Proviso Clause for Personal Information Processing Policy of Creative Economy Innovation Center and Creative Economy Innovation

"Membership and log-in information will be integrated with the Center for Creative Economy and Innovation, so the Creative Economy Innovation Center follows the personal information processing policy of Center for Creative Economy and Innovation."

Center for Creative Economy and Innovation Service ('https://ccei.creativekorea.or.kr', hereinafter 'Center for Creative Economy and Innovation') protects the personal information of the data subject pursuant to Article 30 of the Personal Information Protection Act. In addition, it has the following processing policy to deal with quickly and smoothly the relevant problems. 'Center for Creative Economy and Innovation' will notify users through the site announcement (or individual notice) when revising the personal information processing policy.

1. Purpose of processing personal information, processing and holding period of personal information, items of personal information to be processed

The purposes of processing personal information files registered and disclosed by ‘Center for Creative Economy and Innovation’ in accordance with Article 32 of the Personal Information Protection Act are as follows.

1. Homepage membership and member management

Personal information is processed for the purpose of identification, authentication, maintenance & management of membership, prevention of unauthorized use of service, various notices, grievance settlement, etc., which are accompanied by confirmation of signing up and membership service provision.

2. Civil Complaints Treatment

Personal information is processed for the purpose of identification, authentication, maintenance &management of membership, prevention of unauthorized use of service, various notices, grievance settlement, etc., which are accompanied by confirmation of signing up and membership service provision.

3. Service provision

Personal information is processed for the purpose of providing services and content such as participation in the service *, notification of progress, connection with the service **, provision of personalized services, and personal authentication.

* All the services of the creative economy, such as suggestions of ideas and conversations with mentors The services connected by SSO (Single Sign On) with Center for Creative Economy and Innovation including

** the Creative Economy Dream Enter and Innovation Center, the Intellectual Property Transaction Information Center, the Research and Development Performance Support Center, the Defense Technology Exchange Market, the Mirian, the Science and Technology Information Council, the Future Technology Space, and the Infinite Imagination Room

B. Treatment of Civil Complaints

Personal information is processed for the purpose of confirming the identity of the complainant, confirming the civil complaint, contacting for the factual investigation, notification, and notification of the processing result.

C. Service provision

Personal information is processed for the purpose of providing services and content such as participation in the service *, notification of progress, connection with the service **, provision of personalized services, and personal authentication.
* All the services of the creative economy, such as suggestions of ideas and conversations with mentors The services connected by SSO (Single Sign On) with Center for Creative Economy and Innovation including
** the Creative Economy Dream Enter and Innovation Center, the Intellectual Property Transaction Information Center, the Research and Development Performance Support Center, the Defense Technology Exchange Market, the Mirian, the Science and Technology Information Council, the Future Technology Space, and the Infinite Imagination Room

D. Use in Marketing and Public Relations

Personal information is processed for the purpose of development of new services and provision of personalized services, provision of information and participation opportunities for events and promotions, verification of service validity, confirmation of access frequency, or statistics on using service of members.

* All the services of the creative economy, such as suggestions of ideas and conversations with mentors The services connected by SSO (Single Sign On) with Center for Creative Economy and Innovation including

** the Creative Economy Dream Enter and Innovation Center, the Intellectual Property Transaction Information Center, the Research and Development Performance Support Center, the Defense Technology Exchange Market, the Mirian, the Science and Technology Information Council, the Future Technology Space, and the Infinite Imagination Room

※ For more detailed disclosure of personal information files in 'Center for Creative Economy and Innovation', please visit the comprehensive support portal for privacy protection (www.privacy.go.kr) of the Ministry of Public Administration and Security (→Personal Information Civil Complaint →Request of Personal Information Access →Using the Personal Information File List Search Menu).

2. Providing third parties with personal information

A. Personal information is provided to third parties only if there is consent from the data subject and it falls under Articles 17 and 18 of the Personal Information Protection Act.

B. The 'Center for Creative Economy and Innovation', in principle, treats the personal information of the data subject within the specified range for the purpose of collection and use. Except for the following cases, personal information shall not be processed or provided to a third party beyond the range of the original purpose without prior consent of the data subject.

• ① If there is separate consent from the data subject
• ② If there are special regulations in other laws
• ③ If the data subject or its legal representative is unable to give his/her consent, or cannot obtain prior consent, such as an unknown address and if it is clearly the case where it is deemed necessary for the interests of the data subject or the third party for the immediate life, body, and property
• ④ If the works prescribed in other laws cannot be carried out because personal information is used or not provided to a third party for purposes other than the purpose, and if the consideration and decision of the protection committee is passed
• ⑤ If personal information needs to be provided for the implementation of treaties and other international agreements or to foreign governments and international organizations
• ⑥ When necessary for cooperation and maintenance of crime investigation
• ⑦ When necessary for court proceedings
• ⑧ When necessary for the execution of penalty, preventive custody, and protective disposition

3. Personal information processing consignment

A. 'Center for Creative Economy and Innovation' shall comply with the laws and regulations related to the protection of personal information through consignment business contracts in accordance with Article 25 of the Personal Information Protection Act when concluding the contract. It stipulates matters concerning the prohibition of processing of personal information other than the purpose of carrying out the entrusted business, matters concerning administrative and technical protection measures of personal information, matters concerning safety management of personal information, and so on. In addition, it also tries to manage these matters to be well observed.

B. 'Center for Creative Economy and Innovation' consigns personal information to improve the service as follows. In addition, it stipulates necessary matters so that personal information can be safely managed in consignment contracts in accordance with related laws and regulations. The personal information consignment processing agencies and consignment services of "Center for Creative Economy and Innovation" are as follows.

4. The rights and duties of data subject and the implementation method

• ① The information subject (referring to a legal representative if he/she is under 14 years of age) may exercise his/her right to peruse, correct, delete, request suspension of processing, etc. at any time.
• ② The rights under paragraph (1) can be exercised in writing, e-mail, facsimile (FAX), etc. after preparing in accordance with attached Form 8 of the Enforcement Rules of the Personal Information Protection Act, and we will take measures for this without delay.
• ③ The exercise of rights under paragraph (1) can be done through the legal representative of the information entity or through the agent of the entrusted person. In such cases, a letter of attorney under attached Form 11 of the Enforcement Rules of the Personal Information Protection Act shall be submitted.
• ④ The rights of the information subject may be restricted pursuant to Articles 35 (5) and 37 (2) of the Personal Information Protection Act.
• ⑤ A request for correction or deletion of personal information shall not be made if the personal information is specified as the subject of collection in other statutes.
• ⑥ It is required to verify whether the person who made the request for perusal according to the information subject's rights, for correction or deletion, or for perusal when requesting suspension of processing, is the person or the legitimate agent.

5. Destruction of personal information

The 'Center for Creative Economy and Innovation', in principle, destroys without delay the personal information for which the purpose of personal information processing has been achieved. The procedures, deadlines, and methods of destruction are as follows.

• ① Destruction procedure
  - Personal information is immediately transferred to a separate space after it fulfills its purpose and is destroyed after a certain period of storage in accordance with internal policies and other relevant laws and regulations.
  Personal information that is moved into a separate space is not used for any other purpose unless it is provided for by law.
• ② Destruction period & method
  - If personal information becomes unnecessary due to reasons such as the expiration of the possession period, the achievement of the purpose, or the abolition of the relevant business, it shall be destroyed without delay.
  For personal information in the form of electronic files, technical methods that can not be reproduced are applied. Personal information printed on paper is either crushed by a pulverizer or destroyed by incineration.

6. Measures to ensure the stability of personal information

'Center for Creative Economy and Innovation' takes the following measures to ensure the security of personal information.

• ① Minimization of personal information handling staff and education of them
  - Personal information handling staff is designated and managed only when necessary. In addition, education for safe management is carried out for the handling staff.
• ② Support of access to personal information
  - The necessary measures are being taken to control access to personal information through the granting, modification, and cancellation of access rights to the database system handling personal information, and unauthorized access from outside is controlled using an intrusion prevention system.
• ③ Storage of access records
  - The records (weblogs, summary information, etc.) connected to the personal information processing system are stored and managed for at least six months.
• ④ Encryption of personal information
  - Personal information is securely stored and managed through encryption. In addition, a separate security function is used such that important data is encrypted and used in storage and transmission.
• ⑤ Installation of the security program and periodical check and update
  - A security program is installed and periodically updated and checked to prevent personal information from being leaked or damaged by hacking or computer viruses.
• ⑥ Access control to unauthorized persons
  - A separate physical storage site for the personal information system, where personal information is stored, is prepared, and control procedures for entering and leaving the site are established and operated.

7. Remedies for infringement on right and interests

The personal data subject may apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee and the Personal Information Infringement Report Center of the Korea Internet & Security Agency in order to relieve the damage caused by personal information infringement.

• - Personal Information Dispute Mediation Committee: (without area code) 118 (privacy.kisa.or.kr)
• - Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)
• - Cybercrime investigation unit of Supreme Prosecutors' Office: 02-3480-3571 (cybercid@spo.go.kr)
• - National Police Agency Cyber Terror Response Center: 1566-0112 (www.netan.go.kr)
  In addition, a person whose rights or interests are infringed due to the disposition or omission done by the head of a public organization with regard to the request of the data subject for viewing, correcting, deleting, and stopping processing the personal information may request an administrative appeal as provided by the Administrative Appeals Act.
• - Refer to the telephone number of the Central Administrative Trial Committee (www.simpan.go.kr)

8. Personal Information Protection Officer and Person in Charge

The Center for Creative Economy and Innovation is responsible for the affairs related to the handling of personal information, and designated a person responsible for the protection of personal information as follows for the handling of complaints and damage relief of information subjects related to personal information processing. contact the person in charge of personal information protection and the department in charge of personal information protection related to all personal information protection related inquiries, complaints, and damage relief caused by using the services (or business) of the Center. The Center for Creative Economy Innovation will respond and handle inquiries from information entities without delay.

• - Personal Information Protection Officer : Startups Foundation Headquarters Lee Young-seok(044-410-1504)
• - The person in Charge of Personal Information Protection : Department of ICT and Public Procurement for Startups Lee Hwa-Jong(044-410-1650)
• - The person in Charge of Personal Information Protection : ICT Security Team Park Tae-Jun(044-410-1663)

9.Personal information that is automatically received and stored

10. Change of personal information processing policy

① This personal information processing policy applies from the enforcement date of July 11, 2023

Major revision history	Reason for change
8. Personal Information Protection Officer and Person in Charge	Personal information protection officer/department/position change

• ② The previous personal information processing policy can be found below.
• ☞May 17, 2023 ~ July 10, 2023 Personal Information Processing Policy
• ☞December 17, 2022 ~ May 16, 2023 Personal Information Processing Policy
• ☞August 29, 2022 ~ December 16, 2022 Personal Information Processing Policy
• ☞August 17, 2022 ~ August 29, 2022 Personal Information Processing Policy
• ☞June 15, 2021 ~ August 17, 2022 Personal Information Processing Policy
• ☞December 21, 2020 ~ June 15, 2021 Personal Information Processing Policy
• ☞May 21, 2020 ~ December 21, 2020 Personal Information Processing Policy
• - March 1, 2015 ~ May 21, 2020 Personal Information Processing Policy
• - March 21, 2014 ~ February 28, 2015 Personal Information Processing Policy
• - May 22, 2013 ~ March 20, 2014 Personal Information Processing Policy