Privacy Policy

This privacy policy explains how are your personal data processed by the controller, IESF, and hereby provides you, as a person to whom we process personal data (hereinafter referred to as “data subject” or “client”), information pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

1 . Identification and contact details of the controller

The controller is IESF, an organization with its registered seat at 615, 6F, Suyeonggangbyeon-daero 140, Haeundae-gu, Busan, Korea, (further referred to only as “IESF” or “controller”). Controller contact details:

Email: office@iesf.org

Phone number: +82 2 715 6668

2 . Responsible person

The controller has entrusted with the supervision of the processing of personal data a responsible person, which you can contact in case of any questions related to the processing of your personal data by sending an email to office@iesf.org.

3 . Purpose of personal data processing

Purpose of processing: provision of products and services and the use and sharing of information as a part of marketing legal basis: consent of data subject and the legitimate interest of the controller.

The legitimate interest pursued by the controller in the processing of the personal data (i) for the purpose of direct marketing, e.g. through social networks, marketing surveys, and displaying targeted advertising, is to inform about its products (events) and services /marketing/.

The controller processes personal data for the purpose of (direct) marketing also with the consent of the data subject, e.g., in case the data subject has subscribed to the marketing communication (i.e. newsletter). The consent may be withdrawn at any time by the data subject.

The personal data of the data subject are made available to the following recipients or categories of recipients: marketing agencies encompassing analytical and statistical indicators of the web, and social network operators.

The provision of personal data by the data subject - the person who has subscribed to the marketing communication, is their consent. The controller processes the following categories of the data subject’s personal data:

• email.

4 . Purpose and legal basis for personal data processing

The legal basis regarding the processing of personal details in particular the data subject’s consent.

5 . Transfer of personal data to third countries

Personal data shall be the subject of a cross-border transfer to the Member State of the European Union or to the third countries that do ensure an adequate level of personal data protection as well as to the third countries that do not ensure an adequate level of personal data protection on the understanding that the controller had taken measures directed at personal data protection.

6 . Personal data retention period

The processing of personal data in the case of consent is only possible for the period for which the consent was granted or as the case may be until the consent withdrawal.

7 . Rights of the data subject

In connection with processing your personal data, you have the following rights stated below. If you exercise any of the rights below, we will notify you of your request being processed within 30 days of its receipt. In justified cases, we may extend this period to 60 days, which we will inform you about.

Right of access by the data subject

You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information: the purposes of the processing; the recipients or categories of recipient to whom the personal data have been disclosed, in particular recipients in third countries; the envisaged period for which the personal data will be stored. The data subject also has the right to obtain a copy of the personal data that are being processed.

Right to rectification

If you believe IESF is processing incorrect, inaccurate, or outdated personal data about you, you have the right to obtain the rectification of personal data. It is important for us to process accurate personal data about you, so be sure to use this right whenever any of your personal data, which is important to your relationship with us, changes. Based on your corrected or up-to-date information, we will rectify the personal data we process about you.

Right to erasure (‘right to be forgotten’)

You shall have the right to obtain from the controller the erasure of personal data concerning him or her where one of the following grounds applies and there are no statutory exclusions:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• the data subject withdraws consent on which the processing is based, and where there is no other legal basis for the processing;
• the data subject objects to the processing of personal data, processed on the basis of legitimate interest, due to his / her specific situation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing for direct marketing purposes;

Right to restriction of processing

You shall have the right to obtain from the controller restriction of processing where one of the following applies:

• if you contest the accuracy of the personal data being processed, for a period enabling the controller to verify the accuracy of the personal data;
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
• we no longer need the personal data for the processing, but they are required by you for the establishment, exercise, or defense of legal claims;
• you object to the processing of personal data pending the verification of whether the legitimate grounds of the controller override those of the data subject.

In these cases, IESF will not delete your personal data but will mark it and restrict its processing for certain purposes.

Right to data portability

You shall have the right to receive the personal data concerning you, which you have provided to a controller, and the processing is carried out by automated means in a structured, commonly used, and machine-readable format. You have the right to transmit those data to another controller. If it is technically feasible, we will directly transmit your personal data to another controller.

Right to object and automated individual decision-making

You shall have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on our interest, including profiling based on those provisions. Where personal data are processed for direct marketing purposes, you shall have the right to object at any time to the processing of personal data concerning you.

You also have the right to object if your personal data is processed automatically, which may result in a decision that has legal effects on you or otherwise affects you significantly.

In the event of an objection to the processing of your personal data that are being processed on a legal basis of IESF’s legitimate interest, IESF will assess the situation based on the information provided by you and inform you whether IESF’s legitimate interest prevails in a particular situation and the processing will continue or your rights as a data subject prevail and the processing will be stopped.

Right to withdraw consent

If your personal data are being processed based on the consent, you are entitled to withdraw this consent at any time. However, withdrawal of consent has no impact on the legality of processing resulting from consent before its withdrawal.

How to exercise your rights

The data subject may exercise their rights by sending an e-mail to office@iesf.org

Please state your name, surname, e-mail address, or permanent address in your request. If you do not provide us with this information, your request will not be accepted. We require this additional information to verify your identity and not to disclose your personal information to an unauthorized person.