Article 1 (Purpose of processing personal information)

Article 2 (Processing and retention period of personal information)

Personal information held by the Promotion Agency is processed within the scope of the purpose of collection and use, and is implemented in accordance with the retention period stipulated in the Personal Information Protection Act and related laws.

Article 3 (Items of personal information processed)

• The Promotion Agency collects and processes the minimum amount of information necessary for the purpose of collecting and retaining personal information.
• When using the Promotion Agency website service, personal information items such as IP address, cookies, MAC address, service usage history, visit history, and improper usage history may be automatically generated and collected.

Article 4 (Provision of personal information to third parties)

In principle, the Promotion Agency processes the personal information of the data subject within the scope of the purpose of collection and use, and does not process or provide it to a third party beyond the original purpose without the prior consent of the data subject, except in the following cases.

• In case separate consent is obtained from the data subject
• In cases where there are special provisions in other laws
• In cases where the data subject or his/her legal representative is unable to express his/her intention or where prior consent cannot be obtained due to unknown address, etc., and it is deemed necessary to protect the urgent life, body, or property interests of the data subject or a third party
• In cases where personal information is provided in a form that does not allow the identification of specific individuals, such as for purposes such as compiling statistics or conducting academic research.
• In cases where personal information cannot be used for purposes other than the intended purpose or provided to a third party, and where the relevant duties stipulated in other laws cannot be performed, and where the deliberation and opinion of the Protection Committee have been obtained.
• When necessary to provide information to foreign governments or international organizations for the implementation of treaties or other international agreements.
• When necessary for the investigation of a crime and the filing and maintenance of a public prosecution
• When necessary for the court to perform its judicial duties
• In cases where it is necessary for the execution of punishment, custody, and protective measures

Article 5 (Entrustment of personal information processing)

• When entrusting personal information processing work, the Promotion Agency processes it by specifying the following matters in a contract (agreement) document, and provides education and management supervision to ensure that the recipient safely processes personal information.

  1. 1.Matters concerning prohibition of processing personal information for purposes other than performance of entrusted work
  2. 2.Matters concerning technical and administrative protection measures for personal information
  3. 3.Purpose and scope of entrusted work
  4. 4.Matters concerning restrictions on re-delegation
  5. 5.Matters concerning security measures such as restricting access to personal information
  6. 6.Matters related to supervision, such as checking the status of management of personal information held in relation to entrusted work
  7. 7.Matters concerning liability, such as compensation for damages, in case of breach of obligations that the trustee must comply with
• The Promotion Agency has entrusted personal information processing work to ensure smooth processing of personal information, and the status is as follows.
• If the content of the entrusted work or the trustee changes, we will disclose it without delay through this personal information processing policy.

Article 6 (Measures to ensure personal information security)

The Promotion Agency is taking the following measures to ensure the safety of personal information.

• Establishment and implementation of an internal management plan for safe handling of personal information
• Establish and implement an access rights management plan for the personal information processing system.
• Establish and implement measures to prevent illegal access and intrusion incidents through information and communication networks.
• Encryption of unique identification information, passwords, and biometric information when transmitted or stored via information and communications networks
• Records of personal information handlers accessing the personal information processing system are kept for at least 6 months and are regularly inspected.
• Installation and update of security programs for personal information
• To prevent personal information breaches such as personal information leaks, restrict terminal access and install security programs.
• Access control to physical locations where personal information is stored, such as data centers, archives, and computer rooms
• Establishment of response procedures such as crisis response manuals to protect personal information processing systems in preparation for disasters and calamities, and regular inspections
• In the event that a reason for destruction arises, such as the expiration of the personal information retention period, the information is completely destroyed so that it cannot be restored.

Article 7 (Installation, operation and refusal of automatic personal information collection devices)

• The Promotion Agency uses 'cookies' to store and periodically retrieve website usage information in order to provide personalized services to website users.
• Cookies are small files of information that are stored on a user's computer by the website's server when the user visits the website.
  1. 1.Purpose of cookie use: To provide optimized information to users by identifying the visit and usage patterns, popular search terms, and whether or not the access is secure for each service or website visited by the user.
  2. 2.Cookie installation/operation and rejection: You can reject cookie storage by setting options in the Tools>Internet Options>Privacy menu at the top of the web browser.
  3. 3.If you refuse to store cookies, you may experience difficulties using customized services.
  4. 4.Cookies expire when you close your browser or log out.

Article 8 (Destruction of personal information)

• When personal information becomes unnecessary, such as when the retention period for personal information expires or the processing purpose is achieved, the Promotion Agency destroys the personal information without delay.
• In cases where the retention period of personal information for which consent has been given by the data subject has expired or the purpose of processing has been achieved, but the personal information must be retained in accordance with other laws and regulations, the personal information (or personal information file) is transferred to a separate database (DB) or stored in a different location.
• The procedures and methods for destroying personal information are as follows
  1. 1.Destruction Procedure: The Promotion Agency selects personal information for which a reason for destruction has occurred, establishes a destruction plan, and destroys the personal information after receiving approval from the Personal Information Protection Officer. After the destruction of personal information is carried out, the Personal Information Protection Officer verifies the results of the destruction and prepares a personal information file destruction management ledger.
  2. 2.Destruction Method: The Promotion Agency destroys personal information recorded and stored in electronic file formats by making the records unrecoverable, and destroys personal information recorded on paper documents by shredding or incinerating them.

Article 9 (Rights and obligations of data subjects and legal representatives and methods of exercising them)

• The data subject may exercise his/her rights to request the Promotion Agency to view, correct, delete, or suspend the processing of his/her personal information.
• The rights under Article 1 may be exercised by filling out the form in Appendix 8 of the Enforcement Regulations of the Personal Information Protection Act and submitting it in writing, by e-mail, fax, etc., and the Promotion Agency will take action on it without delay.
• The rights under Article 1 may be exercised through a proxy, such as the data subject's legal representative or authorized person. In this case, a power of attorney in the format of Appendix 11 of the Enforcement Regulations of the Personal Information Protection Act must be submitted.
• Requests to view or suspend processing of personal information may limit the data subject's rights under Article 35, Paragraph 5 and Article 37, Paragraph 2 of the Personal Information Protection Act.
• Requests for correction or deletion of personal information cannot be made if the personal information is explicitly stated as a collection target in other laws.
• When requesting access, correction/deletion, or suspension of processing in accordance with the information subject's rights, the Promotion Agency verifies whether the person making the request is the information subject or a legitimate agent.

Article 10 (Changes to Personal Information Processing Policy)

The information subject may request access to personal information from the Promotion Agency to the department below, and the Promotion Agency will endeavor to ensure that the information subject's request to access personal information is processed promptly.

Department in charge of receiving and processing personal information access requests

• Reception Department Name: Management Planning Office, Strategic Planning Team
• Receptionist: IT Manager, Strategic Planning Team
• Reception contact: +82-051-600-1743
• Processing Department Name: Personal Information File Department

Article 11 (Methods of Redress for Infringement of Rights)

Data subjects may apply for damage relief and consultation regarding personal information infringement through the organizations below. The organizations below are separate from the Promotion Agency. If you are not satisfied with the Promotion Agency's own individual information complaint handling or damage relief results or need more detailed assistance, please contact them.

• Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
  • ResponsibilitiesReporting personal information infringement, requesting consultation
  • Homepageprivacy.kisa.or.kr
  • Phone(without area code) 118
  • Address(58324) 3rd floor, Personal Information Infringement Report Center, 9 Jinheung-gil, Naju-si, Jeollanam-do (301-2 Bitgaram-dong)
• Personal Information Dispute Mediation Committee
  • ResponsibilitiesPersonal information dispute mediation application, collective dispute mediation (civil resolution)
  • Homepagewww.kopico.go.kr
  • Phone(without area code) +82-1833-6972
  • Address(03171) 4th floor, Government Seoul Building, 209 Sejong-daero, Jongno-gu, Seoul
• Supreme Prosecutors' Office Cybercrime Investigation Division+82-02-3480-3573, www.spo.go.kr
• National Police Agency Cyber ​​​​Security Bureau182, cyberbureau.police.go.kr

Article 12 (Methods of Redress for Infringement of Rights)

Busan Economic Promotion Agency has designated a personal information protection officer and staff member as follows to protect personal information and handle personal information-related inquiries, complaints, and damage relief.