춘천인형극제

Chuncheon Puppet Festival Privacy Policy

Chuncheon Puppet Festival (hereinafter referred to as the 'Company') establishes and discloses the following guidelines for the processing of personal information in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to promptly and efficiently address any related grievances.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those stated below, and if the purpose of use changes, necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act, will be taken.
- 1. Website Management
  - Personal information is processed for the purposes of user identification and authentication required for service provision, identity verification in accordance with the implementation of the limited identity verification system, prevention of fraudulent use of services, verification of legal guardian consent for the processing of personal information of children under 14 years old, various notifications and announcements, and handling grievances.
- 2. Handling Complaints
  - Personal information is processed for the purposes of verifying the identity of the complainant, confirming the details of the complaint, contacting or notifying for fact-finding investigations, and notifying the results of the processing.

Article 2 (Processing and Retention Period of Personal Information)

① The Company processes and retains personal information within the period specified by laws and regulations or within the period agreed upon at the time of collecting personal information from the data subject.
② The processing and retention periods for each type of personal information are as follows:
- 1. Website Management: Until the request for deletion of the personal information by the data subject.
  - However, in the following cases, the information will be retained until the reason for retention ends:
  - 1) Until the completion of any ongoing investigations or inquiries related to violations of relevant laws and regulations.
  - 2) Until the settlement of any remaining claims or obligations arising from the use of the website.

Article 3 (Provision of Personal Information to Third Parties)

① The Company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only with the consent of the data subject, or in cases specified by law under Article 17 of the Personal Information Protection Act.
② The Company provides personal information to third parties as follows:
- - Recipient of Personal Information: Namo Co., Ltd.
- - Purpose of Use by the Recipient: Website management
- - Personal Information Provided: Name, phone number, email address
- - Retention and Use Period by the Recipient: During the website maintenance period

Article 4 (Rights and Duties of the Data Subject and How to Exercise Them)

① The data subject may exercise the following rights related to personal information protection with the Company at any time:
- 1. Request to view personal information
- 2. Request to correct inaccuracies
- 3. Request for deletion
- 4. Request to cease processing
② Rights under Paragraph 1 may be exercised with the Company via written request, telephone, email, or fax, and the Company will promptly take action in response.
③ If the data subject requests correction or deletion of personal information due to inaccuracies, the Company will not use or provide the personal information in question until the correction or deletion is completed.
④ Rights under Paragraph 1 may be exercised through a legal representative or an authorized agent. In this case, a power of attorney in the form prescribed in Appendix Form 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
⑤ The data subject must not violate the Personal Information Protection Act or other relevant laws, nor infringe on the personal information and privacy of themselves or others that the Company processes.

Article 5 (Personal Information Items Processed)

The Company processes the following personal information items:
- 1. Website Management
  - ㆍRequired Items: Name, email address, mobile phone number

Article 6 (Destruction of Personal Information)

① The Company will promptly destroy personal information when it becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose.
② If the retention period for personal information agreed upon with the data subject has expired or the processing purpose has been achieved, but the personal information must be retained according to other laws, the Company will transfer the personal information to a separate database (DB) or store it in a different location.
③ The procedures and methods for the destruction of personal information are as follows:
- 1. Destruction Procedure
  - The Company selects personal information for destruction based on the reason for destruction and obtains approval from the Company’s personal information protection officer before proceeding with the destruction.
- 2. Destruction Method
  - For personal information recorded and stored in electronic files, the Company uses methods such as low-level formatting to ensure that the records cannot be restored. For personal information recorded and stored in paper documents, the Company destroys it using shredders or by incineration.

Article 7 (Measures to Ensure the Security of Personal Information)

The Company takes the following measures to ensure the security of personal information:
- 1. Administrative Measures: Establishment and implementation of internal management plans, regular employee training, etc.
- 2. Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs.
- 3. Physical Measures: Access control to computer rooms, data storage rooms, etc.

Article 8 (Personal Information Protection Officer)

① The Company designates a Personal Information Protection Officer to oversee and take responsibility for personal information processing and to address complaints and remedy issues related to personal information. The details are as follows:
- ▶ Personal Information Protection Officer
  - - Name: Hong Yong-min
  - - Title: Head of the Chuncheon Puppet Festival Operations Team
  - - Contact: 033-242-8452, cocobau89@hanmail.net, Fax: 033-242-8487
  - ※ Connects to the Personal Information Protection Department.
- ▶ Personal Information Protection Department
  - - Department: Chuncheon Puppet Festival Operations Team
  - - Contact Person: Hong Yong-min
  - - Contact: 033-242-8452, cocobau89@hanmail.net, Fax: 033-242-8487
  - ※ Connects to the Personal Information Protection Department.
② Data subjects may contact the Personal Information Protection Officer and the department for any inquiries, complaints, or issues related to personal information protection arising from the use of the Company’s services (or business). The Company will respond to and address these inquiries without delay.

Article 9 (Remedies for Infringement of Rights)

Data subjects may contact the following institutions for remedies, consultations, and assistance related to personal information breaches:
- ▶ Personal Information Infringement Report Center (Operated by the Korea Internet & Security Agency)
  - - Services: Reporting personal information breaches, requesting consultations
  - - Website: privacy.kisa.or.kr
  - - Phone: 118 (no area code required)
  - - Address: 3rd Floor, 301-2, Bitgaram-dong, 9, Jinhyeong-gil, Naju-si, Jeonnam 58324
- ▶ Personal Information Dispute Mediation Committee
  - - Services: Applying for personal information dispute mediation, collective dispute mediation (civil resolution)
  - - Website: www.kopico.go.kr
  - - Phone: 1833-6972 (no area code required)
  - - Address: 4th Floor, Government Seoul Building, 209 Sejong-daero, Jongno-gu, Seoul 03171
- ▶ Supreme Prosecutors' Office Cybercrime Investigation Unit
  - - Phone: 02-3480-3573
  - - Website: www.spo.go.kr
- ▶ Cyber Safety Bureau of the National Police Agency
  - - Phone: 182
  - - Website: http://cyberbureau.police.go.kr

Article 10 (Installation and Operation of Video Information Processing Equipment)

① The Company operates video information processing equipment as follows:
- 1. Basis and Purpose of Installation: For the safety and fire prevention of the Company's facilities.
- 2. Number of Units: [Number] units installed in key facilities such as the office lobby and exhibition areas.
  Coverage: Captures the entire space of the key facilities.
- 3. Manager, Responsible Department, and Access Authority:
  Manager: Secretary General
  Department: Planning Office
  Access Authority: Stage Director, Stage Operations Team
- 4. Video Information Capture Time, Retention Period, Storage Location, and Processing Method:
  - - Capture Time: 24-hour recording
  - - Retention Period: 30 days from the time of capture
  - - Storage Location and Processing Method: Stored and managed in the video information processing control room of the [Department Name].
- 5. Method and Location for Checking Video Information: Requests should be made to the responsible manager(Secretary General of the Chuncheon Puppet Festival).
- 6. Actions for Requests to View Personal Video Information: Requests must be submitted via a personal video information access and existence confirmation request form. Access is granted only if the data subject is the person recorded or if access is clearly necessary for the protection of the data subject’s life, body, or property.
- 7. Technical, Administrative, and Physical Measures to Protect Video Information: Establishment of internal management plans, access control and restriction, application of secure storage and transmission technologies, recording and prevention of tampering with processing records, provision of storage facilities, and installation of locking devices.

Article 11 (Changes to the Privacy Policy)

① This Privacy Policy is effective as of January 1, 2020.