1. Coverage

---

Busan International Financial Center Operation Center (hereinafter referred to as BIFC Operation Center)

2. Purpose of processing personal information

---

The BIFC Operations Center processes personal information for the following purposes: The processed personal information will not be used for any purpose other than the following, and we will seek prior consent if the purpose of use changes.

1) Handling of civil affairs (application for access, application for personal information, etc.)

Personal information is processed for the purpose of identifying the civil petitioner and notifying the results of the processing.

2) Service Delivery

Personal information is processed for the purpose of providing services, sending invoices, identification, and payment and settlement of fees.

3) Personal video information

Personal information is processed for the purpose of preventing and investigating crimes, facility safety, and fire prevention.

3. Personal information file status

---

1) Personal information file name: Parking ticket management ledger

• Personal information items: Date of birth, contact information, name
• Collection method: Written form
• Grounds for retention: for identification when registering a parking ticket
• Retention period: Store parking tickets for one year after cancellation.

2) Personal information file name: CCTV personal video information file

• Personal information items: unspecified number of personal image information, unspecified number of vehicle image information
• Collection method: CCTV camera recording
• Grounds for Retention: BIFC Video Information Processing Device Operation Management Policy
• Holding period: 90 days (in the case of a floor dedicated to the tenant institution, within 30 to 90 days according to the bylaws of the tenant institution)

3) Personal information file name: Application for entry (for visitors outside the BIFC)

• Personal information items: Affiliation, name, contact information, purpose of visit
• Collection method: Record visitor management system after filling out the entry application form
• Grounds for retention: for identification when issuing an access card
• Holding period: 3 months

4) Personal Information File Name: Application for Umbrella Rental Service

• Personal information items: Affiliation, name, contact information
• Collection method: Handwriting application form
• Grounds for retention: for managing umbrella rental services (rental, return)
• Holding period: 3 months

4. Matters concerning the provision of personal information to third parties

---

The BIFC Operation Center provides personal information to third parties only if it falls under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the information subject and special provisions of the law.

5. Rights and obligations of the data subject and how to exercise them

---

The user may exercise the following rights as a personal information subject.

① The information subject may exercise the following rights related to the protection of personal information at any time to the BIFC Operation Center:

• Personal information access request
• Request correction in case of errors, etc.
• Delete Request
• Request to stop processing

② The exercise of rights under paragraph (1) may be conducted by writing, e-mail, or fax to the BIFC Operation Center in accordance with attached Form 8 of the Enforcement Rules of the Personal Information Protection Act, and the BIFC Operation Center will take action without delay.

③ If the data subject requests correction or deletion of errors in personal information, the BIFC Operation Center will not use or provide the personal information until the correction or deletion is completed.

④ The exercise of the right under paragraph (1) may be conducted through an agent, such as a legal representative of the data subject or a person delegated. In this case, you must submit a power of attorney in accordance with attached Form 11 of the Enforcement Rules of the Personal Information Protection Act.

6. Items of personal information processed

---

① BIFC Operations Center handles the following personal information items:

• Item: Date of birth, contact information, name, affiliation, payment record

7. Destruction of personal information

---

In principle, the BIFC Operation Center destroys the personal information without delay if the purpose of processing personal information is achieved. The procedure, time limit, and method of destruction are as follows.

- Revocation procedure

The information provided by the user will be destroyed immediately or after being stored for a certain period of time in accordance with internal policies and other relevant laws and regulations.

- the expiration date

The personal information of the user shall be destroyed within five days from the end of the retention period, and within five days from the date when the personal information is deemed unnecessary, such as achieving the purpose of processing the personal information, abolishing the service, or terminating the business. However, if there is a separate specification such as collective destruction once a month, t will be destroyed accordingly.

- Destruction method

Information in electronic file formats uses a technical method that does not allow records to be played back.
Personal information printed on paper is crushed by a grinder or destroyed through incineration.

8. Measures to secure the safety of personal information

---

In accordance with Article 29 of the Personal Information Protection Act, the BIFC Operation Center takes technical/management and physical measures necessary to secure safety as follows.

1. Minimize and educate employees handling personal information

We are implementing measures to manage personal information by designating employees who handle personal information and minimizing it only to the person in charge.

2. Technical countermeasures against hacking, etc.

The BIFC Operation Center installs security programs, periodically updates and inspects them, installs systems in areas with restricted access from the outside, technically and physically monitors and blocks personal information leakage and damage caused by hacking or computer viruses.

3. Restricting access to personal information

We take necessary measures to control access to personal information by granting, changing, or canceling access to the database system that processes personal information. We control unauthorized access from outside using the access control system.

4. Control of access to unauthorized persons

We set up and operate access control procedures for the physical storage place where personal information is stored separately.

5. Account management

Each account used for each system is given a different authority level for each person in charge of the job, and the password is set to 8 digits or more by mixing English characters, numbers, and special characters to make periodic changes once a quarter.

9. Person in charge of personal information protection

---

① BIFC Operation Center is responsible for personal information processing, and designates a person in charge of personal information protection as follows to handle complaints and remedy damages of information subjects related to personal information processing.

▶ Person in charge of personal information protection

• Name: Kim Sung-hong
• Position: Director of Operation Center
• Contact: 051-955-5120
※ You will be connected to the privacy department.

▶ Personal Information Protection Department

• Department name: BIFC Operation Center Operation Team
• Person in charge: Manager Lee Dong-won
• Contact: 051-955-5120

② The information subject can contact the personal information protection manager and the department in charge of all personal information protection inquiries, complaints, and damage relief that occurred while using the service of the BIFC Operation Center. The BIFC Operation Center will answer and process inquiries from the information subject without delay.

10. Request for personal information access

---

① The information subject may request the following department to view personal information pursuant to Article 35 of the Personal Information Protection Act. The BIFC Operation Center will try to expedite the request for personal information access by the information subject.

▶ Department of receiving and processing requests for personal information access

• Department name: BIFC Operation Center Operation Team
• Person in charge: Manager Lee Dong-won
• Contact: 051-955-5120

② In addition to the reception and processing department of the request for access to personal information collected by public institutions, the information subject can request access to personal information through the Ministry of Public Administration and Security’s "Comprehensive Personal Information Protection Portal website (www.privacy.go.kr).

11. Installation and operation of video information processing equipment

---

① BIFC Operation Center installs and operates video information processing devices as follows.

1) Basis and Purpose of Installation of Image Information Processing Equipment

BIFC Operation Center installs and operates video information processing devices for security management, facility management, and crime prevention.

2) Number of installations, installation location, shooting range:

• Number of installations: 565 units
• Installation location: BIFC OFFICE and MALL in and out of the building
• Scope of filming: Major facilities in the district, such as entrances, lobbies, parking lots, etc.

Management manager, department in charge, and person with access to video information

• Management manager: Operations team leader
• Department in charge: BIFC Operation Center
• Access authority: Person in charge of video information processing

4) Video information shooting time, storage period, storage location, and processing method

• Shooting time: 24 hours in a row
• Storage period: 3 months from the time of shooting (In the case of an exclusive floor for residential institutions, within 30 to 90 days according to the bylaws of the residential institution)
• Storage Location and Processing Method: Image Data Processing Facility in BIFC General Control Room

5) Method and location for checking image information

• Individual notification after receiving an application for viewing personal video information from the BIFC Operation Center.

6) Measures for the request of data subject to view video information, etc.

• View personal video information.In the case where the data subject himself/herself is photographed or clearly the life of the data subject, it must be applied as a request for confirmation of existence.Access is allowed only where necessary for the benefit of the body and property.

12. Change of Personal Information Processing Policy

---

This personal information processing policy will be applied from the effective date, and if there is an addition, deletion, or correction of changes in accordance with laws and policies, we will notify you through a notice 7 days before the change takes effect.