Privacy Policy
Official PDFThe Seoul Investment Promotion Agency (hereinafter the “Agency”) has established and operates this Privacy Policy pursuant to Article 30 of the Personal Information Protection Act in order to protect the personal information and rights of users and to promptly handle related grievances and complaints. The Agency makes every effort to comply with and fulfill the responsibilities and obligations set forth in applicable laws and regulations. This Policy applies to personal information collected through the Seoul Innovest Summit 2026 website and through online surveys operated separately by the Agency for the summit (such as the Directory Book profile survey).
- Article 1 Collection and Use of Personal Information
- Article 2 Processing of Sensitive Information
- Article 3 Processing of Personal Information of Children Under the Age of 14
- Article 4 Installation and Operation of Automatic Personal Information Collection Devices and How to Refuse Them
- Article 5 Retention and Use Period and Destruction of Personal Information
- Article 6 Outsourcing of Personal Information Processing
- Article 7 Provision of Personal Information to Third Parties
- Article 8 Measures to Ensure the Security of Personal Information
- Article 9 Rights of Users and Legal Representatives and How to Exercise Them
- Article 10 Privacy Officer and Remedies for Infringement of User Rights
- Article 11 Changes to the Privacy Policy
Article 1 (Collection and Use of Personal Information)
① The Agency collects only the minimum personal information necessary to provide its services.
② The Agency processes users’ personal information for the following purposes. The personal information being processed will not be used for any purpose other than those listed below, and if the purpose of use changes, the Agency will take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.
1. Participation application via the Seoul Innovest Summit 2026 website
| Purpose of Collection | Required Items | Optional Items | Retention and Use Period |
|---|---|---|---|
| Receipt of event participation applications, identification of participants, and event operation | Participant category, nationality, name, name in English, email, mobile phone number, affiliation/organization, affiliation/organization in English, position/title, position/title in English | - | 5 years from the date of collection |
| Session operation and participant assignment | Preferred sessions | - | 5 years from the date of collection |
| Analysis of event promotion effectiveness | Referral source | 5 years from the date of collection | |
| Delivery of event-related notices and response to participation inquiries | Name, email, mobile phone number | - | 5 years from the date of collection |
2. Production of the Directory Book and access for summit participants (investor and participating-company profile surveys)
| Purpose of Collection | Required Items | Optional Items | Retention and Use Period |
|---|---|---|---|
| Production of the Investor Directory Book and access for summit participants (investors, participating companies, partner organizations, etc.); post-event inquiry handling and notices for the following year’s event | Name, title/position, affiliation (firm name), LinkedIn URL (displayed as a QR code in the Directory Book) | Profile photo | 1 year after the end of the event |
| Production of the Participating Company Directory Book and access for summit participants (investors, participating companies, partner organizations, etc.); post-event inquiry handling and notices for the following year’s event | Name of CEO; names, titles, and brief career backgrounds (education and work experience) of key personnel (up to 3) | CEO profile photo | 1 year after the end of the event |
| (Participating companies) Directory Book-related notices and inquiries (not published in the Directory Book) | Name and phone number of the contact person | - | 1 year after the end of the event |
※ Data subjects have the right to refuse consent to the collection and use of their personal information. However, if consent to the required items for the website participation application is refused, application for participation in the Seoul Innovest Summit 2026 may be restricted. If consent to the required items of the Directory Book profile survey is refused, only inclusion in the Directory Book is restricted, and participation in the Seoul Innovest Summit 2026 is not affected. Refusing consent to the optional item (profile photo) does not restrict application for participation or inclusion in the Directory Book; if no profile photo is submitted, a default placeholder image will be used.
Article 2 (Processing of Sensitive Information)
The Agency does not collect users’ sensitive personal information.
Article 3 (Processing of Personal Information of Children Under the Age of 14)
The Agency does not provide services to children under the age of 14 and does not collect personal information in this regard. However, if it becomes necessary to collect the personal information of children under the age of 14, the Agency will comply with the relevant laws and notifications.
Article 4 (Installation and Operation of Automatic Personal Information Collection Devices and How to Refuse Them)
① In the course of using the website, access IP information, cookies, and access logs may be automatically generated and collected.
② A cookie is a small piece of information that the server (http) used to operate the website sends to the user’s computer browser, and it may also be stored on the hard disk of the user’s PC.
③ Users may refuse the storage of cookies through their web browser settings (by selecting to block or allow cookies under the privacy section of the browser settings menu). However, refusing the storage of cookies may restrict the use of some services.
Article 5 (Retention and Use Period and Destruction of Personal Information)
① The Agency destroys personal information without delay when it becomes unnecessary, such as upon expiration of the retention period or achievement of the purpose of processing.
② If personal information must continue to be preserved under other laws and regulations even though the retention period consented to by the data subject has expired or the purpose of processing has been achieved, the personal information is transferred to a separate database (DB) or preserved in a different storage location. The personal information currently processed by the Agency in connection with the Seoul Innovest Summit 2026 is not subject to separate preservation under other laws or regulations.
③ The procedures and methods for destroying personal information are as follows.
- Destruction procedure: Personal information for which grounds for destruction have arisen is selected and destroyed with the approval of the Privacy Officer.
- Destruction method: Personal information recorded and stored in electronic file format is destroyed so that the records cannot be reproduced, and personal information recorded and stored on paper documents is destroyed by shredding or incineration.
Article 6 (Outsourcing of Personal Information Processing)
① The Agency outsources personal information processing tasks as follows for the smooth handling of personal information, and, when concluding outsourcing contracts, supervises whether the outsourcee processes personal information securely in accordance with the relevant laws and regulations.
| Outsourcee | Outsourced Task | Retention and Use Period |
|---|---|---|
| Bridging Group Korea Co., Ltd. | Receipt of event participation applications and participant management, event operation support | Until contract termination |
| O.NE PEOPLE CO., Ltd. (CatchSecu) | Provision of the online survey system (Directory Book profile survey) and storage of response data | Until the purpose of collection is achieved |
② If the details of the outsourced tasks or the outsourcee are added or changed, the Agency will disclose this without delay through this Privacy Policy.
Article 7 (Provision of Personal Information to Third Parties)
① The Agency processes the personal information of data subjects only within the scope specified in Article 1, and provides personal information to third parties only in cases falling under Article 17 of the Personal Information Protection Act, such as with the separate prior consent of the user or under special provisions of law.
The Agency provides personal information to third parties with the consent of the data subject as follows.
| Recipient | Purpose of Provision | Items Provided | Retention and Use Period |
|---|---|---|---|
| Seoul Innovest Summit 2026 participants (investors, participating companies, partner organizations, etc.) | Support for networking among participants through the Directory Book (access provided during the event period via an access password distributed only to event participants; the viewing page is deactivated after the event) | Investors: name, title/position, affiliation, LinkedIn URL (as a QR code), profile photo (if consented) Participating companies: name of CEO; names, titles, and brief career backgrounds of key personnel; CEO profile photo (if consented) |
Until the end of the event |
② In the following cases, personal information may be provided to third parties without the consent of the data subject.
- Where there are special provisions in other laws (Article 17(1)2 of the Act)
- Where personal information is pseudonymized and provided for statistical purposes, scientific research, archiving in the public interest, etc. (Article 28-2 of the Act)
- Where requested by an investigative agency in accordance with the procedures and methods prescribed by law for the investigation of crimes and the filing and maintenance of prosecution
- Other cases falling under the grounds set forth in Articles 17 and 18 of the Personal Information Protection Act
③ In the event of an emergency such as a disaster, an infectious disease, or an incident or accident posing an imminent danger to life or body, personal information may be provided to the relevant agencies without the consent of the data subject, in which case the “Rules for Processing and Protecting Personal Information in Emergency Situations” jointly announced by the relevant government ministries shall apply.
Article 8 (Measures to Ensure the Security of Personal Information)
The Agency does its utmost to securely manage users’ personal information so that it is not lost, stolen, leaked, altered, or damaged, and takes the necessary technical, administrative, and physical measures.
① Administrative measures: Establishment and implementation of an internal management plan, regular employee training, etc.
② Technical measures: Management of access rights to personal information processing systems, installation of access control systems, installation of security programs
③ Physical measures: Access control to data storage locations, etc.
Article 9 (Rights of Users and Legal Representatives and How to Exercise Them)
① Data subjects may at any time exercise their rights against the Agency, including requests to access, correct, delete, or suspend the processing of their personal information. As the website does not provide a separate membership registration service, rights are exercised in the manner set forth in Paragraph 2.
② The exercise of rights under Paragraph 1 may be made in writing, by email (mk@investseoul.kr), etc. in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Agency will take action without delay after completing identity verification procedures.
③ The exercise of rights under Paragraph 1 may be made through an agent, such as the data subject’s legal representative or a person who has been delegated authority. In this case, a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
④ Requests for access to and suspension of processing of personal information may be restricted under Article 35(5) and Article 37(2) of the Personal Information Protection Act.
⑤ With regard to requests for correction and deletion of personal information, deletion may not be requested where the personal information is specified as subject to collection under other laws and regulations.
⑥ When a data subject requests the correction of an error in their personal information, the Agency will not use or provide the personal information in question until the correction is completed.
Article 10 (Privacy Officer and Remedies for Infringement of User Rights)
① The Agency designates a Privacy Officer as follows to take overall responsibility for personal information processing and to handle user complaints and provide remedies for damages related to the processing of personal information.
| Category | Details |
|---|---|
| Privacy Officer | Name: Suh DukShik / Title: Director, Investment Attraction Office, Seoul Investment Promotion Agency / Contact: 02-6361-4120 / Email: dssuh@investseoul.kr |
| Department in Charge of Personal Information Protection | Department: Management Strategy Team / Person in Charge: Kyongil Moon (Team Leader) / Contact: 02-6361-4121 / Email: mk@investseoul.kr |
② Users may contact the Privacy Officer regarding all personal information protection inquiries, complaint handling, remedies for damages, and other matters arising from the use of the services. The Agency will respond to and handle user inquiries without delay.
③ If you need further assistance regarding the infringement of your rights, please contact the following organizations.
- Personal Information Infringement Report Center (operated by the Korea Internet & Security Agency): 118 (no area code) / privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972 (no area code) / www.kopico.go.kr
- Korean National Police Agency: 182 (no area code) / ecrm.police.go.kr
Article 11 (Changes to the Privacy Policy)
This Privacy Policy applies from 8 September 2026, and any additions, deletions, or corrections made in accordance with relevant laws, regulations, and policies will be announced without delay through the website.
- Revision history: Established on 24 August 2026 / Revised on 8 September 2026 to add provisions on the Directory Book (Articles 1, 6, and 7)