Privacy Policy

Effective Date: January 1, 2025

The Korea Innovation Design Association (hereinafter "Association") establishes and discloses the following privacy policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to promptly and smoothly handle related complaints.

Article 1 (Purpose of Processing Personal Information)

The Association processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those stated below, and if the purpose of use changes, the Association will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Member Registration and Management
   • Verification of membership intention, identification and authentication for membership services, maintenance and management of membership
   • Prevention of fraudulent use of services, various notices and notifications, handling of complaints
   • Items collected: Email, password, name, mobile phone number, affiliation, zip code, address, detailed address
2. Contest Participation and Work Submission
   • Receipt of contest participation applications, work submission and receipt management
   • Judging process and result notification, winner selection and awards
   • Items collected: Work information (work name, description, keywords, images, etc.), registrant information (name, contact, email, address), designer information (name, affiliation)
3. Entry Fee Payment and Refund
   • Confirmation of entry fee payment, refund processing
   • Items collected: Depositor name, deposit date and time, deposit account information
4. Delivery of Notices and Announcements
   • Notification of important matters such as contest schedule changes, judging results, winner announcements, etc.
   • Items collected: Email, mobile phone number
5. Promotion and Marketing
   • Exhibition of award-winning works, production of catalogs, use of promotional materials
   • Notification of next contest, sending of design-related newsletters, invitation to partnership events (only for members who have agreed to receive marketing information)
   • Items collected: Work information, designer information, email, mobile phone number, name, affiliation (when marketing consent is given)

Article 2 (Processing and Retention Period of Personal Information)

1. The Association processes and retains personal information within the period of retention and use of personal information in accordance with laws and regulations or the period of retention and use of personal information agreed upon when collecting personal information from the data subject.
2. The processing and retention period for each personal information is as follows:
   • Member Information: Until membership withdrawal (however, if an investigation or inquiry is in progress due to violation of related laws, until the end of such investigation or inquiry)
     • However, information of members who have separately agreed to receive marketing information is retained until membership withdrawal or consent withdrawal
   • Winner and Award-Winning Work Information: Semi-permanent (for archive preservation such as online hall of fame and proof of award achievements)
     • Publicly available information such as award-winning work images, winner names, and affiliations are posted on the site's "Award Gallery" without a set period
     • Sensitive information such as personal contact information is managed separately, and information not for public purposes is processed the same as general member information
   • Non-Award-Winning Work Information: Semi-permanent (for preservation for disputes such as imitation, objections, etc.)
     • However, information of members who have separately agreed to marketing use (newsletters, etc.) is retained until membership withdrawal or consent withdrawal
   • Entry Fee Payment Information: Retained for 5 years in accordance with the Act on Consumer Protection in Electronic Commerce, etc.
   • Information for Sending Notices: 1 year after the end of the contest
3. If a member requests membership withdrawal or withdraws consent to the collection and use of personal information, the Association will destroy the personal information without delay. However, the following information will be retained for the period specified below for the following reasons:
   • Records on contracts or withdrawal of offers, etc. in accordance with the Act on Consumer Protection in Electronic Commerce, etc.: 5 years
   • Communication confirmation data in accordance with the Communication Secrets Protection Act: 3 months
   • Winner and Award-Winning Work Information: For the purpose of preserving the historical records of the contest and proving award achievements, publicly available information such as award-winning work images, winner names, and affiliations are retained semi-permanently (for archive exhibition on the site)
   • Non-Award-Winning Work Information: For the purpose of preservation for disputes such as imitation, objections, etc., work information and related materials are retained semi-permanently

Article 3 (Items of Personal Information Processed)

The Association processes the following personal information items.

Article 4 (Provision of Personal Information to Third Parties)

1. The Association processes personal information of data subjects only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only in cases corresponding to Article 17 and Article 18 of the Personal Information Protection Act, such as consent of the data subject or special provisions of laws.
2. The Association may provide personal information to third parties as follows:
   • Recipient: Co-hosting companies (Fursys, Model Solution, Yonwoo, etc.)
   • Purpose of provision: Contest judging, winner selection, awards, recruitment connection, etc.
   • Items provided: Work information, designer information, registrant contact
   • Retention and use period: 5 years after the end of the contest
3. The Association may disclose work information and designer information for the purpose of producing catalogs, exhibitions, promotions, etc. for award-winning works, and this is considered to have been agreed upon when participating in the contest.

Article 5 (Entrustment of Personal Information Processing)

1. The Association entrusts personal information processing tasks as follows for smooth personal information processing:
   • Trustee (Consignee): Cloud service providers, email delivery service providers
   • Content of entrusted tasks: Storage and management of personal information, email delivery
2. When concluding an entrustment contract, the Association specifies in documents such as contracts matters such as prohibition of personal information processing for purposes other than performing entrusted tasks, technical and administrative protection measures, restriction of re-entrustment, management and supervision of consignees, and compensation for damages in accordance with Article 26 of the Personal Information Protection Act, and supervises whether consignees safely process personal information.
3. If the content of entrusted tasks or consignees change, the Association will disclose this through this privacy policy without delay.

Article 6 (Rights and Obligations of Data Subjects and Methods of Exercise)

1. Data subjects may exercise the following rights related to personal information protection against the Association at any time:
   • Right to request suspension of personal information processing
   • Right to request access to personal information
   • Right to request correction or deletion of personal information
   • Right to request suspension of personal information processing
2. The exercise of rights under paragraph 1 may be made to the Association in writing, by email, or by facsimile transmission (FAX) in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Association will take measures without delay.
3. If a data subject requests correction or deletion of errors in personal information, the Association must correct or delete the errors without delay.
4. The exercise of rights under paragraph 1 may be made through a legal representative or an agent authorized by the data subject. In this case, a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

Article 7 (Destruction of Personal Information)

1. The Association destroys personal information without delay when it becomes unnecessary, such as when the retention period of personal information has elapsed or the purpose of processing has been achieved.
2. The procedure and method of destroying personal information are as follows:
   • Destruction procedure: The Association selects personal information for which the reason for destruction has occurred and destroys personal information after obtaining approval from the Association's personal information protection officer.
   • Destruction method:
     • Electronic file format: Deletion using technical methods that cannot reproduce records
     • Records, printed materials, written materials, etc.: Destruction by shredding or incineration

Article 8 (Measures to Ensure Safety of Personal Information)

The Association takes the following technical, administrative, and physical measures necessary to ensure safety in accordance with Article 29 of the Personal Information Protection Act.

1. Encryption of Personal Information
   • User passwords are encrypted and stored and managed.
   • Personal information is safely stored and transmitted through encryption, etc.
2. Technical Measures Against Hacking, etc.
   • To prevent leakage and damage of personal information due to hacking or computer viruses, security programs are installed and periodically updated and checked, and systems are installed in areas where access from outside is controlled and monitored and blocked technically and physically.
3. Management of Access Rights to Personal Information Processing Systems, etc.
   • Employees who process personal information are minimized, and access rights to personal information are managed.
   • Necessary measures are taken to control access to personal information by granting, changing, and deleting access rights to personal information processing systems, and unauthorized access from outside is controlled using intrusion blocking systems.
4. Designation of Personal Information Protection Officer
   • A personal information protection officer is designated and operated to protect personal information.

Article 9 (Personal Information Protection Officer)

The Association is responsible for overseeing all matters related to personal information processing and designates a personal information protection officer as follows to handle complaints and relief for damages related to personal information processing.

Data subjects may inquire with the personal information protection officer regarding all matters related to personal information protection, complaint handling, and relief for damages that occur while using the Association's services.

Article 10 (Request for Access to Personal Information)

Data subjects may request access to personal information in accordance with Article 35 of the Personal Information Protection Act to the department below. The Association will strive to process requests for access to personal information promptly.

Article 11 (Remedies for Infringement of Rights and Interests)

Data subjects may report or consult on personal information infringement to the following institutions.

Article 12 (Changes to Privacy Policy)

This privacy policy takes effect from January 1, 2025, and if there are additions, deletions, or corrections to the contents in accordance with laws and policies, notice will be given through announcements 7 days before the implementation of the changes.