● Privacy Policy

All personal information handled by Safety Stepping Stone of the Ministry of Public Administration and Security complies with the personal information protection regulations of related laws such as the Personal Information Protection Act to protect users' personal information and rights and interests, and to smoothly process users' high-level related to personal information. We have the same treatment policy.

Article 1 Purpose of processing personal information

○ Personal information is processed for the following purposes. The processed personal information will not be used for purposes other than the following, and prior consent will be sought when the purpose of use is changed.

Article 2 Matters concerning the provision of personal information to third parties

① In principle, the Ministry of Public Administration and Security handles the personal information of the information subject within the scope specified for the purpose of collection and use, and processes it beyond the scope of the original purpose or provides it to a third party without the prior consent of the information subject, except in the following cases Do not. However, subparagraphs 5 through 9 are limited to public institutions.

　　1. In case of obtaining separate consent from the information subject

　　2. When there are special provisions in other laws

　　3. Cases in which the data subject or his/her legal representative is unable to express his/her intention or obtain prior consent due to unknown address, etc., which is clearly recognized as necessary for the immediate benefit of

　　the life, body, or property of the information subject or a third party case

　　4. When personal information is provided in a form in which a specific individual cannot be identified as necessary for purposes such as statistical writing and academic research

　　5. If personal information is used for purposes other than the intended purpose or if it is not provided to a third party, the duties prescribed by other laws cannot be performed, and the protection committee has deliberated and

　　decided

　　6. Where it is necessary to provide to foreign governments or international organizations for the implementation of treaties and other international agreements

　　7. Where it is necessary for the investigation of a crime and the filing and maintenance of a public prosecution

　　8. When it is necessary for the court's trial work

　　9. When it is necessary for the execution of punishment, probation, and protective disposition

② Matters related to Paragraph 1 are posted on the relevant website operated by each department so that the information subject can check them.

③ Data provided by third parties

　　1. Provision of information to smoothly resolve user inquiries

Article 3 Matters concerning consignment of personal information processing

Article 4 Matters concerning the rights and obligations of data subjects and legal representatives and how to exercise them

① The information subject (legal representative if under the age of 14) can exercise the following personal information protection rights at any time.

　　1. Request to view personal information

　　2. Request for correction if there are any errors

　　3. Deletion request

　　4. Request for suspension of processing

② The exercise of rights pursuant to Paragraph 1 can be done in writing, e-mail, fax, etc. after filling out the form in Annex No. 8 of the Enforcement Rules of the Personal Information Protection Act, and measures will be taken

　without delay.

③ If the information subject requests correction or deletion of personal information errors, the personal information will not be used or provided until the correction or deletion is completed.

④ The exercise of rights pursuant to Paragraph 1 can be done through an agent, such as a legal representative of the information subject or a person who has been delegated. In this case, you must submit a power of attorney in

　accordance with the form of Attachment No. 11 of the Enforcement Rules of the Personal Information Protection Act.

⑤ The right of the information subject to request to view and suspend processing of personal information may be restricted in accordance with Article 35 Paragraph 4 and Article 37 Paragraph 2 of the Personal Information Protection Act.

⑥ Requests for correction and deletion of personal information cannot be requested if the personal information is specified as the subject of collection in other laws and regulations.

⑦ In the event of a request for viewing, correction or deletion, or suspension of processing according to the rights of the information subject, we confirm whether the person who made the request is the person or a legitimate agent.

　　* [Appendix 8 of the Enforcement Regulations of the Personal Information Protection Act] Request for personal information (view, correction/deletion, suspension of processing)

　　* [Appendix 11 of the Enforcement Regulations of the Personal Information Protection Act] Power of Attorney

Article 5 Items of personal information to be processed

① Personal information processed by the Ministry of Public Administration and Security only processes the minimum amount of personal information stipulated by relevant duties and laws, and detailed information is posted on the relevant website operated by each department to guide information subjects so that they can check it.

※ Optional items*: Items that can be processed or not processed according to the intention of the data subject, such as provision of additional services

Article 6 Procedures and methods for destroying personal information

① In principle, the Ministry of Public Administration and Security destroys personal information for which the purpose of personal information processing has been achieved without delay. However, this may not be the case when it is required to be preserved in accordance with other laws and regulations.

　The procedure, deadline and method of destruction are as follows.

A. Destruction procedure

Unnecessary personal information and personal information files are handled as follows in accordance with the internal policy procedure under the responsibility of the person in charge of personal information.

- Destruction of personal information

　Personal information whose retention period has elapsed is destroyed without delay from the end date.

- Destruction of personal information files

　When the personal information file becomes unnecessary, such as the achievement of the purpose of processing the personal information file, the abolition of the service, or the termination of the business, the personal

　information file is destroyed without delay from the date when the processing of the personal information is deemed unnecessary.

B. Destruction method

　1) Information in electronic form uses technical methods that cannot reproduce records.

　2) Personal information printed on paper is shredded with a shredder or destroyed by incineration.

② The Ministry of Public Administration and Security provides guidance on the current status of personal information file destruction through the relevant websites operated by each department.

Article 7 Matters concerning the installation, operation and refusal of automatic personal information processing devices

① The Safety Stepping Stone Emergency Ready app does not access location information if you turn OFF the setting for receiving base station location in Settings. If you turn OFF the location of the receiving base station in Settings, you will not be able to receive emergency text messages by figuring out the location of your base station.

② Mobile phone authentication is optional. When you authenticate yourself, the user's mobile phone number is encrypted and stored on the server. The stored mobile number is used only for identity verification for hazardous chemical leakage reporting.

Article 8 Measures to ensure the safety of personal information

① We take the following measures to ensure the safety of personal information.

　1. Minimization and training of personal information handling staff

　　Employees who handle personal information are designated and managed only to the necessary number of people, and training for safe management is conducted for employees who handle personal information.

　2. Restriction of access to personal information

　　Necessary measures are being taken to control access to personal information by granting, changing, or canceling access rights to the personal information processing system that handles personal information, and

　　unauthorized access from outside is controlled by using an intrusion prevention system.

　3. Encryption of Personal Information

　　Personal information is safely stored and managed through encryption, etc. In addition, separate security features such as encrypting important data during storage and transmission are used.

　4. Security program installation and periodic inspection/update

　　In order to prevent leakage and damage of personal information caused by hacking or computer viruses, security programs are installed and periodically updated and inspected.

　5. Access control for unauthorized persons

　　We set up a separate physical storage location for the personal information processing system that stores personal information and establish and operate access control procedures.

Article 9 Remedy for Infringement of Rights and Interests

Personal information subjects can apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency Personal Information Infringement Report Center, etc. to

receive relief from damage caused by personal information infringement.

　☞ Personal Information Dispute Mediation Committee : 1833-6972 (www.kopico.go.kr)

　☞ Personal Information Infringement Report Center : (without area code) 118 (privacy.kisa.or.kr)

　☞ Supreme Prosecutor's Office Cyber Investigation Division : (without area code) 1301, cid@spo.go.kr, (www.spo.go.kr)

　☞ National Police Agency Cyber Security Bureau : (without area code) 182, (cyberbureau.police.go.kr)

In addition, a person whose rights or interests have been infringed upon due to the disposition or omission of the head of a public institution in response to the information subject's request for access, correction, deletion,

suspension of processing of personal information, etc. may request an administrative appeal in accordance with the Administrative Appeals Act. there is.

　☞ Refer to the telephone number information of the Central Administrative Appeals Commission (www.simpan.go.kr)

Article 10 Personal Information Protection [By sector] Responsible officer and contact information

Article 11 Request for Inspection of Personal Information

① The information subject can request to view personal information in accordance with Article 35 of the Personal Information Protection Act to the following departments.

　▶ Reception and processing of personal information access request department name: Disaster Information and Communications Division

　　 Person in charge: Cha Jin Ho contact : <Phone number : 044-205-5388>, <e-mail : cjh1288@korea.kr>

② The information subject may request access to personal information through the ‘Comprehensive Personal Information Protection Portal’ website (www.privacy.go.kr) of the Ministry of Public Administration and Security in

　addition to the reception and processing department of the request for reading in Paragraph 1.

　▶ Comprehensive portal for personal information protection of the Ministry of Public Administration and Security → Personal information civil complaints → Request for viewing personal information (requires real name authentication through public I-PIN)

Article 12 Change of personal information processing policy

This privacy policy is effective from Feb 26, 2024.