The Smart Lifeweek Secretariat (hereinafter referred to as the Secretariat) establishes and publishes the following personal information processing guidelines in order to protect the personal information of information subjects in accordance with Article 30 of the Personal Information Protection Act, and to promptly and smoothly handle related grievances.

Article 1 (Purpose of Processing Personal Information)

The Secretariat processes personal information for the following purposes. The personal information processed will not be used for any purpose other than the following, and if the purpose of use changes, we will take necessary measures, such as obtaining a separate consent in accordance with Article 18 of the Personal Information Protection Act.

• 1. Homepage registration confirmation and management
• 2. Identification and authentication of identity in the provision of other services/li>
• 3. Maintenance and management of registration qualifications
• 4. Identity verification due to the implementation of the limited identity verification system
• 5. Prevention of Illegal Use of Services

Article 2 (Processing and Retention Period of Personal Information)

• ① The Secretariat shall process and retain personal information for the period of retention and use of personal information specified by laws and regulations, or for the period of retention and use of personal information agreed upon when collecting personal information from the information subject.
• ② The processing and retention period for personal information is as follows.
  • ▶ Article 1 No. 1~5: Until the end of the event and the end of the related business processing

Article 3 (Provision of Personal Information to Third Parties)

• ① The Secretariat processes the personal information of information subjects only within the scope specified in Article 1 (Purpose of Processing Personal Information), and in cases where Articles 17 and 18 of the Personal Information Protection Act apply, such as the information subject's consent and special provisions of the law, the personal information is provided to the Organizer only.
• ② The Secretariat provides personal information to the Organizer as follows.
  • ▶ Seoul Digital Foundation
  • - Recipient of personal information: Kim Young-jin
  • - Recipient's purpose of use of personal information: Event agency
  • - Items of personal information provided: Nationality, e-mail address (ID), password, name, affiliation, department, position/position, company classification, field of interest, company introduction materials, etc.
  • - Period of retention and use of the recipient: Until the end of the event and the end of related business processing

Article 4 (Consignment of Personal Information Processing)

• ① The Secretariat entrusts the processing of personal information as follows, in order to ensure the smooth processing of personal information.
  • ▶ Homepage maintenance
    • - consignee : Morensoft Co., Ltd.
    • - Details of consignment work: Website maintenance and server management/platform operation and oversight
• ② When concluding a consignment contract, the Secretariat specifies in documents such as contracts the prohibition of processing personal information other than for the purpose of carrying out the entrusted business, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the consignee, compensation for damages, etc., in documents such as the contract in accordance with Article 26 of the Personal Information Protection Act, and supervises whether the consignee handles personal information safely.
• ③ If there is a change in the contents of the consignment or the consignee, it will be disclosed through this privacy policy without delay.

Article 5 (Rights and Obligations of Information Subjects and Legal Representatives, and Methods of Exercising such Rights)

• ① The information subject may exercise its right to view, correct, delete, or suspend the processing of personal information at any time against the Secretariat.
• ② Requests to exercise the rights pursuant to Paragraph 1 may be made to the Secretariat in writing or by e-mail in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and when a request is received the Secretariat will take action without delay.
• ③ The exercise of the rights pursuant to Paragraph 1 may be done through the legal representative of the information subject, or an agent such as a delegated person. In this case, a power of attorney must be submitted in the form of Attachment No. 11 of the "Notice on Personal Information Processing Method (No. 2020-7)".
• ④ The rights of the information subject may be restricted in accordance with Article 35(4) and Article 37(2) of the Personal Information Protection Act.
• ⑤ Requests for the correction or deletion of personal information may not be made if the personal information is specified as subject to collection under other laws and regulations.
• ⑥ The Secretariat shall ascertain whether the person who has made the request for access, correction or deletion, or suspension of processing in accordance with the rights of the information subject is the information subject him/herself, or his or her legitimate representative.

Article 6 (Items of Personal Information to be Processed)

The Secretariat handles the following items of personal information.

• 1. Article 1 No. 1~5: E-mail address (ID), password, name, affiliation, department, position/position, company classification, field of interest, visit route, etc.
• 2. The following personal information items may be automatically generated and collected in the process of using the internet service for the purpose of recommending contents and exhibitors: IP address, cookies, MAC address, service use record, visit record

Article 7 (Destruction of Personal Information)

• ① The Secretariat shall destroy the personal information without delay when retaining the personal information becomes unnecessary, such as due to the expiration of the personal information retention period or the achievement of the purpose of its collection.
• ② In the event that it is required to continue to preserve the personal information to comply with other laws and regulations, even after the personal information retention period agreed upon by the information subject has expired, or the purpose of its collection has been achieved, the personal information will be transferred to a separate database (DB) or stored in a different storage location.
• ③ The procedure and method of destruction of personal information are as follows.
  • ▶ Destruction Procedure: The Secretariat selects the personal information for which a reason for destruction has occurred, and destroys the personal information with the approval of the Personal Information Protection Officer of the Secretariat.
  • ▶ Destruction Method: The Secretariat destroys personal information recorded and stored in the form of electronic files using methods such as Low Level Formatting to ensure that the record cannot be reproduced, while personal information recorded and stored in the form of paper documents is destroyed by shredding with a shredder or incineration.

Article 8 (Measures to ensure the safety of personal information)

The Secretariat takes the following measures to ensure the safety of personal information.

• ▶ Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
• ▶ Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of uniquely identifying information, installation of security programs
• ▶ Physical measures: Access control of computer rooms, data storage rooms, etc.

Article 9 (Matters concerning the installation and operation of automatic systems to collect personal information, and the right of refusal)

• ① The Secretariat uses 'cookies' to store and retrieve usage information from time to time in order to provide individually customized services to users.
• ② A cookie is a small file sent by the server (http) used to operate the website to the user's computer browser. It is also stored.
  • A. Purpose of using cookies: Cookies are used to provide optimized information to users by identifying the types of visits and use of each service and website visited by the participants, popular search terms, and secure access.
  • B. Installation, operation and refusal of cookies: You can refuse to accept cookies by adjusting your settings in the Tools >Internet Options> and the personal information menu at the top of the web browser.
  • C. If you refuse to accept cookies, it may be difficult to use customized services.

Article 10 (Chief Privacy Officer)

• ① The Secretariat shall be responsible for the processing of personal information, and shall designate a person in charge of personal information protection as follows to handle the complaints and damage relief of information subjects related to the processing of personal information.
  • ▶ Personal Information Protection Officer
    • - Department: Seoul Digital Foundation
    • - Name : Kim Young-jin
    • - Contact : himrkim@sdf.seoul.kr
    • ※ You will be connected to the department in charge of personal information protection.
  • ▶ Department in charge of personal information protection
    • - Department : Seoul Digital Foundation
    • - Name : Kim Young-jin
    • - Contact : himrkim@sdf.seoul.kr
• ② The information subject may contact the person in charge of personal information protection and the department in charge of personal information protection for all personal information protection-related inquiries, complaint handling, and relief of damage that occurs while using the services (or business) of the Secretariat. The Secretariat will respond to and process inquiries from information subjects without delay.

Article 11 (Request for access to personal information)

The information subject may direct requests to access their personal information pursuant to Article 35 of the Personal Information Protection Act to the following departments. The Secretariat will endeavor to promptly process requests for access to the personal information of information subjects.

• ▶ Department of Receiving and Handling Personal Information Requests for Viewing of Personal Information
  • - Department : Morensoft Co., Ltd.
  • - Contact : 02-6737-5000

Article 12 (Remedies for Infringement of Rights and Interests)

The information subject may direct inquiries about damage relief and consultation for personal information infringement to the following organizations.

[The following organizations are separate from the Secretariat. If you are not satisfied with the results of the Secretariat's handling of personal information complaints and damage relief, or if you need more specific help, please contact us.]

• ▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
  • - Responsibilities: Report personal information infringement, request for consultation
  • - Homepage : privacy.kisa.or.kr
  • - Phone : (without area code) 118
  • - Address : (58324) 3rd floor of Jinheung-gil 9 (Bitgaram-dong) 9, Naju-si, Jeollanam-do Personal Information Infringement Report Center
• ▶ Personal Information Dispute Mediation Committee
  • - Responsibilities: Personal Information Dispute Mediation Application, Collective Dispute Mediation (Civil Settlement)
  • - Homepage : www.kopico.go.kr
  • - Tel : (without area code) 1833-6972
  • - Address: (03171) 4th floor of the Seoul Government Complex, 209 Sejong-daero, Jongno-gu, Seoul
• ▶ Cyber Crime Investigation Division, Supreme Prosecutors' Office: 02-3480-3573 (www.spo.go.kr)
• ▶ Cyber Security Bureau, National Police Agency: 182 (http://cyberbureau.police.go.kr)

Article 13 (Changes to the Privacy Policy)

This privacy policy becomes effective on June 14, 2024.