Personal Information Processing Policy

Article 1 (Purpose of processing personal information)

㈔ Bucheon City Techno Park Development Council (hereinafter “Council”) processes personal information for the following purposes. The processed personal information will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Homepage membership registration and management — identification and authentication, maintenance and management of membership qualifications, prevention of illegal use of services
2. Registration and posting of resident company information — member company search, AI search optimization support, multilingual automatic Translation
3. Processing of complaints and consultations - Confirmation of application contents, contact/notification for factual investigation, notification of processing results
4. Reception and processing of applications for various support projects such as AI optimization, blogging, and video production
5. Operation of community bulletin board and sharing of information among member companies

Article 2 (Personal information items collected and collection methods)

1. Collection items

• Required items: Company name, contact person’s name, email, contact information (mobile phone or office phone)
• Selected items: Homepage URL, company address, representative name, request message
• Automatically collected items: IP address, cookie, access date and time, service use record, browser information (User-Agent)

2. Collection method

• Direct input through the application, inquiry, or membership registration form on the website
• Automatically generated and collected during service use (cookies, access logs)

Article 3 (Processing and retention period of personal information)

1. The Council shall determine the period of retention and use of personal information in accordance with the law or from the information subject. Personal information is processed and retained within the personal information retention and use period agreed upon when collecting personal information.
2. The processing and retention period for each item is as follows.
   • Membership registration and management: Until membership withdrawal (However, if an investigation or investigation for violation of related laws is in progress, until the end of the relevant case)
   • Application information for various support projects: 1 year after completion of registration process
   • Complaint processing record: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
   • Access log record: 3 months (Communication Secrets Protection Act)

Article 4 (Provision of personal information to third parties)

1. The Council processes the personal information of the information subject only within the scope of the purposes specified in Article 1, and is subject to Articles 17 and 18 of the Personal Information Protection Act, including the consent of the information subject and special provisions of the law. Personal information is provided to third parties only when applicable.
2. Currently, the Council does not provide personal information to third parties. If provision to a third party is required in the future, separate consent will be obtained from the information subject in advance.

Article 5 (Entrustment of Personal Information Processing)

For smooth processing of personal information, the Council may entrust personal information processing as follows.

• Entrustee (Consignee): Co., Ltd. Cafe24 (hosting service provided)
• Content of entrusted work: Server hosting and data storage for website operation

When concluding a consignment contract, in accordance with Article 26 of the Personal Information Protection Act, the Council specifies matters such as prohibition of processing personal information for purposes other than the purpose of performing consignment work, technical and managerial protection measures, restrictions on re-entrustment, and management and supervision of the consignee in documents such as the contract.

Article 6 (Rights, obligations and exercise methods of information subjects)

1. The information subjects may exercise the following rights against the council at any time.
   • Request to view personal information
   • Request for correction if there is an error, etc.
   • Request for deletion
   • Request for suspension of processing
2. The exercise of rights under Paragraph 1 may be made to the Council in writing, e-mail, etc. in accordance with Paragraph 1 of Article 41 of the Enforcement Decree of the Personal Information Protection Act, and the Council will respond without delay. We will take action.

Article 7 (Destruction of Personal Information)

1. When personal information becomes unnecessary, such as when the personal information retention period has passed or the purpose of processing has been achieved, the Council destroys the relevant personal information without delay.
2. The destruction procedures and methods are as follows.
   • Electronic file format: Permanently deleted using technical methods that cannot be recovered or reproduced (e.g., SQL DELETE and then discarding backup copies)
   • Paper documents: Shredded with a shredder or incinerated

Article 8 (Measures to ensure the safety of personal information)

The Council shall The following measures are being taken to ensure safety.

• Administrative measures: Establishment and implementation of internal management plan, regular employee training
• Technical measures: Management of access rights to personal information processing system, installation of access control system, encryption of unique identification information, installation of security program
• Physical measures: Access to computer room, data storage room, etc. Control

Article 9 (Cookie operation and rejection)

1. The Council uses “cookies” to store usage information and retrieve it from time to time in order to provide individualized services to users.
2. Users may refuse to store cookies through web browser options. However, if you refuse to store cookies, you may have difficulty using some services.
3. Example of cookies used: btpa_lang (remember the language selected by the user) — Expires 1 year

Article 10 (Personal Information Protection Officer)

The Council is responsible for overall handling of personal information and handles complaints from information subjects related to personal information processing. In order to provide compensation and relief for damages, a person in charge of personal information protection is designated as follows.

Article 11 (Methods of relief for infringement of rights and interests)

In order to receive relief from personal information infringement, the information subject may contact the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency, or the Korea Internet & Security Agency. You can apply for dispute resolution or consultation at the Personal Information Infringement Reporting Center.

• Personal Information Dispute Mediation Committee : 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Reporting Center : 118 (privacy.kisa.or.kr)
• Cyber Investigation Division, Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
• National Police Agency Cyber Investigation Bureau: 182 (ecrm.cyber.go.kr)

Article 12 (Revision Notice)

This personal information processing policy is effective in June 2026 It will be applied from the 25th, and if there are additions, deletions, or corrections of changes in accordance with laws and policies, they will be notified through a notice 7 days prior to the implementation of the changes.