Article 1 (Purpose of Processing Personal Information)

The Yeongdeok Cultural Tourism Foundation handles the following personal information for the provision, management, and operation of the site managed by the Yeongdeok Cultural Tourism Foundation (Yeongdeok Golden Fish Festival, Yeongdeok Blue Road Festival, Yeongdeok Snow Crab Festival, etc.). The personal information being processed will not be used for any of the following purposes, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. Registering and managing membership on the website

Personal information is processed for the purpose of confirming membership intention, identifying and certifying oneself according to the provision of membership services, maintaining and managing membership qualifications, preventing illegal use of services, various notices and notices, and handling grievances.

2. Handling of civil complaints

Personal information is processed for the purpose of checking the identity of the complainant, checking the complaint, contacting and notifying the results of the fact investigation, and notifying the results of the processing.

3. Provision of goods or services

Personal information is processed for the purpose of providing services, sending contracts and bills, providing content, personal authentication, and payment and settlement.

4. Use in marketing and advertising

We process personal information for the purpose of developing new and customized services, providing event and advertising information and opportunities to participate, providing and advertising services based on demographic characteristics, validating services, identifying frequency of access, or statistics on members' use of services."

Article 2 (Processing and Retaining Period of Personal Information)

① The processes and holds personal information within the period of holding and using personal information or the period of holding and using personal information agreed upon when collecting personal information from the data subject.

② Each personal information processing and holding period is as follows.

Grounds for retention: Provision and notification of services provided by the Foundation

Related Acts and subordinate statutes:

1) Records on the collection/processing, use, etc. of credit information: 3 years

2) Records on the handling of consumer complaints or disputes: 3 years

3) Records on payment and supply of goods, etc.: 5 years

4) Record of marking/advertising: 6 months

Article 3 (Provision of Personal Information to a Third Party)

① The Yeongdeok Cultural Tourism Foundation processes personal information only within the scope specified in Article 1 (Purpose of Personal Information Processing) and provides personal information to third parties only if it falls under Articles 17 and 18 of the Personal Information Protection Act, such as consent of the information subject and special provisions of the law.

② The Yeongdeok Cultural Tourism Foundation provides personal information to third parties as follows.

Person who receives personal information: Webricks, Oh My System

Purpose of using personal information of recipients: Service provision, reservation-related processing, product purchase details management, maintenance management of websites and sites provided by Yeongdeok Cultural Tourism Foundation, etc

the possession of the recipientPeriod of use: 3 years

Article 4 (Entrustment of Personal Information Processing)

① The Yeongdeok Culture and Tourism Foundation entrusts personal information processing as follows for smooth personal information processing.

Consignee (Consignee): Webricks, Oh My Site

Contents of entrusted work: Purchase and fee payment, identification based on membership service, handling complaints such as handling complaints, developing new services (product) and providing customized services, providing event and advertising information, and providing opportunities for participation

Consignment period: 3 years

② When signing an entrustment contract, the Yeongdeok Culture and Tourism Foundation stipulates in the documents such as the prohibition of processing personal information, technical and administrative protection measures, re-entrustment restrictions, management and supervision, and damages, and supervises whether the trustee handles personal information safely.

③ If the details of the entrusted work or the trustee changes, we will disclose it through this personal information processing policy without delay.

Article 5 (Rights and Obligations of Information Subjects and Statutory Agents, and Method of Exercise thereof)

① The information subject may exercise the right to access, correct, delete, and request the Yeongdeok Cultural Tourism Foundation to stop processing personal information at any time.

② The exercise of rights under paragraph (1) can be made in writing, e-mail, facsimile (FAX), etc. to the Yeongdeok Cultural Tourism Foundation pursuant to Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and the Yeongdeok Cultural Tourism Foundation will take action without delay.

③ The exercise of rights under paragraph (1) may be conducted through an agent, such as a legal representative of the information subject or a person entrusted. In such cases, "Public Notice on the Method of Processing Personal Information (No. 2020-7)" You must submit a power of attorney in attached Form 11.

④ Requests for access to personal information and suspension of processing may be restricted by Article 35 (4) and Article 37 (2) of the Personal Information Protection Act.

⑤ A request for correction and deletion of personal information cannot be requested if the personal information is specified as the subject of collection in other laws and regulations.

⑥ The Yeongdeok Cultural Tourism Foundation verifies whether the person who made the request for perusal, correction and deletion, or suspension of processing is the person or a legitimate agent.

Article 6 (Preparation of items of personal information to be processed)

 The Yeongdeok Cultural Tourism Foundation handles the following personal information items.

1

①     Required items: ID (email), name, date of birth, gender, mobile phone number, service usage record, access log, access IP information, payment record

Article 7 (destruction of personal information)

① destroys personal information without delay when personal information becomes unnecessary, such as the lapse of personal information retention period and the achievement of processing purposes.

② If the personal information retention period agreed by the data subject has elapsed or the purpose of processing has been achieved, the personal information shall be transferred to a separate database (DB) or stored in a different storage place.

③ The procedures and methods of destroying personal information are as follows.

1. Destruction procedure

2. Destruction method

The information in the form of an electronic file uses a technical method that does not allow the recording to be played back.

Personal information printed on paper is crushed or destroyed by grinding with a shredder

Article 8 (Measures to Secure Safety of Personal Information)

The Yeongdeok Cultural Tourism Foundation is taking the following measures to ensure the safety of personal information.

1. Conduct regular self-audit

In order to secure stability related to personal information handling, we conduct regular (once a quarter) audits.

2. Minimize and educate employees handling personal information

We are implementing measures to manage personal information by designating employees who handle personal information and minimizing them by limiting them to those in charge.

3. Technical countermeasures against hacking, etc

To prevent personal information leakage and damage caused by hacking or computer viruses, the Yeongdeok Cultural Tourism Foundation installs security programs, periodically updates and inspects, and installs systems in areas where access is controlled from outside, and monitors and blocks them technically and physically.

4. Storage of access records and prevention of forgery and alteration

We keep and manage records of access to the personal information processing system for at least six months, and use security features to prevent forgery, theft, or loss of access records.

Article 9 (Matters concerning the installation, operation, and rejection of automatic personal information collection devices)

① The Yeongdeok Cultural Tourism Foundation uses cookies that store usage information and call it up from time to time to provide individual customized services to users.

② Cookies are a small amount of information sent by the server (http) used to run the website to the user's computer browser and are sometimes stored on the hard disk inside the user's PC computer.

A. Purpose of use of cookies: It is used to provide optimized information to users by identifying the type of visit and use of each service and website visited by users, popular search terms, security access, etc.

B. Installation and Operation of Cookies: You can refuse to save cookies by setting options in the Tools > Internet Options > Privacy menu at the top of the web browser.

C. Refusing to save cookies can lead to difficulties in using customized services.

Article 10 (Personal Information Protection Manager)

① The Yeongdeok Cultural Tourism Foundation is in charge of personal information processing, and designates a personal information protection manager as follows to handle complaints and remedy damages by information subjects related to personal information processing.

▶ Person in charge of personal information protection

Name: Hwang Min-jae

Position: Team Leader

Position: Team leader

Contact point: 054-730-5851, hmj@ydct.org, 054-730-5897

※ You will be connected to the department responsible for privacy.

▶ Personal Information Protection Department

Department name: Public relations marketing team

Person in charge: Progressive ship

Contact points: 054-730-5854, jbs@ydct.org, 054-730-5897

② The information subject can contact the personal information protection manager and the department in charge for all personal information protection inquiries, complaints, and damage relief that occurred while using the Yeongdeok Cultural Tourism Foundation's service (or business). The Yeongdeok Cultural Tourism Foundation will answer and handle inquiries from the information subject without delay.

Article 11 (Request for access to personal information)

The information subject may request the following departments for access to personal information under Article 35 of the ｢ Personal Information Protection Act.

The Yeongdeok Culture and Tourism Foundation will try to expedite the request for access to personal information by the information subject.

▶ Personal Information Access Request Receipt and Processing Department

Department name: Public relations marketing team

Person in charge: Progressive ship

Contact point: 054-730-5854, jbs@ydct.org, 054-730-5897

Article 12 (Method of remedy for infringement of rights and interests)

In order to receive relief from personal information infringement, information entities can apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency's Personal Information Infringement Reporting Center. In addition, please contact the institution below for other reports and consultations on personal information infringement.

1. Personal Information Dispute Mediation Committee: (without national number) 1833-6972 (www.kopico.go.kr)

2. Personal Information Infringement Reporting Center: 118 (privacy.kisa.or.kr)

3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)

4. National Police Agency: 182 (cyberbureau.police.go.kr)

A person who has been infringed on his/her rights or interests due to disposition or omission by the head of a public institution in response to a request under Articles 35 (Personal Information Access), 36 (Correction or Deletion of Personal Information, etc.) of the Personal Information Protection Act may request an administrative trial as prescribed by the Administrative Appeals Act.

※ For more information on administrative trials, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr)

Article 13 (Change of Personal Information Processing Policy)

① This personal information processing policy will be applied from July 15, 2021.