GYEONGGI ARTS CENTER

Article 1. Purpose of Processing Personal Information

The Art Center processes personal information for the following purposes. Personal information being processed will not be used for purposes other than those listed below. If the purpose of use changes, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be taken.

• 1Membership Registration and Management
  • Personal information is processed to confirm membership intent, identify and authenticate members for membership-based services, maintain and manage membership status, prevent misuse of services, verify parental consent when processing personal information of children under 14, and for various notifications and grievance handling.
• 2Handling User Complaints or Disputes
  • Personal information is processed for verifying the identity of users, contacting and investigating to confirm facts, and notifying the results of the process.
• 3Use for Marketing and Advertising
  • Personal information is processed for providing information on major performances and exhibitions, advertising information, and for organizing various rentals and events.

Article 2. Registered Personal Information Files

The purposes, retention periods, and items of the personal information files that the Art Center registers and discloses in accordance with Article 32 of the Personal Information Protection Act can be checked on the Personal Information Portal.
※ Personal Information Portal(www.privacy.go.kr) → Personal Services → Exercising Rights of Data Subjects → Request for Access to Personal Information → Search Personal Information File List → Enter the Institution Name: ‘Gyeonggi Arts Center Foundation’
Direct link to Gyeonggi Arts Center personal information files

Article 3. Processing of Personal Information of Children Under the Age of 14

• 1When collecting personal information from children under the age of 14, the Art Center obtains the consent of the legal guardian and collects only the minimum personal information necessary to provide the service.
• 2In addition, when collecting personal information of children in relation to the Art Center’s purposes of processing personal information, separate consent is obtained from the legal guardian.
• 3When collecting personal information from children under 14, the Art Center may request only the minimum information such as the legal guardian’s name and contact information, display the consent content on the website so that the legal guardian can indicate their consent, and verify that a lawful guardian has provided consent by notifying them via SMS.

Article 4. Retention and Processing Period of Personal Information

• 1The Art Center processes personal information within the period of retention and use prescribed by law or within the period of retention and use consented to by the data subject at the time of collection.
• 2The retention and use periods for each type of personal information are as follows:
  • 1Website Membership Registration and Management: Until withdrawal.
    However, in the following cases, until the relevant reason is resolved:
    1) If an investigation or inquiry is underway due to a violation of related laws, until the investigation or inquiry is completed.
    2) If there are remaining claims or debts arising from website use, until the settlement of the relevant claims or debts.
  • 2Handling User Complaints or Disputes: 3 years after the completion of processing.
  • 3Processing and Retention of Personal Information under Article 6(1) of the Enforcement Decree of the 「Electronic Commerce Act」: 5 years.

Article 5. Procedures and Methods for Destruction of Personal Information

• 1The Art Center promptly destroys personal information when it is no longer necessary due to the expiration of the retention period, achievement of the processing purpose, or other reasons.
• 2If the retention period of personal information consented to by the data subject has expired or the processing purpose has been achieved, but personal information must be retained under other laws, the information is transferred to a separate database (DB) or stored in a different location.
• 3The procedures and methods for destroying personal information are as follows:
  • 1Destruction Procedure
    The Art Center selects personal information subject to destruction and destroys it with the approval of the Center’s Personal Information Protection Officer.
  • 2Destruction Method
    Personal information recorded or stored in electronic files is destroyed so that it cannot be reproduced. Personal information recorded or stored on paper documents is destroyed by shredding or incineration.

Article 6. Provision of Personal Information to Third Parties

• 1The Art Center provides personal information to third parties only in cases corresponding to Articles 17 and 18 of the Personal Information Protection Act, such as when the data subject has given consent or when it is required by law.
• 2If the Art Center provides personal information to a third party, such provision will be disclosed or notified through this Privacy Policy.

Article 7. Entrustment of Personal Information Processing

• 1To ensure smooth handling of personal information tasks, the Art Center entrusts the processing of personal information to external service providers as follows.
  • Download: Gyeonggi Arts Center – Current Status of Personal Information Processing Consignment
• 2When entering into a consignment contract, the Art Center specifies in the agreement — in accordance with Article 26 of the Personal Information Protection Act — matters related to the prohibition of personal information processing for purposes other than performing the consigned work, technical and managerial protection measures, restrictions on sub-consignment, management and supervision of the consignee, and liability for damages. The Art Center also supervises whether the consignee handles personal information safely.
• 3Pursuant to Article 26 (6) of the Personal Information Protection Act, if a consignee re-entrusts the processing of personal information, it must obtain prior consent from the Art Center.
• 4In the event of any changes to the details of the consigned work or the consignee, such changes will be promptly disclosed through this Privacy Policy.

Article 8. Overseas Transfer of Personal Information

• 1The Art Center provides and entrusts the personal location information of internal employees for attendance management purposes to an overseas entity as follows.
  • 1Legal Basis for Overseas Transfer
    In accordance with Article 28-8 (1) 1 of the Personal Information Protection Act, separate consent has been obtained from the data subject regarding the overseas transfer.
  • 2Items of Personal Information Entrusted for Processing: Name, email address, attendance records, location records, employee number, date of joining and leaving the organization
  • 3Country to Which Personal Information Is Transferred
    Japan (AWS)
  • 4Timing and Method of Personal Information Transfer
    Immediately upon use, via remote transmission over a network
  • 5Recipient (Consignee) of the Personal Information (Entrusted Company)
    Donuts Co., Ltd. (Contact: +82-70-7777-5577)
  • 6Purpose of Personal Information Use
    Employee attendance management
  • 7Retention and Use Period of Personal Information: To be destroyed five years after the employee’s resignation (previously three years)
  • 8Method, Procedure, and Effect of Refusing the Transfer of Personal Information
    Since the service provider’s servers are located overseas, refusal of the overseas transfer will make the use of the service impossible. If you do not wish your personal information to be transferred overseas, you may contact the attendance management staff to request an alternative.

Article 9. Measures to Ensure the Security of Personal Information

The Art Center takes the following measures to ensure the security of personal information.

• 1Administrative Measures: Establishment and implementation of internal management plans, operation of a dedicated organization, and regular employee training.
• 2Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of personal information, and installation and updates of security programs.
• 3Physical Measures: Access control to computer rooms and data storage facilities.

Article 10. Processing of Pseudonymized Information

In accordance with Article 28-2 of the Personal Information Protection Act, the Art Center processes personal information in a pseudonymized form so that individuals cannot be identified, and utilizes it for purposes such as statistical compilation, scientific research, and public record preservation as follows.

• → Matters Related to the Processing, Provision to Third Parties, and Entrustment of Pseudonymized Information
  • Download: Gyeonggi Arts Center – Processing of Pseudonymized Information

• → Measures to Ensure the Security of Pseudonymized Information (pursuant to Article 28-4 of the Personal Information Protection Act)
  • - Administrative Measures: Establishment and implementation of internal management plans, regular employee training
  • - Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
  • - Physical Measures: Access control to computer rooms and data storage facilities

Article 11. Rights and Obligations of Data Subjects and Legal Representatives

• 1Data subjects may, at any time, exercise their rights with respect to the Art Center, including requests to access, correct, delete, suspend the processing of, or withdraw consent for their personal information, as well as the right to object to or request an explanation regarding automated decision-making.
  ※ Requests to access personal information of children under the age of 14 must be made directly by their legal guardian. Data subjects aged 14 or older who are minors may exercise their rights either personally or through their legal guardian.
• 2In accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, data subjects may exercise their rights by submitting a request in writing, by email, or by fax. The Art Center will promptly take necessary action in response.
  • - Data subjects may directly view, modify, or delete their personal information at any time through “My Page > Edit Member Information” on the website, or request access via “Customer Service > Voice of the Customer > Online Inquiry.”
  • - Data subjects may withdraw their consent for the collection and use of personal information at any time by selecting “Withdraw Membership.”
  • - Data subjects may request an explanation of or object to automated decision-making at any time through “Customer Service > Voice of the Customer > Online Inquiry.”
• 3Data subjects may also exercise their rights through a legal representative or an authorized agent. In such cases, a power of attorney form in accordance with Form No. 11 of the “Notice on Personal Information Processing Methods” must be submitted.
• 4The right to request access or suspension of personal information processing may be restricted pursuant to Articles 35(4) and 37(2) of the Personal Information Protection Act.
• 5If the personal information is required to be collected under other laws or regulations, deletion of such information cannot be requested.
• 6If the data subject has given prior consent to automated decision-making, has been notified of it in advance through a contract, or if it is clearly stipulated by law, the right to object to the automated decision is not recognized; however, the data subject may request an explanation or review.
  • - Requests to object to or explain automated decisions may be denied if there are legitimate reasons, such as when fulfilling the request may unfairly infringe upon another person’s life, body, property, or other rights and interests.
• 7When a data subject requests access, correction, deletion, suspension of processing, or an objection/explanation regarding automated decision-making, the Art Center verifies whether the requester is the data subject or an authorized representative.
• 8Requests to access personal information may be submitted to the department below. The Art Center will make every effort to process access requests promptly.
  • → Department for Receiving and Processing Access Requests
    • Department: Management Support Team
    • Contact: +82-31-230-3496

Article 12. Personal Information Protection Officer

• 1The Art Center appoints the following Personal Information Protection Officer to take overall responsibility for personal information processing and to handle complaints and damage relief related to personal information.
  • → Personal Information Protection Officer
    • Officer: Director of Planning and Management Office
    • Contact: +82-31-230-3217
  • → Department in Charge of Personal Information Protection
    • Department: Safety and Facilities Team
    • Contact: +82-31-230-3251
• 2Data subjects may contact the Personal Information Protection Officer or the relevant department for any inquiries, complaints, or requests for remedies related to personal information protection that arise while using the Art Center’s services (or business). The Art Center will promptly respond to and process such inquiries.

Article 13. Remedies for Infringement of Rights

• 1To seek remedies for personal information infringement, data subjects may file for dispute resolution or counseling with the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency (KISA), and other relevant organizations listed below.
  • 1Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
  • 2Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
  • 3Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
  • 4National Police Agency: 182 (ecrm.cyber.go.kr)
• 2The Art Center is committed to protecting the right to informational self-determination and providing consultation and relief for personal information infringement. If you need to report or consult regarding personal information issues, please contact the department below.
  • → Customer Consultation and Reporting for Personal Information Protection
    • Department: Communication Team
    • Contact: +82-31-230-3241
• 3If a data subject’s rights or interests are infringed upon by a disposition or omission made by the head of a public institution in response to a request made under Articles 35 (Access), 36 (Correction/Deletion), or 37 (Suspension of Processing) of the Personal Information Protection Act, the data subject may file an administrative appeal in accordance with the Administrative Appeals Act.
  • → Central Administrative Appeals Commission: 110 (www.simpan.go.kr)

Article 14. Installation and Operation of Fixed Video Information Processing Devices

• 1The Art Center installs and operates fixed CCTV (video surveillance) systems as follows.
  • 1Legal Basis and Purpose of Installation: Facility safety and fire prevention at the Art Center
  • 2Number, Location, Coverage, Recording Time, Retention Period, Storage Location, Responsible Manager, and Authorized Personnel
    ※ Detailed information can be found in the CCTV Equipment List.
    Download: Gyeonggi Arts Center CCTV Equipment List
  • 3Processing of Personal Video Information: Records of use, provision to third parties, destruction, and access requests are maintained, and upon expiration of the retention period, the data are permanently deleted using an unrecoverable method (shredding or incineration for printed copies).
  • 4Methods and Locations for Viewing Personal Video Information
    • - How to View: Contact the responsible manager in advance and visit the institution in person.
  • 5Measures for Requests to View or Verify Personal Video Information
    Data subjects may request access to or confirmation/deletion of personal video information by submitting a “Video Information Request Form [Appendix Form 1]” to the CCTV operator.
    Requests are limited to footage containing the data subject.
    The Art Center will take necessary measures without delay upon such requests.
    Download: Video Information Request Form
  • 6Security Measures for Personal Video Information
    Personal video information processed by the Art Center is securely managed through encryption and other safeguards. The Art Center grants differentiated access privileges for personal information and records details such as the creation date, purpose of access, name of the person accessing, and time of access to prevent alteration or forgery. Locking devices are also installed for the safe physical storage of video information.
  • 7Changes to the CCTV Operation and Management Policy
    This CCTV Operation and Management Policy was established in January 2025. In the event of additions, deletions, or modifications due to changes in laws, policies, or security technologies, the reasons and details of such changes will be announced on the institution’s website at least seven days before enforcement.
• 2Notwithstanding Paragraph 1 (6), requests for access, confirmation, or deletion may be denied in the following cases. In such instances, the data subject will be notified (including through information networks) within 10 days of the reason for refusal and the method of appeal.
  • 1If compliance would seriously hinder criminal investigations, prosecutions, or trials
  • 2If it is technically difficult to delete only specific data subject’s video information
  • 3If the requested action could significantly infringe upon another person’s privacy
  • 4If there are other legitimate public interest reasons for refusal

Article 15. Changes to the Privacy Policy

• 1This Privacy Policy shall take effect on February 10, 2025.
• 2Previous versions of this Privacy Policy can be found below.