The purpose of this agreement is to stipulate the rights, obligations, and responsibilities between the Association and members regarding the use of the various services provided by the Korea Pharmaceutical and Bio-Pharma Association (hereinafter referred to as the "Association").

The definitions of terms used in this agreement are as follows:

"Service" refers to the various services related to the Korea Pharmaceutical and Bio-Pharma Association's website that members can use regardless of the type of terminal device (including various wireless devices such as PCs, portable terminals, etc.).
"Member" refers to a customer who accesses the Association's "Service," agrees to this agreement, and enters into a service agreement with the Association to use the services provided by the Association.
"ID (Identifier)" refers to a combination of letters and numbers determined by the member and approved by the Association for the identification and use of the "Service."
"Password" refers to a combination of letters or numbers determined by the member to confirm that they are the same member as the "ID" and for password protection.
"Paid Service" refers to various online digital contents (including various information contents, VOD, items, and other paid contents) and various services provided by the Association for a fee.

The Association shall post the contents of this agreement on the initial screen of the Service to make it easily accessible to members.
The Association may amend this agreement within the scope not violating relevant laws such as the Act on Regulation of Terms and Conditions, the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.
When the Association amends the agreement, it shall give public notice of the amendment details and the application date of the revised agreement, together with the current agreement, from 30 days before the application date of the revised agreement to the day before the application date, in the manner prescribed in Paragraph 1. However, in the case of an amendment to the agreement that is disadvantageous to the member, the Association shall separately and clearly notify the member of the amendment details through electronic means such as e-mail, electronic notes, or a pop-up window when logging in, in addition to public notice, for a certain period.
If the Association gives public notice or notice of the amendment in accordance with the preceding paragraph and the member does not explicitly express refusal within 30 days, it is deemed that the member has agreed to the revised agreement.
If a member does not agree to the application of the revised agreement, the Association cannot apply the contents of the revised agreement. In this case, the member may terminate the service agreement. However, in case there are special circumstances where the existing agreement cannot be applied, the Association may terminate the service agreement.

The Association may establish separate service agreements and policies (hereinafter referred to as "Paid Service Agreement, etc.") for paid services and individual services, and if the contents conflict with this agreement, the "Paid Service Agreement, etc." will take precedence.
Matters not specified in this agreement or interpretations thereof shall be governed by the "Paid Service Agreement, etc.," relevant laws, or customs.

The service agreement is concluded when a person who wishes to become a member (hereinafter referred to as the "applicant") agrees to the contents of this agreement, applies for membership, and the Association approves such application.
The Association generally approves the use of the service upon the applicant's application. However, the Association may not approve the following applications or may terminate the service agreement later.
In case the applicant has lost membership qualification according to this agreement in the past, except for cases where the person who has elapsed one year after losing membership qualification and obtained the Association's re-application approval.

The Association collects and uses personal information within the minimum scope necessary for purposes such as providing user services, and the collected personal information is not used for purposes other than those specified below.

The Association processes personal information within the scope specified for the collection and use purposes, and complies with the retention period prescribed in the Personal Information Protection Act and related laws. The personal information files are as follows:

The following information may be generated and collected during the process of using the service and conducting business:
Misuse records: Access IP information
Access logs: Access date
Personal information: Website (membership registration, bulletin board application, etc.)

The Association processes the personal information of information subjects within the scope specified for the purpose of collection and use. Except as provided below, it does not process or provide personal information beyond the original scope of purpose:
When obtaining separate consent from the information subject
When there is a special provision in the law
In cases where it is necessary to protect the urgent life, body, property interests of the information subject or a third party, who is unable to express his/her intention or obtain prior consent due to the address unknown, etc.
When it is necessary for statistical compilation and academic research purposes, etc., and personal information is provided in a form that cannot identify specific individuals.

The Association outsources personal information processing tasks for service implementation and supplementary business operations to provide customer convenience and management, as follows:

Information subjects may exercise the following personal information protection-related rights at any time:
Request to view, correct, and withdraw membership
Request for correction and deletion of personal information errors

Exercise of rights under Paragraph 1 may be made in writing, by electronic mail, fax, etc., and the Association will promptly respond to such requests.

When an information subject requests correction or deletion of personal information errors, the Association will not use or provide the personal information until the correction or deletion is completed.

Rights under Paragraph 1 may be exercised through a legal representative or a delegate authorized by the information subject. In this case, a power of attorney must be submitted.

The right to view personal information and request suspension of processing may be restricted in accordance with Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.

Requests for correction and deletion of personal information cannot be made if the personal information is expressly designated as a collection target by other laws.

The Association generally destroys personal information whose retention period has expired or whose purpose of processing has been achieved. However, this may not apply if it is required to be retained by other laws.

The procedures and methods for the destruction of personal information are as follows:
Destruction of personal information: Personal information whose retention period has expired is promptly destroyed.
Destruction of personal information files: When the purpose of processing personal information files is achieved, the service is discontinued, or the business is terminated, the personal information files are promptly destroyed.
Destruction methods:
a. Information in electronic form is destroyed using technology that cannot reproduce records.
b. Personal information printed on paper is destroyed by shredding or incineration.

The Association takes the following technical and managerial measures to ensure the security of member's personal information in accordance with Article 29 of the Personal Information Protection Act:
Management of personnel handling personal information
Only the necessary number of personnel are designated to manage and operate personal information, and education is provided.
Encryption of personal information
Members' passwords are encrypted and stored and managed so that only the individual can know them.
Access control to personal information
Access rights to the database system handling personal information are granted, changed, and revoked to control access to personal information.
Preservation of access records
Access records to the personal information processing system are preserved and managed, and security functions are used to prevent tampering, theft, or loss.
Technical measures against hacking, etc.
Regular checks are conducted to prevent leakage and damage of personal information due to hacking, computer viruses, etc., and monitoring and blocking are carried out technologically and physically from external sources.

The Association has designated a personal information protection manager and established responsible departments for personal information protection in each area to protect personal information and handle inquiries and complaints related to personal information:
Personal Information Protection Manager: Team Leader Bongsoo Yoon
Personal Information Protection Officer: Junwoo Lee PL
Responsible Department for Personal Information Protection by Area:

Information subjects can apply for dispute resolution or consultation to the Personal Information Infringement Report Center to receive remedies for personal information infringements.

Personal Information Infringement Report Center: Tel: 118 (privacy.kisa.or.kr)

This privacy policy takes effect from the date of enforcement, and any additional, deleted, or amended content due to laws and policies will be announced on the Association's website (www.kpbma.or.kr).