail or facsimile to “Weform” in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act. “Weform” will immediately take action regarding such request.
The rights referred to in Paragraph
may be exercised by a representative of the information subject such as a legal agent or a delegated person. In this case, a power of attorney provided in the Form 11 of “Notice on Processing Method of Personal Information (No.2020-7)” must be submitted.
In terms of the requests to access personal information and to suspend processing personal information, the rights of the information subject may be restricted in accordance with Articles 35 (4) and 37 (2) of the Personal Information Protection Act
In terms of the requests to correct and delete personal information, if it is specified by other laws that the personal information is subject to collection, it cannot be requested to be deleted.
“Weform” identifies if the requesting person is authorized when the request is made to access, correct, delete, and suspend processing in accordance with the rights of the information subject.
“Weform” processes the following types of personal information.
Website membership registration and management
Required Items:
Name, e-mail address, nationality, year of birth
Optional Items:
Profile photo
Provision of services
Required Items:
Name, ID, e-mail address
Marketing and provision of information
Required Items:
E-mail address, nationality, petition that you have participated
During the use of the online services, the following personal information may be automatically created and collected.
IP address, cookies, MAC address, service usage record, visit record, unauthorized usage record, etc.
When any of the personal information becomes no longer necessary, including expiration of the retention period or fulfilment of processing purposes, “Weform” immediately disposes of such personal information.
Despite expiration of the retention period consented by the information subject or fulfilment of its purposes, in case the personal information should be preserved in accordance with other laws, such personal information will be transferred to a separate database (DB) or stored in a different place.
The process and method of disposal of personal information are as below.
Disposal Process
“Weform” identifies personal information that needs to be disposed, and disposes of such information after obtaining approval of the personal information manager of “Weform”.
Disposal Method
The information stored in electronic form will be destroyed in the way to make sure that such information will not be reproduced, and the information stored in paper will be destroyed by shredding it with a paper shredder or by incinerating it.
“Weform” takes the following measures to secure the safety of personal information.
Administrative measures : Establishment and implementation of internal management plan, regular staff training
Technical measures : Limited access to personal information processing system, establishment of a system to control access, the encryption of identification information, installation of a security program
Physical measures : Control of access to rooms for data processing and data storage
“Weform” uses a ‘cookie’that usage information is stored and frequently loaded, in order to provide individually customized services to users.
The cookie is a small amount of information that the server (http) used for operation of the website sends to the user’s computer browser, and is also stored in a hard disk drive of the user’s computer.
Purpose of using a cookie: It is used to analyze all kinds of information on the services and websites that users have visited, such as types of visits and uses, popular search terms, security access, etc., so that optimized information can be provided to users.
Installation and operation of a cookie and its denial: It can be denied to store the cookie by changing options of your web browser as follows: Tools (from the menu at the top of your browser) → Internet Option → Personal Information
In case of denying to store a cookie, customized services may not be provided.
“Weform” appoints a personal information protection manager who is responsible for all affairs regarding personal information processing. The manager also deals with complaints caused by the information subject and remedy for damages related to the processing of personal information.
Name : Park Gi-tae
Personal Information Protection Manager
Contact : (+82) 02-921-3591, school@prkorea.org,Fax : (+82) 02-921-3593 ,
※ It will be connected to the personal information management division.
While using the services of “Weform”, the information subject may inquire all questions, complaints, and damage remedy related to personal information to the Personal Information Manager and the Management Division. “Weform” will immediately respond to the inquiries.
“Weform” may additionally use and provide personal information withoutconsent of the information subject in consideration of matters under Article 14-2 of the Enforcement Decree of the Personal Information Protection Act in accordance with the Articles 15 (3) and 17 (4) of the Personal Information Protection Act. In this regard, “Weform” will take the following into consideration for additional use and provision without consent of the information subject
If the purpose of additional use and provision of personal information is related to its original purpose of collection
If it is possible to predict additional use and provision of personal information based on the circumstances of its collection and practice of its process
If additional use and provision of personal information unreasonably infringe the profits of the information subject; and
If necessary measures to secure safety have been taken, including anonymity or encryption.
The information subject may request permission to inspect one’s personal information to the following division in accordance with Article 35 of the Personal Information Protection Act. “Weform” will respond to such requests as promptly as possible.
Division in Charge
Person in charge: Kwon So Young
Contact : (+82) 02-921-3592, soyoungk@prkorea.org, Fax (+82) 02-921-3593
This Policy will take effect from the date of August 15, 2025.