Article 1. Consent to Collection of Personal Information and Collection Method
When visiting our website, you are not required to provide any personal data.
< Center for CIC > (“https://centercicboston.org/” hereinafter “CIC”) shall establish a procedure that allows members to click an “Agree” button to consent to the terms of use, collection of personal information, and details of personal information. Members shall be deemed to have agreed to the collection and use of their personal information by clicking the “Agree” button.
Article 2. Personal Information Items Collected and Purpose of Using Personal Information
“Personal Information” means details of names, resident registration numbers, or any other information that identifies such living persons. (Even if such information alone cannot identify a certain person, such information that can be easily combined with other information and be used to identify such a person.)
CIC has the following purposes for collecting and using members’ personal information:
Personal information of general members
CIC may collect the following personal data:
• Full name
• Agency/ Company name
• Agency/ Company location
• Position in Agency/ Company
• Email address
- Time of collection: Signing up for membership
- Mandatory collection items: ID, password, e-mails, names *required to be revised*
- Optional collection items: Profile images, date of birth, telephone number, address *required to be revised*
- Purpose of using personal information: Signing up for membership for the use of services and delivery of notices.
- Retention period: Immediately deleted upon withdrawal of membership
Article 3. Rights under the General Data Protection Regulation (GDPR), are described below.
GDPR: Data Subjects covered by the GDPR are afforded the following rights:
• The Right to be Forgotten: You have the right to request the erasure of personal data submitted to CIC; this means you can request CIC to restrict your data from any further processing, and have your data deleted if possible.
• Complaints may also be submitted to the applicable supervisory authority in the European Economic Area, which includes the data protection authority in your locality (for example, in the U.K., the supervisory authority would be the Information Commissioner’s Office).
Article 4. Periods of Retaining and Using Personal Information and Destruction of Personal Information
1) Members’ personal information shall be destroyed without any delay after the purposes of collection and use of their personal information have been fulfilled. However, if members’ personal information needs to be retained for a certain period of time for the purpose of verifying transaction parties’ rights and obligations in accordance with provisions of relevant statutes, such as the Protection of Consumers in e-commerce and Other Transactions Act, such information shall be retained for the specified period.
2) CIC shall destroy personal information in the following manner:
A. Destruction procedure - The information entered for membership sign-up shall be transferred to a separate database (in case of information on paper, a separate filing cabinet), stored for a certain period of time in accordance with internal guidelines and other relevant statutes, and then destroyed.
- The above personal information shall not be used for any purposes other than for the purposes stipulated by law.
B. Destruction methods - Personal information printed out on paper shall be destroyed by shredding or burning.
- Personal information in electronic file formats shall be destroyed entirely by technological methods so that they may not be restored or regenerated.
Article 5. Provision of Personal Information for Third Parties
1) CIC shall neither use members’ personal information nor provide such information for other persons, companies, and institutions beyond the scope of Article 1 above (Personal Information Items Collected and Purpose of Using Personal Information).
2) The following cases are exceptions:
A. When members’ personal information is required by relevant institutions for investigative purposes in accordance with relevant statutes.
B. When members’ personal information is provided in a form that cannot identify certain individuals for advertisers, suppliers, or research organizations to compile statistics or conduct academic or market research.
C. When members’ personal information is requested in accordance with pre-determined procedures under other relevant statutes. Even if personal information is provided in accordance with the foregoing, we will do our best to ensure that such information is not indiscriminately provided against the original purpose of collection and use of such information.
Article 6. Access and Modification of Personal Information
1) Members may access or modify their registered personal information on CIC at any time. Members may click the “Change Members’ Information” menu and directly access or modify their personal information. They may also request for such access or modification by sending an e-mail or written requests to a chief privacy officer or a personal information handling employee at CIC. CIC shall take relevant measures without any delay.
2) If members demand correction of any errors to their personal information, such personal information shall neither be used nor provided by the CIC until such errors have been corrected.
3) If incorrect personal information has already been provided to any third party, CIC shall immediately notify such third party regarding correction of this information and have this third party modify the information.
Article 7. Withdrawal of Consent to Collection, Use, and Provision of Personal Information
1) Members may withdraw their consent to the collection, use, and provision of their personal information that is made available when signing up for membership at any time. They may do so by clicking “Withdrawal of Consent (Membership)” in the “Personal Information Management” menu on the initial landing page of CIC. They may also do so by contacting the chief privacy officer of CIC in writing, by telephone, or through e-mail. CIC shall immediately take necessary measures, such as deletion of personal information. Further, CIC shall immediately notify members of such measures, including withdrawal of consent and destruction of personal information.
2) CIC shall take necessary measures to ensure that members withdraw their consent (membership) to the collection of their information through an easier method than what they used to give their consent to the method of collecting personal information.
Article 8. Measures for Ensuring the Security of Personal Information
CIC shall take all technological, administrative, and/or physical measures required to ensure the security of personal information in accordance with Article 29 of the Personal Information Protection Act.
1. Encryption of personal information
Users’ personal information, including passwords, are stored and managed and will only be known to users who own that information. Important data is secured with separate features, such as the encryption and locking of files and transmitted data.
2. Technological measures against hacking
CIC shall install, regularly update, and check security programs to ensure that personal information is not leaked and damaged due to hacking or computer viruses. It shall also install systems in areas to which access from the outside is controlled, as well as technologically and/or physically inspect and block such areas.
Article 9. Protection of Personal Information of Children under Thirteen Years of Age
CIC encourages parents and guardians to take an active role in their children's online activities. Our Services are not aimed at people under 18.
CIC deems important the protection of children’s personal information in online environments. It does not allow children under 13 years of age who require the consent of their legal counsel to apply for membership. If such children sign up for CIC or provide their personal information due to the theft of their names and information or abuse of systems, their legal counsels may exercise all rights.
Article 10. Modification of the Guideline on Personal Information Processing
This guideline on personal information processing shall take effect on its effective date. Any addition or change under statutes and this guideline, and deletion and correction of anything in this guideline shall be announced through notices seven (7) days prior to the effectuation of such addition, deletion, or correction.
Article 11. Purchase Agreement
No refund