Sarang.org abides by the regulations which telecommunication servers should follow, such as the
Telecommunications Business Act, Communication Privacy Protection Law, and other laws related to
telecommunication-usage promotion and information protection. Sarang.org has also implemented
its own regulations to do its best to protect its users and their rights.
The regulations regarding personal information and privacy protection of Sarang.org are as follows:
1. It contains the methods and items through which the personal information is collected.
2. It contains the purpose of collecting and using personal information.
3. It provides and shares personal information.
4. It defines sharing personal information with third parties.
5. It defines the preservation of personal information and its duration.
6. It defines the procedures and the methods of eliminating personal information.
7. It specifies the rights of the user and/or his/her legal guardian and the methods by
....which these rights are exercised.
8. It specifies the installation/management of automatic collection of personal information
....and the details on the refusal of such collection.
9. It specifies the technical/managerial policies of protection for personal information.
10. It contains the procedures for contacting the person(s) in charge of managing
....personal information.
11. It contains the customer service department of Sarang.org.
12. It contains the responsibilities of notification.
1. The methods and items through which the personal information is collected
A. The items through which personal information is collected
First, the company can collect the following personal information at the beginning of
joining membership for obtaining membership, and providing efficient customer service
and other various services.
[When Koreans join membership]
Mandatory items: title held at the person's church (if any), name of the attending church, user ID,
password, name, residential area (domestic/overseas), birthday, gender, current address, email
address, and the option to receive emails
Optional items: home telephone number and mobile telephone number
[When Korean-speaking foreigners join membership]
Mandatory items: title held at the person's church (if any), name of the attending church, user ID,
password, name, residential area(domestic/overseas), birthday, gender, current address, email address,
and the option to receive emails
Optional items: home telephone number and mobile telephone number
[When foreigners who do not speak Korean join membership]
Mandatory items: title held at the person's church (if any), user ID, password, name, birthday, gender,
home telephone number, nationality, current address, and email address
Second, the following information can be collected automatically during the process of using services
or management.
- Cookie(s), visiting hours, records of using service, and records of wrong usage.
...Third, the following information of the user can be collected at the process of
...signing up for additional service, customized service, or an event.
- It happens when the user approves the release of additional information.
...Fourth, the following information regarding payment can be collected at the process
...of using a paid service.
- Credit card payment: the card company, your card number, etc.
- Payment via cellular phone: the cellular phone number, phone company, payment
...approval number, etc.
[B. The methods of collecting personal information]
The company collects personal information through the following sources.
- Their home pages and consulting pages (for non-members).
2. The purpose of collecting and using personal information
A. Fulfillment of contract and payment regarding the provided service
Provision of contents, and the user's approval, purchase and payment
B. Membership management
Verification and recognition of identification according to the verification rules
and limitations regarding the usage of membership service, prevention of the illegal
and unapproved usage of delinquent members, confirmation of joining membership,
limitations on the frequency of joining, confirmation of the legal guardian in the
case of child under age 14, further confirmation of the identification of the legal
guardian, preservation of records for the arbitration of possible disputes,
the solutions of complaints and grievances, and delivery of notifications.
C. Development and marketing of new services
Development of new services, provision of customized services, provision and
advertisement of services according to the characteristics based on the statistics,
confirmation of the effectiveness of services,provision of information on events
and advertisements and of the chance to attend, recognition of the connection
frequency, and statistical details regarding the members' usages of said service.
3. Sharing and providing of personal information
The company uses its members' personal information within the occasions indicated in "2. The purpose of
collecting and using personal information." and neither use for other purposes nor release it to outside.
But the exceptional cases are as follows:
- When the user agreed on the matter beforehand
- When the authorities require information for its investigation according to the related laws.
4. Sharing personal information with third parties
A. The website that provides personal information
(1)The recipient: Godpia
- The purpose of usage: It provides personal information of the members only when
necessary for their usage of Godpia home page.
- The items of personal information to be provided:
[When Koreans join membership]
* Mandatory items: title held at the person's church (if any), name of the attending
church, user ID, password, name, residential area (domestic/overseas), birthday,
gender, current address, email address, and the option to receive emails
* Optional items: home telephone number and mobile telephone number
[When Korean-speaking foreigners join membership]
* Mandatory items: title held at the person's church (if any), name of the attending
church, user ID, password, name, residential area(domestic/overseas), birthday,
gender, current address, email address, and the option to receive emails
* Optional items: home telephone number and mobile telephone number
[When foreigners who do not speak Korean join membership]
* Mandatory items: title held at the person's church (if any), user ID, password,
name, birthday, gender, home telephone number, nationality, current address,
and email address and the option to receive emails
* Optional items: mobile telephone number
- The period of usage and preservation: until the service is terminated
B. Sarang.org provides personal information of the members to a related institution(s) only upon
receiving a warrant or written letter signed by the president of the related institution for the
purpose of public administration or judicial investigation, according to the Telecommunication
Privacy Protection Act, Basic National Tax Law, Law of Promotion of Telecommunication Network and
Personal Information Protection, Law of Financial Transaction under Real Name and Its Privacy Protection,
Law of Usage and Protection of Credit Information, Law of Telecommunication Enterprises, Local Tax Law,
Law of Consumers Protection, Laws of the Bank of Korea, and other related penal codes.
Sarang.org does not release its members' personal information to any outside organization without prior
consent from the related member. But if such matter should happen in the future, it will notify the related
member about the possible consigned organization and consigned work to get a prior consent from him/her.
5. The preservation of personal information and its duration
On principle, personal information of the members is destroyed right after the purpose of its collection
and utilization is fulfilled. But in the case of the following information, it is preserved as specified as below.
A. Reasons for information preservation according to policies of Sarang.org.
- Records of illegal usage
Reason for preservation: to prevent further illegal usage
Period of preservation: not saved
B. Reasons of information preservation according to the related laws
According to Commerce Law and other laws related to the protection of consumers on electronic commercial
transactions, the company preserves personal information of its customers for certain periods of time
specified in the law. In this case, the company will use the information only for the purpose of preservation,
and its durations are as follows:
- Records of contract and/or termination of contract
Reason for preservation: according to the laws related to protection of consumers on
electronic commercial transactions
Period of preservation: five years
- Records of payment and goods deliveries
Reason for preservation: according to the laws related to protection of consumers on
electronic commercial transactions
Period of preservation: five years
- Records of customers' complaints and their solutions
Reason for preservation: according to the laws related to protection of consumers on
electronic commercial transactions
Period of preservation: not saved
- Records of identification confirmation
Reason for preservation: according to the laws related to promotion of telecommunication usage and privacy
protection
Period of preservation: not saved
- Records of website visitations
Reason for preservation: according to Telecommunication Privacy Protection Act
Period of preservation: not saved
6. The procedures and the methods of eliminating personal information
On principle, personal information of the members is destroyed right after the purpose of collection and
utilization has been fulfilled.
Sarang.org destroys personal information in such procedures and methods as follows:
A. The procedure of destruction
- After the purpose of collection and utilization has been fulfilled, personal information of
the member is moved to a separate DB (a separate file box in the case of printed hard
copies), stored for a certain period of time according to its own policies as well as
other related laws, and then destroyed.
- The above-mentioned information is used only for preservation, unless the related law
interferes.
B. The method of destruction
- Any printed personal information will be shredded in the shredder or destroyed by fire.
- Personal information saved electronically will be deleted so that they are no longer
retrievable.
7. The rights of the user and/or his/her legal guardian and the methods by
which these rights are exercised
- The user and/or his/her legal guardian can check and/or change the user's (adult
or child under age 14) personal information in his/her custody at any time, and can
ask for termination of contract.
- The user and/or his/her legal guardian can check and change personal information
by clicking 'Change of Information' (or 'Correction of Information'), and can terminate
contract by clicking 'Termination of Contract' and confirming identification in person.
- A written letter, telephone call, or email is accepted and can process such matters.
- When the correction of personal information is requested, the former information will
not be used or provided any longer. If the wrong personal information is already
provided to the third party, a notification of correction will be given to the party
immediately.
- The company that has the already-deleted or expired personal information takes care
of them as specified in "5. The preservation of personal information and on
the period of time" and does not use or check it otherwise.
8. The installation/management of automatic collection of personal information
and the details on the refusal of such collection
The company uses cookies which store and revive the users' information in order to provide more
personalized service. Cookies are a small amount of information which the server (http), website manager,
sends to the user's computer browser, and are sometimes stored in the PC's hard disc of the user.
A. The purpose of cookies' usage
Cookies are used to check the user's general habits and interests regarding the services and websites
provided by Sarang.org, the frequency of visits, search words, checking secure connection, news editing,
and the visiting volume, in order to provide the information most suitable to the user.
B. The installation, management, and refusal of cookies
- The user has the right to decide on the installation of cookies. So the user may allow
all the cookies by checking the option on the web browser, click 'Confirm' each time
when the cookie saves information, or refuse the storing of all the cookies.
- An example of installation (in the case of Internet Explorer): The tool on top of the web
browser > Internet option > Personal information
- In the case of refusing the cookies' storing information, the user might have difficulty
using some services of Sarang.org which need log-in.
9. The technical/managerial policies of protection for personal information
For personal information not to be lost, stolen, released, changed, or destroyed when handled, the company
constantly seeks technical and managerial policies of protection for personal information as follows:
A. Policies against hacking
The company tries its best to prevent personal information from being released or destroyed through hacking
or computer viruses. It periodically backs up its files, uses the latest vaccine programs, and uses the
coded telecommunication for safety when sending personal information through the network. It also blocks
illegal approaches from outside sources with the invasion blocking system, and strives to be equipped
with all possible technical programs to secure its system's safety.
B. Minimization of the number of the related employees, and their training
Sarang.org puts one personnel in charge of personal information and its related matters, installs the password
for the work, and periodically renews it. The personnel is trained periodically, and instructed to always
abide by the laws and policies related to personal information.
C. Management of the committee in charge of the protection of personal information
The committee in charge of the protection of personal information checks if Sarang.org and its personnel follow
the laws and policies related to the protection of personal information, and if a problem appears, tries to
correct it at the earliest time. But when the user's mistake or carelessness or the problem of the Internet
causes the leakage of the ID, password, the user's residence number, the company is not responsible for any
of these.
10. The procedures for contacting the person(s) in charge of managing personal
information
The user can report to the personnel or the department in charge of management of personal information when
a problem related to the protection of personal information occurs while the user uses Sarang.org. The sincere
answer will be delivered to the user as soon as possible.
Personnel in Charge
Name: Lee Jeonggeun Company: Sarang Community Church
Tel: 02)3480-6480 Email Address: webmaster@sarang.org
If you have any concerns or complaints regarding the invasion of personal information, please inquire the
organizations as follows:
- The Committee for Arbitration of Personal Disputes
- The Committee for Logo Approval of Information Protection
- Cyber Crimes Center at Supreme Prosecutors' Office
- The Center for Cyber Terror at National Police Agency
11. The customer service department of Sarang.org
Sarang.org runs its customer service department to take care of the members' complaints, and its business
hours and telephone numbers are as follows:
- Business hours: Weekdays 09:00 - 17:30
Saturdays 08:30 - 13:30
Sundays 08:30 - 17:30
(Closed on holidays)
- Telephone number: 02)3480-6454
- Fax number: 02)3480-6484
- For general inquiries: 1:1 inquiry available at the customer service department
12. The responsibilities of notification
If there is a need of addition, deletion, or correction on the policies of personal information, it will be
notified through 'The Announcement' on the home page at least seven days prior to the effective date.
- Notification Date: June 22, 2009
- Effective Date: June 29, 2009