EcoBank legally processes and safely manages personal information in compliance with the 「Personal Information Protection Act」 and related laws to protect the freedom and rights of information subjects.
Accordingly, in accordance with Article 30 of the Personal Information Protection Act, the following personal information processing policy has been established and disclosed in order to guide information subjects on the procedures and standards for personal information processing and to handle related grievances quickly and smoothly. do.

Personal data processing indication table

Indication of key personal data processing (labeling)
Personal information collection General personal information collection ※ For details, check the main text of the privacy policy	Purpose of personal information processing Website membership registration and management Homepage civil service handling ※ For details, check the main text of the privacy policy	Retention period and destruction Personal information is destroyed when membership is withdrawn Storage or destruction in accordance with personal information laws
Personal information processing consignment Wavus Co., Ltd. Ecobank website Maintenance and management	Department in charge of personal information protection Information Management Department Personal Information Protection Contact Moonkyu Na 041-950-5337 hit7495@nie.re.kr

Personal data processing indication table

Indication of key personal data processing (labeling)
Personal information collection General personal information collection ※ For details, check the main text of the privacy policy
Purpose of personal information processing Website membership registration and management Homepage civil service handling ※ For details, check the main text of the privacy policy
Retention period and destruction Personal information is destroyed when membership is withdrawn Storage or destruction in accordance with personal information laws
Personal information processing consignment Wavus Co., Ltd. Ecobank website Maintenance and management
Department in charge of personal information protection Information Management Department Personal Information Protection Contact Moonkyu Na 041-950-5337 hit7495@nie.re.kr

1. 

   Article 1 (For personal information processing purposes)

① EcoBank handles the minimum amount of personal information necessary for the purposes of each of the following subparagraphs. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be implemented.

1. Website membership registration and management

2. Homepage civil affairs handling

② To disclose detailed personal information file registration details processed by EcoBank, visit the personal information protection portal (www.privacy.go.kr) → civil complaints section → personal information viewing, etc. → search the list of personal information files (organization name: National Institute of Ecology).(Shortcuts)

2. 

   Article 2 (items of personal information being processed)

① EcoBank handles and retains only the minimum amount of personal information stipulated by its jurisdiction and laws.

② The items of personal information processed by EcoBank are as follows.

Article 2 Table of items of personal information to be processed

Items of Personal Information	Retention Period	Base of Operation	Purpose of Operation	Items of personal information recorded in the personal information file
Membership Information	By the time of one's membership	Consent of Infomation Subjects	Register and manage membership of homepage Handling Civil Affairs of Homepage	name, ID, password, password verification, E-Mail, I-PIN or Authentication information of the identity verification agency

Article 2 Table of items of personal information to be processed

Items of Personal Information
Membership Information
Retention Period
By the time of one's membership
Base of Operation
Consent of Infomation Subjects
Purpose of Operation
Register and manage membership of homepage Handling Civil Affairs of Homepage
Items of personal information recorded in the personal information file
name, ID, password, password verification, E-Mail, I-PIN or Authentication information of the identity verification agency

③ The following items may be automatically generated and collected in the course of using the Internet service.

- Access log, access IP information, subscription path

3. 

   Article 3 (During and retaining personal information)

① EcoBank processes and retains personal information within the personal information retention period according to laws and regulations or within the retention period agreed upon when collecting personal information from the information subject.

② The processing and retention period of personal information processed by EcoBank is the same as Article 2 Paragraph 2.

※ EcoBank does not retain 'pseudonymized personal information' for use in statistical preparation, scientific research, and preservation of records in the public interest.

4. 

   Article 4 (provided by a third party of personal information)

① EcoBank does not provide the personal information of the information subject to a third party beyond the range specified for the purpose of collection and use. However, personal information may be provided to a third party in cases falling under Articles 17 and 18 of the 「Personal Information Protection Act」, such as the consent of the information subject and special provisions of the law, as in the following cases.

1. In case of obtaining separate consent from the information subject

2. When there are special provisions in other laws

3. In cases where the information subject or his.her legal representative is unable to express his.her intention or prior consent cannot be obtained due to unknown address, etc. case

4. If personal information is not used for purposes other than the intended purpose or if it is not provided to a third party, it is impossible to perform the duties prescribed by other laws and has been deliberated and decided by the Personal Information Protection Committee

5. When it is necessary to provide information to foreign governments or international organizations for the implementation of treaties and other international agreements

6. When it is necessary for the investigation of a crime and the initiation and maintenance of public prosecution

7. In case it is necessary to carry out the judicial affairs of the court

8. Where it is necessary for the execution of punishment, probation, and protective disposition

② EcoBank will notify or notify the fact that it is provided to a third party within the scope permitted by laws and regulations in the case of each subparagraph of Paragraph 1.

5. 

   Article 5 (Entrustment of Personal Information Processing Business)

① EcoBank entrusts the following personal information processing tasks for smooth personal information processing.

Article 5 Consignment table for personal information processing

Trustee Company	Fiduciary Work	Item of Fiduciary	The period of personal information held and used for deposit
Wavus Co., Ltd.	Building and maintaining the EcoBank	Member Information	By the end of the consignment contract

Article 5 Consignment table for personal information processing

Trustee Company
Wavus Co., Ltd.
Fiduciary Work
Building and maintaining the EcoBank
Item of Fiduciary
Member Information
The period of personal information held and used for deposit
By the end of the consignment contract

② EcoBank is responsible for prohibiting the processing of personal information other than for the purpose of performing consignment tasks, measures to ensure safety, restriction of re-entrustment, management and supervision of trustees, compensation for damages, etc. in accordance with Article 26 of the 「Personal Information Protection Act」 when concluding a consignment contract. related matters are specified in documents such as contracts, and supervises whether the trustee handles personal information safely.

③ If the contents of the consignment work or the consignee is changed, we will disclose it without delay through this personal information processing policy.

6. 

   Article 6 (Rights and Duties of Information Subjects and Legal Representatives and Method of Exercising)

① The information subject can exercise the right to view, correct, delete, and suspend processing of personal information at any time with respect to EcoBank.

② The exercise of rights pursuant to Paragraph 1 may be done through an agent such as the legal representative of the information subject or a person who has been delegated. In this case, you must submit a power of attorney in accordance with Attachment No. 11 form of the "Notice on Personal Information Handling Methods". However, requests such as access to personal information about children under the age of 14 must be made directly by a legal representative, and the information subject who is a minor over the age of 14 may exercise his.her right with respect to the personal information of the information subject or through a legal representative. You may also exercise your rights.

③ The exercise of rights pursuant to Paragraph 1 may be made in writing, e-mail, fax, etc. in accordance with Article 41 Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act for EcoBank, and the National Institute of Ecology will respond to this. We will take action without delay.

④ In addition, the exercise of rights pursuant to Paragraph 1 can be done through the personal information protection portal (www.privacy.go.kr) → civil complaints → personal information viewing, etc., and EcoBank will take action without delay. I'll do it.(Shortcuts)

⑤ The rights of the information subject may be restricted in accordance with Article 35 (4) and Article 37 (2) of the Personal Information Protection Act to request to view and suspend processing of personal information.

⑥ The request for correction and deletion of personal information cannot be requested if the personal information is specified as a collection target in other laws.

⑦ EcoBank confirms whether the person who made the request, such as the request for reading, correction.deletion, or suspension of processing, is the person or a legitimate agent according to the right of the information subject.

Procedure for submitting a request form directly to EcoBank



a. Request for inspection : Request for personal information access to the EcoBank website's personal information processing policy through a personal information access request form "Notice on How to Process Personal Information 8" (a legal representative submits a power of attorney for "Notice on How to Process Personal Information")

b. Request for correction and deletion : Request for access to the website after reading through the person in charge of the reception department

c. Processing stop and collection source request : Request for access to the website through the person in charge of the reception department

Procedures for application through the Personal Information Protection Commission's Personal Information Protection Portal



※ Personal information access request form (notice on how to handle personal information) (link.attached file)

※ Power of Attorney (Notice on Personal Information Processing Method) (Link.Attachment)

7. 

   Article 7 (Destruction procedure and method of personal information)

① EcoBank destroys the personal information without delay when the personal information becomes unnecessary, such as the expiration of the personal information retention period or achievement of the purpose of processing.

② In the event that the personal information retention period agreed by the information subject has elapsed or the personal information needs to be kept in accordance with other laws despite the achievement of the purpose of processing, the relevant personal information (or personal information file) is transferred to a separate database (DB). It is stored by moving it or changing the storage location.

③ Procedure and procedure for personal information destruction are as follows.

1. Disposal Procedure

EcoBank establishes a plan for destruction of personal information (or personal information files) that should be destroyed, and destroys it with the approval of the personal information protection manager.
A. Disposal of Personal Information: Personal information whose retention period has expired without delay from the end date.
Revocation of personal information files: When the personal information file becomes unnecessary, such as the goal of processing personal information files, the abolition of the service concerned, and the termination of the business, the personal information file is destroyed without delay from the date.

2. Destruction Method

When destroying personal information handled by EcoBank, destroy it using the following methods.
A. In case of electronic file format: use technical method for not playing records
B. In case of records, printed materials, written documents or other recording media other than electronic file types: crushed or incinerated;

8. 

   Article 8 (Measures to ensure the safety of personal information)

According to Article 29 of the "Personal Information Protection Act," EcoBank performs the technical, administrative and physical actions necessary to secure safety as follows:

1. Minimize the designation of personal information providers and trainings

We minimize the designation of personal information providers and provide regular education.

2. Restrict access to personal information

We control access to personal information by granting, changing, and terminating access to the database system that handles personal information.

3. Storage of access records and prevention of tampering

Records of access to the personal information processing system are kept for at least one year, and records of access are managed to prevent forgery, theft, or loss.

4. Encryption of personal information

The users' personal information is encrypted, stored and managed. In addition, sensitive data uses separate security functions, such as cryptographically used for storage and transmission.

5. Technical measures for hacking, etc.

EcoBank installs security programs, periodically updates and checks, and installs systems in an externally controlled area to prevent leakage and damage of personal information caused by hacking or computer viruses.

6. The control of unauthorized personnel

Access control procedures are established and operated separately for the physical storage of personal information systems.

9. 

   Article 9 (Matters concerning the installation, operation and rejection of automatic personal information collection devices)

① EcoBank uses 'cookies' to store and retrieve usage information from time to time to provide users with individually customized services.

② Cookies are a small amount of information that the server used to operate the website sends to the user's computer browser and is also stored on the hard disk of the user's PC computer.

1. Purpose of use of cookies: It is used to provide optimized information to users by identifying the types of visits and usage of each service and website visited by the user, popular search terms, and whether or not secure access is available.

2. Installation, operation and rejection of cookies: You can configure settings such as allowing cookies and blocking cookies through browser option settings.

Internet Explorer: Tools menu at the top right of the web browser > Internet Options > Privacy > Settings > Advanced

Edge: Settings menu at the top right of the web browser > Cookies and site permissions > Manage and delete cookies and site data

Chrome: Settings menu at the top right of the web browser > Privacy & Security > Cookies and other site data

3. If you refuse to store cookies, you may experience difficulties in using some services.

10. 

    Article 10 (Personal Information Protection Officer)

① EcoBank has overall responsibility for the processing of personal information, and has designated a personal information protection officer as follows for processing complaints and remedies for information subjects related to the processing of personal information.

Personal Information Protection Officer

- Name : Charang Yang

- Position: Head of information management department

- Contact : 041-950-5335

- Fax : 041-950-6116

Personal information protection department

- Department : Information Management Department

- Manager : Hongyeol Lee

- Contact : 041-950-5337

- Fax : 041-950-6116

② If the information subject uses the EcoBank homepage service for any inquiries regarding the protection of personal information, he or she can contact the personal information protection manager and the department in charge regarding matters relating to complaint handling and damage relief. EcoBank will continue to respond to inquiries from the information subject without delay.

11. 

    Article 10 (Request to view personal information)

① The information subject may file a request for access to personal information in accordance with Article 35 of the Personal Information Protection Act to the following departments. The National Institute of Ecology will make every effort to promptly process the personal information access request of the information subject.

Receiving and processing department for personal information access

- Department Name: Ecological Information Team

- Manager : Jaeho Lee

- Contact : 041-950-5623, jhlee14@nie.re.kr

② In addition to the department for receiving and processing requests for access in Paragraph 1, the information subject may also request access to personal information through the personal information protection portal (www.privacy.go.kr).

Personal information protection portal (www.privacy.go.kr) → Complaints section → Request to view personal information (requires identification)(Shortcuts)

12. 

    Article 12 (Relative Bill of Rights)

① EcoBank guarantees the personal information self-determination rights of information subjects and strives for counseling and relief from damage caused by personal information infringement. If you need a report or consultation, please contact the department in charge below.

Receiving and processing department for personal information access

- Department Name: Ecological Information Team

- Manager : Jaeho Lee

- Contact : 041-950-5623, jhlee14@nie.re.kr

② The following institutions are separate institutions from EcoBank. If you are not satisfied with EcoBank's own personal information complaint handling and damage relief results, or if you need more detailed help, please contact us. wish.

1. Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)

- Responsibilities: Report personal information infringement, apply for counseling

- Homepage: privacy.kisa.or.kr

- Phone: (without area code) 118

- Address: (58324) 9 Jinheung-gil, Naju-si, Jeollanam-do (301-2 Bitgaram-dong), 3rd floor, Personal Information Infringement Report Center

2. Personal Information Dispute Mediation Committee

- Responsibilities: Personal information dispute mediation application, collective dispute mediation (civil resolution)

- Website: www.kopico.go.kr

- Phone: (without area code) 1833-6972

- Address: 12th floor, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul (03171)

3. Supreme Prosecutor's Office: (without area code) 1301 (www.spo.go.kr)

4. National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)

③ Disposition taken by the head of a public institution in response to a request pursuant to Article 35 (Perusal of Personal Information), Article 36 (Correction.Deletion of Personal Information), and Article 37 (Suspension of Personal Information Processing, etc.) of the 「Personal Information Protection Act」; A person whose rights or interests have been infringed due to omission may file an administrative appeal in accordance with the Administrative Appeals Act.

- Central Administrative Tribunal: (without area code) 110 (www.simpan.go.kr)

13. 

    Article 13 (Change of Privacy Policy)

This privacy policy is effective from 2023.11.02 (the date of application of the revised version), and the previous privacy policy can be found below.

2023.11.02 ~ Show privacy policy (Download.Korean document)

2023.08.29 ~ 2023.11.01 Show privacy policy (Download.Korean document)

2022.11.22 ~ 2023.08.29 Show privacy policy (Download.Korean document)

2022.10.19 ~ 2022.11.21 Show privacy policy (Download.Korean document)

2022.07.12 ~ 2022.10.18 Show privacy policy (Download.Korean document)

2022.03.14 ~ 2022.07.11 Show privacy policy (Download.Korean document)

2021.11.20 ~ 2022.03.13 Show privacy policy (Download.Korean document)

2020.02.07 ~ 2021.11.19 Show privacy policy (Download.Korean document)

2019.02.28 ~ 2020.02.26 Show privacy policy (Download.Korean document)