“K. Fairs Co., Ltd.” (hereinafter referred to as the “Company”) establishes and discloses the following personal information processing policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to promptly and smoothly handle related grievances.
1. Purpose of Processing and Items of Personal Information Collected
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
A. Purpose of Processing
(1) Website Membership Sign-up and Service Application/Management
Personal information is processed for the purpose of identity verification and authentication for providing member services, maintaining and managing membership status, identity verification for the limited real-name system, preventing fraudulent use of services, providing various notices and notifications, handling grievances, etc.
(2) Fulfillment of Contracts and Settlement for Service Provision
Personal information is processed for the purpose of providing services, delivering goods, sending contracts and invoices, providing content, offering customized services, payment and settlement of fees, debt collection, etc.
(3) Use in Marketing, Advertising, Statistical Analysis, and Exhibition Auditing
Providing marketing information such as promotions, events, and campaigns for exhibitions hosted by the Company, and shipping prizes; conducting surveys; providing services and displaying advertisements based on demographic characteristics; analyzing the frequency of access or statistics on members' product purchases and service usage; recommending services, products, and information; inferring market trends; conducting market research; utilizing statistical analysis data; exhibition auditing, etc.
B. Collected Items
To achieve the above processing purposes, the following personal information is collected.
Collected Items
| Category |
Required |
Optional |
| General Member |
Name, email, mobile phone number, residential area, fields of interest, purpose of visit, previous attendance history, how you heard about us |
Address |
| Buyer Member |
Name, email, mobile phone number, company name, company/representative name, postal/website address, department, position, business card image, industry classification, purchasing authority, fields of interest, purpose of visit, previous attendance history, how you heard about us, newsletter subscription status
|
Detailed company information, company contact number, company status, country, residential area |
| Exhibiting Company Member |
Name, email, business registration number, copy of business registration certificate, company name, representative's name, business type/item, company address, mailing address, company introduction/details, company representative image/logo, information of person in charge/person in charge of tax invoices
|
N/A |
In addition, personal information items may be automatically generated and collected during the use of internet services (IP address, cookies, MAC address, service usage records, visit records, fraudulent usage records, etc.).
※ The data subject may refuse to consent to the collection and use of personal information. However, as the above information is essential for providing the service, refusal to consent may prevent you from signing up for membership and using online/offline services.
C. Photo and Video Recording
On-site photos and videos will be taken during the exhibition period. The captured photos and videos may be used as promotional materials for the exhibition. Members may later request for their images to be mosaicked or refuse the use of their photos/videos.
2. Methods of Collecting Personal Information
When the Company collects personal information, it always obtains the consent of the party involved. Information that may infringe on fundamental human rights, such as race, origin, place of birth, ideology and political affiliation, criminal records, and health status, is not collected unless there is user consent or a provision in the law. Personal information is collected through the following methods:
A. When the user consents to the collection of personal information and directly enters the information during membership registration and service use.
B. Participation in on/offline exhibition events.
C. Information provided via webpage, email, fax, telephone, etc., during consultation with the customer center.
D. When personal information is provided by affiliated services or organizations.
3. Processing and Retention Period of Personal Information
A. In principle, the Company destroys personal information without delay after the purpose of its collection and use has been achieved.
Processing and Retention Period of Personal Information
| Category |
Items |
Key Items |
Retention Period |
| Required |
Membership registration and online/offline service use |
Name, email, mobile phone number, company name, representative's name, postal/website address, department, position, business card image, industry classification, purchasing authority, fields of interest, purpose of visit, previous attendance history, how you heard about us, newsletter subscription status |
Until withdrawal of membership |
| Exhibition auditing |
Name, mobile phone number, email address, company name, department, position |
| Marketing and prize shipment |
Marketing and prize shipment Address, mobile phone number, email address, marketing consent status Until withdrawal of membership or withdrawal of consent |
Until withdrawal of membership or withdrawal of consent |
B. Furthermore, if it is necessary to preserve personal information in accordance with the provisions of relevant laws, the Company will store the personal information for a certain period as stipulated by those laws.
• Governing Law: Protection of Communications Secrets Act
• Items: Service visit records
• Retention Period: 3 months
4. Provision of Personal Information to Third Parties
The Company processes the data subject's personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the data subject's consent or special provisions in the law.
A. The Company provides personal information to third parties as follows to enhance the performance of service users.
(1) Secretariat of the International Climate Tech Air Industry Expo
• Recipient of personal information: Co-host (Korea Air Cleaning Association)
• Purpose of use by the recipient: Customer management (handling complaints, surveys, providing benefits/prizes, etc.), sending industry information, etc.
• Personal information items provided: Name, company name, department, position, (company) contact number, (mobile) phone number, email address
• Retention and use period by the recipient: Until the purpose of use is achieved or the data subject expresses their intent to opt-out.
(2) Association of Korean Exhibition Industry (AKEI)
• Recipient of personal information: Association of Korean Exhibition Industry (AKEI)
• Purpose of use by the recipient: Exhibition verification for international exhibition certification.
• Personal information items provided: Name, company name, department, position, (company) contact number, (mobile) phone number, email address
• Retention and use period by the recipient: Until the completion of exhibition certification.
(3) Ministry of Health and Welfare / Korea Disease Control and Prevention Agency / Gangnam-gu Office
• Recipient of personal information: Ministry of Health and Welfare / Korea Disease Control and Prevention Agency / Gangnam-gu Office and other government agencies performing infectious disease prevention/management.
• Purpose of use by the recipient: Prevention of infectious diseases, blocking the spread of infection, epidemiological investigation in case of a confirmed case.
• Personal information items provided: Name, (mobile) phone number, email address, place of residence, country.
• Retention and use period by the recipient: Until the purpose of use is achieved.
※ The data subject may refuse to consent to the collection and use of personal information. However, as the above information is essential for providing the service, refusal to consent may prevent you from signing up for membership and using services.
5. Entrustment of Personal Information Processing
A. For smooth personal information processing, the Company entrusts personal information processing tasks as follows.
(1) Exhibition Registration/Admission and Mobile Invitation Sending Service Operation
• Trustee (Contractor): GoVent Inc.
• Entrusted tasks: On-site ticket sales and identity verification for exhibition entry, data processing, operation/management of mobile invitation sending service.
(2) Online Service Operation
• Trustee (Contractor): Webvista
• Entrusted tasks: Website maintenance and server management, data processing tasks, etc.
(3) Online Opt-out Service Operation
• Trustee (Contractor): Cheomsoft
• Entrusted tasks: Entrusted operation of the free email opt-out service.
B. When entering into an entrustment agreement, the Company manages and supervises the entrusted company to ensure compliance with relevant laws and regulations.
C. If the content of the entrusted tasks or the trustee changes, we will disclose it through this Privacy Policy without delay.
6. Rights and Obligations of Data Subjects and Their Legal Representatives, and How to Exercise Them
A. The data subject may exercise their rights to view, correct, delete, or suspend the processing of their personal information at any time with respect to the Company.
B. The exercise of rights can be done in writing, by e-mail, or by fax (FAX) in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.
C. The exercise of rights can be done through an agent, such as a legal representative of the data subject or a person who has been delegated. In this case, a power of attorney according to Form No. 11 of the Enforcement Rule of the Personal Information Protection Act must be submitted.
D. The right to request access to and suspension of processing of personal information may be restricted under Articles 35(5) and 37(2) of the Personal Information Protection Act.
E. A request for correction and deletion of personal information cannot be made if that personal information is specified as an object of collection in other laws.
F. The Company verifies whether the person who made the request for access, correction/deletion, or suspension of processing is the data subject or a legitimate representative.
7. Destruction of Personal Information
A. The Company destroys the relevant personal information without delay when it becomes unnecessary, such as upon the expiration of the personal information retention period or the achievement of the processing purpose.
B. If personal information must be retained in accordance with other laws even after the retention period agreed upon by the data subject has expired or the processing purpose has been achieved, the relevant personal information is transferred to a separate database (DB) or stored in a different location.
C. The procedure and method for destroying personal information are as follows:
(1) Destruction Procedure
The Company selects the personal information for which a reason for destruction has occurred and destroys the personal information with the approval of the personal information protection officer of the <Business/Organization Name>.
(2) Destruction Method
The Company destroys personal information recorded and stored in electronic file format in a way that the records cannot be reproduced, and personal information recorded and stored on paper documents is shredded with a shredder or incinerated.
8. Matters Concerning the Installation, Operation, and Rejection of Automatic Personal Information Collection Devices
A. The Company uses "cookies" that store and frequently retrieve user information to provide individualized, customized services to users.
B. A cookie is a small amount of information that the server (http) used to operate a website sends to the user's computer browser and may also be stored on the hard disk of the user's PC.
(1) Purpose of using cookies: They are used to identify the user's visit and usage patterns for each service and website visited, popular search terms, security access status, etc., to provide optimized information to the user.
(2) Installation, operation, and rejection of cookies: You can refuse to store cookies by setting the options in [Tools > Internet Options > Privacy menu] at the top of your web browser.
(3) Difficulties may arise in using customized services if you refuse to store cookies.
9. Measures to Ensure the Security of Personal Information
The company is taking the following measures to ensure the security of personal information.
A. Administrative measures: Establishment and implementation of an internal management plan, regular employee training, etc.
B. Technical measures: Management of access rights to personal information processing systems, encryption of unique identification information, installation of security programs.
10. Chief Privacy Officer
a. The Company is responsible for overseeing all tasks related to the processing of personal information and has designated a Chief Privacy Officer as follows to handle complaints and provide remedies for damages for data subjects related to personal information processing.
(1) Chief Privacy Officer
• Name: Hyungjoon Ko
• Position: Manager
• Contact: 070-4286-5916, hjko@kfairs.com
b. Data subjects may inquire about all personal information protection-related inquiries, complaint handling, damage relief, etc., that occurred while using the Company's services (or business) to the Chief Privacy Officer. The Company will respond to and process the inquiries of data subjects without delay.
11. Requests to Access Personal Information
Data subjects may request access to their personal information under Article 35 of the Personal Information Protection Act from the person in charge below. The Company will strive to process the data subject's requests for access to personal information promptly.
(1) Department for Receiving and Processing Requests for Access to Personal Information
• Person in charge: Eunjin Jang
• Contact: 070-4286-6794, ejjang@kfairs.com
12. Remedies for Infringement of Rights and Interests
Data subjects may inquire about damage relief, counseling, etc., for personal information infringement to the institutions below.
<The institutions below are separate from the Company. If you are not satisfied with the results of the Company's own personal information complaint handling and damage relief, or if you need more detailed help, please contact them.>
(1) Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
• Responsibilities: Reporting personal information infringement facts, applying for counseling
• Website: privacy.kisa.or.r
• Phone: (without area code) 118
• Address: 3F, 9 Jinheung-gil, Naju-si, Jeollanam-do (58324)
(2) Personal Information Dispute Mediation Committee
• Responsibilities: Applying for personal information dispute mediation, collective dispute mediation (civil resolution)
• Website: www.kopico.go.kr
• Phone: (without area code) 1833-6972
• Address: 4F, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul (03171)
(3) Supreme Prosecutors' Office Cybercrime Investigation Division: 02-3480-3573 (www.spo.go.kr)
(4) National Police Agency Cyber Bureau: 182 (http://cyberbureau.police.go.kr)
13. Duty of Notification
If there are any additions, deletions, or modifications to the above content, the Company will notify members through the notice board at least 7 days before the implementation date. Any significant changes to the members' important rights or obligations will be announced at least 30 days in advance.
• Date of announcement of changes to the Privacy Policy: August 20, 2025
• Effective date of the Privacy Policy: September 20, 2025