Terms of Use and Privacy Policy for 2025

Article 1 Purpose of processing personal information

The 'HackTheon Sejong Cyber Security Conference 2025 Organizing Committee' processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and in the event of a change in the purpose of use, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
1. Website user registration and management
- Confirmation of user registration intent, user management, prevention of unauthorized use of services, preservation of records for various notifications and notices, and dispute resolution
2. Confirmation according to provision of various services
- Provision of services for participation in various programs
- Identification for confirmation and change of service application contents

Article 2 Processing and retention period of personal information

The 'HackTheon Sejong Cyber Security Conference 2025 Organizing Committee' processes and retains personal information within the retention and use period of personal information stipulated by law or the retention and use period of personal information agreed upon by the information subject when collecting personal information. The processing and retention periods for each personal information are as follows:
1. Website user registration and management
- until the user withdraws from the website
2. Provision of various services
- until the service provision is completed

Article 3 Matters concerning entrustment of personal information processing

① The 'HackTheon Sejong Cyber Security Conference 2025 Organizing Committee' is entrusting the personal information processing work as follows to ensure smooth processing of personal information work.

② When concluding a consignment contract, the 'HackTheon Sejong Cyber Security Conference 2025 Organizing Committee' states in the contract or other documents, in accordance with Article 26 of the Personal Information Protection Act, matters related to prohibition of processing personal information for purposes other than the performance of the consigned work, technical and administrative protection measures, restrictions on re-consignment, management and supervision of the consignee, and liability for damages, and supervises whether the consignee safely processes personal information.
③ In the event that the content of the consigned work or the consignee changes, this will be disclosed without delay through this personal information processing policy.

Article 4 Rights, obligations and exercise methods of data subjects and legal representatives

① The information subject may exercise the rights to request access to, correction of, deletion of, or suspension of processing of personal information against the HackTheon Sejong Cyber Security Conference 2025 Organizing Committee at any time.
② The exercise of rights under Paragraph 1 may be made to the HackTheon Sejong Cyber Security Conference 2025 Organizing Committee in writing, by e-mail, fax, etc. in accordance with Article 41 Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the HackTheon Sejong Cyber Security Conference 2025 Organizing Committee will take action on this without delay.
③ The exercise of rights under Paragraph 1 may be made through a proxy, such as the information subject's legal representative or authorized person. In this case, a power of attorney in the format of Appendix 11 of the "Public Notice on Personal Information Processing Methods (No. 2020-7)" must be submitted.
④ The information subject's rights may be restricted in accordance with Article 35 Paragraph 4 and Article 37 Paragraph 2 of the Personal Information Protection Act regarding requests to access or suspend processing of personal information.
⑤ Requests for correction and deletion of personal information cannot be made if the personal information is specified as a collection target in other laws.
⑥ The HackTheon Sejong Cyber Security Conference 2025 Organizing Committee verifies whether the person making the request for inspection, correction/deletion, or suspension of processing is the person himself/herself or a legitimate agent when requesting inspection in accordance with the information subject's rights.

Article 5 Items of personal information processed

The HackTheon Sejong Cyber Security Conference 2025 Organizing Committee processes the following personal information items.
1. Website user registration and management
- Required items: Korean/English name, affiliation, position, contact information, email, phone number, mobile phone number
2. The following personal information items may be automatically generated and collected during the use of Internet services.
- IP address, cookies, MAC address, service usage history, visit history, etc.

Article 6 Destruction of personal information

① When personal information becomes unnecessary due to the expiration of the personal information retention period, achievement of the processing purpose, etc., the HackTheon Sejong Cyber Security Conference 2025 Organizing Committee destroys the relevant personal information without delay.
② When the personal information retention period agreed upon by the information subject has expired or the processing purpose has been achieved but the personal information must continue to be retained in accordance with other laws and regulations, the personal information will be transferred to a separate database (DB) or stored in a different location.
③ The procedures and methods for destroying personal information are as follows.
1. Destruction Procedure
The HackTheon Sejong Cyber Security Conference 2025 Organizing Committee selects the personal information for which a reason for destruction has occurred and destroys the personal information with the approval of the HackTheon Sejong Cyber Security Conference 2025 Organizing Committees' personal information protection officer.
2. Destruction Method
The HackTheon Sejong Cyber Security Conference 2025 Organizing Committee destroys personal information recorded and stored in electronic file formats so that the records cannot be reproduced, and destroys personal information recorded and stored in paper documents by shredding or incinerating them.

Article 7 Measures to ensure the safety of personal information

The 'HackTheon Sejong Cyber Security Conference 2025 Organizing Committee' is taking the following measures to ensure the safety of personal information.
1. Administrative measures: Establishment and implementation of an internal management plan, regular employee training, etc.
2. Technical measures: Management of access rights to personal information processing systems, installation of an access control system, encryption of unique identification information, installation of security programs, etc.
3. Physical measures: Access control to computer rooms, data storage rooms, etc.

Article 8 Matters concerning the installation, operation and refusal of automatic personal information collection devices

The HackTheon Sejong Cyber Security Conference 2025 Organizing Committee does not use 'cookies' to store and periodically retrieve usage information in order to provide personalized services to users.

Article 9 Personal Information Protection Manager

① The HackTheon Sejong Cyber Security Conference 2025 Organizing Committee is responsible for the overall management of personal information processing, and has designated a personal information protection officer as follows to handle complaints and provide remedies for damages from information subjects related to personal information processing.
▶ Personal Information Protection Officer
- Affiliation: Mac & Whip Co., Ltd.
- Officer: Team Leader Choi Cheol-gyu
- Telephone: +82-70-5172-4128
② Information subjects may inquire with the personal information protection officer regarding all inquiries, complaint handling, and remedies related to personal information protection that arise while using this website. The personal information protection officer will respond and process the information subject's inquiries without delay.
③ Information subjects may request access to their personal information in accordance with Article 35 of the Personal Information Protection Act to the personal information protection officer. The personal information protection officer will endeavor to ensure that information subjects' requests to access their personal information are processed promptly.

Article 10. Methods of relief for infringement of rights

In order to receive relief for personal information infringement, the data subject may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, etc. For other reports or consultations on personal information infringement, please contact the following organizations.
1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
3. National Police Agency: 182 (cyberbureau.police.go.kr)
4. National Police Agency Cyber ​​Investigation Bureau: 02-3150-1058/1659/0234/0233
Any person whose rights or interests have been infringed upon by a disposition or inaction by the head of a public institution in response to a request pursuant to Article 35 (Provision of Personal Information), Article 36 (Correction/Deletion of Personal Information), or Article 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act may request an administrative review in accordance with the Administrative Appeals Act.
※ For more detailed information on administrative appeals, please refer to the Central Administrative Appeals Commission (www.simpan.go.kr) website.

Article 11 Changes to personal information processing policy

This Privacy Policy applies from April 29, 2025.