GYEONGGI ARTS CENTER

1. 1. Subscription to and management of membership

   Personal information is handled to check applicants’ intention to subscribe to the membership, to identify and authenticate users prior to their use of the membership services, to maintain and manage membership eligibility, to prevent the unauthorized use of the services, to check the legal agent's consent to the collection of personal information belonging to minors under 14 years of age, and to deliver notices.

2. 2. Handling of user complaints

   Personal information is handled to check the identity of users who raise complaints, communication or survey for checking related facts, and to notify the results of the handling of complaints.

4. 3. Utilization for marketing and advertisement purposes

   Personal information is also handled for key performances or exhibitions, the provision of promotional messages, the leasing of various spaces, and the conducting of events.

• · Name of personal information files: Membership DB
• · Items of personal information
  • - Information subjects: Name, date of birth, e-mail address, mobile phone number.
  • - Legal agent (guardians for minors below 14 years of age): Name, date of birth.

    · Basis for retention: Consent of the information subjects or related statutes.

• · Retention period: 1 year (5 years from the last transaction date when any transactions exist).
• · Related statutes
  • - Records concerning the withdrawal of contracts or subscriptions: 5 years (Act on the Consumer Protection in Electronic Commerce).
  • - Records concerning payment and provision of goods, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce).
  • - Records concerning the handling of consumers’ complaints or disputes: 3 years (Act on the Consumer Protection in Electronic Commerce).

1. 1. When separate consent has been given by the information subjects;
2. 2. Where special provisions exist in laws or it is inevitable to observe the legal obligations;
3. 3. Where it is deemed necessary explicitly for the protection from impending danger to the life, body or financial profits of an information subject or a third party in cases where the information subject or his/her legal agent is not in a position to express an intention or where prior consent cannot be obtained as the relevant addresses are unknown; or
4. 4. When personal information is provided in a format that disables the identification of specific individuals for such purposes as the preparation of statistics, etc.

However, the Arts Center entrusts the following items of personal information processing with the consent of the information subjects:

• · Entrusted party (Outsourced service provider) : Interpark Inc.
• · Items of personal information: ID, full name, date of birth, payment date, and amount paid.
• · Contents of entrusted services: All of the ticketing services, including reservation and ticketing.

1. 1. Procedure for destroying personal information files

   The Arts Center destroys the relevant personal information files without delay upon termination of the period of retention to which the information subject has consented or when the purpose of processing the information subject’s personal information has been accomplished. Personal information transferred to a database will not be used for any other purposes, unless otherwise required under the relevant statutes.

2. 2. Method of destroying personal information

   Technical methods that disable the recovery or retrieval of personal information are used to destroy personal information kept in electronic files, whereas shredding or incineration is used to destroy personal information kept on hard copy (paper formats).

1. 1. Technical measures: Restriction of access to personal information, encryption of personal information, and security measures against hacking, etc.
2. 2. Administrative measures: Development and implementation of internal control plans, provision of security education for and minimization of employees responsible for handling personal information, and periodic internal audits.
3. 3. Physical measures: Control of access to computer rooms, data storage, etc.

1. 1. Purpose of use of cookies

   Cookies are used to provide optimized information to the users by analyzing the access frequency, visit times, use patterns, etc. of website members and non-member users.

2. 2. Method of set-up to reject cookies

   By selecting certain options on your web browser, you can allow all cookies, require your confirmation whenever a cookie is saved on your computer, or reject all cookies.

   • · Edge setting method: Review more > Setup > Cookie and sight authority at the top of the browser screen.
   • · Chrome setting method: Review more > Setup > Personal information and security at the top of the browser screen.
   • · Explorer setting method: Tools > Internet option > Personal information at the top of the browser screen/

1. 1. Personal information protection manager
   • Manager: President, Gyeonggi Arts Center
   • Contact phone: 031- 230- 3211
2. 2. Department in charge of protection of personal information
   • Name of department: Safety and Facility Team
   • Contact phone: 031- 230- 3236

1. 1. Department accepting requests for review of personal information
   • Name of department: Management Support Team
   • Contact phone: 031- 230- 3495
2. 2. The information subjects may also request to review their personal information through the Comprehensive Personal Information Portal of the Personal Information Protection Commission (www.privacy.go.kr) in addition to the department that accepts review requests under paragraph 1.

• · Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• · Personal Information Infringement Report Center: (without station code) 118 (privacy.kisa.or.kr)
• · Cyber Investigation Division, Supreme Prosecution Office: (without station code) 1301 (www.spo.go.kr)
• · Cyber Safety Bureau, National Police Administration: (without station code) 182 (cyberbureau.police.go.kr)