سیاست حریم خصوصی | Migration to Asia Peace (MAP)

Migration to Asia Peace (MAP)

Ver. 2 (2026)

1. Privacy Protection Policy

Migration to Asia Peace (MAP) lawfully processes and safely manages personal information in compliance with the Personal Information Protection Act of the Republic of Korea and other relevant statutes to protect the freedom and rights of data subjects. Accordingly, pursuant to Article 30 of the Personal Information Protection Act, MAP hereby establishes and discloses this Privacy Protection Policy to guide data subjects through the procedures and standards regarding the processing of personal information and to ensure that any related grievances are resolved swiftly and smoothly.

2. Purposes of Processing Personal Information

Migration to Asia Peace (MAP) processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those specified below, and if the purpose of use changes, necessary measures—such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act—will be implemented.

Donor Membership Registration and Management
Confirmation of intent to join as a donor member, qualification management, preparation and maintenance of the corporate membership register, supervision by the competent government authority, prevention of fraudulent use of services, verification of the legal guardian’s consent when processing the personal information of children under the age of 14, and delivery of various notices, notifications, or processing of withdrawals.
Donation Management and Receipt Issuance
Confirmation of donation or membership fee payments, issuance and retention of donation receipts, etc.
Events or Campaigns
Execution of specific events or campaigns such as forums, education, and signature drives, and verification of the legal guardian’s consent when processing personal information of children under the age of 14.
Organizational Public Relations
Publicity for the organization and its activities (Refugee News, online newsletters, etc.), solicitation of donations and participation in increasing donation amounts, volunteering, and soliciting participation in various activities such as signature campaigns.
Counseling and Grievance Handling
Listening and responding to inquiries, requests, counseling, reports, and opinions submitted via telephone, email, or in-person visits.
Volunteers and Activists
Information on recruitment, performance of activities (volunteering), and issuance of participation certificates.

3. Items of Personal Information Processed

Migration to Asia Peace (MAP) processes the following items of personal information. For optional items, even if the data subject does not consent, it will not hinder the use of the organization’s services in any way.

Membership Registration and Management

Required Items: [Basic Information of Individual Donors] Name, date of birth, mobile phone number; [For children under 14] Name and contact details of the legal guardian; [For sole proprietors or corporate/group donors] Business or organization name, representative name, coordinator name, contact information; [For registered board members] Resident Registration Number and address.
Optional Items: Email, affiliation, mailing address, referral source, areas of interest

Donation Management and Receipt Issuance

2.1. Regular Automated Transfer (CMS)
Required Items: Financial institution name, account number, account holder name, account holder’s date of birth (or the first part of the Resident Registration Number / Alien Registration Number, business registration number, etc.), donation amount, withdrawal date, withdrawal start month, payment cycle.
2.2. Temporary Donation (Non-member)
Required Items: Name, donation type, donation amount, donation payment information (real-time account transfer, credit card, virtual account, etc.).
Optional Items: Contact information (email or mobile phone number).
2.3. Donation Receipt Issuance
Required Items: Name (or business name), Resident Registration Number (or business registration number), donation amount, donation date, donation code.
Optional Items: Address.

Events/Campaigns

Required Items: Items required for each specific purpose of the event/campaign (name, date of birth, address, etc.); [In the case of labor cost/honorarium payments] Name, Resident Registration Number, address, income amount, account information, date of payment.
Optional Items: Contact information (email or mobile phone number), feedback/opinions regarding the event/campaign.

Organizational Public Relations

Required Items: Name, contact information (email or mobile phone number).
Optional Items: Affiliation, mailing address, referral source, areas of interest.

Counseling and Grievance Handling

Required Items: Basic information related to counseling and grievances (name, contact details, available languages, etc.), legal status, information regarding nationality or ethnicity, thoughts/beliefs, political opinions, religion, health, disability, and other sensitive information essential for counseling.

Volunteers and Activists

Required Items: Name, legal status in Korea, email, mobile phone number, date of birth, affiliation or occupation, address, motivation for applying, area of volunteer application, available days, Korean and foreign language proficiency.
Optional Items: (For foreign nationals) Duration of stay in Korea, available languages, volunteering or related activity experience, referral source.

The following personal information items may be automatically generated and collected in the process of using internet services.

Required Items: IP address, cookies, MAC address, service utilization records, visit logs, bad utilization records, etc.

4. Processing and Retention Period of Personal Information

Migration to Asia Peace (MAP) processes and retains personal information within the personal information retention and use period required under relevant laws, or within the period agreed upon by the data subject at the time of collection.
The specific processing and retention periods for each type of personal information are as follows:

2.1. Membership/Donor Registration and Management: Within 5 working days upon membership withdrawal. However, for donor members, information is preserved for 10 years for the purpose of issuing donation receipts.

2.2. Donation Management and Receipt Issuance: For 5 years from the date of issuance after preparing the issuance specification for each donor in accordance with Article 160-3 of the Income Tax Act (except when electronic donation receipts are issued).

2.3. Events/Campaigns: Within 5 working days upon the end of the event period. For events supported by external grant organizations, the retention period requested by the respective organization shall apply. [In the case of labor cost/honorarium payments] Relevant evidentiary documents shall be kept for 10 years from the end of the payment date.

2.4. Organizational Public Relations: Within 5 working days upon an expression of opt-out/objection.

2.5. Counseling and Grievance Handling: Content related to counseling and grievances is kept semi-permanently for potential future legal disputes or case management purposes.

5. Destruction of Personal Information

Migration to Asia Peace (MAP) will destroy the relevant personal information within 5 working days when it becomes unnecessary, such as upon the expiration of the retention period or achievement of the processing purpose.
If personal information must continue to be preserved under other laws despite the expiration of the retention period consented to by the data subject or the achievement of the processing purpose, the personal information will be transferred to a separate database (DB) or stored in a different location.
The procedures and methods for destroying personal information are as follows:

3.1. Destruction Procedure
MAP selects the personal information for which destruction reasons have occurred and destroys the personal information with the approval of the Data Protection Officer.

3.2. Destruction Method
Personal information recorded and stored in electronic file format is destroyed using methods that prevent the reproduction of the records, and personal information recorded and stored in paper documents is shredded with a shredder or incinerated.

6. Provision of Personal Information to Third Parties

Migration to Asia Peace (MAP) processes data subjects’ personal information only within the scope specified for the purposes of processing personal information, and provides personal information to third parties only when it falls under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the data subject or special provisions of law, and does not provide the data subject’s personal information to third parties otherwise.
However, the minimum necessary personal information is provided to third parties only under the following statutory grounds or with the consent of the data subject:

2.1. When a member/donor requests the issuance of a donation receipt for year-end tax adjustment

Recipient: National Tax Service
Recipient’s Purpose of Use: Issuance of donation receipts and tax reductions
Items Provided: Name, Resident Registration Number, address, donation amount, donation date, donation code
Recipient’s Retention and Use Period: 10 years

2.2. When withholding tax while paying business labor costs/honorariums

Recipient: National Tax Service (Income Tax), Seoul Metropolitan Government (Local Tax)
Recipient’s Purpose of Use: Imposition of income tax (Article 164 of the Income Tax Act), imposition of local tax (the Framework on Local Taxes)
Items Provided: Name, Resident Registration Number, address, income amount, payment date
Recipient’s Retention and Use Period: Permanent (Income Tax), Semi-permanent (Local Tax)

External Institution Support Projects
Grievance Handling Purposes

7. Outsourcing of Personal Information Processing

Migration to Asia Peace (MAP) outsources personal information processing duties as follows for smooth processing:

1.1. Regular Automated Transfer (CMS) Processing

Outsourcee (Processor): Korea Financial Telecommunications & Clearings Institute (KFTC)
Content of Outsourced Work: Approval and settlement of direct debit transfers
Items Outsourced: Financial institution name, account number, account holder name, account holder’s date of birth (or the first part of the Resident Registration Number / Alien Registration Number, business registration number, etc.), donation amount, withdrawal date, withdrawal cycle
Recipient’s Retention and Use Period: Until expiration of the outsourcing contract

1.2. Temporary Donation Processing

Outsourcee (Processor): Hanbit Nuri Foundation, Human Communication Co., Ltd.
Content of Outsourced Work: Payment and settlement of donations
Items Outsourced: Name, donation amount, payment information entered by type (credit card, real-time account transfer, etc.)

1.3. Membership Management System Operation

Outsourcee (Processor): Hanbit Nuri Foundation, Human Communication Co., Ltd.
Content of Outsourced Work: Membership DB and membership fee payment management, text message and email delivery
Items Outsourced: Membership personal information items (refer to Section 3, Items 1 and 2)

1.4. Newsletter Delivery

Outsourcee (Processor): Stibee Co., Ltd.
Content of Outsourced Work: Sending newsletters and various announcements
Items Outsourced: Name, email address
Recipient’s Retention and Use Period: Until expiration of the outsourcing contract

When concluding an outsourcing contract, Migration to Asia Peace (MAP) specifies matters regarding responsibilities such as prohibition of personal information processing for purposes other than performing outsourced duties, technical and administrative protection measures, restrictions on re-outsourcing, management and supervision of the processor, and compensation for damages in documents like the Personal Information Outsourcing Agreement Pledge in accordance with Article 26 of the Personal Information Protection Act, and supervises whether the processor handles personal information safely.
If the content of the outsourced work or the processor changes, MAP will disclose it through this Privacy Protection Policy without delay.

8. Rights and Obligations of Data Subjects and Legal Guardians, and Methods of Exercise

Data subjects may exercise their rights, such as requesting access to, correction of, deletion of, or suspension of processing of their personal information, at any time.
The exercise of rights may be performed in writing, via email, or by FAX in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act. Once a request to exercise rights is received by the coordinator in charge of receiving and processing requests for personal information access (refer to Section 13), measures will be taken within 10 days.
The exercise of rights may also be performed through an agent, such as a legal guardian of the data subject or a person who has been delegated authority. In this case, a power of attorney corresponding to Form No. 11 of the “Notice on Methods of Processing Personal Information (No. 2020-7)” must be submitted.
Requests for access to and suspension of processing of personal information may be restricted under Article 35 (4) and Article 37 (2) of the Personal Information Protection Act.
Deletion of personal information cannot be requested if the personal information is explicitly designated as a subject of collection under other statutes.
Migration to Asia Peace (MAP) verifies whether the person making the request for access, correction, deletion, or suspension of processing according to the rights of the data subject is the individual themselves or a legitimate agent.
Members can directly view/change membership information, terminate subscription, withdraw membership, or withdraw consent by clicking ‘Edit Member Information’ on the Hanbit Nuri Foundation website, or by requesting it in a free format via writing, email, or FAX to the department in charge of receiving and processing requests for personal information access (refer to Section 13).

MAP has formed a partnership with the Hanbit Nuri Foundation for transparent financial management and the provision of tax deduction benefits, utilizing their joint fundraising system and automatic withdrawal services.

[Hanbit Nuri Foundation Privacy Protection Policy]

9. Measures to Ensure the Safety of Personal Information

Migration to Asia Peace (MAP) implements technical, administrative, and physical measures to ensure safety as follows:

Administrative Measures

Establishment and implementation of internal management plans
Minimizing the number of personal information handlers and designating dedicated personnel
Mandatory regular data protection training for all staff

Technical Measures

Management of access rights
Installation of access control systems
Encryption of personal information
Installation and renewal of security software
Mandating Multi-Factor Authentication (MFA) and complex passwords for all access to major databases, case management tools, and cloud storage in accordance with the organization’s internal ‘IT Policy’

Physical Measures

Access control to electronic devices such as computers storing data
Minimizing data storage in physical locations and storing/managing data in a secure online environment

10. Matters Concerning the Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

Migration to Asia Peace (MAP) uses ‘cookies’ that store and frequently retrieve user information to provide individualized, customized services. Cookies are small amounts of information sent to the user’s computer browser by the server (HTTP) used to operate the website and are sometimes stored on the users’ devices (PC, smartphone, etc.).

1.1. Purpose of using cookies: They are used to optimize information provided to users by understanding the types of visits and utilization of each service and website visited by the user, popular search terms, and secure connections.

1.2. Refusal to store cookies: If you refuse to store cookies, you may experience difficulties in using customized services.

1.3. Configuration: You can individually configure web browsers regarding the extent to which cookies and tracking devices are allowed or refused. These setting methods may be continuously updated, so please refer to the information provided by each browser.

Migration to Asia Peace (MAP) automatically collects connection and utilization records of website visitors (user’s IP address, referrer, device, and browser information) to manage and improve the homepage.
Migration to Asia Peace (MAP) uses the analysis services of foreign companies Google (Analytics) and Meta (Pixel) for website visitor statistics and analysis. When a user visits the homepage, user identifiers and behavioral information (visit history, search history, etc.) are automatically generated and collected, immediately provided to Google and Meta overseas, and used for customized advertisements by the respective companies.

11. Processing of Pseudonymized Information

Migration to Asia Peace (MAP) pseudonymizes personal information for the following purposes:

Fact-finding Surveys

Purpose of processing pseudonymized information: Fact-finding surveys for the promotion of human rights
Items of personal information pseudonymized: Minimum personal information necessary for the fact-finding survey
Processing and retention period of pseudonymized information: Within 5 working days after responding to the survey
Matters concerning provision of pseudonymized information to third parties: Survey institutions
Matters concerning outsourcing of pseudonymized information processing: None
Complies with safety measures to ensure the security of pseudonymized information pursuant to Article 28-4 of the Act.

Counseling Recording and Management

Purpose of processing pseudonymized information: Recording and management of counseling sessions received by the organization
Items of personal information pseudonymized: Client’s name, contact information, and counseling content
Processing and retention period of pseudonymized information: Semi-permanent
Matters concerning provision of pseudonymized information to third parties: Not provided. However, if there is a reporting obligation to supporting organizations, it is provided in a statistical format (separate consent is obtained if provided beyond this).
Matters concerning outsourcing of pseudonymized information processing: None
Complies with safety measures to ensure the security of pseudonymized information pursuant to Article 28-4 of the Act.

12. Data Protection Impact Assessment (DPIA) [2026.02.01]

The organization shall conduct a Data Protection Impact Assessment (DPIA) prior to implementing any new project or technology that involves large-scale processing of sensitive data or poses a high risk to the rights and freedoms of data subjects, ensuring that mitigating measures are integrated into the project design.

13. Data Protection Officer (DPO)

Migration to Asia Peace (MAP) takes overall responsibility for duties related to personal information processing, and has designated a Data Protection Officer as follows to handle complaints and remedy damages of data subjects related to personal information processing.

1.1. Data Protection Officer (DPO)

Name: Kim Young-ah
Position: Executive Director
Phone Number: 02-2038-0231
Email: map@mapcast.org
Fax Number: 0504-088-0232

1.2. Coordinator in charge of receiving and processing requests for personal information access

Name: Kim Seo-hyun
Position: Activist, Information Security Focal Point
Phone Number: 02-2038-0231
Email: diversity@mapcast.org
Fax Number: 0504-088-0232

1.3. Coordinator in charge of member information management

Name: Kim Young-ah
Position: Executive Director
Phone Number: 02-2038-0231
Email: map@mapcast.org
Fax Number: 0504-088-0232

Data subjects may inquire about all privacy-related questions, complaint handling, and damage relief arising from using Migration to Asia Peace (MAP)’s services (or projects) to the Data Protection Officer and the responsible department. Migration to Asia Peace (MAP) will respond to and handle data subjects’ inquiries within 10 days.

14. Remedial Measures for Infringement of Rights and Interests

Data subjects may apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency (KISA) Personal Information Infringement Report Center, etc., to obtain relief from personal information infringement. For other reports or counseling on personal information infringement, please contact the following organizations:

Personal Information Dispute Mediation Committee: (Without area code) 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Report Center: (Without area code) 118 (privacy.kisa.or.kr)
Supreme Prosecutors’ Office: (Without area code) 1301 (www.spo.go.kr)
National Police Agency: (Without area code) 182 (ecrm.cyber.go.kr)

Migration to Asia Peace (MAP) guarantees data subjects’ right to personal information self-determination and strives to provide counseling and damage relief caused by privacy infringements. If you need to report or seek counseling, please contact the responsible department below.

▶ Counseling and Reporting Related to Personal Information Protection

Name: Kim Seo-hyun
Position: Activist, Information Security Focal Point
Phone Number: 02-2038-0231
Email: diversity@mapcast.org
Fax Number: 0504-088-0232

15. Changes to the Privacy Protection Policy

This Privacy Protection Policy shall apply from February 1, 2026.
Previous Personal Information Processing Policies:

May 1, 2017 – July 31, 2022: Refer to the UNHCR Policy on the Protection of Personal Data of Persons of Concern [Click]
August 1, 2022 – January 31, 2026: Organization Privacy Protection Policy [Click]

-End-