Privacy Policy
This project is hosted by the Ministry of Culture, Sports and Tourism, organized by Arirang TV, and operated by K-Brain.
The Korea International Broadcasting Foundation (Arirang International Broadcasting) (hereinafter referred to as the "Entrusting Party") entrusts K-Brain Company Co., Ltd. (hereinafter referred to as the "Entrusted Party") with operating the K-influencer Academy Platform (KAP) (hereinafter referred to as the "Service") and processing personal information. As the Entrusted Party, K-Brain Company Co., Ltd. processes personal information lawfully and manages it securely in compliance with the Personal Information Protection Act ("PIPA") and other applicable laws and regulations to protect the rights and freedoms of users. Accordingly, pursuant to Article 30 of PIPA, this Privacy Policy is established and disclosed to inform data subjects of the procedures and standards governing the processing and protection of personal information and to ensure the prompt and efficient handling of related complaints. Access to the Service is limited exclusively to overseas influencers who have received official notification of final selection for a K-influencer assignment.
The Korea International Broadcasting Foundation (Arirang International Broadcasting) (hereinafter referred to as the "Entrusting Party") entrusts K-Brain Company Co., Ltd. (hereinafter referred to as the "Entrusted Party") with operating the K-influencer Academy Platform (KAP) (hereinafter referred to as the "Service") and processing personal information. As the Entrusted Party, K-Brain Company Co., Ltd. processes personal information lawfully and manages it securely in compliance with the Personal Information Protection Act ("PIPA") and other applicable laws and regulations to protect the rights and freedoms of users. Accordingly, pursuant to Article 30 of PIPA, this Privacy Policy is established and disclosed to inform data subjects of the procedures and standards governing the processing and protection of personal information and to ensure the prompt and efficient handling of related complaints. Access to the Service is limited exclusively to overseas influencers who have received official notification of final selection for a K-influencer assignment.
Article 1. Purposes of Processing Personal Information
The Company processes personal information for the purposes set out below. Personal information will be used strictly for the purposes outlined below. If the scope of use changes, we will obtain your prior consent in accordance with Article 18 of PIPA.
| Category | Purpose of Processing |
|---|---|
| Membership Registration | Administration of educational programs and related service provision; performance management |
| Reward and Product Delivery to Outstanding Members | Processing of delivery information for the dispatch of rewards and products to outstanding members |
Article 2. Categories of Personal Information Processed
In accordance with PIPA, the Company collects and uses only the minimum personal information necessary for the provision of the Service.
① Personal information processed with the consent of the Individual:
• Legal Ground: PIPA, Article 15, Paragraph 1, Subparagraph 1 (Consent)
① Personal information processed with the consent of the Individual:
• Legal Ground: PIPA, Article 15, Paragraph 1, Subparagraph 1 (Consent)
| Category | Purpose of Processing | Items Processed | Legal Ground |
|---|---|---|---|
| Membership Registration | Administration of educational programs and related service provision; performance management | Login ID, Password, Name (English), email address, YouTube channel information | PIPA, Art. 15(1)(i) |
| Outstanding Members — Reward & Product Delivery | Distribution of rewards and delivery of products to outstanding members | country, address, mobile phone number | PIPA, Art. 15(1)(i) |
Article 3. Processing of Personal Information of Children Under the Age of 14
① Where consent is required to process the personal information of a child under the age of 14, K-Brain Company, Inc. (K-influencer Academy Platform)(KAP) shall obtain such consent from the child's legal guardian.
② When obtaining consent from the legal guardian of a child under the age of 14, the Company may request the minimum information necessary — including the legal guardian's full name, mobile phone number, and relationship to the applicant — and we will verify consent through our website and sending confirmation via text message to the legal guardian's mobile phone.
② When obtaining consent from the legal guardian of a child under the age of 14, the Company may request the minimum information necessary — including the legal guardian's full name, mobile phone number, and relationship to the applicant — and we will verify consent through our website and sending confirmation via text message to the legal guardian's mobile phone.
Article 4. Retention and Use Period of Personal Information
① The Company processes and retains personal information within the retention and use period prescribed by law or agreed upon with the Individual at the time of collection.
② The retention and use periods for each category of personal information are as follows:
② The retention and use periods for each category of personal information are as follows:
| Category | Retention Period | Legal Ground |
|---|---|---|
| Membership Registration | 5 years | PIPA, Art. 15(1)(i) |
| Outstanding Members — Reward & Product Delivery | Destroyed immediately upon completion of delivery | PIPA, Art. 15(1)(i) PIPA, Art. 15(1)(iv) |
③ Notwithstanding the foregoing, in any of the following circumstances, personal information shall be retained until the relevant event has concluded:
Where an investigation or inquiry is ongoing in connection with a breach of applicable law or regulation: until the conclusion of that investigation or inquiry.
Where outstanding claims or obligations arising from use of the Service remain unresolved: until those claims or obligations are settled.
Article 5. Procedures and Methods for Data Erasure and Disposal of Personal Information
Note: This article concerns Data Erasure and Disposal procedures (Article 4 of the original Korean text uses the same article number; reproduced as presented in the source).
① The Company shall destroy personal information without delay once it is no longer necessary — including upon the expiry of the retention period or the attainment of the processing purpose.
② Where personal information must continue to be retained pursuant to other laws and regulations, notwithstanding the expiry of the agreed retention period or the attainment of the processing purpose, the Company shall segregate and preserve such information in a separate database (DB).
• The categories of personal information retained pursuant to other laws, the legal bases therefor, and the applicable retention periods are set out in Article 4 (Retention and Use Period of Personal Information).
③ The procedures and methods for the Data Erasure and Disposal of personal information are as follows:
① The Company shall destroy personal information without delay once it is no longer necessary — including upon the expiry of the retention period or the attainment of the processing purpose.
② Where personal information must continue to be retained pursuant to other laws and regulations, notwithstanding the expiry of the agreed retention period or the attainment of the processing purpose, the Company shall segregate and preserve such information in a separate database (DB).
• The categories of personal information retained pursuant to other laws, the legal bases therefor, and the applicable retention periods are set out in Article 4 (Retention and Use Period of Personal Information).
③ The procedures and methods for the Data Erasure and Disposal of personal information are as follows:
Data Erasure and Disposal procedure: The Company identifies personal information subject to Data Erasure and Disposal, and destroys such data following approval by our Data Protection Officer.
Data Erasure and Disposal method: Personal information recorded and stored in electronic files is permanently deleted so that it cannot be recovered. Personal information recorded and stored in paper documents is destroyed by shredding or incineration.
Article 6. Sharing Personal Information with Third Parties
① The Company processes personal information only within the scope of the processing purposes specified in Article 2, and discloses personal information to third parties only where permitted under Article 17 or Article 18 of PIPA — including where the Individual has consented or where a specific statutory provision applies.
② The foregoing shall not apply where a warrant issued by a judicial officer for investigative purposes is presented, or where a governmental authority requests disclosure pursuant to applicable law.
② The foregoing shall not apply where a warrant issued by a judicial officer for investigative purposes is presented, or where a governmental authority requests disclosure pursuant to applicable law.
Article 7. Cross-Border Collection and Transfer of Personal Information
K-Brain Company, Inc. (K-influencer academy platform) transfers personal information overseas for the operation of the Service as follows:
| Legal Ground | Items Transferred | Destination Country, Timing and Method | Recipient (Contact) | Purpose of Use | Retention / Use Period | Right to Refuse & Consequences |
|---|---|---|---|---|---|---|
| PIPA, Art. 28-8(1)(iii) (entrustment / storage) | Member information, learning history, assignment performance records | The recipient country, cloud service provider, and storage location will be finalized prior to implementation. Transmitted automatically upon service use (TLS-encrypted). |
Cloud service provider (to be disclosed upon confirmation) | Operation of K-influencer Academy Platform (KAP) system and data storage | Until member withdrawal or as required by law | [How to refuse] Via [My Profile → Withdraw Membership] within the Service, or by e-mail to the person in charge. [Effect of refusal] Refusal of overseas transfer may result in restrictions on the use of the K-influencer academy platform. |
Article 8. Entrustment of Personal Information Processing
① For the smooth conduct of personal information processing operations, the Company has entrusted personal information processing work to the following trustees:
| Trustee | Scope of Entrusted Work | Retention Period / Entrustment Period | Representative E-mail |
|---|---|---|---|
| Korea International Broadcasting Foundation (Arirang TV) | Administration of K-influencer educational programs; co-production of content; project management | 1 year | kinfluencer.official@gmail.com |
② When entering into entrustment agreements, the Company stipulates in the relevant contracts — in accordance with Article 26 of PIPA — all matters concerning: the prohibition on processing personal information for purposes other than the scope of the entrusted work; technical and administrative safeguards; restrictions on sub-entrustment; management and supervision of the trustee with respect to personal information; liability for damages; and other related matters. The Company shall ensure that personal information is processed securely.
③ Where the scope of entrusted work changes, the Company shall disclose the updated information through this Privacy Policy without undue delay.
④ In order to provide smooth delivery services, the Company entrusts personal information to domestic and international courier and logistics providers, with the consent of the Individual, pursuant to Article 17, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act (PIPA), as follows:
③ Where the scope of entrusted work changes, the Company shall disclose the updated information through this Privacy Policy without undue delay.
④ In order to provide smooth delivery services, the Company entrusts personal information to domestic and international courier and logistics providers, with the consent of the Individual, pursuant to Article 17, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act (PIPA), as follows:
| Recipient | Items Disclosed | Purpose of Disclosure | Retention and Use Period |
|---|---|---|---|
| Domestic and international courier and logistics companies (to be disclosed upon confirmation of partners) | Full name (in Roman alphabet), nationality, delivery address, mobile phone number | Dispatch and delivery of rewards and products to outstanding members | Destroyed immediately upon completion of delivery |
※ Where delivery information is provided to an overseas courier or logistics company, cross-border transfer of personal information may occur. Details in this regard will be disclosed through this Privacy Policy as the Service's operational circumstances develop.
Article 9. Measures to Ensure the Security of Personal Information
The Company takes the following measures to ensure the security of personal information:
1. Administrative measures: Establishment and implementation of an internal management plan; regular employee training; minimisation of staff who handle personal information.
2. Technical measures: Management of access rights to personal information processing systems; installation of access control systems; encryption of personal information (including TLS encryption for transmission); maintenance and inspection of access logs; installation and operation of security programs.
3. Physical measures: Access control for computer rooms and data storage rooms; control of the removal and introduction of portable storage media.
Article 10. Installation, Operation, and Opt-Out of Automatic Data Collection Devices
① The Company uses cookies — which store and periodically retrieve usage information — in order to provide the Service and enhance user convenience.
② Cookies are small pieces of information sent by the server used to operate a website to the user's browser, and are stored on the user's PC or mobile device. They are transmitted automatically from the browser to the server upon each visit to the website.
③ Users may configure their cookie settings through their browser options:
② Cookies are small pieces of information sent by the server used to operate a website to the user's browser, and are stored on the user's PC or mobile device. They are transmitted automatically from the browser to the server upon each visit to the website.
③ Users may configure their cookie settings through their browser options:
Chrome: Click '⋮' (top right of browser) → New Incognito Window (Shortcut: Ctrl+Shift+N)
Edge: Click '⋯' (top right of browser) → New InPrivate Window (Shortcut: Ctrl+Shift+N)
④ If the user refuses to accept cookies, access to certain services that require login may be restricted.
Article 11. Rights and Obligations of Individuals and Legal Guardians, and Methods of Exercize
① Individuals may, at any time, request the Company to provide access to, rectify, erase, or suspend the processing of their personal information, or to withdraw consent thereto.
② Rights may be exercized — in accordance with Article 41, Paragraph 1 of the Enforcement Decree of PIPA — in writing, by telephone, or by e-mail, and the Company shall take action without undue delay.
• Users may also submit written requests for access or other actions by e-mail or through the Customer Center.
③ Rights may also be exercized through an authorized representative, such as the Individual's legal guardian or a delegated agent. In such cases, a power of attorney in the form prescribed under personal information protection legislation must be submitted.
④ Where a Individual requests the rectification or erasure of personal information on the grounds that it contains errors or inaccuracies, the Company shall not use or disclose that personal information until rectification or erasure has been completed.
⑤ Department responsible for receiving and handling requests to exercize rights:
② Rights may be exercized — in accordance with Article 41, Paragraph 1 of the Enforcement Decree of PIPA — in writing, by telephone, or by e-mail, and the Company shall take action without undue delay.
• Users may also submit written requests for access or other actions by e-mail or through the Customer Center.
③ Rights may also be exercized through an authorized representative, such as the Individual's legal guardian or a delegated agent. In such cases, a power of attorney in the form prescribed under personal information protection legislation must be submitted.
④ Where a Individual requests the rectification or erasure of personal information on the grounds that it contains errors or inaccuracies, the Company shall not use or disclose that personal information until rectification or erasure has been completed.
⑤ Department responsible for receiving and handling requests to exercize rights:
Department: K-influencer Official Team
E-mail: kinfluencer.official@gmail.com
Article 12. Data Protection Officer
① The Company has designated a Data Protection Officer (DPO) as set out below, to oversee all personal information processing activities and to handle complaints and remediation relating to the processing of personal information by the Company:
| Role | Details |
|---|---|
| Data Protection Officer (DPO) |
Name: Lee Jae-ok Title: Vice President E-mail: kinfluencer.official@gmail.com |
| Data Protection Department |
Department: Management Support Team E-mail: kinfluencer.official@gmail.com |
② Individuals may direct any enquiries, complaints, or requests for remediation arising in connection with personal information protection during use of the Service to the DPO or the relevant department. The Company shall respond and take action without undue delay.
Article 13. Remedies for Infringement of Individuals' Rights
Individuals who wish to seek dispute resolution, counselling, or other remediation in connection with a personal information infringement may contact the following authorities:
1. Personal Information Dispute Mediation Committee: (without area code) 1833-6972 | www.kopico.go.kr
2. Personal Information Infringement Reporting Center (KISA): (without area code) 118 | privacy.kisa.or.kr
3. National Police Agency — Cyber Investigation Bureau: (without area code) 182 | ecrm.police.go.kr
Article 14. Amendments to the Privacy Policy
① This Privacy Policy shall take effect from May 15, 2026.
② Where this Privacy Policy is revized, the Company shall continuously post notice of the effective date and grounds for revision on the Service's main page.
③ Previous versions of this Privacy Policy may be accessed as follows:
② Where this Privacy Policy is revized, the Company shall continuously post notice of the effective date and grounds for revision on the Service's main page.
③ Previous versions of this Privacy Policy may be accessed as follows:
Initial effective date: 15 May 2026
※ This Privacy Policy shall take effect on May 15, 2026.