Yonsei University processes and securely manages the personal information of data subjects in accordance with Article 30 of the Personal Information Protection Act (PIPA). To ensure the prompt and effective handling of inquiries and complaints related to the processing of personal information, Yonsei University has established and publicly discloses this Privacy Policy.
Article 1. Purpose of Processing Personal Information, Categories of Personal Information Collected, and Retention and Use Period
- Yonsei University processes personal information to carry out academic affairs in accordance with the Higher Education Act and the Enforcement Decree of the Higher Education Act.
- Personal information processed by Yonsei University will not be used for any purpose other than those for which it was collected. If the purpose of processing is changed or the personal information is to be used for any other purpose, Yonsei University will take the necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act (PIPA).
- 1Yonsei University Personal Information Files Registration and Disclosure Status (Personal Information Protection Portal)
Information on the Registration of Yonsei University's Personal Information Files Yonsei University Personal Information Files Registration SITE Personal Information Protection Commission Integrated Privacy Support Portal (www.privacy.go.kr) How to Search Personal Services → Requests for Access to Personal Information → Search Personal Information File List
(The search can also be performed by entering "Yonsei University" in the Organization Name field.)Link - 2Yonsei University processes and retains personal information within the retention and use periods prescribed by applicable laws or within the retention and use periods for which consent has been obtained from data subjects at the time of collecting personal information.
- 1) Items Collected with Consent
Information on Items Collected with Consent Purpose of Collection and Use of Personal Information Categories of Personal Information Processed Legal Basis for Processing Retention Period Application Information [Required] Name, Gender, Photograph, Address, Contact Information, Email Address
[Optional] Bank Account Information- Article 15(1)1 of the Personal Information Protection Act (Collection and Use of Personal Information)
- Consent of the Data Subject
Semi-Permanent - 2) Items Processed Without Consent
Information on Items Processed Without Consent Purpose of Collection and Use of Personal Information Categories of Personal Information Processed Legal Basis for Processing Retention Period Academic Records Management Student ID Number, Name, Gender, Grade Level, Enrollment Status, Program, Admission/Advancement Status, Affiliation/Major, Personal Information of Undergraduate and Graduate Students (Including Resident Registration Number/Alien Registration Number), Detailed Undergraduate Major, Course Enrollment, Grades, Changes in Academic Status (Date of Academic Status Change, Academic Status Changes, Awards and Disciplinary Actions), Educational Background and Career Information (Graduate School), Registration Information, Exchange Student Information, Insurance Documents (International Students), Special Notes, Outstanding Student Information, and Other Information Required for the Creation and Issuance of Academic Records - Article 16 of the Framework Act on Education (Founders and Operators of Schools, etc.)
- Paragraph 2 of the Higher Education Act
- Article 6 of the Higher Education Act (School Regulations)
- Article 21 of the Higher Education Act (Operation of Curriculum)
- Article 22 of the Higher Education Act (Classes, etc.)
- Article 23 of the Higher Education Act (Recognition of Credits)
- Article 23-4 of the Higher Education Act (Leave of Absence)
- Article 73 of the Enforcement Decree of the Higher Education Act (Processing of Unique Identifying Information)
Semi-Permanent Registration/Scholarship Management Student ID Number, Name, Admission Type, Enrollment Status, Gender, Grade Level, Promotion Semester, Admission Date, Date of Academic Status Change, Affiliation, Program, Advancement Status, Course Registration (Credits), Telephone Number, Mobile Phone Number, Email Address, Tuition Amount, Installment Payment Information, Scholarship Name, Scholarship Amount, Family Information, Household Information - Article 11 of the Higher Education Act (Tuition and Tuition Review Committee) / Regulations on University Tuition
- Article 3 of the Regulations on University Tuition (Exemption and Reduction of Tuition)
Semi-Permanent Course Registration/Grade Management Student ID Number, Name, Gender, Grade Level, Semester, Enrollment Status, Affiliation/Major, Date of Academic Status Change, Maximum Allowable Credits, Registered Credits, Course Name, Class Section, Course Type, Credits, Score, Retake Status - Article 4 of the Enforcement Decree of the Higher Education Act (School Regulations)
Semi-Permanent Alumni Management Student ID Number, Name, Gender, Grade Level, Enrollment Status, Date of Academic Status Change, Admission Date, Affiliation/Major, Contact Information, Mobile Phone Number, Email Address, Address, Credit Information, Major Information, Certificate Number, Degree Number, Thesis Information (Graduate School) - Paragraph 2 of Article 16 of the Framework Act on Education (Founders and Operators of Schools, etc.), Higher Education Act
- Article 6 (School Regulations), Article 35 (Conferment of Degrees)
- Article 73 of the Enforcement Decree of the Higher Education Act (Processing of Unique Identifying Information)
Semi-Permanent
- 1) Items Collected with Consent
- 3The items of personal information processed, the grounds for retention, and the retention period other than those specified above are as stated in “① Yonsei University’s Registration and Disclosure Status of Personal Information Files (Personal Information Protection Portal).”
- 1Yonsei University Personal Information Files Registration and Disclosure Status (Personal Information Protection Portal)
Article 2. Matters Regarding the Provision of Personal Information to Third Parties
- 1At Yonsei University, the use or provision of personal information is limited to the minimum necessary scope for performing the relevant duties. Except in cases where personal information is used internally within Yonsei University or provided to third parties pursuant to other laws, personal information is not provided to other institutions or individuals for purposes other than those for which the personal information files are retained.
- 2Yonsei University provides personal information to third parties only in cases that fall under Articles 17 and 18 of the Personal Information Protection Act, such as where the consent of the data subject has been obtained or where there are special provisions under applicable laws.
Provision of Personal Information to Third Parties
| Recipient | Legal Basis for Use/Provision | Purpose of Use by the Recipient | Personal Information Items | Retention Period of the Recipient |
|---|---|---|---|---|
| Korean Council for University Education | Articles 42 and 42-2 of the Enforcement Decree of the Higher Education Act | Status of Applicants for College Admission and Verification of Duplicate Registrations | Name, Resident Registration Number, High School of Graduation, Year of Graduation | 5 yesrs |
| Ministry of Education | Articles 3 and 31 of the Enforcement Decree of the Teacher Qualification Examination Act | Issuance of Teacher Certificates and Administrative Affairs Related to Teacher Qualification Examination | Issuing Institution, Qualification Number, Name, Resident Registration Number, Date of Issuance, Reporting Year, Date of Acquisition, Degree Number | Semi-Permanent |
| National Assembly Library | Article 7 of the National Assembly Library Act | Deposit of Degree Theses | Degree Registration Number, Name, Department, Date of Graduation, Title of Degree Thesis | Semi-Permanent |
| Korea Student Aid Foundation | Articles 50-2 of the Korea Student Aid Foundation Act and Articles 35-2, 35-3, and 36-2 of the Enforcement Decree | Application for National Scholarship and Student Loan | Student Number, Name, Resident Registration Number, Year of Admission, Grade Level, Expected Tuition Amount, Whether Summer/Winter Session Is Included, Credits Earned in the Previous Semester, Grade Point Average in the Previous Semester, Total Credits Earned, Overall Grade Point Average, Previous Semester Percentile Score, Overall Percentile Score, Whether It Is the Graduation Semester | 10 Years |
| Immigration Office | Articles 19-4 of the Immigration Act and Article 101 of the Enforcement Decree | Management of International Students | Name, Date of Birth, Gender, Passport Number, Email, Admission Type, Registered Program, Academic Field Classification, Period of Study, Department/Major, Korean Language Proficiency, Final School Attended | Semi-Permanent |
| Dongbu Insurance Co., Ltd. | Article 3 of the Insurance Business Act and Article 102 of the Enforcement Decree | Enrollment in Group Insurance for Sinchon and International Campus Students | Name, Resident Registration Number (Alien Registration Number), Affiliation, Grade Level (Semester), Student Number | 1 Year |
| National Tax Service | Article 160-3 of the Income Tax Act and Article 208-3 of the Enforcement Decree | Preparation of Issuance Records for Donation Receipts | Name, Resident Registration Number, Alien Registration Number, Address, Donation Amount | 5 Years |
| Other Universities or External Institutions | Consent of the Data Subject | Academic Background Verification | Name, Date of Birth, Department (Major), Date of Admission, Date of Graduation, Degree Name, Degree Number, Other Information Requested by the Relevant Institution | Until the period notified by the relevant institution at the time of obtaining the Data Subject's consent |
| Domestic and Overseas Universities for Credit Exchange | Article 23 of the Higher Education Act, Article 73 of the Enforcement Decree, and Consent of the Data Subject | Credit Exchange Between Domestic and Overseas Universities | (Domestic) Name, Date of Birth, Resident Registration Number, Department, Student Number, Grade Level, Contact Information, Email (Overseas) Name, Date of Birth, Gender, Department/Major, Email (Notification of Grades for International Exchange Students) Name, University, Date of Birth, Grades |
Semi-Permanent |
| Military Manpower Administration | Articles 60 and 157 of the Military Service Act | Maintenance of Student Reserve Forces Resources | Name, Resident Registration Number, Student Number, Major, Grade Level, Email, Mobile Phone Number, Other Academic Records Requested by the Military Manpower Administration (Year of Admission/Graduation, etc.) | Until the Completion of the Relevant Administrative Process |
| Seodaemun-gu Office | Article 140 of the Framework Act on Local Taxes | Processing Exclusion from Collective Taxation of Resident Tax | Name, Resident Registration Number, Address | Until the Completion of the Relevant Administrative Process |
- 3Yonsei University may use personal information for purposes other than those for which the personal information files are retained or provide it to other institutions in the following cases.
However, such provision is excluded when it is deemed that there is a risk of unfairly infringing upon the rights or interests of the data subject or a third party.- Where personal information is provided to a foreign government or international organization for the implementation of treaties or other international agreements
- Where the data subject or their legal representative is unable to express their intention or cannot provide consent due to reasons such as an unknown address, and where it is deemed that providing personal information to a person other than the data subject clearly benefits the data subject
- Where necessary for the investigation of crimes and the initiation and maintenance of prosecution
- Where necessary for the performance of judicial duties by a court
- Where approved after deliberation by the Personal Information Protection Commission pursuant to Article 7(1) of the Personal Information Protection Act
- 4When Yonsei University provides personal information to third parties, it requests the recipients of the personal information to restrict the purpose and method of use and to take measures to ensure security.
Article 3. Matters Regarding the Outsourcing of Personal Information Processing
- 1When entering into outsourcing agreements, Yonsei University specifies matters related to the prohibition of processing personal information beyond the purpose of performing outsourced tasks, technical and administrative protection measures, restrictions on subcontracting, management and supervision of entrusted parties, liability for damages, and other responsibilities in documents such as contracts pursuant to Article 26 of the Personal Information Protection Act. Yonsei University also supervises whether the entrusted parties safely process personal information.
- 2Yonsei University outsources personal information processing tasks as follows for the efficient handling of personal information-related affairs. If the details of the outsourced tasks or entrusted parties change, such changes will be disclosed through this Privacy Policy.
Outsourcing of Personal Information Processing
| Entrusted Company | Subcontracting Status | Details of Outsourced Tasks | Outsourcing Period |
|---|---|---|---|
| Jinhak Apply Co., Ltd. | Outsourcing | College Admission Application Processing | Until Completion of the Outsourcing Agreement |
| Korea Information Certificate Authority, Inc. | Outsourcing | Issuance of Certificates | Until Completion of the Outsourcing Agreement |
| Woori Bank | Outsourcing | Issuance of Student ID Cards / Tuition Payment Collection | Until Completion of the Outsourcing Agreement |
| UbiVelox Co., Ltd. | Outsourcing | Issuance of Mobile Student ID Cards / Electronic Attendance Management | Until Completion of the Outsourcing Agreement |
| K2WebTech Co., Ltd. | Outsourcing | Maintenance of the Main Website System | Until Completion of the Outsourcing Agreement |
| Andwise Co., Ltd. | Outsourcing | Modification of Main Website and CMS Systems and Handling of Civil Complaints | Until Completion of the Outsourcing Agreement |
| KT Telecop Co., Ltd. | Outsourcing | Establishment of Integrated Security System and Security Services for Sinchon Campus | Until Completion of the Outsourcing Agreement |
| C&S Asset Management Co., Ltd. | Outsourcing | Establishment of Integrated Security System and Security Services for International Campus | Until Completion of the Outsourcing Agreement |
| Daeju HR Co., Ltd. | Outsourcing | Parking Management at Sinchon Campus | Until Completion of the Outsourcing Agreement |
| NICE Information Service Co., Ltd. | Outsourcing | Identity Verification Service | Until Completion of the Outsourcing Agreement |
| Hewlett Packard Enterprise (HPE) | Outsourcing | Server Maintenance | Until Completion of the Outsourcing Agreement |
| E-Tech System Co., Ltd. (Subcontractor: GTG Co., Ltd.) | Outsourcing | VTL Equipment Maintenance | Until Completion of the Outsourcing Agreement |
| Allayer Co., Ltd. | Outsourcing | DNS Equipment Maintenance | Until Completion of the Outsourcing Agreement |
| CMT Information Communication Co., Ltd. | Outsourcing | Integrated Security Monitoring and Maintenance of Security Equipment for Campus Systems | Until Completion of the Outsourcing Agreement |
| UB&TIS Lab Co., Ltd. | Outsourcing | SSO System Maintenance | Until Completion of the Outsourcing Agreement |
| TmaxTibero Co., Ltd. | Outsourcing | DBMS Maintenance | Until Completion of the Outsourcing Agreement |
| TmaxSoft Co., Ltd. | Outsourcing | WEB/WAS Maintenance | Until Completion of the Outsourcing Agreement |
| HumusOn Co., Ltd. | Outsourcing | Notification Messages / SMS Transmission | Until Completion of the Outsourcing Agreement |
| AMAS Co., Ltd. | Outsourcing | PMS Maintenance | Until Completion of the Outsourcing Agreement |
| Ubion Co., Ltd. | Outsourcing | Maintenance of LearnUs (Online Education System) | Until Completion of the Outsourcing Agreement |
| Research & Research Co., Ltd. | Outsourcing | Yonsei University Educational Consumer Satisfaction Survey (Purpose: Affiliated College, Name, Student Number, Mobile Phone Number, Email Address) | Until Completion of the Outsourcing Agreement |
| Didim365 | Outsourcing | Cloud MSP | Until Completion of the Outsourcing Agreement |
| HappySoft | Outsourcing | DLP Maintenance | Until Completion of the Outsourcing Agreement |
| PnP Secure | Outsourcing | Maintenance of Personal Information Access Records / Access Control System | Until Completion of the Outsourcing Agreement |
| SecuWiz | Outsourcing | SSL-VPN Maintenance | Until Completion of the Outsourcing Agreement |
| MailPlug | Outsourcing | Operation of Yonsei Mail (MailPlug) | Until Completion of the Outsourcing Agreement |
- 3Other personal information processing tasks outsourced by affiliated institutions of Yonsei University are disclosed through the respective institution's Privacy Policy.
Article 4. Matters Regarding the Overseas Transfer of Personal Information
| Relevant Legal Basis | Personal Information Transferred | Destination Country | Timing and Method of Transfer | Recipient | Purpose of Use | Retention and Use Period |
|---|---|---|---|---|---|---|
| Article 28-8(1)1 of the Personal Information Protection Act (Consent of the Data Subject) | Name, Date of Birth, Contact Information, Gender, Registration Information, Academic Records, TOEFL Score | Country Where the Host University Is Located | At the Time of Selection for Exchange Program Participation | Host University | Academic Administration of the Host University | Semi-Permanent |
Article 5. Matters Regarding the Destruction of Personal Information
However, if personal information must be retained continuously pursuant to applicable laws, such personal information is securely stored by transferring it to a separate database or by keeping it in a separate storage location.
- 1Personal Information Destruction Procedure
- Personal information or personal information files subject to destruction are destroyed according to internal procedures after establishing a destruction plan, selecting the personal information or personal information files for which grounds for destruction have arisen, and obtaining approval from the Chief Privacy Officer and the Personal Information Protection Officer.
- 2Methods of Destroying Personal Information
- Personal information stored in electronic file formats is deleted using technical methods that prevent the records from being restored.
- Personal information printed on paper is destroyed by shredding with a document shredder or by incineration.
Article 6. Matters Regarding the Rights and Obligations of Data Subjects and Legal Representatives and Methods for Exercising Such Rights
- When a data subject requests access to, correction of, or deletion of personal information, Yonsei University verifies the identity of the data subject through identification documents such as a Resident Registration Card, driver's license, or passport.
- When an agent visits and requests access to, correction of, or deletion of personal information, Yonsei University verifies the identity of the agent through the data subject's power of attorney and consent form, as well as the agent's identification documents.
- Requests for access, correction, deletion, or suspension of processing of personal information may be submitted in writing, by email, or by facsimile (FAX) pursuant to Article 41(1) of the Enforcement Decree of the Personal Information Protection Act.
| Rights of Data Subjects | Description | Enforcement Decree of the Personal Information Protection Act |
|---|---|---|
| Request for Access to Personal Information | Data subjects may visit Yonsei University and request access to their personal information, and Yonsei University will respond to such requests promptly. | Article 41 (Access to Personal Information) Article 42 (Restriction, Suspension, and Refusal of Access to Personal Information) |
| Request for Correction/Deletion of Personal Information |
|
Article 43 (Correction and Deletion of Personal Information, etc.) Article 44 (Suspension of Processing of Personal Information, etc.) |
| Request for Suspension of Personal Information Processing |
|
Article 44 (Suspension of Processing of Personal Information, etc.) |
| Methods for Exercising Rights | Data subjects may exercise their rights through written requests, email, facsimile (FAX), or other methods. Attachment 1 Form: Request for Access, Correction/Deletion, and Suspension of Processing of Personal Information Attachment 2 Form: Power of Attorney |
- |
Article 7. Department Responsible for Receiving and Processing Requests for Access to Personal Information
- 1Data subjects may submit requests for access to personal information pursuant to Article 35 of the Personal Information Protection Act to the departments listed below.
| Category of Data Subject | Department | Telephone |
|---|---|---|
| Sinchon·International Campus Faculty | Office of Academic Affairs, Academic Affairs Team | 02)2123-2085 |
| Sinchon·International Campus Staff | Office of General Affairs, Human Resources Team | 02)2123-2165 |
| Sinchon·International Campus Undergraduate Students | Office of Academic Affairs, Academic Support Team | 02)2123-2095 |
| Sinchon·International Campus Graduate School Students | Graduate School Academic Affairs Team | 02)2123-4109 |
| United Graduate School of Theology Students | United Graduate School of Theology Administration Team | 02)2123-3243 |
| Graduate School of Business Students | Graduate School of Business Administration Team | 02)2123-2494 |
| Graduate School of International Studies Students | Graduate School of International Studies Administration Team | 02)2123-3291 |
| Graduate School of Information Students | Graduate School of Information Administration Team | 02)2123-4187 |
| Graduate School of Communication Students | Graduate School of Communication Administration Team | 02)2123-3444 |
| Graduate School of Social Welfare Students | Graduate School of Social Welfare Administration Team | 02)2123-6204 |
| School of Law Students | School of Law Administration Team | 02)2123-3802 |
| Graduate School of Education Students | Graduate School of Education Administration Team | 02)2123-3263 |
| Graduate School of Public Administration Students | Graduate School of Public Administration Administration Team | 02)2123-3272 |
| Graduate School of Engineering Students | Graduate School of Engineering Administration Team | 02)2123-3283 |
| Graduate School of Journalism and Mass Communication Students | Graduate School of Journalism and Mass Communication Administration Team | 02)2123-3299 |
| Graduate School of Legal Affairs Students | Graduate School of Legal Affairs Administration Team | 02)2123-2987 |
| Graduate School of Human Environmental Sciences Students | Graduate School of Human Environmental Sciences Administration Team | 02)2123-3912 |
| Graduate School of Economics Students | Graduate School of Economics Administration Team | 02)2123-4174 |
| Graduate School of Psychological Science Innovation Students | Graduate School of Psychological Science Innovation Administration Team | 02)2123-7504 |
| Graduate School of Artificial Intelligence Convergence Students | Graduate School of Artificial Intelligence Convergence Administration Team | 02)2123-5704 |
- 2In addition to the departments responsible for receiving and processing requests under Paragraph 1, data subjects may also submit requests for access to personal information through the Ministry of the Interior and Safety's "Personal Information Protection Comprehensive Support Portal" (www.privacy.go.kr).
Article 8. Methods for Remedying Violations of the Rights and Interests of Data Subjects
- 1Data subjects may apply for dispute resolution or consultation with institutions such as the Personal Information Dispute Mediation Committee and the Personal Information Infringement Report Center operated by the Korea Internet & Security Agency (KISA) to seek remedies for damages caused by personal information infringement.
- 2The following organizations are independent institutions separate from Yonsei University. If you are not satisfied with Yonsei University's own handling of personal information-related complaints or remedies for damages, or if you require further assistance, please contact the relevant organizations.
| Personal Information Infringement Report Center (Operated by Korea Internet & Security Agency) | Personal Information Dispute Mediation Committee | Investigation Authorities |
|---|---|---|
|
|
|
Article 9. Matters Regarding Measures to Ensure the Security of Personal Information
Activities for Ensuring the Security of Personal Information
| Security Measures | Description | Remarks |
|---|---|---|
| Administrative Measures |
|
Review and audit conducted at least once a year through an external security specialist company |
| Technical Measures |
|
Access control solutions, PC security programs, database encryption, etc. |
| Physical Measures |
|
Designation of restricted areas and access control |
Information Security and Personal Information Protection Activities
| Certification | Certification Validity Period | Certification Authority |
|---|---|---|
| ISMS-P Certification (Yonsei University Undergraduate Academic Information System) | 2023-11-01 ~ 2026-10-31 | Korea Internet & Security Agency (KISA) |
Article 10. Matters Regarding the Installation and Operation of Automatic Personal Information Collection Devices and Methods for Refusal
- 1Purpose of Using Cookies
Cookies are used to identify users' visits and usage patterns, search terms, pop-up preferences, news editing preferences, and the number of users for each service and website visited by data subjects in order to provide optimized information to users.
- 2Installation/Operation of Cookies and Refusal
Data subjects (members/non-members and users) have the option to choose whether to allow cookie installation. Therefore, users may set options in their web browsers to allow all cookies, receive confirmation whenever cookies are stored, or refuse the storage of all cookies. However, if cookie storage is refused, some services may not function properly.
- Internet Explorer 11: Tools menu at the top of the web browser > Internet Options > Privacy > Advanced
- Microsoft Edge: Settings and More menu (Alt+F) at the top of the web browser > Cookies and site permissions > Manage and delete cookies and site data > Disable "Allow sites to save and read cookie data"
- Chrome: Settings menu on the right side of the web browser > Settings > Privacy and security > Cookies and other site data
- Safari: Safari > Select Preferences > Click Privacy and choose whether to allow or block cookies
Article 11. Matters Regarding the Collection, Use, and Refusal of Behavioral Information
- 1Purpose of Collecting Behavioral Information
- Yonsei University collects behavioral information to analyze the access frequency and visit times of members and non-members and to improve its services.
- 2Methods of Collecting Behavioral Information
- Automatically collected when visiting and using the website
- 3Retention and Use Period and Subsequent Processing Method
- Retained for one year or until the purpose of collecting behavioral information is achieved
- Deleted directly by the data subject (Refer to this document: Installation/Operation of Cookies and Refusal)
Article 12. Matters Regarding the Chief Privacy Officer
- 1Sinchon · International Campus
| Category | Position and Name | Contact Information |
|---|---|---|
| Chief Privacy Officer |
|
|
| Personal Information Protection Officer |
|
|
- 2Mirae Campus
| Category | Position and Name | Contact Information |
|---|---|---|
| Chief Privacy Officer |
|
|
| Personal Information Protection Officer |
|
|
| Security Officer |
|
|
Article 13. Matters Regarding Changes to the Personal Information Processing Policy
- 1Obligation to Provide Notice
This Personal Information Processing Policy was established on June 1, 2020. In the event of additions, deletions, or modifications to the contents due to changes in laws, policies, or security technologies, Yonsei University will notify users of the reasons for and details of the changes through the Yonsei University website at least 7 days prior to the effective date of the revision.
- Announcement Date: July 28, 2026
- Effective Date: August 5, 2026
- 2Previous versions of the Personal Information Processing Policy can be viewed below.

