Cyber Summit Korea 2025 Online Privacy Policy

The Organizing Committee of the Cyber Summit Korea 2025 adheres to the 「Personal Information Protection Act」 and relevant laws, handling personal information in a lawful manner and ensuring its secure management. In accordance with Article 30 of the Personal Information Protection Act, the privacy policy has been formulated and published to inform data subjects about procedures and standards for personal information processing and to ensure swift and smooth handling of related grievances.

Contents
The 『Privacy Policy』 consists of the following details.

Purpose of Personal Information Processing	Processing and Retention Period of Personal Information
Matters Related to Outsourcing Personal Information	Matters Regarding the Rights, Responsibilities, and Procedures for Exercising Rights of the Data Subject and Legal Representative
Personal Information Items Processed	Procedures and Methods for the Disposal of Personal Information
Measures to Secure Personal Information Safety	Personal Information Protection Officer
Remedies for Rights Violation

Article 1. Purpose of Personal Information Processing

The Organizing Committee of the Cyber Summit Korea 2025 processes personal information for the following purposes. The processed personal information will not be used for purposes other than the following, and in the event of a change in the purpose of use, necessary measures, such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act, will be implemented.
1. Website user registration and management
- Confirmation of user registration intent, user management, prevention of unauthorized use of services, various notices and notifications, record retention for dispute resolution
2. Verification of user identity, handling of complaints, communication and notification for investigation of facts, notification of processing results

Article 2. Processing and Retention Period of Personal Information

1. The Organizing Committee of the Cyber Summit Korea 2025 processes and retains personal information within the period specified by law for the retention and use of personal information collected from data subjects. Generally, personal information is promptly disposed of once its processing purposes are fulfilled.
2. Under no circumstances does the Organizing Committee provide third parties with personal information collected and held.
3. Personal information of individuals under the age of 14 is not within our scope of processing.
4. The duration of each personal information processing and retention is as follows.
1) Records related to website user registration and management, including unique identification numbers: 1 year after the event ends.

Article 3. Matters Related to Outsourcing Personal Information

1. The Organizing Committee of the Cyber Summit Korea 2025 has assigned the following personal information processing tasks to ensure a seamless operation

Name of Contracted Agency	Commissioned Task
Mec &Wip	Tasks related with the Cyber Summit Korea 2025 and website management

2. The Secretariat of the Cyber Summit Korea 2025 specifies in documents such as contracts the provisions regarding responsibilities under Article 26 of the 「Personal Information Protection Act」, including prohibition of personal information processing beyond the intended purposes of entrusted tasks, technical and managerial protective measures, restrictions on re-entrusting, management and supervision of contractors, and liability for damages, while also supervising to ensure that the contractor securely handles personal information.
3. Article 4 Matters Regarding the Rights, Responsibilities, and Procedures for Exercising Rights of the Data Subject and Legal Representative

Article 4. Matters Regarding the Rights, Responsibilities, and Procedures

1. Data subjects may exercise their rights for accessing, correcting, deleting, or requesting the cessation of processing their personal information from the Organizing Committee of the Cyber Summit Korea 2025 at any time.
2. The rights under Paragraph 1 shall be exercised against the Organizing Committee of the Cyber Summit Korea 2025 in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act through written documents, electronic mail, fax, etc., and prompt action shall be taken by the Organizing Committee of the Cyber Summit Korea 2025.
3. The rights under Paragraph 1 shall be exercised through a representative, such as the legal guardian of the data subject or an authorized person. In this case, a power of attorney according to Annex No. 11 form of the Guidelines on Personal Information Handling (No. 2023-12) must be submitted.
4. The rights of the data subject to request access to personal information and to demand cessation of processing may be limited under Article 35(4) and Article 37(2) of the Personal Information Protection Act.
5. The Organizing Committee of the Cyber Summit Korea 2025 verifies whether the person requesting access, correction, deletion, or suspension of processing under data subject rights is the individual themselves or their duly authorized representative.

Article 5. Personal Information Items Processed

The Organizing Committee of the Cyber Summit Korea 2025 handles the following types of personal information.
1. Management of website user registration
- Essential items: Name, contact details, email address, phone number, affiliated name, position
2. The following personal information may be automatically generated and collected during the use of internet services:
- IP address, cookies, MAC address, service usage records, browsing history, and others

Article 6. Procedures and Methods for the Disposal of Personal Information

1. The Organizing Committee of the Cyber Summit Korea 2025 promptly destroys the relevant personal information when it becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose.
2. If personal information's retention period agreed upon with the data subject expires or if the processing purpose is achieved but the information must continue to be retained under other laws, it is transferred to a separate database (DB) or stored in a different location.
3. The procedure and method for personal information destruction are as follows:
① Destruction Procedure : The Organizing Committee of the Cyber Summit Korea 2025 ensures that electronically recorded personal information is irreversibly destroyed to prevent record reproduction. Personal information recorded or stored on paper documents is shredded or incinerated for destruction.
② Destruction Method : The Organizing Committee of the Cyber Summit Korea 2025 ensures that electronically recorded personal information is irreversibly destroyed to prevent record reproduction. Personal information documented on paper is disposed of by shredding or burning.

Article 7. Measures to Secure Personal Information Safety

The Organizing Committee of the Cyber Summit Korea 2025 takes the following measures to ensure the security of personal information:
1. Administrative measures: Regular employee training, among others.
2. Technical measures: Access control management of personal information processing systems, installation of access control systems, encryption of unique identification information , installation of security programs.
3. Physical measures: Access control to computer rooms, data storage rooms, and other relevant areas.

Article 8. Personal Information Protection Officer

1. The Organizing Committee of the Cyber Summit Korea 2025 is accountable for all matters concerning the processing of personal information and has designated the following Personal Information Protection Officer to handle complaints and provide redress for any issues related to personal information processing.

▶ Personal Information Protection Responsible Officer
- Position: Head of the Organizing Committee of the Cyber Summit Korea 2025
- Officer: Oh Hyeong-geun
- TEL : 042-870-2114

▶ Personal Information Protection Officer
- Position: External Cooperation Division Manager for the Cyber Summit Korea 2025
- Officer: Kim Woo-nyeon
- TEL : 042-870-2114
- E-mail : csk@nsr.re.kr

2. Data subjects can contact the Personal Information Protection Officer for any inquiries, complaints, or requests for relief related to personal information protection arising from using this website. The Personal Information Protection Officer will promptly respond and handle these inquiries.
3. Data subjects may request access to their personal information from the Personal Information Protection Officer in accordance with Article 35 of the Personal Information Protection Act. The Personal Information Protection Officer will strive to ensure these access requests are processed swiftly.

Article 9. Remedies for Rights Violation

Data subjects can seek remedies for rights violations due to personal information infringement by requesting dispute resolution and consultation with the Personal Information Dispute Mediation Committee and the Personal Information Infringement Report Center of the Korea Internet & Security Agency. Additionally, for reporting or consulting on other personal information infringements, please contact the institutions listed below.
1. Personal Information Dispute Mediation Committee: (No area code) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Reporting Center : (No area code) 118 (privacy.kisa.or.kr)
3. Cyber Investigation Division of Supreme Prosecutors' Office: : (No area code) 1301 (www.spo.go.kr)
4. Korean National Police Agency : (No area code) 182 (cyberbureau.police.go.kr)

Under Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information), and Article 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act, individuals whose rights or interests have been infringed upon by the actions or inactions of the head of a public institution can request an administrative appeal in accordance with the Administrative Appeals Act.
※ For further information about administrative appeals, please check the Central Administrative Appeals Commission's website (www.simpan.go.kr).

Article 10. Amendments to the Privacy Policy
This Privacy Policy takes effect on July 1, 2025.