Privacy Policy

Article 1 (Purposes of Processing)

The Center processes personal data only for the following purposes. Should a purpose change, the Center will give notice and obtain consent in advance.

1. Identifying members and managing accounts — registration, log-in, verification of email address ownership, password reset, and responding to member enquiries;
2. Receiving and selecting applications for Korean language courses;
3. Receiving and screening applications for employment at the Center;
4. Receiving and screening applications from vocational high school students to study in Korea;
5. Receiving teaching hours and supporting documents from teachers of partner schools, and maintaining the basis for payment of teaching fees;
6. Receiving and answering requests for counselling on studying in Korea;
7. Notifying applicants of outcomes such as course and employment decisions (by email);
8. Compiling access statistics to understand website use and improve the services.

Article 2 (Categories of Personal Data Processed)

The Center processes the following personal data. Items ② to ⑥ apply only to those who use the service concerned, and are notified and consented to separately on each submission screen.

• ① Membership registration (all mandatory) — email address (user ID), name, password, mobile telephone number, date of birth, preferred language;
• ② Korean language course application — name, email, telephone number, date of birth, gender, current place of residence, occupation, workplace or school, reasons for learning Korean, previous study at the Center, courses completed;
• ③ Employment application — the information contained in the application file uploaded, together with the name, email and contact number registered to the account;
• ④ Vocational high school study-abroad application — the information contained in the application form and supporting documents uploaded, together with the name, email and contact number registered to the account;
• ⑤ Registration of teaching hours and supporting documents — date of teaching, teaching (working) hours, school name, class and number of sessions, and the information contained in the certificate of teaching hours, the attendance register and the lesson progress record uploaded;
• ⑥ Study-abroad counselling request — name, telephone number, email, the content of the request, and the information contained in any attachment uploaded;
• ⑦ Information generated and stored automatically while the services are used — time of access, access IP address, and service use records.

Article 3 (Retention and Use Periods)

The Center destroys personal data without delay once the periods below have passed. Data that the applicable laws require to be preserved are kept for the period those laws prescribe and then destroyed.

Applications and supporting documents submitted before withdrawal of membership are retained for the periods above. In that case the link to the member account is severed, and only the name, email and contact number as they stood at the time of submission are retained with the record.

Article 4 (Provision to Third Parties)

The Center does not provide personal data to third parties, except where a competent authority so requests under the applicable laws.

Article 5 (Entrustment of Processing)

The Center entrusts the following work in order to operate the Website.

The entrusted party is entrusted only with the operation of the servers and does not use personal data for any other purpose. The entrustment contract provides for the prohibition of use beyond the stated purpose, obligations to apply safety measures, restrictions on sub-entrustment, and management and supervision, and the Center supervises compliance. Where the work entrusted or the entrusted party changes, the Center will amend this policy and give notice.

Article 6 (Cross-Border Transfer of Personal Data)

The Center's website servers are located in the Republic of Korea. Personal data entered in Vietnam are therefore transferred outside Vietnam (to Korea) for storage and processing, which constitutes a cross-border transfer under Article 20 of the Law on Personal Data Protection of Vietnam.

The Center gives notice of this and obtains consent at registration and on each submission screen.

Article 7 (Procedure and Method of Destruction)

1. The Center destroys personal data without delay once the retention period has passed or the purpose of processing has been achieved.
2. Data whose retention period has passed are destroyed by an automated process that runs at a set time each day; data that must be destroyed immediately, such as on withdrawal of membership, are destroyed as soon as the request is received.
3. Personal data held as electronic files are deleted by a method that makes recovery impossible, and any attachments belonging to the record are deleted from storage at the same time.
4. A record of what was destroyed and when is kept as a destruction record for three years and then deleted.

Article 8 (Rights of Data Subjects and How to Exercise Them)

1. You have the following rights in relation to the processing of your personal data:
   • the right to be informed about the processing of your personal data;
   • the right to give or withhold consent, and to withdraw consent once given;
   • the right to request access to your personal data and a copy of it;
   • the right to request correction or deletion of your personal data;
   • the right to request suspension or restriction of processing;
   • the right to seek redress and claim compensation where your rights have been infringed.
2. Members may view and correct their own personal data at any time on the My Page screen, and may request deletion by withdrawing membership.
3. Other requests may be made to the contact point set out in Article 11, including through a representative.
4. On receiving a request the Center acknowledges receipt, deals with the request within the period prescribed by law, and notifies you of the outcome. Article 5 of Decree 356/2025/NĐ-CP of Vietnam prescribes two working days to acknowledge receipt, ten days for access and correction, fifteen days for withdrawal of consent and restriction of processing, and twenty days for deletion.
5. Where the law provides grounds on which a request for access, correction, deletion or suspension may be refused, the Center will inform you of those grounds.

Article 9 (Measures to Ensure Security)

1. Passwords are stored encrypted in a form that cannot be restored, and no plain text is kept.
2. All communication between users and the Website is encrypted (HTTPS).
3. Access to personal data is limited to the staff responsible and granted according to role.
4. Viewing, downloading, creation, modification and deletion of records containing personal data are logged, retained for one year and reviewed periodically.
5. The Center complies with the security obligations laid down by the Personal Information Protection Act and the Standards for Ensuring the Safety of Personal Information of Korea, the personal data protection guidelines of the Korean Ministry of Education, and the Law on Personal Data Protection of Vietnam.
6. Where personal data are lost, stolen, disclosed, forged, altered or damaged, the Center gives notice without delay in accordance with the procedures prescribed by law and takes the necessary measures.

Article 10 (Installation and Operation of Automatic Collection Devices, and Refusal)

1. The Center uses a session cookie to keep users logged in. The cookie disappears when you log out or after a set period, and contains no information that identifies an individual.
2. The "do not show again today" choice on a pop-up is stored only in your browser and is not sent to the Center's servers.
3. The Center does not use cookies for advertising or user tracking, and does not send use records to any external analytics service.
4. If you do not wish cookies to be stored, you may refuse them in your browser settings. If you refuse the session cookie, however, your logged-in state will not be maintained and you will not be able to use services that require log-in.
5. Access statistics are compiled from the access logs kept by the web server and are used only to count visits and post views, without identifying individuals.

Article 11 (Personal Data Protection Officer and Contact Point)

The Center has appointed a personal data protection officer with overall responsibility for the processing of personal data and for handling the requests and complaints of data subjects.

• Personal data protection officer: 안희철 · Director, Korean Education Center in Ho Chi Minh City · 0387 267 611 · klechhcm@gmail.com
• Contact point for requests: Korean Education Center in Ho Chi Minh City / Address: 47 Nguyen Cu Trinh, Cau Ong Lanh Ward, Ho Chi Minh City, Vietnam / Telephone: +84 28 3920 1274 / Email: klechhcm@gmail.com

Enquiries, complaints and requests for redress relating to personal data may be made to the contact point above, and the Center will respond without delay.

Article 12 (Remedies for Infringement of Rights)

To obtain redress for harm caused by infringement of personal data, you may apply to the bodies below for dispute resolution or advice. All of them are bodies of the Republic of Korea.

Complaints about the Center's processing may also be submitted to the contact point set out in Article 11. Your rights to complain or report to the competent authorities and to claim compensation under the Law on Personal Data Protection of Vietnam remain unaffected.

Article 13 (Amendment of this Policy)

1. This policy applies from its effective date.
2. Where this policy is amended, the amendment and the date it takes effect are posted in the notice section of the Website at least 7 days beforehand, or at least 30 days beforehand where the amendment materially affects the rights of data subjects.
3. Earlier versions of this policy may be obtained on request to the contact point set out in Article 11.

Supplementary Provision

This policy takes effect on 31 December 2026.