Exporum Co.,(hereinafter referred to as 'Exporum') establishes and discloses the following personal information processing guidelines in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to promptly and smoothly address related grievances.
Article 1 (Purpose of processing personal information)
The Company processes personal information for the following purposes. The personal information processed will not be used for any purpose other than the following, and if the purpose of use changes, we will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
1. Homepage membership registration and management
Personal information is processed for the purpose of confirming the intention to become a member, identification and authentication in accordance with the provision of membership services, maintenance and management of membership, identification in accordance with the implementation of a limited identity verification system, prevention of illegal use of services, confirmation of the consent of a legal representative when processing personal information of children under the age of 14, various notices and notices, and handling grievances.
2. Provision of goods or services: Until the supply of goods and services is completed and payment and settlement are completed.
However, if any of the following reasons apply, until the end of the relevant period,
1) Records of transactions such as marking, advertising, contract contents, and performance in accordance with the Act on the Consumer Protection in Electronic Commerce, etc.
- Records on display and advertisements: June
- Records of contract or withdrawal of subscription, payment, supply of goods, etc.: 5 years
- Records on consumer complaints or dispute resolution: 3 years
2) Retention of communication confirmation data in accordance with Article 41 of the Protection of Communications Secrets Act
- Subscriber telecommunication date, start/end time, subscriber number of the other party, frequency of use, location tracking data of the sender base station: 1 year
- Computer communication, Internet log data, access location tracking data: 3 months
Article 3 (Provision of Personal Information to Third Parties)
(1) The Company processes the personal information of the information subject only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides the personal information to a third party only when it falls under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the information subject and the special provisions of the law, and does not provide the personal information of the information subject to a third party otherwise.
(2) In order to provide smooth services, the Company may provide personal information to a third party only to the minimum extent necessary with the consent of the information subject in accordance with Article 17, Paragraph 1, Paragraph 1 of the Personal Information Protection Act in the following cases:
- Recipient of personal information: Xforum Co., Ltd.
- Purpose of use of personal information of the recipient: Pre-registration information, visitor statistics, newsletter delivery, promotional materials, etc.
- Items of personal information provided: name, address, phone number, e-mail
- Period of retention and use of the recipient: Until withdrawal of consent to the provision of personal information to a third party
Article 4 (Consignment of Personal Information Processing)
(1) The Company entrusts the processing of personal information as follows for the smooth processing of personal information.
- Consignee (trustee): Imweb
- Details of outsourced work: System provision of shopping mall hosting service, mobile app service, marketing service and addition, provision of affiliate service, notification talk, friend talk, text message sending agency service, etc.
- Consignee : SYSFORU
- Details of outsourced work: All actions for sending pre-registration text messages and providing admission tickets
(2) In accordance with Article 25 of the Personal Information Protection Act, the Company specifies in documents such as contracts matters related to the prohibition of processing personal information other than for the purpose of carrying out the entrusted business, technical and managerial protection measures, restrictions on re-entrustment, management and supervision of the consignee, and liability such as compensation for damages, and supervises whether the consignee safely processes personal information.
(3) If there is a change in the contents of the consignment or the consignee, it will be disclosed through this privacy policy without delay.
Article 5 (Rights of Information Subjects and Legal Representatives and Methods of Exercising Them)
(1) The information subject may exercise the following rights related to personal information protection against the Company at any time.
1. Request to view personal information
2. Request for correction of errors
3. Request for deletion
4. Request to stop processing
(2) The exercise of the rights pursuant to Paragraph 1 may be made in writing, by telephone, e-mail, fax, etc., and the Company will take action without delay.
(3) If the information subject requests correction or deletion of errors in personal information, the Company will not use or provide the personal information until the correction or deletion is completed.
(4) The exercise of rights pursuant to Paragraph 1 may be done through the legal representative of the information subject or an agent such as a delegated person. In this case, you must submit a power of attorney in the form of Annex No. 11 of the Enforcement Regulations of the Personal Information Protection Act.
(5) The information subject shall not infringe on the personal information or privacy of the information subject or others processed by the Company in violation of relevant laws and regulations, such as the Personal Information Protection Act.
Article 6 (Items of Personal Information to be Processed)
The Company processes the following personal information items.
1. Homepage membership registration and management
Required items: Name, phone number, e-mail, age group, place of residence, occupation, etc.
2. Provision of goods or services
Mandatory items: Sending pre-registration notifications, event information, providing admission tickets, etc.
Article 7 (Destruction of Personal Information)
(1) When personal information becomes unnecessary, such as the expiration of the personal information retention period or the achievement of the purpose of processing, the Company destroys the personal information without delay.
(2) In the event that it is necessary to continue to preserve personal information in accordance with other laws and regulations even after the expiration of the personal information retention period agreed by the information subject or the purpose of processing it has been achieved, the personal information shall be transferred to a separate database (DB) or stored in a different storage location.
(3) The procedure and method of destruction of personal information are as follows.
1. Destruction Procedure
The Company selects the personal information for which the reason for destruction has occurred, and destroys the personal information with the approval of the Company's personal information protection officer.
2. Destruction method
The Company destroys personal information recorded and stored in the form of electronic files so that the records cannot be reproduced, and personal information recorded and stored in paper documents is destroyed by shredding with a shredder or incineration.
Article 8 (Measures to ensure the safety of personal information)
The Company takes the following measures to ensure the safety of personal information.
1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, unique identification information
Installation of encryption and security programs
3. Physical measures: Access control of computer room, data storage room, etc.
Article 9 (Matters concerning the installation, operation and rejection of automatic personal information collection devices)
(1) The Company uses 'cookies' to store and retrieve usage information from time to time in order to provide personalized services to users.
(2) Cookies are a small amount of information sent to the user's computer browser by the server (http) used to operate the website and are stored on the user's PC or mobile.
(3) The information subject can set the settings to accept or block cookies through the web browser option settings. However, if you refuse to store cookies, it may be difficult to use customized services.
▶ Allowing/blocking cookies in your web browser
- Chrome: Clear browsing data > privacy & security > web browser settings
- Edge: Manage and delete web browser settings> cookie and site permissions> cookies and site data
▶ Allow/block cookies on your mobile browser
- Chrome: Clear your browsing data > mobile browser settings > privacy and security
- Safari: Mobile device settings > Safari > Advanced > Block all cookies
- Samsung Internet: Clear your browsing data > mobile browser settings > browsing data
(4) In the process of using the service, the Company collects and uses the services and websites visited by the user to provide optimized information to the user by identifying the type of visit and use, popular search terms, and secure access.
Article 10 (Chief Privacy Officer)
(1) The Company is responsible for the processing of personal information, and designates a person in charge of personal information protection as follows to handle complaints and damage relief of information subjects related to the processing of personal information.
▶ Personal Information Protection Officer
Name: Park Seo-young
Job Title: Deputy
Phone: 02-6000-6695, young7@exporum.com, 02-2051-3326
※ You will be connected to the department in charge of personal information protection.
▶ Department in charge of personal information protection
Department : Exhibition Team 2
Phone: 02-6000-6695, young7@exporum.com, 02-2051-3326
(2) The information subject may contact the person in charge of personal information protection and the department in charge of all matters related to personal information protection, complaint handling, and damage relief that occurred while using the company's services (or business). The Company will respond to and process inquiries from information subjects without delay.
Article 11 (Request for access to personal information)
The information subject may request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the following departments. The Company will endeavor to promptly process the information subject's request to view personal information.
▶ Department of Receiving and Handling Personal Information Requests
Department : Exhibition Team 2
Phone: 02-6000-6695, young7@exporum.com, 02-2051-3326
Article 12 (Remedies for Infringement of Rights and Interests)
The information subject may contact the following organizations for damage relief and consultation regarding personal information infringement.
1. Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
4. National Police Agency: (without area code) 182 (ecrm.police.go.kr/minwon/main)
Article 13 (Enforcement and Change of Privacy Policy)
This Privacy Policy is effective as of 2024. 12. 03. Applies from
