Privacy Policy

ASTIK Korea Adventure Safety Institute (hereinafter "the Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea to protect the personal information of data subjects and to handle related grievances promptly.

Article 1. Purpose of Processing Personal Information

The Company processes personal information for the following purposes. Personal information collected shall not be used for purposes other than those stated below. If the purpose of use changes, necessary measures such as obtaining separate consent under Article 18 of the Personal Information Protection Act shall be taken.

Receiving inquiries regarding training and services, providing consultation and responses, managing inquiry records.

Article 2. Items Collected and Method of Collection

Items Collected Purpose Retention Period
Name, phone number, email address, organization/facility name Receiving and responding to inquiries 1 year after completion of consultation, then destroyed

Method of collection: Direct input through the website contact form.

Article 3. Retention and Use Period

The Company processes and retains personal information within the retention period agreed upon at the time of collection or as required by applicable laws.

Personal information collected through inquiries is retained for 1 year after consultation is completed and then destroyed without delay.

Article 4. Provision to Third Parties

The Company does not provide personal information to third parties except as specified in Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or under special provisions of the law.

Currently, no personal information is provided to third parties.

Article 5. Outsourcing of Processing

The Company outsources personal information processing as follows:

Service Provider Outsourced Tasks
Google LLC Inquiry data storage and email notification (Google Sheets, Google Apps Script)
GitHub Inc. Website hosting (GitHub Pages)
Netlify Inc. Admin page hosting

Article 6. Destruction Procedures and Methods

The Company destroys personal information without delay when it is no longer needed due to the expiration of the retention period or the achievement of the processing purpose.

Procedure: Personal information past its retention period is deleted from the database (Google Sheets).

Method: Electronic files are deleted using technical methods that prevent recovery and reproduction.

Article 7. Rights of Data Subjects

Data subjects may exercise the following rights at any time:

① Request to access personal information

② Request to correct errors

③ Request to delete personal information

④ Request to suspend processing

These rights may be exercised by contacting us via email at astik@astik.co.kr. The Company will take action without delay.

Article 8. Security Measures

The Company takes the following measures to ensure the security of personal information:

① Administrative measures: Minimizing personnel handling personal information, establishing and implementing privacy policies.

② Technical measures: Access control to personal information processing systems, SSL (HTTPS) encrypted communication, defense against security vulnerabilities such as XSS.

Article 9. Privacy Officer

The Company has designated the following Privacy Officer to oversee the processing of personal information and to handle complaints and damage relief related to personal information processing:

Name: Hong Jun Yang

Position: CEO

Email: astik@astik.co.kr

Article 10. Remedies for Infringement of Rights

Data subjects may contact the following organizations for dispute resolution or consultation regarding personal information infringement:

Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)

Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)

Supreme Prosecutors' Office Cyber Investigation Division: 1301 (www.spo.go.kr)

National Police Agency Cyber Bureau: 182 (ecrm.police.go.kr)

Article 11. Changes to This Policy

This Privacy Policy is effective from the date of implementation. Any additions, deletions, or corrections due to changes in laws or policies will be announced through the website at least 7 days prior to their implementation.

Effective Date: March 25, 2026