Personal Information Processing Policy on the 2023 OKFriends Homecoming Youth Camp (Online) The 2023 OKFriends Homecoming Youth Camp (Online) (hereinafter referred to as the "OKF (Online)") Secretariat has enacted and disclosed a personal information processing policy to protect the personal information of data subjects and to deal with related grievances quickly and smoothly in accordance with Article 30 of the Personal Information Protection Act as follows: Article 1 (Purpose of Processing Personal Information) (1) Confirmation and management of website registration (2) Self-identification and authentication for other services provided. (3) Maintenance and management of registration qualifications (4) Self-verification in accordance with the limited self-verification system (5) Prevention of fraudulent use of services. Article 2 (Processing and Retention Period of Personal Information) (1) The OKF (Online) Secretariat processes and retains personal information within the period of retention and use of personal information prescribed by law or within the period of retention and use agreed upon when collecting personal information from the data subject. (2) The processing and retention period of each personal information is as follows: ▶ Items 1 to 5 of Article 1: Until the end of the event and the completion of related tasks. Article 3 (Provision of Personal Information to Third Parties) (1) The OKF (Online) Secretariat processes the personal information of the data subject only within the scope stipulated in Article 1 (Purpose of Processing Personal Information), and provides personal information to a third party only in cases where the data subject has given consent or where there are special provisions under Article 17 and 18 of the Personal Information Protection Act. (2) The Secretariat provides personal information to third parties as follows: ▶ Overseas Koreans Foundation (host), Busan YMCA Foundation (organizer) - Recipients of personal information: Overseas Koreans Foundation, Busan YMCA Foundation - Purpose of personal information use for the recipients: Management of participants in the 2023 OKFriends Homecoming Youth Camp (Online) and Public Diplomacy Academy - Personal information items provided: Nationality, email address (ID), password, name, country, contact information, etc. - Retention and use period for the recipients: Until the end of the OKFriends Homecoming Youth Camp and the completion of related tasks. Article 4 (Rights and Obligations of Data Subjects and Exercise Methods) (1) A data subject may exercise the following rights with regard to the protection of personal information, such as access, correction, deletion, processing, and suspension with the OKF (online) Secretariat at any time. (2) The exercise of the rights under Paragraph 1 may be made in writing, by telephone, or email in accordance with Article 41 Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the OKF (online) Secretariat shall take prompt action on the request. (3) The rights under Paragraph 1 may be exercised through a legal representative or a delegate who has been delegated by the data subject. In this case, the delegate must submit a power of attorney in accordance with Annex No. 11 of the "Guidelines on the Processing of Personal Information" (No. 2020-7). (4) The data subject's right to access and request processing suspension may be restricted under Article 35 Paragraph 4 and Article 37 Paragraph 2 of the Personal Information Protection Act. (5) If personal information is specified as a collection target under another law, a request for correction or deletion of such information may not be possible. (6) The OKF (online) Secretariat verifies whether the requester for access, correction, deletion, or processing suspension based on data subject rights is the data subject or a legitimate representative. Article 5 (Items of Processed Personal Information) The OKF (online) Secretariat processes personal information items as follows: (1) Article 1, items 1 through 5: - Required items: email address (ID), password, name (Korean, English), country, gender, date of birth - Optional items: information provided during registration, such as phone number (2) The following personal information items may be automatically generated and collected when using internet services for the purpose of recommending contents and participating companies: IP address, cookies, MAC address, service usage history, and visit history. Article 6 (Destruction of Personal Information) (1) The OKF (online) Secretariat shall immediately destroy personal information if it is no longer necessary due to the expiration of the retention period of personal information, or the achievement of the purpose of processing. (2) If personal information must be retained in accordance with other laws, even though the retention period agreed upon by the data subject has expired or the processing purpose has been fulfilled, it shall be transferred to a separate database or stored separately. (3) The procedure and method for the destruction of personal information shall be as follows: ▶ Procedure for destruction: The OKF (online) Secretariat identifies the personal information that needs to be destroyed, obtains approval from the Personal Information Protection Manager of the OKF (online) Secretariat, and then proceeds to destroy it. ▶ Method of destruction The OKF (online) Secretariat destroys personal information recorded and stored in electronic files using methods such as low-level formatting so that the records cannot be reproduced. Personal information recorded and stored on paper documents shall be destroyed by shredding or incineration. Article 7 (Measures for Ensuring Security of Personal Information) The OKF (online) Secretariat is taking the following measures to ensure the security of personal information: ▶ Administrative measures: establishment and implementation of internal management plans, regular employee education, etc. ▶ Technical measures: access control management for personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs ▶ Physical measures: access control to computer rooms, data storage rooms, etc. Article 8 (Installation, operation and refusal of automatic collection devices for personal information) (1) The OKF (online) Secretariat uses 'cookies' to store and retrieve usage information in order to provide users with customized services. (2) Cookies are small amounts of information that are sent from the server (http) operating the website to the user's computer browser, and may be stored on the user's PC hard disk. 1. Purpose of using cookies: To provide optimized information to users by identifying their visit and usage patterns, popular search terms, and whether they are accessing securely for each service and website. 2. Installation, operation, and refusal of cookies: Users can refuse to store cookies by setting the option in the privacy menu of the web browser's Tools > Internet Options menu. 3. Refusing to store cookies may make it difficult to use customized services. Article 9 (Personal Information Protection Manager) (1) The OKF (Online) Secretariat is responsible for overseeing the personal information processing, and has designated a personal information protection manager to handle complaints and remedy for data subjects related to personal information processing as follows: ▶ Personal Information Protection Manager - Affiliation: Vision & Anchor Communication - Name: Hong Kyu-sik - Contact: 051-714-3119, vncom@vncom.kr ※ Connected to the personal information protection department. ▶ Personal Information Protection Department - Affiliation: Vision & Anchor Communication - Person in charge: Ji Sang-ha - Contact: 051-714-3119, jsh1121@vncom.kr (2) Data subjects may contact the personal information protection manager and department for any inquiries, complaints, or remedial actions related to personal information protection that may arise while using the services (or business) of the OKF (Online) Secretariat. The OKF (Online) Secretariat will promptly respond to and address the information subject's inquiries. Article 10 (Request for Access to Personal Information) Data subjects may request access to their personal information in accordance with Article 35 of the Personal Information Protection Act by contacting the following department. The OKF (Online) Secretariat will make efforts to promptly process requests for access to personal information. ▶ Department for Requests for Access to Personal Information and Processing - Affiliation: Vision and Anchor Communication - Person in charge: Ji Sang-ha - Contact: 051-714-3119, jsh1121@vncom.kr Article 11 (Remedy for Infringement upon Rights) Data subjects may contact the following organizations for remedies, consultations, and other inquiries regarding personal information infringement. <The following organizations are separate from the OKF (Online) Secretariat. If you are not satisfied with the OKF (Online) Secretariat's own personal information complaint handling or remedial results, or need more detailed help, please contact the following organizations.> ▶ Personal Information Infringement Report Center (Operated by the Korea Internet & Security Agency) - Related Assignment: Reporting of personal information infringement and request for consultation - Homepage: privacy.kisa.or.kr - Contact: 118 (without an area code) - Address: Personal Information Infringement Report Center, 3F, Jinheung-gil 9, Naju, Jeollanam-do, Zip code 58324. ▶ Personal Information Dispute Mediation Committee - Related Assignment: Request for personal information dispute mediation and group dispute resolution (civil resolution) - Homepage: www.kopico.go.kr - Contact: 1833-6972 (without an area code) - Address: government Seoul Building 4F, 209 Sejong-daero, Jongno-gu, Seoul, Zip code 03171 ▶ Cyber Crime Investigation Department of the Supreme Prosecutors' Office: 02-3480-3573 (www.spo.go.kr) ▶ Cyber Safety Bureau of the National Police Agency: 182 http://cyberbureau.police.go.kr Article 12 (Amendment to the Personal Information Processing Policy) (1) This Personal Information Processing Policy is effective from May 12, 2022.