KOREA INDUSTRY EXPO 2026
KINTEX and Messe I-Sang (hereinafter 'the Company') establish and disclose the following Personal Information Processing Policy in accordance with Article 30 of the Personal Information Protection Act, in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.

Article 1 (Purpose of Collection and Use of Personal Information)
The Company collects and processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than those listed below. If the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
1. Confirmation of exhibition participation applications, changes, and cancellations
2. Contract guidance and booth assignment
3. Confirmation of participation fee payments and related notifications
4. Guidance on exhibit setup, display, removal, and related safety regulations
5. Other notifications necessary for exhibition participation
6. Marketing and advertising useThe Company processes personal information for purposes including providing new and personalized services, delivering event and promotional information, offering participation opportunities, and providing services and advertisements tailored to demographic characteristics.The Company may also contact data subjects using their personal information for the purpose of promoting goods or services or soliciting sales.
7. Personal information collected and current status· Items collected: Company name (organization name), business registration number, representative's name, type of business, business category, email address, login ID, password, name, address, phone number, mobile number, fax number· Collection methods: Online participation application via website, written forms, online/offline events· Basis for retention: Consent to privacy policy upon membership registration

Article 2 (Processing and Retention Period of Personal Information)
1. The Company processes and retains personal information within the period of retention and use as required by law or as agreed upon when collecting personal information from the data subject.
2. The processing and retention periods for each category of personal information are as follows: 1) Website membership registration and management: Until withdrawal from the website. However, if any of the following circumstances apply, until the conclusion of said circumstances:· If an investigation is ongoing due to a violation of relevant laws and regulations: until the conclusion of such investigation2) Provision of goods or services: Until the completion of supply of goods/services and settlement of payments. However, if any of the following circumstances apply, until the conclusion of the relevant period:
· Records related to transactions such as display/advertising, contract details, and fulfillment under the Act on Consumer Protection in Electronic Commerce:· Records of display and advertising: 6 months
· Records of contracts, withdrawal of offers, payment, and supply of goods: 5 years
· Records of consumer complaints or dispute resolution: 3 years

Article 3 (Provision of Personal Information to Third Parties)
1. The Company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information), and may provide personal information to third parties only in cases that fall under Article 17 of the Personal Information Protection Act, such as with the consent of the data subject or under special provisions of law.
2. The Company may provide personal information to third parties as follows:· Recipients: Institutions with marketing agreements with the Company, organizations operating exhibition consultation sessions, organizations sending exhibition newsletters, organizations conducting exhibition satisfaction surveys· Purpose of use by recipients: Providing exhibition/convention services, co-hosting events, marketing and advertising· Items provided: Email address, name, address, phone number, mobile number

Article 4 (Entrustment of Personal Information Processing)
1. The Company entrusts personal information processing as follows for smooth business operations:· (Entruster): The Company / (Trustee): MICE-N· Scope of entrusted work: Management of the KOREA INDUSTRY EXPO 2026 participation registration website· Period of entrustment: Until termination of the entrustment contract
2. When concluding entrustment contracts, the Company specifies in writing matters such as the prohibition of processing personal information beyond the scope of the entrusted work, technical and administrative protection measures, restrictions on re-entrustment, supervision of the trustee, and liability for damages, in accordance with Article 25 of the Personal Information Protection Act. The Company supervises the trustee to ensure safe processing of personal information.
3. If the content of the entrusted work or the trustee changes, the Company will disclose such changes through this Privacy Policy without delay.

Article 5 (Rights and Obligations of Data Subjects and How to Exercise Them)
1. Data subjects may exercise the following rights with respect to the Company at any time:· Request to access personal information· Request for correction of errors· Request for deletion· Request to suspend processing
2. The rights described in paragraph 1 may be exercised via written request, phone, email, or fax directed to the Company, and the Company will respond without delay.
3. If a data subject requests correction or deletion of erroneous personal information, the Company will not use or provide the relevant personal information until the correction or deletion is completed.
4. Rights under paragraph 1 may be exercised through a legal representative or an authorized agent of the data subject. In such cases, a power of attorney in the form prescribed by Annex No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
5. Data subjects must not infringe upon the personal information or privacy of themselves or others processed by the Company in violation of the Personal Information Protection Act or other applicable laws.

Article 6 (Categories of Personal Information Processed)
The Company processes the following categories of personal information:
1. Website membership registration and management· Required items: Company name (organization name), business registration number, representative's name, type of business, email address, login ID, password, name, address, phone number, mobile number· Optional items: Business category, fax number
2. Service provision· Required items: Company name (organization name), business registration number, representative's name, type of business, business category, email address, login ID, password, name, address, phone number, mobile number· Optional items: Business category, fax number
3. The following personal information items may be automatically generated and collected during the use of internet services:· IP address, cookies, MAC address, service usage records, visit records, records of improper use, etc.

Article 7 (Destruction of Personal Information)
1. The Company destroys personal information without delay when it is no longer necessary, such as upon the expiration of the retention period or the achievement of the processing purpose.
2. If personal information must be retained in accordance with other laws despite the expiration of the agreed retention period or the achievement of the processing purpose, the Company transfers such information to a separate database (DB) or stores it in a separate location.
3. The procedures and methods for destroying personal information are as follows:· Procedure: The Company destroys personal information immediately upon the occurrence of grounds for destruction.· Method: Personal information recorded and stored in electronic file format is destroyed using methods such as database deletion that render the records unrecoverable. Personal information recorded and stored in paper documents is destroyed by shredding or incineration.

Article 8 (Measures to Ensure the Security of Personal Information)
The Company takes the following measures to ensure the security of personal information:
1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
2. Technical measures: Access control management for personal information processing systems, access restriction, encryption of unique identification information, installation of security programs
3. Physical measures: Access control for server rooms, data storage rooms, etc.

Article 9 (Installation, Operation, and Opt-Out of Automatic Personal Information Collection Devices)
1. The Company may use 'cookies,' which store and retrieve user information, to provide individually customized services to users.
2. Cookies are small pieces of information sent by the server (HTTP) operating the website to the user's web browser and may be stored on the user's PC hard drive.· Purpose of cookies: Used to identify visit and usage patterns for services and websites visited by users, popular search terms, and secure connection status, in order to provide users with optimized information.· Cookie settings and opt-out: Users may refuse cookie storage by adjusting settings via Tools > Internet Options > Privacy in their web browser.· Refusing cookie storage may cause difficulties in using personalized services.

Article 10 (Personal Information Protection Officer)
1. The Company designates a Personal Information Protection Officer to oversee all matters related to personal information processing and to handle complaints and provide remedies for data subjects regarding personal information processing.▶ Personal Information Protection ManagerDepartment: KoINDEX Secretariat, KINTEXName: Contents Business TeamContact: 031-995-8795 / koindex@kintex.com▶ Personal Information Protection OfficerDepartment: KoINDEX Secretariat, KINTEXName: Contents Business TeamContact: 031-995-8795 / koindex@kintex.com
2. Data subjects may direct all inquiries, complaints, and requests for remedies related to personal information that arise from using the Company's services (or business) to the Personal Information Protection Department. The Company will respond and take action without delay.

Article 11 (Requests to Access Personal Information)
Data subjects may submit requests to access personal information pursuant to Article 35 of the Personal Information Protection Act to the department listed below. The Company will endeavor to process such requests promptly.
▶ Department for receiving and processing personal information access requests:
KoINDEX Secretariat, KINTEX / koindex@kintex.com

Article 12 (Remedies for Infringement of Rights)
Data subjects may contact the following organizations for advice or to seek remedies in the event of personal information infringement.
The organizations listed below are independent of the Company. If you are not satisfied with the Company's internal complaint handling or remedy results, or if you require further assistance, please contact them directly.

▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)· Jurisdiction: Reporting personal information infringement, consultation· Website: privacy.kisa.or.kr· Phone: 118 (no area code required)· Address: 3F, Personal Information Infringement Report Center, 9 Jinheung-gil, Naju-si, Jeollanam-do (58324)

▶ Personal Information Dispute Mediation Committee
· Jurisdiction: Application for dispute mediation, collective dispute mediation (civil resolution)· Website: www.kopico.go.kr· Phone: 1833-6972 (no area code required)· Address: 4F, Government Seoul Building, 209 Sejong-daero, Jongno-gu, Seoul (03171)

▶ Supreme Prosecutors' Office Cyber Crime Investigation Unit: 02-3480-3573 (www.spo.go.kr)
▶ National Police Agency Cyber Safety Bureau: 182 (http://cyberbureau.police.go.kr)