Privacy Policy
Article 1. Purposes of Processing Personal Information, Items Collected, and Retention and Use Periods
1.
The Coex Magok website (https://www.coex.co.kr/en/) collects and uses only the minimum personal information necessary to provide the services you request.
| Service | Purpose of Processing | Items Collected | Retention Period |
|---|---|---|---|
| General Inquiry | Processing inquiries, compliments, suggestions, and other customer requests | Name, contact information | 3 years |
| Exhibition Inquiry | Processing inquiries related to Coex-organized exhibitions | Name, contact information, affiliation | 3 years |
| Advertising Inquiry | Providing consultations on advertising products and services | Name, contact information, company name | 3 years |
| Safety Management Idea Competition | Receiving safety management ideas and awarding prizes | Name, contact information | 3 years |
| Subscribe to Event Alerts | Sending notification messages about events in selected areas of interest | Name, contact information, areas of interest | Until Consent Is Withdrawn |
2.
For details on the items and purposes of personal information processed by services operated by the Company, please refer to the privacy policy posted on the relevant service website.
| Service | Purpose of Processing | Website URL |
|---|---|---|
| Coex Store | Meeting Room and Equipment Rental | www.coexstore.co.kr |
| Coex Careers | Applications for Employment at Coex | coex.recruiter.co.kr |
3.
For contracts such as exhibition hall and meeting room rates, personal information is collected and processed as necessary to perform the applicable contract.
Article 2. Provision of Personal Information to Third Parties
1.
The Company provides personal information to third parties only where permitted under Articles 17 and 18 of the Personal Information Protection Act, including with the data subject’s consent or where specifically authorized by law.
①
Where separate consent has been obtained from the data subject
②
Where specifically required by law or unavoidable in order to comply with a legal obligation
③
Where it is clearly necessary to protect the urgent interests involving the life, physical safety, or property of the data subject or a third party and prior consent cannot be obtained because the data subject or legal representative is unable to express intent or cannot be located
④
Where the competent duties prescribed by another law cannot be performed without using personal information for a purpose other than the original purpose or providing it to a third party, and the Personal Information Protection Commission has reviewed and approved such use or provision
⑤
Where necessary to provide personal information to a foreign government or international organization for the implementation of a treaty or other international agreement
⑥
Where necessary for a criminal investigation of a crime or the institution and maintenance of a public prosecution
⑦
Where necessary for a court to perform its judicial duties
⑧
Where necessary to execute a sentence, care and custody, or a protective disposition
2.
When providing personal information to a third party, the Company will inform the user of the following matters and obtain consent.
①
Recipient of the personal information
②
Purpose of use of the personal information (for a third-party provision, the recipient’s purpose of use)
③
Items of personal information used or provided
④
Retention and use period of the personal information (for a third-party provision, the recipient’s retention and use period)
⑤
The right to refuse consent and, where applicable, the disadvantages resulting from such refusal
Article 3. Entrustment of Personal Information Processing
1.
To ensure efficient operations, this website outsources personal information processing as follows.
| Website Development Company | Entrusted Services |
|---|---|
| Website Development Company | Website operation and maintenance |
2.
For services operated by the Company, the outsourced services and service providers are posted on the relevant service website. 1277~1282 행 넣어야함
| Service | Entrusted Services |
|---|---|
| Coex Store | www.coexstore.co.kr |
| Coex Careers | coex.recruiter.co.kr |
Article 4. Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them
1.
Data subjects may exercise their rights against the Company at any time, including requesting access to, correction or deletion of, or suspension of processing of their personal information.
※
Requests concerning the personal information of children under 14 must be made directly by their legal representative. A data subject who is a minor aged 14 or older may exercise rights concerning their personal information either directly or through a legal representative.
2.
In accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, rights may be exercised in writing, by email, by fax, or through other prescribed means. The Company will respond without delay.
3.
Rights may also be exercised through a legal representative or other authorized agent. In such cases, a power of attorney in the form prescribed in Appendix Form No. 11 of the Notification on Methods of Processing Personal Information (No. 2020-7) must be submitted.
4.
Requests for access to or suspension of processing of personal information may be restricted under Article 35(4) and Article 37(2) of the Personal Information Protection Act.
5.
A request to correct or delete personal information may not be made where another law expressly requires that the personal information be collected.
6.
When a request for access, correction, deletion, or suspension of processing is made, the Company verifies that the requester is the data subject or a duly authorized representative.
Article 5. Procedures and Methods for Destroying Personal Information
1.
When personal information is no longer necessary because the retention period has expired or the purpose of processing has been achieved, the Company destroys it without delay.
2.
Where personal information must be retained under another law even after the retention period agreed to by the data subject has expired or the purpose of processing has been achieved, the information is moved to a separate database or stored in a different location.
3.
The procedures and methods for destroying personal information are as follows.
A.
Destruction Procedure
The Company selects personal information subject to destruction and destroys it with the approval of the Company’s Chief Privacy Officer.
The Company selects personal information subject to destruction and destroys it with the approval of the Company’s Chief Privacy Officer.
B.
Destruction Method
Personal information recorded and stored in electronic files is destroyed using a method such as low-level formatting so that the records cannot be restored. Personal information recorded and stored in paper documents is shredded or incinerated.
Personal information recorded and stored in electronic files is destroyed using a method such as low-level formatting so that the records cannot be restored. Personal information recorded and stored in paper documents is shredded or incinerated.
Article 6. Measures to Ensure the Security of Personal Information
The Company takes the following measures to ensure the security of personal information.
A.
Administrative measures: Establishment and implementation of an internal management plan, regular employee training, and other measures
B.
Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information and other data, and installation of security software
C.
Physical measures: Access control for computer rooms, records storage rooms, and other restricted areas
Article 7. Installation and Operation of Automatic Personal Information Collection Tools and the Right to Refuse
1.
The Company uses cookies that store and periodically retrieve usage information in order to provide users with personalized services.
2.
A cookie is a small amount of information sent by the server operating the website to the user’s web browser and may be stored on the hard drive of the user’s computer.
A.
Purpose of cookies: Cookies are used to improve login convenience by storing user IDs, determine whether a secure connection is being used, and provide users with optimized information.
B.
Managing or refusing cookies: You can refuse the storage of cookies by changing the settings under Tools > Internet Options > Privacy in your web browser.
C.
Refusing cookies may limit the availability of personalized services.
Article 8. Chief Privacy Officer
1.
The Company designates the following Chief Privacy Officer to oversee personal information processing and handle complaints, requests for relief, and other matters related to personal information protection.
Chief Privacy Officer
Name: Han-Ju Kim
Title: Head of the Exhibition & Convention Business Division
Contact: 82-2-6000-1009, privacy@coex.co.kr
Chief Privacy Officer
Department: DX Team
Name: Yu-Jin Song
Contact: 82-2-6000-1024, privacy@coex.co.kr
2.
Data subjects may contact the Chief Privacy Officer or the responsible department regarding any personal information protection inquiries, complaints, or requests for remedies arising from their use of the Company’s services or business. The Company will respond to and process such inquiries without delay.
Article 10. Requests for Access to Personal Information
Under Article 35 of the Personal Information Protection Act, data subjects may submit a request to access their personal information to the department below. The Company will endeavor to process such requests promptly.
Department Responsible for Receiving and Processing Personal Information Access Requests
Department: DX Team
Name: Yu-Jin Song
Contact: 82-2-6000-1024, privacy@coex.co.kr
Article 11. Remedies for Infringement of Rights
Data subjects may apply to the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency’s Personal Information Infringement Report Center for dispute resolution or consultation concerning a personal information infringement. For other reports or consultations regarding personal information infringement, please contact the organizations listed below.
1.
Personal Information Dispute Mediation Committee: (No area code) 1833-6972 (www.kopico.go.kr)
2.
Personal Information Infringement Report Center: (No area code) 118 (privacy.kisa.or.kr)
3.
Supreme Prosecutors’ Office: (No area code) 1301 (www.spo.go.kr)
4.
National Police Agency: (No area code) 182 (ecrm.cyber.go.kr/minwon/main)
A person whose rights or interests have been infringed by an action or omission of the head of a public institution in response to a request under Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information), or Article 37 (Suspension of Processing, etc.) of the Personal Information Protection Act may file an administrative appeal in accordance with the Administrative Appeals Act.
*
Central Administrative Appeals Commission: (No area code) 110 (www.simpan.go.kr)