Privacy Policy

Integrated Watershed Management Institute (the “Institute”) establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea, in order to protect the personal information of data subjects and to handle related grievances promptly and effectively.

Article 1 (Purposes of Processing Personal Information)

The Institute processes personal information for the following purposes. Personal information processed is not used for purposes other than those stated below. Where the purpose of use changes, the Institute will take the necessary measures, including obtaining separate consent under Article 18 of the Personal Information Protection Act.

Handling of enquiries and consultations — responding to and advising on consulting enquiries and technical enquiries
Provision of quotations for materials and products — responding to requests for quotations for climate data and monitoring systems
Recruitment — verifying applicants’ qualifications, conducting the selection process, and notifying results

Article 2 (Categories of Personal Information Processed and Retention Periods)

Purpose	Items collected	Retention and use period
Enquiries and consultations	Name, contact number, email address, content of enquiry	1 year after completion of handling
Quotations for materials and products	Name, contact number, email address, attached files	1 year after completion of handling
Recruitment	Name, contact number, résumé	Destroyed without delay after the recruitment process ends

The Institute does not collect resident registration numbers or other unique identifying information.

Where retention is required under applicable law, the information is retained for the period prescribed by that law.

Recruitment documents submitted through the website or by email are not subject to return under Article 11 of the Act on Fair Hiring Procedures, and are destroyed without delay after the recruitment process ends.

Article 3 (Provision of Personal Information to Third Parties)

The Institute processes personal information only within the scope specified in Article 1, and provides it to third parties only where the data subject has consented or where Articles 17 and 18 of the Personal Information Protection Act otherwise permit.

The Institute currently does not provide personal information to any third party.

Article 4 (Outsourcing of Personal Information Processing)

The Institute outsources personal information processing tasks as follows in order to provide its services smoothly.

Processor	Outsourced task
Imweb Corp.	Website hosting and system operation

When concluding an outsourcing agreement, the Institute specifies in the contract, in accordance with Article 26 of the Personal Information Protection Act, matters including the prohibition of processing personal information beyond the purpose of the outsourced task, technical and administrative safeguards, restrictions on sub-outsourcing, supervision of the processor, and liability for damages, and supervises whether the processor handles personal information securely.

Where the content of the outsourced task or the processor changes, the Institute will disclose the change through this Policy without delay.

Article 5 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)

① A data subject may exercise the following rights in relation to the Institute at any time.

Request to access personal information
Request to correct errors
Request to delete
Request to suspend processing

② Rights under Paragraph 1 may be exercised in writing, by telephone or by email, and the Institute will take action without delay.

③ Where a data subject requests correction or deletion of an error in personal information, the Institute will not use or provide the personal information concerned until the correction or deletion is completed.

④ Rights under Paragraph 1 may be exercised through an agent, such as the data subject’s legal representative or a duly authorised person.

Article 6 (Destruction of Personal Information)

① Where personal information becomes unnecessary, such as upon expiry of the retention period or achievement of the purpose of processing, the Institute destroys it without delay.

② The procedures and methods of destruction are as follows.

Procedure — the Institute identifies the personal information for which grounds for destruction have arisen and destroys it with the approval of the privacy officer.
Method — personal information recorded and stored in electronic file form is deleted by a method that renders it unrecoverable; personal information recorded and stored on paper is shredded or incinerated.

Article 7 (Measures to Ensure the Security of Personal Information)

The Institute takes the following measures to ensure the security of personal information.

Administrative measures — establishment and implementation of an internal management plan, and staff training
Technical measures — access control for personal information processing systems, access restriction, and encryption of data in transit (HTTPS)
Physical measures — access control for areas where materials are stored

Article 8 (Installation and Operation of Automatic Personal Information Collection Devices, and Refusal Thereof)

① The Institute may use cookies, which store and retrieve usage information, in order to provide individually tailored services to users.

② Data subjects may choose to allow or block cookies through their web browser settings. However, refusing to store cookies may make some services difficult to use.

Chrome: Settings > Privacy and security > Delete browsing data
Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data

Article 9 (Overseas Transfer of Personal Information)

The Institute does not transfer personal information overseas.

Article 10 (Privacy Officer)

① The Institute designates a privacy officer as follows, who takes overall responsibility for matters relating to the processing of personal information and handles data subjects’ complaints and remedies in relation to such processing.

Privacy Officer

Name: Jaepil Cho
Position: Director, Convergence Laboratory for Watershed Management
Contact: +82-2-6263-4964 / iwmi.kr@gmail.com

② Data subjects may direct to the privacy officer any enquiry, complaint or request for remedy relating to the protection of personal information arising from their use of the Institute’s services, and the Institute will respond and act without delay.

Article 11 (Requests to Access Personal Information)

A data subject may submit a request to access personal information under Article 35 of the Personal Information Protection Act to the privacy officer designated in Article 10. The Institute will endeavour to process such requests promptly.

Article 12 (Remedies for Infringement of Rights)

Data subjects may apply to the following bodies for dispute resolution or consultation in order to obtain remedies for infringement of personal information.

Personal Information Dispute Mediation Committee: +82-1833-6972 / www.kopico.go.kr
Privacy Infringement Report Center (KISA): +82-118 / privacy.kisa.or.kr
Supreme Prosecutors’ Office: +82-1301 / www.spo.go.kr
National Police Agency: +82-182 / ecrm.police.go.kr

Article 13 (Changes to this Privacy Policy)

① This Privacy Policy takes effect on 17 August 2026.

② Where content is added, deleted or modified owing to changes in law, policy or security technology, the Institute will announce the reasons for and content of the change on the website from 7 days before the effective date of the change.

Article 14 (Governing Language)

This Privacy Policy is provided in Korean and English. In the event of any discrepancy between the two versions, the Korean version shall prevail. The English version is provided for the convenience of users.

Integrated Watershed Management Institute Room 1301, Gyeonggi Building, 9 Namdaemun-ro 10-gil, Jung-gu, Seoul, Republic of Korea Representative: Heekyong Hwang | Business Registration No. 793-88-01735 Tel +82-2-6263-4964 | iwmi.kr@gmail.com