BEXCO Personal Information Processing Policy

BEXCO (hereinafter referred to as the "Company") establishes and discloses the following personal information processing guidelines to protect the personal information of the information subject and to handle any related grievances promptly and smoothly in accordance with Article 30 of the Personal Information Protection Act.

Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. Personal information being processed will not be used for purposes other than those specified below. If the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
1. Provision of Goods or Services
The Company processes personal information for purposes such as providing exhibition/convention services (booth participation, exhibition admission, etc.), providing content, offering customized services, identity verification, age verification, payment of fees, and settlement of accounts.
2. Handling Grievances
Personal information is processed for purposes such as identifying complainants, verifying complaints, contacting and notifying for fact-finding, and notifying processing results.
3. Marketing and Advertising
Personal information is processed for purposes such as providing new services and customized services, offering opportunities to participate in events and promotional information, and providing services and advertisements based on demographic characteristics. Additionally, personal information may be used to contact the information subject for the promotion or solicitation of goods or services.
4. Items and Details of Personal Information Collection
Personal information collected: Name, phone number, email, age, gender, birth year, region, workplace name (organization name), position, address, and survey responses
Collection methods: Online website, written forms, on-site/off-site events and activities
Retention basis: Upon agreement to the personal information processing policy (for marketing purposes: 5 years)

Article 2 (Retention and Processing Period of Personal Information)
1. The Company processes and retains personal information within the period agreed upon by the information subject or the period stipulated by law.
2. The specific retention and processing periods for each purpose are as follows:
1) Provision of goods or services: Until the completion of service provision and payment/settlement of fees. However, in cases where retention is necessary as stipulated by law, personal information will be retained until the expiration of the relevant period:
-Records of labeling, advertising, contracts, and performance under the "Act on Consumer Protection in Electronic Commerce":
·Records on labeling and advertising: 6 months
·Records on contracts or withdrawal of offers, payments, and provision of goods: 5 years
·Records on consumer complaints or dispute resolution: 3 years

Article 3 (Provision of Personal Information to Third Parties)
1. The Company processes personal information within the scope specified in Article 1 and provides it to third parties only with the consent of the information subject or as stipulated by law (Article 17 of the Personal Information Protection Act).
2. The Company may provide personal information to the following third parties:
-Recipients: Organizers of exhibitions and conventions hosted by BEXCO
·Purpose: Free and paid services related to exhibitions/conventions, joint events, marketing, and advertising
·Information provided: Name, phone number, email, age, gender, birth year, region, workplace name (organization name), position, address, and survey responses

-Recipients: Association of Korea Exhibition Industry (AKEI)
·Purpose: Providing information for exhibition certification
·Information provided: Name, phone number, email, age, gender, birth year, region, workplace name (organization name), position, address, and survey responses

Article 4 (Outsourcing of Personal Information Processing)
1. To ensure smooth processing of personal information, the Company outsources related tasks as follows:
-Outsourcer: BEXCO
-Contractor: HITCHHIKER
-Task details: Management of the Busan International Boat Show website
-Outsourcing period: Until the termination of the outsourcing contract
2. Any changes to the task details or contractor will be disclosed without delay through this personal information processing policy.

Article 5 (Rights of the Information Subject)
1. The information subject has the right to exercise the following rights related to personal information protection:
-Request to view personal information
-Request correction in case of errors
-Request deletion
-Request suspension of processing
2. Requests can be made in writing, by phone, email, or fax, and the Company will promptly process them.
3. If a correction or deletion request is made, the Company will suspend the use or provision of the related information until the request is resolved.
4. These rights can be exercised by a legal representative or an authorized agent of the information subject.
5. The information subject shall not violate any laws or infringe on the privacy or personal information of others.

Article 6 (Personal Information Processed)
1. For Service Provision:
-Required information: Name, phone number, email, age, gender, birth year, and region
-Optional information: Workplace (organization), position, and survey responses
2. Automatically collected during internet service usage:
-IP address, cookies, MAC address, service usage records, visit records, and any improper usage records.

Article 7 (Destruction of Personal Information)
1. When personal information is no longer necessary due to the expiration of the retention period or achievement of its processing purpose, the Company will destroy it promptly.
2. Personal information required to be retained by law will be transferred to a separate database or stored in a different location.
3. Destruction procedure and method:
-Procedure: Immediate destruction upon identification of the reason
-Method: Electronic files will be deleted using methods that prevent recovery, and paper documents will be shredded or incinerated.

Article 8 (Measures for the Safety of Personal Information)
The Company implements the following measures to ensure the security of personal information:
1. Administrative measures: Establishment and implementation of an internal management plan, regular employee training.
2. Technical measures: Access control, encryption of sensitive information, and installation of security programs.
3. Physical measures: Access control to computer rooms and document storage facilities.

Article 9 (Installation, Operation, and Refusal of Automatic Information Collection Devices)
The Company may use cookies to store and retrieve user information in order to provide customized services.
Cookies are small pieces of information sent by the server (HTTP) operating the website to the user's computer browser and may be stored on the user's hard drive.
-Purpose of cookies: Cookies are used to analyze the user's visit and usage patterns on various services and websites, popular search terms, secure connection status, etc., in order to provide optimized information to users.
-Installation, operation, and refusal of cookies: Users can refuse the storage of cookies by configuring their browser settings (Tools > Internet Options > Privacy).
-Impact of refusal: Refusing to store cookies may result in difficulties in using customized services.

Article 10 (Personal Information Protection Officer)
1. The Company takes overall responsibility for the management of personal information processing and designates a Personal Information Protection Officer to handle complaints and provide remedies related to the processing of personal information.
-Personal Information Protection Officer: Head of the Secretariat, Busan International Boat Show
2. Information subjects may direct any inquiries, complaints, or requests for remedies regarding personal information arising from the Company's services (or business) to the designated personal information department. The Company will respond promptly and take necessary actions without delay.

Article 11 (Access to Personal Information)
Information subjects can request access to their personal information, and the Company will process the request promptly.

Article 12 (Remedies for Infringement of Rights)
Information subjects may contact the institutions listed below for inquiries, counseling, or remedies related to personal information breaches.
Please note that these institutions are separate from the Company. If you are not satisfied with the Company’s internal handling of complaints or need further assistance, you may contact the following institutions:
▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
Responsibilities: Reporting personal information breaches and applying for counseling
Website: privacy.kisa.or.kr
Phone: 118 (toll-free)
Address: 3rd Floor, Personal Information Infringement Center, 9 Jinheung-gil, Naju-si, Jeollanam-do, Korea (58324)
▶ Personal Information Dispute Mediation Committee
Responsibilities: Dispute resolution and collective mediation related to personal information breaches
Website: www.kopico.go.kr
Phone: 1833-6972 (toll-free)
Address: 12th Floor, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul, Korea (03171)
▶ Supreme Prosecutors' Office Cyber Investigation Department
Phone: 1301 (toll-free)
Website: www.spo.go.kr
▶ Cyber Safety Bureau, National Police Agency
Phone: 182 (toll-free)
Website: www.police.go.kr

Article 13 (Installation and Operation of Video Surveillance Equipment)
1. BEXCO installs and operates video surveillance equipment as described below:
-Reason and Purpose for Installation: To ensure the safety of BEXCO facilities and prevent fires
-Number of devices, installation locations, and areas monitored: Installed in key areas such as exhibition hall lobbies and exhibition rooms, covering the entire area of major facilities
-Person responsible for management, department in charge, and personnel authorized to access video information: Safety Support Office
-Recording time, retention period, storage location, and processing method:
• Recording time: 24-hour recording
• Storage location and processing method: Stored and managed in the control room of the video surveillance system
-Method and location for viewing video information: Through the Safety Support Office
-Measures for requests to view video information: Requests for viewing or confirmation of personal video information must be submitted using the “Application for Viewing/Confirmation of Personal Video Information” form. Access is granted only if the requester is the individual captured or if it is necessary to protect their life, body, or property.
-Technical, managerial, and physical measures to protect video information: Implementation of an internal management plan, access control and permission restrictions, secure storage and transmission of video information, record-keeping of processing activities to prevent alteration or forgery, and the establishment of secured storage facilities with lock systems.

Article 14 (Consent to the Recording of Visual Information, Including Photos and Videos)
1) Photos and video recordings will be conducted during the exhibition.
2) Purpose of Recording:
① Promotion of this event and future exhibitions or conferences
② Inclusion in press releases and related documents
3) The recorded materials will not be used for any other purpose.

*You have the right to refuse consent to the collection, use, and provision of your personal information to third parties. However, refusal may result in limitations on the services provided.