Personal Data Protection Policy

Ronald McDonald House Korea recognizes the importance of protecting personal data and processes personal data in accordance with applicable laws and regulations. This Personal Data Protection Policy explains how Ronald McDonald House Korea collects, uses, retains, and protects personal data. Any amendments to this Policy will be announced through the Ronald McDonald House Korea website or, where appropriate, through individual notice.

1. Personal Data Collected

Ronald McDonald House Korea collects personal data as necessary for account registration, inquiries, use of services, donations, issuance of donation receipts, volunteer applications, newsletters, and activity updates.

1) Categories of Personal Data Collected

① Individual Donors
Name, date of birth, gender, mobile phone number, user ID, password, email address, and address.
Individuals under the age of 14 may not register for an account.

② Corporate Donors
Company name, contact person's name, contact number, contact person's email address, user ID, password, address, and business registration number.
The business registration number is collected for the purpose of issuing donation receipts.

③ Social Login Users
When a user registers or logs in through Kakao or Naver, Ronald McDonald House Korea receives the user's social account identifier and email address.
Where the relevant social platform does not provide certain information, Ronald McDonald House Korea separately collects the user's name, date of birth, gender, mobile phone number, and email address.
Individuals under the age of 14 may not register for an account through social login.

④ Non-Registered Donors
For individual donors, Ronald McDonald House Korea collects the donor's name, date of birth, gender, and email address. The donor's mobile phone number is processed for identity verification.
For corporate donors, Ronald McDonald House Korea collects the company name, contact person's name, contact number, and contact person's email address. A business registration number may also be collected where available.

⑤ Payment Data
For credit card payments, Ronald McDonald House Korea collects the card issuer, card number, expiration date, cardholder name, and cardholder's date of birth.
For CMS direct debit payments, Ronald McDonald House Korea collects the bank name, account number, account holder's name, account holder's date of birth, and withdrawal authorization signature.
For certain credit card payments, additional data required to process the payment, including the card number, expiration date, and card security code (CVC/CVV), may be collected.

⑥ Other Donation-Related Data
In connection with donations, Ronald McDonald House Korea processes data including donor type, donation type, donation amount, payment method, and whether a donation receipt has been requested.
For certain donations, additional data including first name, last name, email address, country, and address may be collected.

⑦ Donation Receipts
For individual donors, a resident registration number is collected once for the purpose of issuing a donation receipt.
For corporate donors, the business registration number is used for the purpose of issuing a donation receipt.

⑧ Volunteer Applications
For individual applicants, Ronald McDonald House Korea collects the applicant's name, date of birth, gender, contact number, email address, address, and application-related information.
For corporate applicants, Ronald McDonald House Korea collects the company name, contact person's name, contact number, contact person's email address, address, and application-related information.

⑨ Newsletters and Activity Updates
When a user subscribes to the newsletter, Ronald McDonald House Korea collects the user's email address.
During account registration and the donation process, users may also choose whether to consent to receiving newsletters and activity updates.

2) Methods of Collection

Website, social login integration, and identity verification.

2. Purposes for Processing Personal Data

Ronald McDonald House Korea processes personal data for the following purposes:

3. Retention Period of Personal Data

Ronald McDonald House Korea retains personal data only for as long as necessary to fulfill the purposes for which the data were collected and processed.
Unless otherwise required by applicable laws or for another legitimate retention purpose, personal data will be destroyed without delay once the relevant purpose has been fulfilled.

Personal data of users with no donation history will be retained for one week following account deletion for account recovery purposes and will then be destroyed.
Donation history, payment records, and donation receipt data will be retained separately for the period required under applicable laws and regulations and as necessary for the issuance of relevant documentation.
Personal data collected through volunteer applications will be retained for one year and will be destroyed thereafter unless there is a separate basis for continued retention.
Other personal data for which no separate retention requirement applies will be destroyed once the purpose of processing has been fulfilled.

4. Procedures and Methods for Destruction of Personal Data

Ronald McDonald House Korea destroys personal data without delay once the purpose for which the data were collected and processed has been fulfilled, unless continued retention is required.
The procedures and methods for destruction are as follows:

1) Destruction Procedures

Personal data provided by users for account registration, service applications, or use of services will, once the relevant purpose has been fulfilled, be transferred to a separate database or, in the case of paper records, stored separately.

Such data will be retained for the period required under internal policies or applicable laws and regulations and will thereafter be destroyed.
Personal data retained separately will not be processed for any purpose other than the purpose for which they are retained, except where permitted or required by law.

2) Destruction Methods

Personal data stored in electronic format will be permanently deleted using technical methods that prevent the data from being recovered or reproduced.

5. Provision of Personal Data to Third Parties

Ronald McDonald House Korea does not, in principle, provide users' personal data to third parties.

Personal data may, however, be provided in the following circumstances:

• Where the user has given prior consent; or
• Where disclosure is required by applicable laws and regulations or is requested by an investigative authority in accordance with procedures prescribed by law.

6. Outsourcing of Personal Data Processing

Ronald McDonald House Korea does not outsource the processing of users' personal data to external service providers without the user's consent.

If such outsourcing becomes necessary, Ronald McDonald House Korea will notify users of the relevant service provider and the scope of the outsourced processing and, where required, obtain prior consent.

7. Rights of Users and Legal Representatives

Users may at any time access or correct their registered personal data or request deletion of their account.

Users may access or correct their personal data through the "Edit Personal Information" or "Edit Account Information" function. Users wishing to withdraw their consent or delete their account may select "Delete Account" and complete the required identity verification process.

Users may also submit a request in writing or by email to the person or department responsible for personal data protection. Ronald McDonald House Korea will respond to such requests without delay.

Where a user requests correction of inaccurate personal data, Ronald McDonald House Korea will not use or provide the relevant data until the correction has been completed.

Where incorrect personal data have already been provided to a third party, Ronald McDonald House Korea will promptly notify the relevant third party of the correction so that the data may be corrected accordingly.

Personal data deleted at the user's request will be handled in accordance with the retention periods set out in this Personal Data Protection Policy and will not be accessed or processed for any other purpose.

Individuals under the age of 14 may not register for an account, including through social login.

8. Personal Data Protection Inquiries and Complaints

For inquiries or complaints concerning personal data protection, please contact Ronald McDonald House Korea at:
Email: contact@ronaldmcdonaldhousekr.org

Users may submit inquiries or complaints relating to the processing or protection of their personal data through the contact information above. Ronald McDonald House Korea will review and respond to such inquiries without delay.

For additional assistance or consultation concerning personal data infringement, please contact the relevant organizations below: