Privacy Policy

1. Information We Collect

We collect only the personal data reasonably necessary to operate ISS Interact, review Join form submissions, communicate with applicants and participants, manage our activities, and maintain the security of our website.

1.1 Information You Provide Through the Join Form

When you submit the Join ISS Interact form, we collect the following information:

• Name
• School
• Year, such as grade level, school year, or expected graduation year, depending on how you provide the information
• Goal, meaning your purpose, interest, motivation, or objective in joining ISS Interact
• Email address, which is automatically collected through Google Forms

Please do not include sensitive personal data in the Goal field or in any other message to us unless we specifically request it. Sensitive personal data may include government identification numbers, financial information, health information, precise location information, racial or ethnic origin, religious beliefs, political opinions, or other information that may be treated as sensitive under applicable law.

1.2 Information Collected Through Google Forms

ISS Interact uses Google Forms to collect Join form submissions. When you submit the Join form, Google may process your form response, email address, submission information, and related technical information as the provider of Google Forms.

The email address associated with your form submission is automatically collected.

1.3 Information You Provide Through the Contact Us Page

Our Contact Us page is available at:

https://iss-interact.com/contact

If you submit a question, request, or privacy-related inquiry through the Contact Us page, we may collect the following information:

• First name
• Last name
• Email address
• Message content
• Any other information you choose to include in your message

The Contact Us page may be used to submit questions about ISS Interact, this Privacy Policy, or our handling of personal data, including requests to access, correct, or delete personal data.

Information submitted through the Contact Us page may be routed to the President's email account or another email account managed by ISS Interact for the purpose of reviewing and responding to the inquiry or request.

1.4 Information Collected Automatically Through the Website

When you visit our website, certain technical information may be processed automatically through our website infrastructure and hosting provider, including AWS. This information may include:

• IP address
• Browser type and version
• Device type
• Operating system
• Pages visited
• Date and time of access
• Referring page or URL
• Error logs
• Other technical logs necessary to operate, maintain, and secure the website

We currently do not use analytics tools, advertising tools, tracking pixels, or targeted advertising technologies.

2. How We Use Personal Data

We use personal data for the following purposes:

• To receive, review, and manage Join form submissions
• To identify applicants and understand their school, year, and goals
• To evaluate interest in ISS Interact and its activities
• To communicate with applicants about their Join form submissions
• To send responses, notices, or follow-up emails related to Join form submissions
• To organize, manage, and operate ISS Interact activities
• To review and respond to questions, inquiries, and privacy-related requests submitted through the Contact Us page
• To maintain appropriate records of our communications and responses
• To operate, maintain, and secure our website and online services
• To prevent misuse, technical errors, fraud, abuse, or security issues
• To comply with applicable laws, regulations, legal processes, or lawful requests
• To protect the rights, safety, and interests of ISS Interact, applicants, members, participants, and others
• For any other purpose disclosed at the time of collection or with your consent

We do not use personal data for targeted advertising or behavioral advertising.

3. Legal Bases for Processing

Where applicable law requires a legal basis for processing personal data, we process personal data based on one or more of the following legal bases:

• Consent: when you voluntarily submit information through the Join form, Contact Us page, or otherwise provide information to us
• Legitimate interests: when processing is reasonably necessary to operate, secure, improve, and manage ISS Interact and communicate with applicants or participants
• Participation-related necessity: when processing is necessary to review Join form submissions, manage membership or participation, or operate ISS Interact activities
• Legal obligation: when processing is necessary to comply with applicable laws, regulations, legal processes, or lawful requests
• Protection of safety and rights: when processing is necessary to protect the safety, rights, or interests of ISS Interact, applicants, members, participants, or others

4. How We Share Personal Data

We do not sell personal data. We do not share personal data for targeted advertising, behavioral advertising, or cross-context behavioral advertising.

We may share personal data only in the limited circumstances described below.

4.1 ISS Interact Leadership and Authorized Members

Join form submissions and related applicant information may be reviewed by the ISS Interact President, board members, leadership team, or other authorized ISS Interact members who need the information to review applications, communicate with applicants, or manage ISS Interact activities.

4.2 Service Providers

We may use third-party service providers to operate the Services. These providers may process personal data on our behalf or in connection with the services they provide.

Current service providers include:

4.3 Rotary Clubs and Partner Organizations

ISS Interact is supported by Namhansung Rotary Club. However, ISS Interact does not routinely share Join form submissions with Namhansung Rotary Club, Rotary organizations, project organizations, or other external organizations.

We may share limited personal data with such organizations only when reasonably necessary for ISS Interact activities, with your consent, or where permitted or required by applicable law.

4.4 Legal Compliance and Protection

We may disclose personal data if we believe disclosure is reasonably necessary to:

• Comply with applicable laws, regulations, legal processes, or governmental requests
• Protect the rights, safety, or property of ISS Interact, applicants, students, members, participants, or others
• Detect, prevent, or address fraud, abuse, security issues, or technical problems
• Enforce our policies or protect against legal claims

4.5 With Your Consent or Direction

We may share personal data with third parties when you consent to or direct such sharing.

5. Communications

ISS Interact may use the email address collected through the Join form to contact you about your Join form submission, application review, follow-up questions, participation, activity schedules, or other ISS Interact-related communications.

We do not currently send unrelated marketing emails, advertising emails, targeted advertising, or promotional messages for third-party products or services.

6. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Unless otherwise required or permitted by law, we generally retain personal data as follows:

• Join form submissions of applicants who do not join ISS Interact: for up to one year after submission or after the relevant application review period ends
• Join form submissions and related information of members or participants: for the duration of participation and up to one year after participation ends
• Contact Us inquiries and privacy-related requests: for up to one year after the inquiry or request is resolved
• Website technical logs: for up to twelve months, unless a longer period is reasonably necessary for security, troubleshooting, legal compliance, or protection of rights

We may retain certain information for a longer period if necessary to comply with legal obligations, resolve disputes, prevent abuse, protect safety or security, or establish, exercise, or defend legal claims.

When personal data is no longer needed, we will delete, anonymize, or securely dispose of it.

7. Children's Privacy

ISS Interact is primarily intended for high school students. Some applicants, members, or participants may be minors under applicable law.

If you are under the age at which you may legally consent to the processing of your personal data in your country or region, you should submit personal data to ISS Interact only with the consent or involvement of your parent or legal guardian.

In particular:

• If you are under 14 years of age in Korea, you should obtain consent from your parent or legal guardian before submitting personal data.
• If you are under 13 years of age in the United States, you should not submit personal data unless your parent or legal guardian has provided verifiable consent where required.
• If you are in a jurisdiction where a higher age threshold applies, such as certain countries in the European Economic Area, the United Kingdom, or Switzerland, you should comply with the applicable local requirement.

We do not knowingly collect personal data from children below the age requiring parental or guardian consent without such consent. If we learn that we have collected personal data from a child without required parental or guardian consent, we will take reasonable steps to delete the information.

Parents or legal guardians may request access to, correction of, or deletion of their child's personal data by submitting a request through the Contact Us page:

https://iss-interact.com/contact

If ISS Interact becomes aware that personal data has been submitted by a minor who was not legally permitted to submit such personal data or who did not obtain any required parental or guardian consent under applicable law, ISS Interact may reject the submission and will delete the related personal data without undue delay after identification.

8. Cookies and Similar Technologies

We currently do not use analytics tools, advertising tools, advertising cookies, marketing pixels, or targeted advertising technologies.

Our website or hosting infrastructure may use strictly necessary technical tools, logs, or similar technologies to operate, maintain, and secure the website. These may include technical records such as IP address, browser type, device information, access time, and error logs.

Google Forms and other third-party services used through the Services may use their own cookies or similar technologies in accordance with their own terms and privacy policies.

If we introduce analytics tools, advertising tools, tracking pixels, or non-essential cookies in the future, we will update this Privacy Policy or provide a separate Cookie Policy where required.

9. International Data Transfers

ISS Interact may process personal data in countries outside your country of residence.

Because ISS Interact uses Google Forms and AWS, personal data and technical information may be processed, stored, transferred, or accessed in countries where those service providers operate, which may include countries outside Korea.

When personal data is transferred internationally, we take reasonable steps to protect it in accordance with applicable law, including by using reputable service providers, limiting access to authorized personnel, and applying reasonable technical and organizational safeguards.

10. How We Protect Personal Data

We use reasonable administrative, technical, and organizational measures designed to protect personal data from unauthorized access, use, disclosure, alteration, loss, or destruction.

These measures may include:

• Limiting access to Join form responses and Contact Us submissions to authorized ISS Interact personnel
• Using password-protected accounts
• Using reputable service providers such as Google Forms and AWS
• Restricting access to personal data based on role or need
• Reviewing and deleting personal data when it is no longer necessary
• Taking reasonable steps to prevent unauthorized disclosure or misuse
• Using secure transmission and account security measures where appropriate

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect personal data using reasonable safeguards.

11. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal data. These rights may include the right to:

• Request information about how we process your personal data
• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Request deletion of personal data
• Withdraw consent, where processing is based on consent
• Object to or restrict certain processing
• Request a copy of certain personal data, where applicable
• Request information about third-party disclosure, where applicable
• Not be discriminated against for exercising your privacy rights

To exercise your privacy rights, including requests to access, correct, or delete your personal data, please submit your request through our Contact Us page:

https://iss-interact.com/contact

When you submit a privacy-related request, we may ask you to provide information reasonably necessary to verify your identity and confirm that you are authorized to make the request. We will use information provided for verification only for the purpose of reviewing and responding to your request.

If you are a parent or legal guardian submitting a request on behalf of a minor, we may ask for additional information reasonably necessary to verify your authority to act on behalf of the minor.

We will respond to privacy-related requests within a reasonable period and in accordance with applicable law.

12. No Sale, Targeted Advertising, or Automated Decision-Making

ISS Interact does not sell personal data.

ISS Interact does not share personal data for targeted advertising, behavioral advertising, or cross-context behavioral advertising.

ISS Interact does not currently use advertising networks, analytics providers, or marketing pixels.

ISS Interact does not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on users.

13. Third-Party Services and Links

The Services may use or link to third-party services, including Google Forms. This Privacy Policy does not apply to third-party websites, tools, or services that ISS Interact does not operate or control.

Third-party services may process personal data in accordance with their own terms and privacy policies. We encourage you to review the privacy policies of any third-party services you use.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we update this Privacy Policy, we will revise the "Last Updated" date above. If we make material changes, we may provide additional notice, such as by posting a notice on our website or using another appropriate method.

Your continued use of the Services after the updated Privacy Policy becomes effective means that you have read and understood the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of personal data, including requests to access, correct, or delete personal data, please contact ISS Interact through our Contact Us page:

https://iss-interact.com/contact

ISS Interact does not publicly provide a dedicated privacy email address, postal address, or telephone number at this time. Privacy-related requests should be submitted through the Contact Us page above.