OECD Korea Policy Centre (hereinafter referred to as the "Centre") complies with the Personal Information Protection Act and other applicable laws and regulations. The Centre hereby establishes and publishes this Privacy Policy to protect the personal information of data subjects and to promptly and effectively handle any concerns or complaints related to personal information.

1. Article 1. Purpose of Processing Personal Information and Items Collected

   The website operated by the OECD Korea Policy Centre does not provide membership registration or login functions and does not directly collect personal information such as names, contact information, or email addresses from users.

   However, the following information may be automatically generated and recorded during the use of the website for service operation, security, troubleshooting, and other related purposes.

   1. • IP address
   2. • Date and time of access
   3. • Pages accessed and request information
   4. • Browser and operating system information (User-Agent)
   5. • Service usage records and error logs

   This information is used solely for the stable operation of the website, analysis of system failures and errors, and response to unauthorized access and security threats.

2. Article 2. Processing and Retention Period of Personal Information

   The Centre does not directly collect or separately store personal information.

   However, web server access logs and security logs automatically generated during website operation may be retained for the period necessary to ensure stable website operation and respond to security incidents. Such records will be destroyed without delay once the purpose of retention has been fulfilled.

   Where retention is required under applicable laws and regulations, the relevant information may be retained for the period prescribed by such laws and regulations.

3. Article 3. Provision of Personal Information to Third Parties

   The Centre does not provide personal information collected through the website to third parties.

   However, information may be provided within the scope permitted by applicable laws and regulations where specifically required by law or where a competent authority makes a lawful request in accordance with applicable procedures.

4. Article 4. Entrustment of Personal Information Processing

   The Centre entrusts the following services to third-party service providers for the stable operation and maintenance of the website.

   Service Provider	Entrusted Services
   INDYSOFT Co., Ltd.	Operation and maintenance of the OECD Korea Policy Centre website
   CAFE24 Corp.	Provision and hosting of servers used to operate the website

   When entering into an outsourcing agreement, the Centre specifies the necessary measures for the secure management of personal information in accordance with the Personal Information Protection Act and supervises service providers to ensure that personal information is processed securely.

5. Article 5. Destruction of Personal Information

   The Centre destroys personal information without delay when the retention period expires or when the purpose of processing has been fulfilled and the information is no longer required.

   Personal information stored in electronic files is securely deleted using methods that prevent recovery or restoration. Personal information recorded on paper documents, if any, is destroyed by shredding, incineration, or other appropriate methods.

   Where personal information is required to be retained under applicable laws and regulations, such information will be stored separately from other personal information.

6. Article 6. Rights and Obligations of Data Subjects and Methods of Exercising Rights

   Data subjects may exercise their rights to access, correct or delete, and request suspension of the processing of their personal information in accordance with the Personal Information Protection Act and other applicable laws and regulations.

   Although the Centre's website does not directly collect or separately store personal information entered by users, data subjects may contact the department responsible for personal information protection to make inquiries or exercise their rights regarding information generated during use of the website.

   The Centre will process requests from data subjects in accordance with the procedures prescribed by applicable laws and regulations.

   Data subjects who wish to seek dispute resolution, consultation, or other remedies for personal information infringement may contact the following organizations.

   1. 1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
   2. 2. Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
   3. 3. Korean National Police Agency: 182 (ecrm.police.go.kr)
7. Article 7. Measures to Ensure the Security of Personal Information

   The Centre implements necessary administrative, technical, and physical safeguards, taking into account the nature of personal information processing and associated risks, to prevent personal information from being lost, stolen, leaked, forged, altered, or damaged.

   The major security measures include the following.

   1. • Minimization of access privileges to personal information and systems
   2. • Access control for the website and servers
   3. • Security measures to prevent unauthorized access
   4. • Installation and management of security software
   5. • Management of access logs
   6. • Minimization and management of personnel handling personal information
   7. • Secure management of personal information processing systems and related data
8. Article 8. Installation, Operation, and Rejection of Automatic Personal Information Collection Technologies

   The Centre uses Google Analytics, a web analytics service provided by Google, to analyze website usage and improve its services.

   Google Analytics may automatically collect website visit and usage information through cookies and similar technologies during use of the website.

   The information that may be automatically collected includes the following.

   1. • Website visit and usage records
   2. • Date and time of access and pages visited
   3. • Browser and operating system information
   4. • Device type and related information
   5. • Referral sources and website usage behavior

   In addition, access logs such as IP addresses, access dates and times, request information, and browser information may be automatically generated and stored for normal web server operation, troubleshooting, and security purposes.

   Users may allow or reject the storage of cookies through their web browser settings. Rejecting cookies does not restrict access to the basic functions of the Centre's website.

   For more information regarding the collection and use of information through Google Analytics, please refer to Google's Privacy Policy and Google Analytics documentation.

9. Article 9. Department Responsible for Personal Information Protection

   The Centre designates and operates a department responsible for personal information protection to handle inquiries, complaints, and other matters related to personal information protection.

   Department Responsible for Personal Information Protection

   Department	Planning and Operations Division
   Telephone	02-3702-7103
   Email	centre@oecdkorea.org

   Data subjects may contact the department above regarding inquiries, complaints, remedies, or other matters related to personal information arising from the use of the Centre's website.

10. Article 10. Remedies for Infringement of Rights

    Data subjects may contact the Personal Information Protection Commission, Personal Information Infringement Report Center, Personal Information Dispute Mediation Committee, or other relevant personal information protection organizations for consultation and remedies in the event of personal information infringement.

    The latest names and contact information of the relevant organizations can be found on their respective websites.

11. Article 11. Changes to the Privacy Policy

    This Privacy Policy may be amended in accordance with changes in applicable laws and regulations or the Centre's personal information processing practices.

    If this Privacy Policy is amended, the Centre will publish the changes and their effective date on the website.

Effective Date: August 20, 2026