We process personal information only for the purposes below. We do not use it for any other purpose. If the purpose of use changes, we will take the measures required by law.

1. To verify your eligibility to register on this website, confirm your identity and manage your account
2. To provide member services, including responding to your questions and sending notifications and to handle related inquiries.

1. In accordance with Article 32 of the Personal Information Protection Act, we register their personal information files and disclose their registration details. The main details of the personal information file we process are as follows.

   Status of Registration of Personal Information Files

   Name of the Personal Information File	Legal Basis	Purpose of Processing	Personal Information Collected	Retention Period
   Website Member Information	Basis for our duties: Articles 3, 4 and 54 of the Special Act on the Truth-Finding of the Itaewon Disaster Basis for processing: Article 15(1)1 of the Personal Information Protection Act (consent of the data subject)	Verifying your eligibility to register on this website and confirming your identity; providing member services and notifications; responding to related inquiries	Required: Name, date of birth, gender, mobile phone number, email address; organization and department (for staff responsible for relevant duties only).	Until you close your account

2. You can find detailed information about these files on the Personal Information Portal of the Personal Information Protection Commission.

1. We process and retain personal information for the period of retention and use prescribed by applicable laws, or for the retention period consented to by the data subject at the time of collection.
2. The processing and retention period for personal information files is as follows.

   Processing and Retention Period of Personal Information

   Name of the Personal Information File	Legal Basis	Retention Period
   Website Member Information	Basis for our duties: Articles 3, 4 and 54 of the Special Act on the Truth-Finding of the Itaewon Disaster Basis for processing: Article 15(1)1 of the Personal Information Protection Act (consent of the data subject)	Until you close your account

1. When personal information is no longer needed, such as the retention period has expired or the purpose of processing has been achieved, we destroy it without delay.
2. If the retention period you consented to has expired or the purpose of processing has been achieved, but another law requires us to retain the personal information, we transfer it (or the relevant personal information file) to a separate database (DB) or store it in a separate location.
3. Our procedure and methods for destroying personal information are as follows:
   • (a) Procedure: We identify personal information that is subject to destruction and destroy it in accordance with our internal procedures.
   • (b) Method: Electronic files are securely deleted to prevent recovery or reproduction. Paper documents are destroyed by shredding, incineration or similar methods.

1. As a rule, we process personal information only within the scope of purposes for which it was collected and used. We do not use it beyond that scope, or provide it to third parties without your consent.
2. We may, however, provide personal information to third parties if we have obtained your consent or if there is a specific legal basis for doing so under applicable laws.
3. When providing personal information to third parties, we disclose the recipient, purposes of provision, categories of personal information provided, retention and use periods, other necessary details in accordance with applicable laws.

When we use or provide personal information for additional purposes without your consent, as permitted by applicable laws, we comprehensively consider the following factors:

1. The relevance of the additional use or provision to the original purpose of collection
2. Whether the additional use or provision was reasonably foreseeable in light of the circumstances of collection and our processing practices
3. Whether the additional use of provision would unruly infringe on your interests
4. Whether security measures, such as pseudonymization or encryption, have been taken.

1. To facilitate the processing of personal information, we outsource the following tasks:

   Outsourcing of Personal Information Processing Work

   Service Provider	Outsourced Task
   Sangsang Story Co., Ltd.	Operation and maintenance of the Website

2. When entering into an outsourcing contract, we specify the following matters in the contract or other documents, as required by Article 26 of the Personal Information Protection Act: prohibition of processing personal information for purposes other than the outsourced tasks; security measures; restrictions on further outsourcing; management and supervision of the service provider; and liability, including compensation for damages. We also supervise the service provider to ensure that personal information is processed securely.
3. In accordance with Article 26(6) of the Act, we require the service provider to obtain our consent before further outsourcing any entrusted personal information processing tasks to a third party.
4. If the outsourced tasks or the service provider change, we will disclose the changes in this Privacy Policy without delay.

We take the following measures to ensure the security of personal information.

1. Administrative measures: Management and supervision of a service provider; regular training for staff who handle personal information
2. Technical measures: Management of access rights to the personal information processing system; access controls; retention and review of access records; encryption of personal information; installation and operation of security programs
3. Physical measures: Access controls for areas where personal information is stored, such as computer rooms and data storage rooms

1. We use cookies, which store and retrieve information about your use of the website, to provide convenient services.
2. A cookie is a small piece of information that a website's server sends to your browser. It is stored on your computer or mobile device and automatically transmitted from your browser to the server when you visit the website.
3. You can choose to allow or block cookies through your browser settings. However blocking cookies may limit your access to certain services.
   How to allow or block cookies

   Web browsers

   • Chrome: Select the three-dot menu (︙) in the upper-right corner > New Incognito Window (shortcut: Ctrl+Shift+N)
   • Edge: Select the three-dot menu (…) in the upper-right corner > New InPrivate Window (shortcut: Ctrl+Shift+N)

   Mobile browsers

   • Chrome : Select three-dot menu (︙) in the upper-right corner > New Incognito Tab
   • Safari: Settings > Safari > Advanced > Block All Cookies
   • Samsung Internet: Select the Tabs icon at the bottom > Turn on Secret mode > Start

1. You may request access to, correction, or deletion of your personal information, suspension of its processing, or withdrawal of your consent at any time.
2. You may exercise these right in writing, by email, by fax or through other methods prescribed by applicable laws. We will respond to your requests without delay.
   • (a) You can view and edit your personal information directly through the “My Page” menu on the website.

   Download the Personal Information Access Request Form

   • (b) You can withdraw your consent to the collection and use of personal information by closing your account.
   • (c) You can request an explanation of, or object to, an automated decision at any time.
3. You may also exercise your rights through an authorized representative. In such cases, you must submit a power of attorney using Form No. 11 attached to the Notice on Methods of Processing Personal Information.
   Download the Power of Attorney Form
4. Your right to request access to your personal information and suspension of its processing may be restricted under Article 35(4) and 37(2) of the Personal Information Protection Act.
5. You cannot request the deletion of personal information that another law specifies as an object of collection.
6. You cannot object to an automated decision if you have consented to it, were informed of it in advance through a contract or similar means, or if it is expressly provided for by law. In such cases, you can only request an explanation or a review of the decision.
   • (a) A request to object to an automated decision or to obtain an explanation may be refused if there are legitimate grounds, such as a risk of such as a risk of unjustly infringing another person’s life, physical safety, property or other interests.
7. When you request access to, correction or deletion of your personal information, suspension of its processing, or an objection to or explanation of an automated decision, we verify that you are the data subject or their duly authorized representative.
8. You may submit requests for access to personal information and related matters to the department below. We will make every effort to ensure that your requests are handled promptly.

   Department for Personal Information Access Requests

   • Department: General Support Division
   • Contact: 02-2100-4037 / jaehhkk21@korea.kr
9. In addition to submitting requests to the department above, you may also request access to your personal information through the Personal Information Protection Portal (www.privacy.go.kr > Personal Services > Request Access to Personal Information; identity verification required). We will respond to such requests without delay.

1. We have designated the following Personal Information Protection Officers to assume overall responsibility for personal information processing, handle complaints from data subjects, and provide remedies for harm arising from the processing of personal information.

   Personal Information Protection Officer

   Category	Department	Name	Contact
   Personal Information Protection Officer	Policy Planning Division	Cheon Jun-ho	Note: You will be directed to the department in charge. Tel: 02-2100-4037 Email: jaehhkk21@korea.kr
   Personal Information Protection Officer by Field	General Support Division	Han Geon-su
   Person in Charge of Personal Information Protection by Field	General Support Division	Seo Jae-hyeok

2. If you have questions, complaints, or request for remedies concerning the protection of your personal information while using this website, you can contact the Personal Information Protection Officer, or the relevant department. We will respond to your inquiries and address your concerns without delay.

1. If you need assistance with a dispute or seek compensation or other remedies for damage resulting from a personal information infringement, you can contact the following organizations for advice or assistance.
   • Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
   • Privacy Infringement Report Center: 118 (privacy.kisa.or.kr)
   • Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
   • National Police Agency: 182 (ecrm.police.go.kr)
2. We strive to safeguard your right to informational self-determination and to provide counselling and remedies for damage caused by infringements of personal information. If you need to report an infringement or seek counselling, please contact the department below.

   Personal Information Infringement Inquiries and Reports

   • Department: General Support Division
   • Contact: 02-2100-4037 / jaehhkk21@korea.kr
3. If your rights or interest are infringed by an administrative disposition or failure to act by the head of a public institution in response to a request under Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information) or Article 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act, you may file an administrative appeal under the Administrative Appeals Act.

   Central Administrative Appeals Commission: 110 (www.simpan.go.kr)

1. If this Privacy Policy is revised, we will publish the changes on this website.
2. This Privacy Policy applies from 1 October 2026.