Agreement of Collection and Usage of Personal Information

Defense MICE Institute (DMI) establishes and operates the following privacy policy to protect the personal information of data subjects and to handle related grievances promptly and smoothly in accordance with Article 30 of the Personal Information Protection Act.

Article 1: Purpose of Processing Personal Information

DMI processes personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Website Membership Registration and Management Personal information is processed for the purpose of confirming membership registration intention, identification and authentication for membership services, and maintaining and managing membership qualifications.
2. Provision of Goods or Services Personal information is processed for the purpose of service provision, sending contracts/invoices, and payment/settlement.
3. Marketing and Advertising Usage Personal information is processed for providing new and customized services, events and promotional information, participation opportunities, and advertisements. Also, the personal information may be used to contact the data subject for promoting goods or services.
4. Personal Information Collection Items and Status

• Required items: Login ID, company name, company phone number, representative name, representative phone number, representative email, company address, manager name, manager phone number, manager email, business type, industry type
• Optional items: Fax, website
• Retention basis: Consent to privacy policy upon membership registration (Personal information marketing use: 5 years)

Article 2: Processing and Retention Period of Personal Information

1. DMI processes and retains personal information within the personal information retention/use period stipulated by law or the personal information retention/use period agreed upon when collecting personal information from the data subject.
2. Personal information related to website membership registration and management is retained and used for 5 years from the date of consent to collection and use.

• Retention basis: Records of contract or subscription withdrawal, payment, supply of goods, etc.
• Related laws:
  1. Records of displays/advertisements: 6 months
  2. Records of contracts or subscription withdrawals: 5 years
  3. Records of payment and supply of goods: 5 years
  4. Records of consumer complaints or dispute resolution: 3 years
  5. Records of displays and advertisements: 6 months
  6. Records of contracts or subscription withdrawals, payments, supply of goods: 5 years
  7. Records of consumer complaints or dispute resolution: 3 years

Article 3: Provision of Personal Information to Third Parties

1. DMI processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information) and may provide personal information to third parties in cases corresponding to Article 17 of the Personal Information Protection Act, such as consent of the data subject or special provisions of the law.
2. DMI may provide personal information to third parties as follows:

• Recipients of personal information: Korea Exhibition Industry Association, Korea Tourism Organization
• Purpose of use by recipients: Provide event-related information to Korea Exhibition Industry Association/Korea Tourism Organization
• Personal information items provided: ID, name, mobile phone number, email, workplace name (organization), regional classification

Article 4: Outsourcing of Personal Information Processing

1. DMI outsources personal information processing tasks as follows for smooth handling:

• (Outsourcer): DMI (Processor): Webmaker21 Co., Ltd.
• Content of outsourced tasks: InLEX KOREA website management
• Outsourcing period: Until termination of outsourcing contract

2. When concluding outsourcing contracts, the company specifies matters such as prohibition of personal information processing outside the purpose of performing outsourced tasks, technical and managerial protection measures, restrictions on re-outsourcing, management and supervision of processors, and liability for damages in documents such as contracts in accordance with Article 26 of the Personal Information Protection Act, and supervises whether processors handle personal information safely.
3. If the content of outsourced tasks or processors changes, we will promptly disclose it through this privacy policy.

Article 5: Rights and Obligations of Data Subjects and Their Exercise

1. Data subjects may exercise the following personal information protection rights against DMI at any time:

• Request for access to personal information
• Request for correction of errors
• Request for deletion
• Request for processing suspension

2. Rights under Paragraph 1 may be exercised against DMI through written documents, telephone, email, fax, etc., and DMI will take action without delay.
3. If the data subject requests correction or deletion of errors in personal information, DMI will not use or provide such personal information until the correction or deletion is completed.

Article 6: Destruction of Personal Information

1. DMI destroys relevant personal information without delay when it becomes unnecessary due to expiration of the retention period or achievement of the processing purpose.
2. If personal information must continue to be preserved in accordance with other laws despite the expiration of the agreed retention period or achievement of the processing purpose, such personal information will be moved to a separate database (DB) or stored in a different location.
3. The procedures and methods for destroying personal information are as follows:

• Destruction procedure: DMI immediately destroys personal information when destruction causes arise.
• Destruction method: Personal information recorded and stored in electronic file format is destroyed using methods such as DB data deletion to prevent record reproduction, and personal information recorded and stored in paper documents is destroyed by shredding or incineration.

Article 7: Measures to Ensure Safety of Personal Information

DMI takes the following measures to ensure the safety of personal information:

1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
2. Technical measures: Management of access rights to personal information processing systems, access control, encryption of unique identification information, installation of security programs
3. Physical measures: Access control to computer rooms, data storage rooms, etc.

Article 8: Personal Information Protection Officer

1. DMI designates the following personal information protection officer to oversee tasks related to personal information processing and handle complaints and damage relief related to personal information processing:

1. Personal Information Protection Officer

• Officer: Director Bae Soon-keun
• Contact: 070-4210-5539
• Email: skbae@kdmi.kr

2. Personal Information Protection Manager

• Manager: Lee Se-wan, Secretary General
• Contact: 02-521-6694 / sarex87@kdmi.kr

2. Data subjects may inquire about all personal information protection-related matters, complaint handling, and damage relief that arise while using DMI's services (or business) to the personal information department. DMI will respond to and handle inquiries from data subjects without delay.

Article 9: Request for Access to Personal Information

1. Data subjects may request access to personal information in accordance with Article 35 of the Personal Information Protection Act to the department below. DMI will strive to process data subjects' requests for access to personal information promptly.

• Department receiving and processing personal information access requests: DMI

Article 10: Remedies for Rights Infringement

1. Data subjects may inquire about damage relief, consultation, etc., regarding personal information infringement to the following institutions:

• Personal Information Infringement Report Center: (No area code) 118 / privacy.kisa.or.kr
• Supreme Prosecutors' Office Cybercrime Investigation Division: 02-3480-3573 / www.spo.go.kr
• National Police Agency Cyber Security Bureau: (No area code) 182 / cyberbureau.police.go.kr

Article 11: Consent to Image Information (Photos and Videos, etc.) Shooting

1. Photos will be taken and videos will be recorded at the exhibition hall.
2. Purpose of shooting

• Promotion of this event and future exhibitions and conferences
• Attachment to press releases and documents related to the event
• Use in promotional materials for event promotion

3. The captured materials will not be used for other purposes.