1. Purpose of processing personal information

The Promotion Association processes personal information for the following purposes: Personal information processed will not be used for any purpose other than the following, and we will seek prior consent if the purpose of use is changed

1. Register and manage homepage membership
   Personal information is processed for the purpose of identifying and verifying membership, maintaining and managing membership, preventing fraud, collecting personal information of children under 14 years of age, checking consent of legal representatives, handling complaints, and preserving records.
2. Handling civil service affairs
   Personal information is processed for the purpose of verifying the identity of the civil petitioner, verifying the civil petitioner, contacting and notifying the facts, and notifying the results of the processing.
3. Deliver goods or services
   Personal information is processed for the purpose of providing services, sending bills, providing contents, providing customized services, authentication, age certification, payment and settlement of charges, collecting bonds, etc.
4. Use in marketing and advertising
   Personal information is processed for the purpose of developing new services (products), providing customized services, providing events and advertising opportunities, providing and advertising services based on demographic characteristics, validating services, identifying access frequency, or statistics on members' use of services.

2. Status of personal information files

1. Membership registration and management of exhibition participating companies
   1) Company information
   <Required>
   Representative e-mail (login ID), business registration number, company name (Hangul, English), address (Hangul), business registration certificate copy, service usage record, access log, cookie, access IP information, payment record
   <Selections>
   Name of representative (Hangul, English), phone number, fax number, homepage, address (English), business type, item, tax invoice email, mailing address (Korean, English), company logo
   2) Participant information
   <Required>
   Name of person in charge (Hangul), department (Hangul), position (Hangul), phone number, mobile phone number, email
   <Optional>
   Name of person in charge (English), department (English), position (English), fax number
2. Register and manage exhibition visitors (bayer) membership
   - Required items: e-mail (login ID), password, name, company name, address (Hangul), mobile phone number, company classification, business classification, purchase decision authority, field of interest, viewing purpose, visit route, transfer status,
   Service usage records, access logs, cookies, access IP information, payment records
   - Optional: Country, department, position, address (English), contact information, fax, homepage

3. Processing and retention period of personal information

1. The Promotion Association shall process and hold personal information within the period of retention and use of personal information under the Act or the period of use of personal information agreed to collect personal information from the information entity.
2. The Promotion Association retains information on the website until membership withdrawal. However, if there is no usage history for more than a year under the Information and Communication Network Act, it is considered a human account and stored separately. In particular, for members who have not been on the homepage for more than a year, we notify the customer three months before the expected date.

4. Matters concerning the provision of personal information to third parties;

1. The Promotion Association may provide personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of information subjects and special provisions of the Act.

5. Consignment of personal information processing

[On-site Exhibition]

1. The Promotion Association entrusts the following personal information processing tasks for smooth personal information processing:
   - Consignee (Consignee): Farming of a corporation
   - Contents of the entrusted work: Management of the website
2. Under Article 25 of the Personal Information Protection Act, the Promotion Association stipulates in documents such as contracts and documents that prohibit the processing of personal information other than the purpose of entrustment, restrictions on re-entrustment, supervision, and compensation.
3. If the details of the entrusted business or the trustee are changed, we will disclose it through this personal information processing policy without delay.

[On-line Exhibition]

1. For smooth handling of personal information, the company entrusts personal information processing as follows:
   - Consignee: Korea Machinery Industry Promotion Association
   - Trustee: CREENGIN Co., Ltd.
   - Contents of entrusted work: Managing digital twin online exhibition platform
   - Consignment period: at the end of the consignment contract

6. The rights and obligations of the information subject and legal representatives and the users of the method of exercise may exercise the following rights as personal information subjects:

1. The information entity may exercise its right to access, correct, delete, and request suspension of processing of personal information to the Promotion Association at any time.
2. The promotion of rights under paragraph (1) may be conducted in writing, e-mail, and FAX pursuant to Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and the promotion association will take action without delay.
3. The exercise of rights under paragraph (1) may be conducted through an agent, such as a legal representative of the information subject or a person delegated. In such cases, a power of attorney in attached Form 11 of the Enforcement Rules of the Personal Information Protection Act shall be submitted.
4. The right of the information subject may be restricted pursuant to Articles 35 (5) and 37 (2) of the Personal Information Protection Act.
5. A request for correction and deletion of personal information cannot be requested if the personal information is specified as a collection target under other statutes
6. The Promotion Association verifies whether the person who made the request, such as a request for access, a request for correction or deletion, and a request for suspension of processing, is himself/herself or a legitimate representative.

7. Destruction of personal information

In principle, if the purpose of processing personal information is achieved, the Promotion Association shall destroy the relevant personal information without delay. The procedures, deadlines, and methods for destruction are as follows:
1. Destruction procedure
   The information entered by the user is transferred to a separate DB after the purpose is achieved (in case of paper, separate documents) and stored for a certain period of time or immediately destroyed in accordance with internal policies and other related laws. At this time, personal information transferred to DB is not used for any other purpose except under the law.
2. destroyed
   If the user's personal information is unnecessary, such as achieving the purpose of processing personal information, abolishing the service, or terminating the project, the user's personal information shall destroy the personal information within five days from the date it is deemed unnecessary.
3. Destruction method
   Information in the form of electronic files uses technical methods that cannot play records.

8. Matters concerning the installation, operation, and refusal of automatic personal information collection devices;

1. To provide individual customized services, the Promotion Association uses 'cookies' that store usage information and bring it up from time to provide personalized services.
2. Cookies are small amounts of information that the server (http) used to run the website sends to the user's computer browser and can also be stored on a hard disk within the user's PC computer. A. Purpose of using cookies: It is used to provide optimized information to users by identifying the types of visits and use, popular search terms, security access, etc. for each service and website visited by users. B. Installation Operation and Rejection of Cookies: Tools at the top of the • Web browser>Internet Options>Setting Options on the Privacy menu lets you refuse to save cookies. C. Refusing to store cookies can cause difficulties in using customized services.

9. Creating a person in charge of privacy

1. The Promotion Association is responsible for personal information processing and designates a person in charge of personal information protection as follows to handle complaints from information subjects and to remedy damages related to personal information processing.
   [On-site Exhibition]
   ▶ Person in charge of personal information protection
   Name: Kim Young-chul
   Position: Head of Management Planning Office
   Contact: 02-369-7825
   ※ Connects to the department in charge of personal information protection.
   ▶ Department in charge of personal information protection
   Department name: Data center
   Person in charge: Deputy Kim Se-won
   Contact: 02-369-7848
   
   [On-line Exhibition]
   ▶ Privacy Manager
   Name of department: Exhibition and Convention Center
   Manager: Team Leader Kim Dong-wan
   Contact: [tel: 02-369-7806], [succ111@koami.or.kr], [fax: 02-369-7899]
   ▶ Personal Information Protection Officer
   Name of department: Exhibition and Convention Center
   Person in charge: Manager Jang Sang-soo
   Contact: [tel: 02-369-7828], [ssj@koami.or.kr], [fax: 02-369-7899]
2. The information authority may contact the personal information protection manager and the department in charge of all personal information protection inquiries, complaints, and damage relief caused by using the services of the Promotion Association. The Promotion Association will respond and process inquiries from information subjects without delay.

10. Changing the Privacy Policy

The personal information processing policy shall be applied from the effective date, and if there is an addition, deletion, or correction of changes according to laws and regulations, it will be notified seven days before the change is implemented.

11. Measures to ensure the safety of personal information

Pursuant to Article 29 of the Personal Information Protection Act, the Promotion Association takes technical, management and physical measures necessary to ensure safety as follows:
1. Conduct regular self-audit
   In order to secure stability related to personal information handling, we conduct our own audit regularly (once a quarter).
2. Minimize and train personal information handling personnel
   We are implementing measures to manage personal information by designating employees who handle personal information and limiting them to those in charge.
3. Establishment and implementation of an internal management plan
   Internal management plans are established and implemented for safe handling of personal information.
4. Technical measures against hacking, etc.
   The association installs security programs, updates and inspections periodically, and installs systems in areas with restricted access from outside, technically and physically monitoring and blocking personal information leakage and damage caused by hacking or computer viruses.
5. Encryption of Personal Information
   The user's personal information is stored and managed by encrypting the password, so only he or she can know it, and important data uses separate security functions such as encrypting files and transmission data or using file lock function.
6. Storage of connection records and prevention of forgery
   We keep and manage records of access to the personal information processing system for at least six months, and use security features to prevent forgery, theft, and loss of access records
7. Restrict access to personal information
   We are taking necessary measures to control access to personal information through granting, changing, and eliminating access to the database system that processes personal information, and we control unauthorized access from outside by using the intrusion prevention system.
8. Using locks for document security
   Documents containing personal information, auxiliary storage media, etc. are stored in a safe place with locks.
9. Access control for unauthorized personnel
   We have a separate physical storage area for personal information and establish and operate access control procedures.

12. How to relieve infringement of rights and interests

The information subject may contact the following institutions for damage relief and counseling regarding personal information infringement
<The following institutions are separate from our promotion, so please contact us if you are not satisfied with the results of our own personal information complaint and damage relief or if you need further assistance. >

1. ▶ Personal Information Infringement Report Center (Operated by the Korea Internet Promotion Agency)
   - Business under his/her jurisdiction: Reporting personal information infringement facts and applying for counseling
   - Homepage: privacy.kisa.or.kr
   - TELEPHONE: 118 (without station code)
   - Address: 9 Jinheung-gil, Naju, Jeollanam-do, Korea Internet Promotion Agency
2. ▶ Personal Information Dispute Mediation Committee
   - Business under his/her jurisdiction: application for personal information dispute
   settlement, group dispute settlement (civil resolution)
   - Homepage: www.kopico.go.kr
   - Phone: 1833-6972
   - Address: Sejong-daero 209, Jongno-gu, Seoul Government Complex 4F
3. ▶ Supreme Prosecutors' Office Cyber Crime Investigation Team:
   - (Without National Code) 1301, cid@spo.go.kr (www.spo.go.kr)
   
4. ▶ National Police Agency Cyber Security Agency
   - (Without National Code) 182 (cyberbureau.police.go.kr)
In addition, a person who is infringed on his/her rights or interests by the head of a public institution on the request of the information subject to perusal, correction, deletion, or suspension of processing of personal information may file an administrative appeal as prescribed by the Administrative Appeals Act.
☞ Refer to the Central Administrative Appeals Commission (www.simpan.go.kr) for phone number guidance