Privacy Policy
Gwangju City Library (the "Library"), pursuant to Article 30 of the Personal Information Protection Act, establishes and discloses the following privacy policy to protect users' personal information and handle related grievances promptly and smoothly.
Article 1 (Items Collected and Purpose of Processing)
The Library collects and processes the minimum personal information for the following purposes. Personal information processed is not used beyond the purposes below; if the purpose changes, it takes necessary measures such as obtaining separate consent under Article 18 of the Act.
| Category | Items collected | Purpose |
|---|---|---|
| Sign-up (required) | Name, ID, password, date of birth, mobile number, email, address | Member identification/verification, integrated (mobile) card issuance, loan·return·reservation services |
| Sign-up (optional) | Guardian name·contact (child members), interests | Guardian verification for child members, tailored recommendations·new-arrival alerts |
| Service use | Loan·return·reservation history, book request·ILL·facility rental records, seat use records | Service provision and history management, overdue·compensation handling, usage statistics |
| Online civil requests·inquiries | Name, contact, email, request (inquiry) content | Receiving requests and replying with results |
| Automatic collection | Access IP, cookies, access time, service use logs | Prevention of misuse, statistical analysis for service improvement |
Article 2 (Retention and Use Period)
The Library processes and retains personal information within the retention·use period under laws or the period consented to at the time of collection.
| Item | Retention period | Basis |
|---|---|---|
| Member information | Until withdrawal | Data subject consent |
| Service use records (loans·returns, etc.) | Destroyed without delay after withdrawal (statistics de-identified) | Library usage statistics |
| Debt records (unpaid·compensation, etc.) | Until the cause ends | Settlement·dispute resolution |
| Civil request records | 3 years after completion | Civil Petitions Act |
| Website access logs | 2 years | Communications Privacy Act |
Article 3 (Provision to Third Parties)
The Library processes personal information only within the scope stated in Article 1, and provides it to third parties only where it falls under Articles 17 and 18 of the Act, such as with the data subject's consent or special legal provisions.
- When separate consent is obtained from the data subject
- When there is a special legal provision or it is unavoidable to comply with legal obligations
- When the data subject or legal representative cannot express intent or prior consent cannot be obtained (e.g., unknown address), and it is clearly necessary for the urgent life·body·property interests of the data subject or a third party
The Library may outsource some work such as e-library system operation to external specialists; when doing so, it specifies personal-information protection matters in the contract under Article 26 of the Act and supervises the safe processing by the trustee.
Article 4 (Destruction Procedure and Method)
Destruction Procedure
- 1Cause arises
A cause such as retention expiry, purpose achievement, or withdrawal arises.
- 2Plan established
With the Privacy Officer's approval, the personal information to be destroyed is selected.
- 3Destruction executed
The personal information is destroyed without delay (within 5 days).
Destruction Method
- Electronic filesPermanently deleted so recovery/reproduction is impossible
- Paper documentsShredded or incinerated
※ Information that must be preserved by law is moved to a separate database (DB) or stored in a different location.
Article 5 (Rights·Duties of the Data Subject and Legal Representative and How to Exercise Them)
The data subject may exercise the following rights regarding personal information at any time.
- Request to view personal information
- Request correction of errors
- Request deletion
- Request suspension of processing
Rights may be exercised in writing, by phone (031-760-5000), email, etc., and the Library will act without delay. For children under 14, the legal representative may exercise the child's rights.
Article 6 (Privacy Officer)
The Library takes overall responsibility for personal-information processing and designates a Privacy Officer as below to handle complaints and remedy harm related to processing.
Privacy Officer
- AffiliationGwangju City Library
- PositionLibrary Policy Division Director
- Phone031-760-5000
Privacy Department
- DepartmentLibrary Policy Division, Information Operations Team
- Phone031-760-5000
- InquiriesOnline civil request · Q&A
For reports or consultations on other privacy infringements, please contact the agencies below.
- Privacy Infringement Report Center (118 / privacy.kisa.or.kr)
- Personal Information Dispute Mediation Committee (1833-6972 / www.kopico.go.kr)
- Supreme Prosecutors' Office Cyber Investigation (1301 / www.spo.go.kr)
- National Police Cyber Bureau (182 / ecrm.police.go.kr)
This privacy policy takes effect on January 1, 2026.