In accordance with Article 30 of the Personal Information Protection Act, Seoul Design Foundation Co., Ltd. has established and publicly disclosed the following guidelines for processing personal information to protect the personal information of data subjects and to handle related grievances promptly and smoothly.

1. Purpose of Processing Personal Information and Collected Items

Seoul Design Foundation Co., Ltd. processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent will be implemented in accordance with Article 18 of the Personal Information Protection Act.

a. Purpose of Processing

(1) Website Membership Registration and Management

Personal information is processed for the following purposes: confirming membership intention, identifying and authenticating individuals for member services, maintaining and managing membership status, implementing limited identity verification, preventing fraudulent use of services, confirming consent of legal guardians when processing personal information of children under 14, various notifications and communications, and handling grievances.

(2) Performance and Settlement of Service Provision Contracts

Personal information is processed for the following purposes: providing services, delivering goods, sending contracts/invoices, providing content, offering customized services, identity verification, age verification, payment/settlement, and debt collection.

(3) Marketing Advertising, Statistical Analysis, and Exhibition Certification Utilization

Personal information is processed for the following purposes: providing marketing information and delivering prizes for events/promotions, conducting surveys, providing services and displaying advertisements based on demographic characteristics, analyzing and creating statistics on service usage and product purchases, recommending services/products/information, inferring market trends, conducting market research, utilizing statistical analysis data, and exhibition certification.

b. Collected Items

To achieve the above processing purposes, personal information is collected as follows.

Division	Required	Option
Participating Company Members	Name, Department Name, Position, Country, Company Contact Information, Phone Number, Email, Company Name, Industry, Business Type, Representative's Name, Company Address, Desired Buyer Companies	Website
Buyer Members	Name, Title, Rank, Company Name, Department Name, Country, Company Address, Company Contact Information, Phone Number, Email, Items of Interest, Purpose of Registration

Additionally, personal information items may be automatically generated and collected during the use of internet services (IP address, cookies, MAC address, service usage records, visit records, records of improper use, etc.).

※ The data subject has the right to refuse consent to collecting and using personal information. However, the above information is essential for providing the service. If consent is refused, registering information or using the service will not be possible.

2. Methods of Collecting Personal Information

When collecting personal information, users are always informed in advance, and consent is obtained. Personal information is collected through the following methods:

a. When the user consents to the collection of personal information and directly enters the information during the information registration and service usage process;

b. Participation in events or activities conducted at online/offline exhibitions;

c. When information is provided through webpages, email, fax, telephone, etc., during consultation processes through the customer center; and/or

d. When personal information is provided by affiliated services or organizations.

3. Processing and Retention Period of Personal Information

a. Seoul Design Foundation Co., Ltd. will, in principle, promptly destroy personal information after the purpose of its collection and use has been achieved.

Type	Item	Main Item	Retention Period of Personal Information
Required	Information Registration and Online/Offline Service Usage	- Participating Company - Name, Department Name, Position, Country, Office Contact Information, Email, Company Name, Industry, Business Type, Representative's Name, Company Address - Buyer - Name, Title, Rank, Company Name, Department Name, Country, Company Address, Company Contact Information, Phone Number, Email, Business Card	One Year After Registration
Option	Option	Option Marketing and Prize Delivery Name, Phone Number, Email, Address, Consent to Receive Marketing Communications	One Year After Registration

b. Additionally, if personal information must be preserved in accordance with relevant laws and regulations, the company will retain it for a certain period as stipulated by those laws and regulations.

Relevant Laws and Regulations	Item	Retention Period
Protection of Communications Secrets Act	Service Visit Records	3 Months

c. In accordance with Article 29, Paragraph 2 of the Information and Communications Network Act, the personal information of users who have not used the service for one year will be separately stored and will be destroyed after four years if not used again.

4. Provision of Personal Information to Third Parties

Seoul Design Foundation Co., Ltd. processes the personal information of data subjects only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only in cases corresponding to Article 17 and Article 18 of the Personal Information Protection Act, such as with the data subject's consent or as required by special provisions of the law.

Seoul Design Foundation Co., Ltd. provides personal information to third parties to enhance the performance of service users as follows:

a. The Executive Office of the GREENCHIPS Festival

● Recipients of Personal Information: Organizers, Sponsors, Operating Companies

● Purpose of Personal Information Use by Recipients: Customer management (handling complaints, conducting surveys, providing benefits/prizes, etc.), sending exhibition and event information, etc.

● Personal Information Provided: Name, Company Name, Position, Company Contact Information, Phone Number, Email

● Retention and Use Period by Recipients: Until the purpose of use is achieved or the data subject expresses their intention to opt out

b. GREENCHIPS Festival Partner Companies

● Recipients of Personal Information: Website Operators

● Purpose of Personal Information Use by Recipients: Website operation, service management

● Personal Information Provided: Name, Company Name, Position, Company Contact Information, Phone Number, Email

● Retention and Use Period by Recipients: Until the purpose of use is achieved or the data subject expresses their intention to opt out

Purpose of Personal Information Use by Recipients: Website operation, service management

a. Seoul Design Foundation Co., Ltd. entrusts personal information processing tasks to external companies as follows to ensure the smooth handling of personal information

(1) Exhibition Operation

● Entrusted Party (Trustee): Design Press

※ A service provider is selected annually for business execution.

● Content of Entrusted Work: Exhibition operation, on-site management, content creation, etc.

(2) Online Service Operation

● Entrusted Party (Trustee): Entropy Design

● Content of Entrusted Work: Platform maintenance and server management, data processing, festival information management, content insertion, etc.

a. Seoul Design Foundation Co., Ltd. manages and supervises the entrusted companies to ensure compliance with relevant laws and regulations when entering into entrustment contracts.

b. If there are any changes to the content of the entrusted work or the trustees, this privacy policy will be updated and disclosed without delay.

6. Rights and Obligations of Data Subjects and Legal Guardians and Their Exercise Methods

a. Data subjects can exercise their rights to request access, correction, deletion, and suspension of processing of their personal information at any time with Seoul Design Foundation Co., Ltd.

b. In accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, rights can be exercised in writing, by email, or by fax. Seoul Design Foundation Co., Ltd. will act without delay.

c. Rights can also be exercised through a legal representative or a delegated person of the data subject. In this case, a power of attorney in the form prescribed in Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

d. Requests for access and suspension of processing of personal information may be restricted according to Article 35, Paragraph 5, and Article 37, Paragraph 2 of the Personal Information Protection Act.

e. Requests for correction and deletion of personal information cannot be made if the personal information is specified as a collection target in other laws and regulations.

f. Seoul Design Foundation Co., Ltd. will verify whether the person who made a request for access, correction, deletion, or suspension of processing of personal information is the data subject or a legitimate representative.

7. Destruction of Personal Information

a. Seoul Design Foundation Co., Ltd. will promptly destroy personal information that is no longer needed, such as when the retention period has expired, or the processing purpose has been achieved.

b. If the retention period of personal information consented to by the data subject has expired or the processing purpose has been achieved, but the information must be preserved according to other laws and regulations, the personal information will be transferred to a separate database (DB) or stored in a different location.

c. The procedures and methods for destroying personal information are as follows:

(1) Destruction Procedure

Seoul Design Foundation Co., Ltd. selects personal information that needs to be destroyed and, with the approval of the < operator / organization name > person in charge of personal information protection, destroys the personal information.

(2) Destruction Method

Personal information recorded and stored in electronic file format is destroyed so that the records cannot be reproduced, and personal information recorded and stored in paper documents is shredded or incinerated.

8. Installation, Operation, and Rejection of Automatic Personal Information Collection Devices

a. Seoul Design Foundation Co., Ltd. uses ‘cookies’ to store and retrieve usage information periodically to provide users with personalized services.

b. Cookies are small pieces of information sent by the server (http) used to operate the website to the user's computer browser and may be stored on the user's PC hard drive.

(1) Purpose of Using Cookies: Cookies are used to provide optimized information to users by understanding the visit and usage patterns of each service and website visited by the user, popular search terms, security access, etc.

(2) Installation, Operation, and Rejection of Cookies: Users can refuse the storage of cookies by setting options in the [Tools > Internet Options > Privacy menu] at the top of the web browser.

(3) Difficulties Due to Cookie Rejection: If users refuse to store cookies, there may be difficulties in using customized services.

9. Measures to Ensure the Security of Personal Information

Seoul Design Foundation Co., Ltd. takes the following measures to ensure the security of personal information:

a. Administrative Measures: Establish and implement internal management plans, regular employee training, etc.

b. Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs

c. Physical Measures: Access control to computer rooms, data storage rooms, etc.

10. Personal Information Protection Officer

a. Seoul Design Foundation Co., Ltd. has designated the following Personal Information Protection Officer to oversee all tasks related to personal information processing, to handle complaints, and to provide remedies for data subjects regarding personal information processing.

(1) Personal Information Protection Officer

● Name: Senior Pak Yurim

● Position: Industry Team

● Contact Information : 02-2096-0045, sustainable@seouldesign.or.kr

※ Your inquiries will be connected to the Personal Information Protection Department.

b. Data subjects can direct all inquiries, complaints, and requests for remedies regarding personal information protection that arise while using the services (or business) of Seoul Design Foundation Co., Ltd. to the Personal Information Protection Officer and the relevant department. Seoul Design Foundation Co., Ltd. will promptly respond to and address data subjects' inquiries.

11. Request for Access to Personal Information

Data subjects can request access to their personal information in accordance with Article 35 of the Personal Information Protection Act through the department below. Seoul Design Foundation Co., Ltd. will strive to process requests for access to personal information promptly.

a. Department for Receiving and Processing Requests for Access to Personal Information

● Department Name: Seoul Design Foundation Co., Ltd. Industry Team

● Name: Senior Pak Yurim

● Contact Information : 02-2096-0045, sustainable@seouldesign.or.kr

12. Remedies for Infringement of Rights

Data subjects can inquire about remedies for personal information infringement, consultations, and other assistance from the institutions below.

< The institutions listed below are separate entities from Seoul Design Foundation Co., Ltd. If you are not satisfied with the results of Seoul Design Foundation Co., Ltd.'s internal handling of personal information complaints and remedies, or if you need more detailed assistance, please contact the following institutions. >

a. Personal Information Infringement Report Center (Operated by Korea Internet & Security Agency)

● Relevant Tasks: Reporting personal information infringement, requesting consultations

● Website : privacy.kisa.or.kr

● Phone Number: (Without country code) 118

● Address : (58324) Personal Information Infringement Report Center, 3/F,(301-2 Bitgaram-dong), 9, Jinheung-gil, Naju-si, Jeollanam-do

b. Personal Information Dispute Mediation Committee

● Relevant Tasks: Filing for personal information dispute resolution, collective dispute mediation (civil resolution)

● Website : www.kopico.go.kr

● Phone Number: (Without country code) 1833-6972

● Address: (03171) 4/F, Government Complex Seoul, 209, Sejong-daero, Jongno-gu, Seoul

c. Supreme Prosecutors' Office Cybercrime Investigation Department: 02-3480-3573 (www.spo.go.kr)

d. Cyber Safety Bureau of the Korean National Police Agency: 182 (http://cyberbureau.police.go.kr)

13. Changes to the Privacy Policy

This privacy policy will be effective from July 22, 2024.