KINTEX Privacy Policy
KINTEX (hereinafter referred to as the “Company”) establishes and discloses the following Privacy Policy in accordance with Article 30 of the Personal Information Protection Act in order to protect the personal information of data subjects and to promptly and smoothly handle related complaints.
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those stated below. If the purpose of use changes, the Company will take necessary measures, including obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.
1. Website Membership Registration and Management
Personal information is processed for purposes including confirming membership registration intent, providing member services, identification and authentication of members, maintaining and managing membership status, identity verification under the limited verification system, prevention of unauthorized service use, confirmation of parental consent for children under the age of 14, notices and announcements, and complaint handling.
2. Provision of Goods or Services
Personal information is processed for purposes including the provision of exhibition and convention services (such as booth participation and exhibition admission), content provision, customized services, identity verification, age verification, payment processing, and settlement.
3. Complaint Handling
Personal information is processed for purposes including verifying the identity of complainants, confirming complaint details, communication and notification for fact-finding investigations, and notifying processing results.
4. Marketing and Advertising
Personal information is processed for purposes including providing new services and customized services, offering event and promotional information, providing participation opportunities, delivering services and advertisements based on demographic characteristics, and other marketing activities. The Company may also contact data subjects using such personal information for promotional or sales-related purposes regarding goods or services.
5. Personal Information Collection Items and Status
- Personal Information Collected: Login ID, name, telephone number, email address, password, age, gender, birth year, region, company name (organization name), survey results, and address
- Collection Methods: Website, KINTEX App, pre-registration through organizer exhibition websites, written forms, online and offline event activities
- Legal Basis for Retention: Consent to the Privacy Policy upon membership registration (personal information for marketing purposes: retained for 5 years)
Article 2 (Processing and Retention Period of Personal Information)
1. The Company processes and retains personal information within the period prescribed by applicable laws or within the period agreed upon by the data subject at the time of collection.
2. The retention periods for each category of personal information are as follows:
1) Website Membership Registration and Management: Until membership withdrawal from the website
However, if any of the following circumstances apply, personal information shall be retained until the relevant matter is concluded:
- Where investigations or inquiries relating to violations of applicable laws are ongoing, until such investigations or inquiries are completed
2) Provision of Goods or Services: Until the supply of goods or services and payment settlement have been completed
However, if any of the following circumstances apply, personal information shall be retained until the applicable retention period expires:
- Records relating to labeling, advertising, contract details, and performance of contracts under the Act on Consumer Protection in Electronic Commerce, etc.
3) Records Related to Transactions
• Records on labeling and advertising: 6 months
• Records on contracts, withdrawal of subscriptions, payment processing, and supply of goods: 5 years
• Records on consumer complaints and dispute resolution: 3 years
Article 3 (Provision of Personal Information to Third Parties)
1. The Company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information). Personal information may be provided to third parties only with the consent of the data subject or in cases permitted under Article 17 of the Personal Information Protection Act and other applicable laws.
2. The Company may provide personal information to third parties as follows:
- Recipient of Personal Information: Organizers of exhibitions and convention events using the free or paid services of the KINTEX App
• Purpose of Use by Recipient: Provision of free exhibition/convention services, paid payment services, joint event hosting, marketing, advertising, and related activities
• Personal Information Provided: User ID, name, mobile phone number, region, gender, birth year, company/organization name, referrer (ID or name), and survey information related to each exhibition/convention event
- Recipient of Personal Information: Association of Korean Exhibition Industry (AKEI)
• Purpose of Use by Recipient: Provision of information for exhibition certification by the Association of Korean Exhibition Industry
• Personal Information Provided: User ID, name, mobile phone number, region, gender, birth year, company/organization name, referrer (ID or name), and survey information related to each exhibition/convention event
Article 4 (Entrustment of Personal Information Processing)
1. The Company entrusts the following personal information processing tasks to facilitate efficient management of personal information.
- (Entrusting Party): KINTEX / (Entrusted Party): SVM Planet
- Scope of Entrusted Work: Management and operation of the Korea International Boat Show website
- Entrustment Period: Until the termination of the entrustment agreement
2. When entering into an entrustment agreement, the Company specifies matters concerning responsibilities such as prohibition of personal information processing beyond the purpose of the entrusted work, technical and administrative safeguards, restrictions on re-entrustment, supervision and management of the entrusted party, and liability for damages in accordance with Article 26 of the Personal Information Protection Act. The Company also supervises whether the entrusted party processes personal information safely.
3. If the details of the entrusted work or the entrusted party change, the Company will disclose such changes without delay through this Privacy Policy.
Article 5 (Rights and Obligations of Data Subjects and Methods of Exercise)
1. Data subjects may exercise the following rights related to personal information protection at any time:
- Request access to personal information
- Request correction of errors or inaccuracies
- Request deletion of personal information
- Request suspension of processing
2. The rights under Paragraph 1 may be exercised by submitting requests in writing, by telephone, email, or other means, and the Company shall take appropriate action without delay.
3. If a data subject requests correction or deletion of personal information, the Company shall not use or provide the relevant personal information until such correction or deletion has been completed.
4. The rights under Paragraph 1 may also be exercised through a legal representative or an authorized agent. In such cases, a power of attorney in the form prescribed by Appendix Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
5. Data subjects shall not infringe upon their own or others’ personal information and privacy by violating the Personal Information Protection Act or other applicable laws while using the services provided by the Company.
Article 6 (Categories of Personal Information Processed)
The Company processes the following categories of personal information:
1. Website/App Membership Registration and Management
- Required Information: User ID, name, mobile phone number, country/region, gender, birth year
- Optional Information: Company/organization affiliation, referrer (ID or name), survey responses
2. Provision of Services
- Required Information: User ID, name, mobile phone number, country/region, gender, birth year
- Optional Information: Company/organization affiliation, referrer (ID or name), survey responses, previous purchase history
3. During the use of Internet services, the following information may be automatically generated and collected:
- IP address, cookies, MAC address, service usage records, visit history, records of improper use, and similar information
Article 7 (Destruction of Personal Information)
1. The Company shall promptly destroy personal information when it becomes unnecessary, such as upon expiration of the retention period or achievement of the processing purpose.
2. If personal information must be retained in accordance with other applicable laws even after the retention period agreed upon by the data subject has expired or the processing purpose has been achieved, such personal information shall be transferred to a separate database (DB) or stored in a different location.
3. The procedures and methods for destroying personal information are as follows:
- Destruction Procedure: The Company shall immediately destroy personal information upon the occurrence of a valid reason for destruction.
- Destruction Method: Personal information stored in electronic file format shall be destroyed using methods such as deletion of database records to prevent recovery. Personal information recorded or stored in paper documents shall be destroyed by shredding or incineration.
Article 8 (Measures to Ensure the Security of Personal Information)
The Company takes the following measures to ensure the security of personal information:
1. Administrative Measures: Establishment and implementation of internal management plans, regular employee training, etc.
2. Technical Measures: Access control and management of access rights to personal information processing systems, encryption of unique identification information, installation of security software, etc.
3. Physical Measures: Access control to computer rooms, document storage rooms, and other restricted areas.
Article 9 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)
1. The Company may use “cookies” that store and retrieve user information from time to time in order to provide personalized services.
2. Cookies are small amounts of information sent by the server (HTTP) operating the website to the user’s web browser and may be stored on the hard disk of the user’s computer.
- Purpose of Cookie Use: Cookies are used to analyze visit patterns, service usage, popular search terms, security access status, and other information related to services and websites visited by users in order to provide optimized information and services.
- Installation, Operation, and Refusal of Cookies: Users may refuse the storage of cookies by adjusting the settings under Tools > Internet Options > Privacy in their web browser.
- If users refuse the storage of cookies, they may experience difficulties in using customized services.
Article 10 (Chief Privacy Officer)
1. The Company designates the following personnel as responsible for overseeing personal information processing and handling complaints, inquiries, and remedies related to personal information protection.
▶ Chief Privacy Officer: Executive Vice President, Business Division
▶ Personal Information Protection Manager
Department: Exhibition Business Team 3
Manager: Ki-Hoon Koo, Team Leader
Contact: 031-995-8771 / ghkoo@kintex.com
▶ Personal Information Protection Officer
Department: Exhibition Business Team 3
Officer: Byung-Hoon Oh, Deputy General Manager
Contact: 031-995-8777 / sky@kintex.com
2. Data subjects may contact the department responsible for personal information protection regarding all inquiries, complaints, and requests for remedies related to personal information protection arising from the use of the Company's services (or business activities). The Company will respond and process such inquiries without delay.
Article 11 (Request for Access to Personal Information)
Data subjects may request access to their personal information pursuant to Article 35 of the Personal Information Protection Act through the department listed below. The Company will make every effort to ensure that such requests are processed promptly.
▶ Department Responsible for Receiving and Processing Requests for Access to Personal Information: Exhibition Business Team 3
Article 12 (Remedies for Infringement of Rights and Interests)
Data subjects may contact the following organizations for consultation, dispute resolution, or remedies related to personal information infringement.
<The organizations listed below are independent of the Company. If you are not satisfied with the Company's handling of personal information complaints or remedies, or if you require further assistance, please contact the relevant organization directly.>
▶ Personal Information Infringement Report Center (operated by the Korea Internet & Security Agency, KISA)
- Responsibilities: Reporting personal information infringements and requesting consultation
- Website: privacy.kisa.or.kr
- Phone: 118 (without area code)
- Address: Personal Information Infringement Report Center, 3rd Floor, 9 Jinheung-gil, Naju-si, Jeollanam-do 58324, Republic of Korea
▶ Personal Information Dispute Mediation Committee
- Responsibilities: Personal information dispute mediation and collective dispute mediation (civil resolution)
- Website: www.kopico.go.kr
- Phone: 1833-6972 (without area code)
- Address: 4th Floor, Government Complex-Seoul, 209 Sejong-daero, Jongno-gu, Seoul 03171, Republic of Korea
▶ Cyber Crime Investigation Division, Supreme Prosecutors' Office: 02-3480-3573 (www.spo.go.kr)
▶ Cyber Bureau, National Police Agency: 182 (http://cyberbureau.police.go.kr)
Article 13 (Installation and Operation of Video Information Processing Devices)
1. KINTEX installs and operates video information processing devices as follows:
- Purpose of Installation and Operation: Facility security and fire prevention at KINTEX
- Number of Devices, Installation Locations, and Recording Scope: Installed in major facilities such as exhibition hall lobbies and exhibition halls, recording all areas of major facilities
- Responsible Manager, Department, and Authorized Personnel with Access to Video Information: Facility Operations Team
- Recording Hours, Retention Period, Storage Location, and Processing Method of Video Information
• Recording Hours: 24-hour continuous recording
• Storage Location and Processing Method: Stored and managed in the video information control room
- Method and Location for Accessing Video Information: Facility Operations Team
- Procedures for Requests to Access Video Information: Requests must be submitted using a Personal Video Information Access/Existence Confirmation Request Form. Access is granted only when the data subject appears in the footage or when access is clearly necessary to protect the life, body, or property interests of the data subject.
- Technical, Administrative, and Physical Measures for Protecting Video Information: Establishment of internal management plans, access control and restrictions, secure storage and transmission technologies, maintenance of processing records and prevention of forgery or alteration, provision of secure storage facilities and locking devices, etc.
Article 14 (Consent to Photography and Video Recording)
1. Photography and video recording may take place at the exhibition venue.
2. Purpose of Recording
1) Promotion of this event and future exhibitions and conferences
2) Inclusion in exhibition-related press releases and official documents
3. Recorded materials will not be used for any purpose other than those specified above.