Privacy Policy

Article 1 (Personal Data Collected and How It Is Collected)

The Service collects only the minimum information necessary to reserve a meeting room. Resident registration numbers are never collected.

Data is collected either because the user enters it directly on the Service, because it is provided by a social login provider with the user’s consent, or because it is generated automatically in the course of using the Service.

Article 2 (Purposes of Processing)

1. Member identification and authentication — sign-up, login, identity verification and maintaining the logged-in state
2. Review of use approval — verifying affiliation, job title and contact details in order to grant or refuse the right to reserve meeting rooms
3. Provision of the reservation service — accepting, confirming, changing and cancelling reservations, preventing double booking, and providing usage guidance
4. Facility operation — understanding usage, giving notice of closures and maintenance, and contacting users about their use
5. Sending notifications — reservation confirmation, change and cancellation notices, and reminders before the start of use
6. Ensuring the stability of the Service — preventing misuse, responding to incidents and handling enquiries

Article 3 (Retention and Use Period)

The Association destroys personal data without delay once the purpose of processing has been achieved. Data is retained for the periods below.

On withdrawal, account information is destroyed immediately. However, where a confirmed reservation remains, the relevant data is destroyed after that reservation has ended in accordance with the periods above; and where there is a record of misuse, the minimum information necessary to prevent recurrence may be stored separately.

Article 4 (Provision to Third Parties)

The Association does not provide users’ personal data to third parties, except:

• where the user has consented in advance; or
• where there is a special provision of law, or an investigative authority requests it in accordance with the procedures and methods prescribed by law.

Article 5 (Outsourcing of Processing)

The Association outsources personal data processing as set out below in order to operate the Service, and in each outsourcing contract stipulates and supervises the matters necessary for personal data to be managed securely.

Article 6 (Overseas Transfer)

The Association does not transfer personal data overseas. All personal data is stored and processed on servers located in the Republic of Korea.

With social login, the user logs in directly with Kakao or Google, and the Association stores the information received as a result on its domestic servers. Processing of personal data by those providers is governed by their own privacy policies.

Article 7 (Procedure and Method of Destruction)

• Procedure — once the retention period expires or the purpose of processing is achieved, the data is classified for destruction and destroyed without delay.
• Method — electronic files are permanently deleted by a method that makes recovery impossible; paper documents are shredded or incinerated.

Article 8 (Users’ Rights and How to Exercise Them)

Users may exercise the following rights at any time:

• request access to their personal data;
• request correction where there is an error;
• request deletion (withdrawal of membership);
• request suspension of processing;
• withdraw consent to notifications (which can be turned off at any time in Settings).

You can view, amend and withdraw directly on the Settings screen of the Service, or you may make a request in writing or by email to support@nskit.io or to the personal data protection officer below. Requests may also be made through a legal representative or an authorised agent. The Association handles such requests without delay.

Article 9 (Children Under 14)

The Service is intended for adults who use the Association’s facilities, and does not accept sign-ups from children under 14 years of age.

Article 10 (Automatic Collection Devices — Cookies)

The Service uses only the cookies necessary to provide the Service, such as maintaining the logged-in state. No third-party cookies are used for advertising or behavioural analysis.

You may refuse cookies in your browser settings, but in that case features that require login (such as making reservations) cannot be used.

Article 11 (Security Measures)

• Password encryption — passwords are stored encrypted in a form that cannot be decrypted.
• Encryption in transit — all communications are encrypted with HTTPS (TLS).
• Minimum access rights — the number of staff handling personal data is kept to a minimum and access rights are granted differentially.
• Access control — server access is restricted to authorised routes, and the administration screens require separate authentication.
• Access logging — access records of the personal data processing system are retained and reviewed.

Article 12 (Personal Data Protection Officer)

Please use the contacts below for enquiries, complaints or remedies relating to the processing of personal data. The Association will respond without delay.

The personal data controller is the Theodore Roosevelt Association Korea; system development and operation are carried out by Neoulsoft Inc. as the managing partner. The data protection officer and the enquiry channel are handled by the managing partner.

Article 13 (Remedies for Infringement)

If you need help regarding an infringement of your personal data, you may contact the following bodies in the Republic of Korea:

• Personal Information Dispute Mediation Committee — 1833-6972 (www.kopico.go.kr)
• Privacy Infringement Report Centre — 118 (privacy.kisa.or.kr)
• Supreme Prosecutors’ Office, Cybercrime Investigation Division — 1301 (www.spo.go.kr)
• National Police Agency, Cyber Bureau — 182 (ecrm.police.go.kr)

Article 14 (Changes to this Policy)

Where this Policy is amended, notice will be given through announcements within the Service from 7 days before the amendment takes effect. Amendments that materially affect users’ rights will be notified 30 days in advance.