1. Items and collection methods of personal information collected

1) Personal information collection items

(1) When registering as a member

① Required items: name, date of birth, contact information, gender (male/female), email, address

(2) When applying for donation and issuing a receipt

① Collection items: name, date of birth, phone number, email, address, donation receipt application (resident registration number), donation participation route, donation field, donation amount, donation method

• CMS automatic transfer: bank name, account number, depositor name, depositor date of birth, transfer date
• Credit card: card company name, card number, card expiration date, transfer date

(3) When applying for inquiry

1. Collection items: name, affiliated organization, email, phone number, content

   ※ For the purpose of preparing donation receipt issuance statements and issuing donation receipts for year-end tax settlement, resident registration numbers may be collected in accordance with Article 113 (1) and Article 208-3 of the Enforcement Decree of the Income Tax Act and Article 58 of the Enforcement Rules of the Income Tax Act. If you do not enter your resident registration number, issuance of donation receipts may be restricted.

   ※ The following information may be automatically generated and collected during the service use process or business processing.
   – IP address, cookie, visit date and time, service use record, bad use record, etc.

2. How we collect personal information

   The International Virus Research Alliance collects personal information in the following ways.
   • Website, written form, donation application, phone/fax, member information modification, consultation and inquiry, service use, event application, etc.

2. Purpose of collection and use of personal information

1. Donation details: Confirmation of donation details by individuals and companies (groups), delivery of goods, sending of invoices, etc.
2. Donation member management: Verification of identity based on membership service use, personal identification, confirmation of intent to join, processing of complaints such as complaints, delivery of notices, etc.
3. Contract regarding donation payment and service provision: donation payment, financial transaction identity verification, donation-related information, content provision, etc.
4. Notices and guidance: Volunteer guidance, sending newsletters and printed materials, guidance on participation in various events and events, provision of newsletters and various contents, etc.
5. Donation propensity analysis: Donation propensity analysis and statistics, access frequency identification, service use statistics, etc.

3. Retention and use period of personal information

he International Virus Research Alliance destroys personal information immediately after the purpose of collecting and using personal information has been achieved. However, if preservation is necessary in accordance with the provisions of relevant laws and regulations, member information will be kept for the period specified in the relevant laws and regulations as follows.

1) Reasons for retaining information in accordance with relevant laws and regulations

(1) Preservation items: name, resident registration number, payment information, service use record, access IP information, payment record (things held at the time of withdrawal)

(2) Basis for preservation: Act on Consumer Protection in Electronic Commerce, etc.

(3) Retention period

• ① Donation member registration and management: Until donation member withdrawal
  However, if any of the following reasons apply, it will be retained until the relevant reason ends.
  ㉮ In accordance with Article 112-2 of the Corporate Tax Act, the obligation to prepare, store, and submit donation receipt issuance details, a person who issues a donation receipt (necessary for the donor to receive an income deduction for the donation, inclusion as a necessary expense for the donation, or inclusion as a deductible for the donation) must be registered by the donating corporation. ･ Fill out the issuance details for each donor, keep it for 5 years from the date of issuance, and submit a donation receipt issuance statement.
  ㉯ If an investigation, investigation, etc. is in progress for violation of related laws and regulations, until the end of the investigation or investigation, etc.
  ㉰ Obligation to submit a membership list, if necessary, within 2 months after the end of the fiscal year according to the request of the competent authority.
• ② Proof of performance of original purpose projects such as support projects: 10 years from the end date
  ㉮ In accordance with Article 51 of the Inheritance and Gift Tax Act, public interest corporations prepare a ledger of the assets received as contributions and the operation details of public service projects (recording the holding and operation status of the assets contributed and the income and expenditure details of profitable businesses) for each fiscal year.
  ㉯ Preservation of ledgers and related important evidentiary documents for 10 years from the end of the tax year
• ③ Provision of goods or services: Until completion of supply of goods or services and completion of fee payment/settlement.
  However, in the following cases, until the end of the relevant period:
  • ㉮ Records of transactions, such as labeling, advertising, contract details and performance, pursuant to the Act on Consumer Protection in Electronic Commerce, etc.
    • Records on labeling and advertising: June
    • Records of contract or subscription cancellation, payment, supply of goods, etc.: 5 years
    • Records of consumer complaints or dispute resolution: 3 years
  • ㉯ Storage of communication confirmation data pursuant to Article 41 of the 「Communication Secrets Protection Act」
    • Subscriber telecommunication date and time, start and end time, other party subscriber number, frequency of use, sending base station location tracking data: 1 year
    • Computer communication, internet log records, access point tracking data: 3 months
  • ㉰ Storage of identity verification information in accordance with Article 29 of the Enforcement Decree of the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.: 6 months after information posting on the bulletin board ends

4. Personal information destruction procedures and methods

The International Virus Research Alliance complies with the following personal information destruction procedures and methods.

1) Destruction procedure

(1) After the purpose is achieved, the information entered by the member for donation is transferred to a separate DB (in the case of paper, a separate filing cabinet) for reasons of information protection in accordance with internal policies and other relevant laws (see Personal Information Retention and Use Period) ) is stored for a certain period of time and then destroyed.

(2) Personal information transferred to a separate DB will not be used for any purpose other than retention unless required by law.

2) Destruction method

(1) Personal information printed on paper is destroyed by shredding or incineration.

(2) Personal information stored in the form of electronic files is deleted using technical methods that render the records unrecoverable.

5. Sharing and provision of personal information

1. If the member consents in advance
2. When there is a request from an investigative agency in accordance with the provisions of the law or in accordance with the procedures and methods set forth in the law for the purpose of investigation.
   • ① Rules on the establishment and supervision of non-profit corporations under the jurisdiction of the Ministry of Public Administration and Security and its affiliated offices (Article 8 of the same Act): The competent authority shall, in unavoidable cases, inspect and supervise the affairs of non-profit corporations pursuant to Article 37 of the Civil Act, related documents and ledgers. Alternatively, the submission of other reference materials may be ordered or the office and property situation may be inspected.
   • ② Documents regarding settlement of accounts and reports on assets contributed to public interest corporations, etc. (Article 41 of the Enforcement Decree of the Increased Tax Act)
   • ③ Obligation to undergo an external accounting audit (Article 50 of the Commercial Tax Act, Article 3 of the Act on External Audit of Stock Companies)
   • ④ Obligation to disclose settlement documents (Article 50 of the Commercial Tax Act)
   • ⑤ Obligation to prepare, store, and submit donation receipt issuance details (Article 112 of the Corporate Tax Act)
3. When it is unavoidably necessary for the performance of member services posted on the website, or when the information subject violates the terms of use or policies such as the service terms and conditions or other member services posted on the website
4. In cases where the information subject or his/her legal representative is unable to express his/her intention or cannot obtain prior consent due to unknown address, etc., or it is clearly deemed necessary for the urgent benefit of the life, body, or property of the information subject or a third party.

6. Entrustment of processing of personal information

• The International Virus Research Alliance entrusts personal information as follows to provide better services.
• When concluding a consignment contract in accordance with Article 25 of the Personal Information Protection Act, the International Virus Research Alliance prohibits processing of personal information for purposes other than the purpose of performing the consignment work, technical and managerial protection measures, restrictions on re-entrustment, management and supervision of the consignee, and responsibilities such as compensation for damages. We specify this in documents such as personal information consignment agreements and supervise whether the trustee handles personal information safely.
• If the details of the entrusted work or the trustee changes, we will disclose it through this personal information processing policy without delay.

1) When entrusting to a PG company for donation approval and settlement

(Consignment processing agency / Purpose of consignment use / Consignment information items / Consignment information retention and use period)

• National Tax Service / Provision of tax reduction benefits and confirmation of donation receipt details / Resident registration number, name, contact information, donation amount, address / 10 years
• Korea Financial Telecommunications & Clearings Institute / CMS withdrawal transfer service provision and withdrawal consent confirmation / name, date of birth, bank name, account number, donation amount / up to 5 years
• Nice Information & Communications Co., Ltd., Kakao Pay Co., Ltd., NHN Payco Co., Ltd. / Credit card payment, real-time account transfer, simple payment approval and settlement / Name, date of birth, card name, card number, telecommunication company, donation amount, mobile phone Telephone number / Until the storage period stipulated by relevant laws and regulations

7. Rights of members and legal representatives and methods of exercising them

1. Members and legal representatives can view or correct their registered personal information or that of children under the age of 14 at any time and request cancellation of membership.
2. To view the personal information of a member or a child under the age of 14, change personal information (or edit member information, etc.), or cancel membership (withdraw consent), click Edit member information on the website, go through the identity verification process, and then directly view or correct. , you can withdraw. Alternatively, if you contact the person in charge of personal information protection in writing, by phone or email, we will take action without delay.
3. If a member requests correction of an error in personal information, the personal information will not be used or provided until the correction is completed. Additionally, if incorrect personal information has already been provided to a third party, the third party will be notified of the correction results without delay so that the correction can be made quickly.
4. The International Virus Research Alliance processes personal information that has been canceled or deleted at the request of a member or legal representative as specified in the ‘Retention and Use Period of Personal Information’ and processes it so that it cannot be viewed or used for any other purpose.

8. Matters related to installation/operation and refusal of automatic personal information collection devices

• In order to provide specialized customized services, the International Virus Research Alliance uses ‘cookies’ to store and retrieve member information from time to time. A cookie is a very small text file that the server used to run the website sends to the member's browser and is sometimes stored on the member's computer hard disk.
• Information collected through cookies is not used for any purpose other than providing services. Additionally, we do not analyze information collected through cookies by combining it with personal real-name data that has already been collected.
• The International Virus Research Alliance uses cookies for the following purposes:

1) Purpose of using cookies

The International Virus Research Alliance visited by members is used to provide improved customized services by identifying visit time, frequency, and usage patterns for each service on the website.

2) Refusal to install and operate cookies

You have the option to install cookies. Therefore, by setting options in your web browser, you can allow all cookies, confirm each time a cookie is saved, or refuse to save all cookies.
However, if you refuse to store cookies, you may have difficulty using some services that require login.
Here's how to specify (for Internet Explorer) whether to allow cookies to be installed:

① Select [Internet Options] from the [Tools] menu.
② Click [Personal Information Tab].
③ Just set the [personal information processing level].

9. Technical and administrative protection measures for personal information

When handling members' personal information, the International Virus Research Association is taking the following technical and managerial measures to ensure the safety of personal information and prevent it from being lost, stolen, leaked, altered, or damaged.

1) Encryption of confidential information

The member's password is encrypted, stored and managed, so only the member knows it, and personal information can only be checked or changed by the person who knows the password.

2) Measures against hacking, etc.

The International Virus Research Alliance is doing its best to prevent members' personal information from being leaked or damaged by hacking or computer viruses.

In preparation for damage to personal information, we regularly back up data, use the latest anti-virus programs to prevent users' personal information or data from being leaked or damaged, and use encryption algorithms to safely transmit personal information over the network.

We use an intrusion prevention system to control unauthorized access from the outside, and we strive to equip all possible technical devices to ensure systematic stability.

3) Training of staff handling personal information

The International Virus Research Alliance staff handling of personal information is limited to the person in charge and minimized. In addition, we provide regular training on acquiring new security technologies and personal information protection obligations, and strive to comply with the personal information processing policy by assigning separate passwords to manage access rights.

10. Personal information protection manager and manager contact information

• In order to protect members' personal information and handle various complaints related to personal information, the International Virus Research Alliance appoints a personal information protection manager and manager as follows.
• Members may inquire with the personal information protection officer or manager regarding all personal information protection-related complaints that arise while using the services of the International Virus Research Alliance. The International Virus Research Alliance will respond to your inquiries as quickly and fully as possible.
• If you need to report or consult about other personal information infringements, please contact the organizations below.
• Personal Information Infringement Reporting Center (privacy.kisa.or.kr) (118 without area code)
  Personal Information Dispute Mediation Committee (www.kopico.go.kr) (1833-6972)
  Information Protection Mark Certification Committee (www.eprivacy.or.kr) (02-580-0533~4)
  Supreme Prosecutors' Office Cyber ​​Investigation Division: (spo.go.kr) (1301 without area code)
  National Police Agency Cyber ​​Security Bureau: (cyberbureau.police.go.kr) (182 without area code)

11. Duty to notify

• If there are additions, deletions or modifications to the privacy policy, the International Virus Research Alliance will notify you through a notice on the website at least 7 days prior to the revision.
• The contents of the personal information processing policy may change at any time, so please check it every time you visit the website.
• This privacy policy is effective from March 23, 2017.