Instructions for use

‘ICAO With’ mobile application operated by International Cooperative Alliance Organization(hereby ICAO) secretariat : ‘ICAO With’ mobile application uses the following guide in accordance with the Personal Information Protection Act to protect personal information of users and their rights and interests and to smoothly handle any user difficulties related to personal information.

Changes to the privacy policy of ‘ICAO With’ : ‘ICAO With’ mobile application will be announced through the mobile application (or individual notices). This policy is in effect from June 1, 2023.

Article 1 (Purpose of processing personal information)

'ICAO With' mobile application processes personal information for the following purposes.

Processed personal information shall not be used for purposes other than the following, and user’s prior consent will be requested in the case of changes made to the purpose of use.

• 1. Provision of customized services
  Personal information automatically collected from user’s device, including nationality, language setting, and location, will be used to provide services according to the location of users and demographic characteristics. Some users’ content history, excluding personal information, will be used as learning materials for the recommendation engine.
• 2. For marketing purposes
  Personal information will be used to develop new services, provide customized service, confirm the validity of the service, identify access frequency and check statistics on user services.

Article 2 (Items of personal information to be handled)

'ICAO With' mobile application processes the following personal information items.

• 1. Matters on the automatic collection of personal information
  The company collects server log data such as viewed content, like, share, save, and other information connected with the app usage. The app collects device specifications of individual user’s device used to access 'ICAO With' platform, such as device type and the operation system, as well as system language and users’ location and country information, as well as a personal identification code specific to the app. This data is used to help improve user experience and provide better personalized services.
• 2. For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information, including but not limited to email, password, name, organization, duty, phone number, area, country, log information, IP information. The information that we request will be retained by us and used as described in this privacy policy.

Article 3 (Processing and retention period of personal information)

Personal information of users will be destroyed immediately when its processing purpose is completed.

Article 4 (Consent and purpose of authorization on device access)

'ICAO With' mobile application asks for user permission to gain device access required to perform app services. When users tap the “agree” button, access is considered to be permitted.

• 1. Definition on device
  “Device” refers to smartphones and tablet PCs that can install and use 'ICAO With': 'ICAO With' mobile application service.
• 2. Authorization on device access
  

  Authorization name	Reason for use
  INTERNET	Internet connection
  READ_EXTERNAL_STORAGE	Image upload and saving temporary files
  ACCESS_MEDIA_LOCATION	Image upload and saving temporary files
  RECEIVE_BOOT_COMPLETED	Automatic operation when rebooting

Article 5 (Provision of personal information to a third party)

'ICAO With' mobile application processes personal information of users within the purposes specified in Article 1 (Purpose of processing personal information), and shall not process the personal information for purposes stated other than the above and shall not disclose user information to a third party without prior consent of users.

Article 6 (Trust of processing personal information)

• 1. 'ICAO With' mobile application entrusts the task of handling personal information as follows to smoothly process personal information.
  

  Entrusted party (Trustee)	Nrichtech
  Entrust department / Person in charge	IT Planning Team / Se-won, Kim
  Contents of trust	- Technical support in operating and managing 'ICAO With': 'ICAO With' mobile application and in protecting user information - Technical support in processing online customer service - Technical support in performing online events to promote app services and to retrieve and analyze user statistics - Trust personal information to perform events and deliver prizes - Technical support in protecting and managing personal information - Handle training in regards to the recommendation engine
  Period	2023.6.26. ~ At the end of a maintenance contract

• 2. 'ICAO With' mobile application specifies matters of responsibility such as prohibition of processing personal information for the purposes other than consignment business, technical and administrative protection measures, restriction of re-consignment, management and supervision for consignors and indemnification for damages when concluding consignment contract according to Article 26 of the Personal Information Protection Act, and supervises whether consignors process personal information safely.
• 3. This privacy policy will be updated and prior consent will be requested if necessary in the case of changes being made to the contents of consignment or consignor.

Article 7 (Destruction of Personal Information)

'ICAO With' mobile application will immediately destroy collected personal information once the processing purposes such as the completion of delivering event prizes is achieved. Procedures, deadlines and methods for destroying are as follows.

• 1. Procedure : Information input by users is transferred to a separate database (separate document in the case of paper) after achieving the purpose, and is destroyed after being saved for a certain period of time according to internal policies and other related laws or is destroyed immediately. At this time, personal information transferred to a database shall not be used for other purposes unless it is required by laws.
• 2. Deadline : When the retention period of personal information has expired, personal information of users shall be destroyed within 5 days from the end of retention period. When the personal information becomes unnecessary due to the achievement of processing purposes and closing of the services or business, the personal information shall be destroyed within 5 days from the date when the processing of personal information is recognized as unnecessary.
• 3. Method : Information in the form of electronic files uses technical method that can’t reproduce records. Personal information printed on paper is shredded by shredder or destroyed through incineration.

Article 8 (Measures to secure safety of personal information)

'ICAO With' mobile application uses the following technical / administrative and physical measures to secure safety according to Article 29 of the Personal Information Protection Act.

• 1. Minimize and train employees who are handling personal information
  We minimize the number of designated employees who will handle personal information. We comply with the obligation to perform assessment of personal information according to Article 35 of the Personal Information Protection Act and Article 6 of Additional Rules, securing safety related to handling personal information and improving the administrative system. We establish and implement an internal management plan to safely process personal information. We manage personal information by applying encryption technology that can safely save and transmit encrypted personal information or by taking corresponding measures.
• 2. Technical measures for hacking, etc
  'ICAO With' Service installs a security program and performs regular update checks to prevent leakage and damage of personal information through hacking or computer viruses, and installs systems in a controlled area for access from outside to technically and physically supervise and block them.
• 3. Access restriction for personal information
  We are making necessary measures to restrict access for personal information by granting, changing and canceling access authorization on database systems that process personal information, and use a firewall system to control unauthorized access from the outside.
• 4. Use of locking system for document security
  We save documents or auxiliary storage media that include personal information in a safe place with a locking device.
• 5. Access control for unauthorized person
  We set a physical storage place that keeps personal information and establish and operate access control procedures for this.

Article 9 (Privacy Officer)

ICAO Secretariat designates the privacy officer and person in charge of personal information as below to protect personal information and process complaints related to personal information. (Privacy officers according to Article 31-1 of Personal Information Protection Act)

Privacy Officer
Name : LEE Wook
Department / Position : ICAO Secretariat / Secretary General

Person in charge of personal information
Department : ICAO Secretariat
Person in charge : LEE JIN HYUNG
Contact: +82-2-2080-6122

Article 10 (Modification of privacy policy)

This Privacy Policy takes effect from the date of implementation, and any addition, deletions or corrections according to the laws and policies will be announced through notice from 7 days before the implementation of such changes.

Article 11 (Remedy for infringement on rights and interests)

Subjects of personal information infringement can apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee and Personal Information Infringement Report Center of Korea Internet & Security Agency. Please contact the following organizations for reporting and counseling for other matters related to infringement of personal information.

Personal Information Infringement Report Center (Operated by Korea Internet & Security Agency)
Duties: Report the fact of infringement of personal information, apply for consultation
Website: privacy.kisa.or.kr
Phone: (Without area code) +82-118
Address: (138-950) Personal Information Infringement Report Center of Korea Internet & Security Agency, 135 Jungdae-ro, Songpa-gu, Seoul

Personal Information Dispute Mediation Committee (Operated by Korea Internet & Security Agency)
Duties: Apply for dispute mediation of personal information, group dispute mediation (Resolution through civil suit)
Website: privacy.kisa.or.kr
Phone: (Without area code) +82-118
Address: (138-950) Personal Information Infringement Report Center of Korea Internet & Security Agency, 135 Jungdae-ro, Songpa-gu, Seoul

Cyber Crime Investigation Department of Supreme Prosecutor’s Office : +82-2-3480-3573 (www.spo.go.kr)
Cyber Crime Investigation Department of the National Police Agency : +82-1566-0112 (www.netan.go.kr)