Skip to main menu Go to main text

Privacy Policy

The Goyang International Expo Foundation (hereinafter referred to as the "Foundation") establishes and discloses the following Personal Information Processing Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to promptly and smoothly handle grievances related thereto.

Article 1 (Purpose of processing personal information)

  1. ① The Foundation processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those listed below, and if the purpose of use changes, the Foundation plans to take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
    1. 1. Homepage member registration and management Confirmation of intention to sign up for membership, identification/authentication by providing membership service, maintenance/management of membership, identification by implementation of limited identification system, prevention of illegal use of service, consent of legal representative when handling personal information of children under 14 years of age Personal information is processed for the purpose of confirmation, various notices/notifications, and grievance handling.
    2. 2. Handling civil complaints We process personal information for purposes such as verifying the identity of the complainant, confirming the details of the complaint, contacting and notifying for fact-finding investigations, and notifying the results of processing.
    3. 3. Purpose of collection and use of personal information We process personal information for purposes such as fulfilling contracts regarding service provision, product purchase and payment, identity verification for financial transactions and financial services, member management (identity verification, personal identification, confirmation of intent to join, age verification, handling of complaints and grievances related to the use of membership services), event information marketing and advertising, and tracking access frequency or statistics on members' service usage.
  2. ② Pursuant to Article 32 of the Personal Information Protection Act, the processing purposes of personal information files registered and disclosed are as follows:
    Name of personal information file Basis for Operation/Purpose of Processing Items of personal information recorded in personal information files Holding period
    Homepage member Member information is managed to link the Foundation's website and the membership management system, which are managed in the form of data subject consent/membership, and to ensure smooth service. (Required) Desired ID, Name, Contact Number, Address, Email, etc.
    (Optional) Email reception preference, occupation, reason for joining, sign-up channel, website, etc.    		 Until membership withdrawal
    Shopping mall payment service
    (Including non-members)    		 Data Subject Consent / Delivery and Payment Confirmation Information for Foundation Shopping Product Purchases (Orderer Information)
    Name, contact information, address, email, etc.
    (Recipient Information)
    Name, contact information, address, etc.    		 Until the retention period of relevant laws after withdrawal of consent

Article 2 (Processing and retention period of personal information)

  1. ① The Foundation processes and retains personal information within the retention and usage period stipulated by relevant laws and regulations or within the retention and usage period agreed upon by the data subject at the time of collection.
  2. ② The processing and retention period for personal information is as follows.
    1. 1. Website Membership Registration and Management: Until website withdrawal
    2. 2. Information pursuant to Article 6 of the Enforcement Decree of the Act on the Consumer Protection in Electronic Commerce, etc.
      • Records regarding labeling and advertising: 6 months
      • Records regarding contracts or withdrawal of subscription, etc.: 5 years
      • Records regarding payment settlement and supply of goods, etc.: 5 years
      • Records regarding consumer complaints or dispute resolution: 3 years

Article 4 (Entrustment of Personal Information Processing)

  1. ① The Foundation entrusts personal information processing tasks as follows to ensure smooth processing of personal information. [Website and System Management]
    • Entrusted Party (Trustee): E-Part Co., Ltd. (02-545-3800)
    • Content of entrusted work: Website and system management
  2. ② In accordance with Article 25 of the Personal Information Protection Act, when concluding a consignment contract, the Foundation specifies in documents such as contracts matters concerning the prohibition of processing personal information for purposes other than the performance of consigned tasks, technical and administrative protective measures, restrictions on re-consignment, management and supervision of the trustee, and liability such as compensation for damages, and supervises whether the trustee processes personal information safely.
  3. ③ If the contents of the consignment work or the trustee is changed, we will disclose it through this personal information processing policy without delay.

Article 5 (Rights, Obligations, and Method of Exercise of Data Subjects and Legal Representatives)

  1. ① Data subjects may exercise their rights to request access, correction, deletion, or suspension of processing of their personal information at any time.
  2. ② You may exercise your rights pursuant to Paragraph 1 against the Foundation in writing, via email, fax, etc., in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Foundation will take action without delay.
  3. ③ The exercise of rights under Paragraph 1 may be carried out through a representative, such as a legal representative of the data subject or an authorized agent. In this case, you must submit a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act.
  4. ④ The right of a data subject to request access to and suspension of processing of personal information may be restricted pursuant to Article 35, Paragraph 5 and Article 37, Paragraph 2 of the Personal Information Protection Act.
  5. ⑤ Request for correction and deletion of personal information cannot be requested if the personal information is specified as a collection target in other laws.
  6. ⑥ The Foundation verifies whether the person making the request for access, correction/deletion, or suspension of processing in accordance with the rights of the data subject is the principal or a legitimate representative.

Article 6 (Items of personal information processed)

  • The Foundation processes the following personal information items.
    turn Name of personal information file Items of personal information recorded in individual information files
    1 Homepage Member Management Desired ID, name, contact information, address, email, etc.
    2 Shopping mall payment service
    (Including non-members)    		 (Orderer Information) Name, contact number, address, email, etc.
    (Recipient Information) Name, contact number, address, etc.
    The following personal information items may be automatically generated and collected during the use of internet services.
    IP address, cookies, MAC address, service usage records, visit records, records of improper use, etc.

Article 7 (Destruction of personal information)

  1. ① The Foundation destroys personal information without delay when it becomes unnecessary, such as due to the expiration of the personal information retention period or the achievement of the processing purpose.
  2. ② In cases where personal information must continue to be preserved pursuant to other laws even after the retention period consented to by the data subject has expired or the purpose of processing has been achieved, the relevant personal information (or personal information file) is transferred to a separate database (DB) or stored in a different location.
  3. ③ The procedure and method of personal information destruction are as follows.
    1. 1. Destruction procedure Jedin We establish a personal information destruction plan for personal information (or personal information files) that must be destroyed and carry it out. We select the personal information (or personal information files) for which a reason for destruction has arisen within the Foundation, and destroy the personal information (or personal information files) after obtaining approval from the Chief Privacy Officer.
    2. 2. Destruction method The Foundation destroys personal information recorded and stored in the form of electronic files using methods such as Low Level Format so that the records cannot be reproduced, and destroys personal information recorded and stored in paper documents by shredding or incinerating.

Article 8 (Measures for Ensuring Safety of Personal Information)

  1. ① The Foundation is taking the following measures to ensure the safety of personal information.
    1. 1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
    2. 2. Technical measures: Management of access rights such as personal information processing system, installation of access control system, encryption of unique identification information, etc., installation of security program
    3. 3. Physical measures: Access control for computer rooms, data storage rooms, etc.

Article 9 (Matters Regarding the Installation, Operation and Rejection of Automatic Personal Information Collection Devices)

  1. ① The Foundation uses 'cookies' that store and frequently retrieve usage information to provide individually customized services to users.
  2. ② Cookies are a small amount of information sent by the server (http) used to operate the website to the user's computer browser, and are sometimes stored on the hard disk of the user's PC.
    • go. Purpose of use of cookies: It is used to provide optimized information to users by identifying the types of visits and use of each service and website visited by the user, popular search words, security access, etc.
    • me. Installation/Operation and Rejection of Cookies: You can refuse to save cookies by setting options in the Tools>Internet Options>Personal Information menu at the top of the web browser.
    • all. If you refuse to save cookies, you may experience difficulties in using customized services.

Article 10 (person in charge of personal information protection)

  1. ① The Foundation assumes overall responsibility for matters concerning the processing of personal information and designates a Personal Information Protection Officer as follows to handle complaints and provide relief for damages to data subjects regarding the processing of personal information.
    • Data Protection Officer
      • Name: Kim In-cheol
      • Position: Business Team 2 Manager
      • Rank: Grade 5
    • Personal Information Protection Department
      • Department Name: Business Team 2
      • Person in Charge: Jeong Yong-seon
  2. ② Data subjects may contact the Chief Privacy Officer and the relevant department regarding all inquiries, complaints, and damage relief matters related to personal information protection arising from the use of the Foundation's services (or projects). The Foundation will respond to and process data subjects' inquiries without delay.

Article 11 (Request for viewing personal information)

  • Data subjects may request access to their personal information pursuant to Article 35 of the Personal Information Protection Act from the department listed below. The Foundation will endeavor to process data subjects' requests for access to personal information promptly.
  • Personal Information Protection Department
    • Department Name: Business Team 2
    • Person in Charge: Jeong Yong-seon

Article 12 (Method of Remedy for Infringement of Rights)

  • The information subject can inquire about damage relief and consultation for personal information infringement to the following organizations.
    The organizations listed below are separate from the Foundation. If you are not satisfied with the Foundation's internal handling of personal information complaints or damage relief, or if you require more detailed assistance, please contact them.
  • Personal Information Infringement Reporting Center (operated by the Korea Internet & Security Agency)
    • Scope of duties: Reporting personal information infringement, requesting consultation
    • Homepage: privacy.kisa.or.kr
    • Phone: 118 (without area code)
    • Address: Personal Information Infringement Reporting Center, 3F, 9 Jinheung-gil, Naju-si, Jeollanam-do (301-2 Bitgaram-dong), 58324
  • Personal Information Dispute Mediation Committee
    • Scope of Duties: Application for Personal Information Dispute Mediation, Collective Dispute Mediation (Civil Settlement)
    • Homepage: www.kopico.go.kr
    • Phone: 1833-6972 (without area code)
    • Address: 4F, ​​Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul (03171)
  • Supreme Prosecutors' Office Cybercrime Investigation Division: 02-3480-3573 (www.spo.go.kr)
  • National Police Agency Cyber ​​Bureau: 182 (http://cyberbureau.police.go.kr)

Article 13 (Installation and Operation of Image Information Processing Devices)

  1. ① The Foundation installs and operates image information processing devices as follows.
    1. 1. Basis and Purpose of Installation of Video Information Processing Devices: Facility safety and fire prevention at the Flower Exhibition Hall, and prevention of safety-related crimes
    2. 2. Number of units installed, installation location, shooting range - 24 cameras installed covering major facilities in the Flower Exhibition Hall area
    3. 3. Manager, responsible department, and persons authorized to access video information
      role Name Job Title 소속 Phone Number
      manager Kim In-cheol Team Leader Business Team 2 031-908-7642
      authorized users 정용선 차장 Business Team 2 031-908-7824
    4. 4. Recording time, retention period, storage location, and processing method of video information
      • Shooting time: 24 hours
      • Retention period: 30 days from the time of shooting
      • Storage Location and Processing Method: Stored and processed in the video information processing equipment control room of the Flower Exhibition Hall.
    5. 5. Method and Location for Checking Video Information
      • Verification Method: Visit the institution to verify after contacting the Video Information Manager in advance.
      • Verification Location: Inside the relevant department office and control room
    6. 6. Measures regarding requests by data subjects for access to video information, etc.: You may request access to, confirmation of existence of, or deletion of personal video information from the operator of the video information processing device at any time. However, access is permitted only if the data subject themselves was filmed or if it is clearly necessary for the protection of the data subject's life, body, or property interests.
    7. 7. Technical, administrative, and physical measures for the protection of video information: access control and restriction of access rights, application of secure storage and transmission technologies for video information, retention of processing records and measures to prevent falsification and alteration, provision of storage facilities and installation of locking devices, etc.

Article 14 (Change of Privacy Policy)

  • This Privacy Policy is effective as of December 10, 2020.