Andong Convention & Visitors Bureau (hereinafter referred to as 'the Company') complies with the "Act on Promotion of Information and Communications Network Utilization and Information Protection," the "Personal Information Protection Act," and related regulations and guidelines to protect users' personal information.

The Company informs you through this privacy policy about how users' personal information is being used, for what purposes, and what measures are being taken to protect personal information.

1. Purpose of Personal Information Processing (Collection and Use)

The Company processes personal information for the following purposes. The processed personal information will not be used for purposes other than those listed below, and prior consent will be sought if the purpose of use changes.

• Company, products, etc. (inquiries, responses, and other service provisions)

2. Personal Information Processing, Use, and Retention Period

The Company processes personal information only within the processing and retention period stipulated by law or agreed upon at the time of collection and promptly destroys it after the collection and use purpose is achieved.

Personal information is retained for one year to be used as reference material for consultation history. However, if it needs to be preserved under other laws, personal information may be retained without destruction.

3. Rights and Obligations of the Data Subject and How to Exercise Them

The data subject may request to view/modify/withdraw consent for registered personal information at any time. If the data subject contacts the Company's personal information management department in writing, by phone, or by email, we will take action without delay.

When the data subject requests correction of errors in personal information, the Company will not use or provide the personal information until the correction is completed.

For children under 14, their legal representative has the right to view or modify the child's personal information and withdraw consent for collection and use.

The Company will process personal information that has been terminated or deleted at the request of the data subject or legal representative in accordance with the privacy policy and will not view or use it for other purposes.

4. Items of Personal Information Processed

The Company collects the following personal information.

• Personal information collection items: name, email address, contact information (phone number or mobile phone number)

5. Destruction of Personal Information

When the purpose of collecting and using personal information is achieved or its retention period ends, the Company will promptly destroy the personal information, except when it needs to be kept in accordance with user consent, terms of use, or relevant laws.

Destruction method

• Printed materials or documents containing personal information: Shredding or incineration
• Electronic file format: permanent deletion in a way that cannot be recovered

6. Installation/Operation and Rejection of Automatic Personal Information Collection Devices: The Company does not use "cookies" that store and retrieve user information.

7. Measures to Ensure the Safety of Personal Information

The Company takes the following measures to ensure safety so that personal information is not lost, stolen, leaked, altered, or damaged when processing users' personal information:

Administrative measures

• We establish and implement internal management plans for the safe management of personal information.
• We conduct regular education and awareness-raising activities at least once a year for personal information handlers.
• We limit access to personal information to a minimum number of staff.

Technical measures

• The Company installs security programs and responds to external intrusions such as hacking to prevent personal information leakage and damage due to hacking or computer viruses.
• The data subject's personal information and password are encrypted and stored/managed, and separate security functions are used for safe management during transmission.

Physical measures

• We operate protected areas such as computer rooms and data storage rooms to control access.

8. Processing of Employees' Personal Information

The provisions of this privacy policy also apply to the processing of employees' personal information.

9. Personal Information Protection Officer

The Company designates a personal information protection officer as follows to oversee personal information processing tasks and handle user complaints and damage relief related to personal information processing:

Personal Information Protection Officer: OOO

If you need to report or consult about personal information infringement, please contact the following institutions:

• Korea Internet & Security Agency Personal Information Infringement Report Center (http://privacy.kisa.or.kr, Phone: +82-118)
• Supreme Prosecutors' Office Cyber Investigation Division (www.spo.go.kr, Phone: +82-1301)
• National Police Agency Cyber Safety Bureau (www.cyberbureau.police.go.kr, Phone: +82-182)

10. Changes in the Privacy Policy

This privacy policy is effective from the enforcement date (Aug. 24, 2022), and if there are additions, deletions, or corrections to the content due to laws or policies, we will notify you through notices before the implementation of the changes.