Privacy Policy EXPORUM Ltd. (hereinafter referred to as "the Company") complies with the Personal Information Protection Act and relevant laws and regulations to protect the freedom and rights of data subjects, lawfully processing and safely managing personal information.

In accordance with Article 30 of the Personal Information Protection Act, the Company establishes and discloses the following privacy policy to guide the procedures and standards for processing and protecting personal information and to handle related complaints promptly and smoothly.

Article 1: Purpose of Processing Personal Information

The Company processes personal information for the following purposes. The personal information processed is not used for purposes other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent will be implemented in accordance with Article 18 of the Personal Information Protection Act.
• Processing pre-registration information for event entry: Personal information is processed for identity verification, participation application, registration confirmation, and identity verification for event entry.
• Handling civil affairs: Personal information is processed for identity verification of complainants, verification of complaints, contact/notification for fact-finding, and notification of processing results.
• Providing goods or services: Personal information is processed to provide services such as exhibitions and seminars organized by the Company, and to provide content.
• Utilizing for marketing and advertising: The purpose is to provide information on new services, exhibitions, or events, and to deliver notifications.
• Guidance on participation and viewing related to exhibitions and seminars.
• As part of the certification system operated by the Ministry of Trade, Industry, and Energy, personal information such as name and contact details will be provided to the Korea Exhibition Industry Promotion Association (www.akei.or.kr) to confirm attendance at the exhibition.

Article 2: Items of Personal Information Processed

The Company collects and uses the minimum range of personal information necessary to provide services. The following personal information items are processed with the consent of the data subject in accordance with Article 15(1)(1) and Article 22(1)(7) of the Personal Information Protection Act.
Collection Purpose Collected Items Retention and Use Period
Pre-registration for event and identity verification for event entry Name, affiliation, title, gender, age, email, mobile phone number, general phone number, region, affiliation classification (category), viewing purpose, area of interest, visitation route, expected date of visit 2 years
Text message delivery for event news and registration guidance Name, mobile phone number Until opt-out request
Email delivery for event news and registration guidance Name, e-mail Until opt-out request
• On-Site Exhibition
• Photographs and videos may be taken at the exhibition site and used as promotional/marketing materials. Users can request pre/post-utilization withdrawal from the Company.
• Collected Items: Name, mobile phone number, barcode entry information
• Collection/Use Purpose:
o Scanning the barcode on the badge when visiting the exhibition booth will be considered as consent for marketing use by participating companies.
o Issuance of exhibition entry passes and electronic business card systems for the convenience of visitors and to provide useful information exchange services between participating companies. Personal information collected at this exhibition will not be used for any other purpose than sending invitations and guidance for the next exhibition.

Article 3: Retention and Use Period of Personal Information

The Company processes and retains personal information within the personal information retention and use period agreed upon by the data subject at the time of collection or as required by law. Each personal information processing and retention period is as follows:
• Event pre/on-site registration records: 2 years
• Event marketing opt-out records: 10 years
• Records of complaints or disputes: 3 years
However, in the case of ongoing investigations or legal procedures due to violations of relevant laws, the retention period may be extended until the investigation or legal procedures are completed.

Article 4: Procedure and Method of Personal Information Destruction

The Company destroys personal information without delay when the retention period expires, or the processing purpose is achieved. If personal information must be retained according to other laws even after the retention period agreed upon by the data subject has expired or the processing purpose has been achieved, it will be moved to a separate database or stored in a different location. The procedure and method of personal information destruction are as follows:
• Destruction Procedure
• The Company selects the personal information to be destroyed and obtains approval from the personal information protection officer before destruction. • Destruction Method
• Personal information recorded and stored in electronic file format will be destroyed so that the records cannot be reproduced, and personal information recorded and stored in paper documents will be shredded or incinerated.

Article 5: Provision of Personal Information to Third Parties

The Company processes personal information within the scope specified for the purpose of processing personal information and only provides personal information to third parties with the consent of the data subject or in accordance with special provisions of the law such as Articles 17 and 18 of the Personal Information Protection Act. The Company provides the minimum necessary personal information with the consent of the data subject in the following cases for smooth service provision.
Recipient Purpose of Provision Provided Items Retention and Use Period
Sys4U Co., Ltd. Event registration and entry
MICE Hub Co., Ltd. Pre-registration on the website
The following are joint organizers and co-host organizations to which the Company provides personal information with the consent of the data subject as necessary for smooth service provision during the event.
Recipient Purpose of Provision Provided Items Retention and Use Period
Korea Digital Education Association Co-organizing the event
Korea Edu-Tech Industry Association Co-organizing the event
Article 6: Consignment of Personal Information Processing
The Company consigns personal information processing tasks as follows for smooth personal information processing. The Company specifies the responsibilities of the trustee regarding personal information protection and supervises the trustee's safe handling of personal information through a written agreement in accordance with Article 26 of the Personal Information Protection Act. If the content of the consignment or the trustee changes, it will be disclosed promptly through this privacy policy. Trustee Consignment Task
Sys4U Co., Ltd. Event registration and entry management

Article 7: Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information:
• Administrative measures: Establishment and implementation of an internal management plan, operation of a dedicated organization, regular employee education
• Technical measures: Management of access rights to personal information processing systems, installation of access control systems, installation and updating of security programs
• Physical measures: Access control to data storage rooms, etc.
Article 8: Installation, Operation, and Rejection of Automatic Personal Information Collection Devices
• Installed and operated automatic personal information collection devices
• The Company uses 'cookies' to store and retrieve user information from time to time to provide personalized services and convenience to users. Data subjects can configure cookie settings through browser options, but refusing cookies may result in difficulty using customized services.
Rejection Method
1. Allow/block cookies in the web browser:
• Chrome: Browser settings > Privacy and security > Clear browsing data
• Edge: Browser settings > Cookies and site permissions > Manage and delete cookies and site data
2. Allow/block cookies in mobile browsers:
• Chrome: Mobile browser settings > Privacy and security > Clear browsing data
• Safari: Mobile device settings > Safari > Advanced > Block all cookies
• Samsung Internet: Mobile browser settings > Browsing history > Delete browsing data
Article 9: Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them
Data subjects have the right to request access, correction, deletion, suspension of processing, withdrawal of consent, and objection to automated decision-making regarding their personal information at any time. Requests for access to and correction of personal information of children under 14 years of age must be made by a legal representative, and data subjects aged 14 or older may exercise their rights either directly or through a legal representative.
How to Exercise Rights
Rights can be exercised in writing, via email, or by fax in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay. Rights may also be exercised through an agent, and in this case, a power of attorney must be submitted.
The right to request access to and suspension of processing personal information may be restricted under Articles 35(4) and 37(2) of the Personal Information Protection Act, and if the personal information is specified as a collection target under other laws, the request for deletion cannot be made.
The Company verifies the identity of the person making the request or the legitimacy of their agent when exercising their rights.
Article 10: Personal Information Protection Officer
The Company has designated the following personal information protection officer to be responsible for overall personal information processing and to handle complaints and damage relief related to personal information processing.
Personal Information Protection Officer
Name: Taejin Park
Position: Team Leader
Contact: +82-2-6000-6681 / info@exporum.com
Data subjects can contact the personal information protection officer for all inquiries, complaints, and damage relief related to personal information protection arising from using the Company's services. The Company will respond and handle inquiries without delay.
Article 11: Remedies for Infringement of Rights Data subjects can apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, and other relevant organizations to seek remedies for personal information infringement. For reporting and counseling on other personal information infringements, please contact the following organizations:
1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
4. Cyber Bureau of National Police Agency: 182 (ecrm.cyber.go.kr)
Changes to the Privacy Policy This Privacy Policy is effective from July 2, 2024.