SourceDATA Platform

The i.AM (Korean Film Asset Trading Platform) operated by the Korea Film Archive establishes and discloses the following Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to inform data subjects of the procedures and standards for processing personal information and to ensure that any related complaints are handled promptly and smoothly.

Established on February 09, 2024

Gathering General Personal Information
Name, ID, Phone No. E-mail
Purpose of Personal Information Processing
Identity verification and operational management for membership services
Retention Period of Personal Information
Until membership cancellation
Provision of Personal Information to Third Parties
Provided only when stipulated by law or with the consent of the information subject
Outsourcing of Personal Information Processing
- Outsourced Party (Processor) : NONUNI Entertainment Co., Ltd.
- Platform operation, Management for membership, Comlpaint processing
- eriod of consignment : 2024.7.9.~2024.12.9.
Request for Access to Personal Information
Department : Information Resources Team (Phone) 02-3153-2065

Article 1 (Purpose of Personal Information Processing, Collection Items, and Retention Period)

1 The Korean Film Asset Trading Platform processes personal information for the following purposes. The personal information being processed will not be used for any purposes other than those stated below, and in the event that the purpose of use changes, necessary measures will be taken, including obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

2 The Korea Film Archive registers and publicly discloses the processed items of personal information files in accordance with Article 32 of the Personal Information Protection Act, as follows.

개인정보파일의 처리항목 테이블
Name of Personal Information File	Grounds for Processing	Purpose of Processing	Collecting Information	Retention Period
i.AM membership information	Consent of the data subject upon joining the membership	Identity verification and operational management for membership services	[Required Information] Name, ID, contact information, e-mail, phone No. [Optional Items] Payment amount, purchased assets, payment date, payment method	Until membership cancellation

※ For more details regarding personal information files registration of the , please use the 'Search Personal Information File List' on the portal of Personal Information Protection Commission.

Article 2 (Provision of Personal Information to Third Parties)

1 The Korean Film Asset Trading Platform processes the personal information of data subjects only within the scope specified in Article 1. In accordance with Article 18 of the Personal Information Protection Act, The Korean Film Asset Trading Platform will not process or provide the information to third parties beyond the original purpose without the prior consent of the data subject, except in the following cases.

Separate consent is obtained from the data subject.
There are special provisions in other laws.
The data subject or their legal representative is unable to express their will, or cannot provide prior consent due to incapacity or an unknown address, and it is clearly necessary for the protection of the data subject's or a third party's life, body, or property.
It is necessary to provide de-identified personal data for statistical or research purposes.
It is necessary for the performance of a duty prescribed by law that cannot be carried out without using personal information for a purpose other than the original purpose or providing it to a third party, and such use or provision has been reviewed and approved by the relevant protection committee.
It is necessary to provide information to foreign governments or international organizations for the implementation of treaties or other international agreements.
It is necessary for the investigation of crimes and the prosecution and maintenance of such prosecutions.
It is necessary for the performance of judicial duties.
It is necessary for the execution of sentences, supervision, or protective measures.

2 The Korean Film Asset Trading Platform does not provide personal information to third parties; however, it may provide such information for events and activities, after obtaining separate consent.

3 In cases where personal information is provided to third parties as specified in each item of Paragraph ①, The Korean Film Asset Trading Platform will announce the fact of such provision within the scope permitted by law.

Article 3 (Outsourcing of Personal Information Processing)

1 The Korean Film Asset Trading Platform has entrusted the processing of personal information processing as follows to ensure smooth handling of personal information.

개인정보처리의 위탁 테이블
Tasks Outsourced	Outsourced Party (Processor)	Details of Outsourced Tasks
Korean Film Asset Trading Platform operation and maintenance	NONUNI Entertainment Co., Ltd.	Platform operation and VFX asset collection, processing and sales agency
	Wylie Co. Ratel & Partners Co.	Platform maintenance
	INICIS Co., PayPal Holdings, Inc.	Payment processing

The Korean Film Asset Trading Platform, upon entering into outsourcing contracts, specifies matters related to the prohibition of processing personal information beyond the purpose of performing outsourced tasks, technical and administrative protective measures, restriction on sub-contracting, supervision on outsourced party, and liability for any damages in accordance with Article 25 of the Personal Information Protection Act and sign a confidentiality agreement with the representatives and employees of the outsourced party. The platform also conducts regular training and monitoring to ensure that the outsourced party processes personal information securely.

In the event of changes to the content of outsourced tasks or the outsourced party, such changes will be promptly disclosed in accordance with this Privacy Policy.

Article 4 (Rights and Obligations of Data Subjects and How to Exercise the Rights)

1 Data subjects (legal representatives in the case of individuals under the age of 14) may exercise the following rights related to personal information protection at any time:

Request for access to personal information
Request for correction in case of errors
Request for deletion
Request for suspension of processing

2 To exercise your rights under Paragraph ①, you shall submit a written request following the guidelines outlined in Article 41, Paragraph① of the Enforcement Decree of the Personal Information Protection Act. You can submit the request by mail, email, or fax and it will be promptly handled.

3 If the data subject requests correction or deletion of personal information due to errors, the relevant personal information will not be used or provided until the correction or deletion is completed.

4 Rights under Paragraph ① may be exercised through a legal representative or an authorized agent of the data subject. In this case, a power of attorney shall be submitted, using Form 11 of the "Notification on Personal Information Processing Methods (No. 2020-7).

5 With regard to the requests for access to personal information and suspension of processing, the rights of data subject may be restricted under Article 35, Paragraph ④ and Article 37, Paragraph ② of the Personal Information Protection Act.

6 Requests for correction and deletion of personal information cannot be made if collection of the personal information is specified and required by other laws or regulations.

7When requests for access, correction, deletion, or suspension of processing are made, it will be verified whether the requester is the data subject or a legitimate agent.

[Notification on Personal Information Processing Methods (Personal Information Protection Commission Notification) Form No. 8]
[Notification on Personal Information Processing Methods (Personal Information Protection Commission Notification) Form No. 11] Power of Attorney

Article 5 (Destruction of Personal Information)

1 The Korean Film Asset Trading Platform will promptly destroy personal information when it is no longer necessary, upon the expiration of the retention period or the achievement of the processing purpose.

2 If the retention period for personal information agreed upon with the data subject has expired or the processing purpose has been achieved, but still there is a requirement to retain the personal information under other laws, the relevant personal information (or personal information file) will be transferred to a separate database (DB) or preserved in a different storage location.

3 Personal information will be destroyed in the following procedures and method:

Procedures

o The Korea Film Archive establishes a plan to discard personal information files that need to be destroyed. The Archive selects the personal information files to discard and obtains approval from the personal information protection officer before proceeding with the destruction.

Methods

o The Korea Film Archive ensures that personal information recorded and stored in electronic files is destroyed in an unrecoverable manner and paper-based personal information is disposed by shredding or incinerating them.

Article 6 (Installation, Operation and Refusal of Automatic Personal Information Collection Devices)

1 In order to provide personalized services, the Korean Film Asset Trading Platform utilizes cookies to store and retrieve user information.

2 A cookie is a small amount of information sent by the server (HTTP) that operates the website to the user's computer browser, and it may be stored on the hard disk of the user's PC.

o A. Purpose of Using Cookies
- : Cookies are used to understand the user's visit and usage patterns for each service and website, popular search words, security connection status, etc., in order to provide optimized information to the user.
Installation, Operation, and Refusal of Cookies
- Users can refuse to save cookies by adjusting the options in the Privacy menu found under Tools > Internet Options in the web browser.
Refusing to Save Cookies: If cookies are refused, users may experience difficulties in using personalized services.

Article 7 (Measures to Ensure the Safety of Personal Information)

1 The Korea Film Archive takes the following measures to ensure the safety of personal information:

Administrative Measures: Establishment and implementation of personal information management plans (internal management plans) for personal information, regular staff training, etc.

Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of identification information, encryption of member passwords on the website, installation of security programs.

Physical Measures: Access control to computer rooms, data storage rooms, etc.

Article 8 (Personal Information Protection Officer)

1 The Korea Film Archive has appointed a Personal Information Protection Officer as follows to oversee all tasks related to the personal information processing and to address complaints and remedy any damages related to the processing of personal information.

개인정보 보호책임자 테이블
Tasks	Name	Department	Position	Contact Info./E-mail
Personal Information Protection Officer	You Seong-gwan	nformation Resources Team	Team Head	(phone)02-3153-2050 (E-mail) duane@koreafilm.or.kr
Personal Information Protection Staff	Choi Eun-ji	Information Resources Team	Assistant Manager	(phone) 02-3153-2065 (E-mail) choi8029@koreafilm.or.kr

※ (Fax) 02-3153-2080

2 Data subjects may contact the Personal Information Protection Officer and the relevant department regarding any inquiries, complaints, or remedies related to personal information protection that arise while using the services (or projects) of the Korea Film Archive. The Korea Film Archive will respond to and address the inquiries of data subjects without delay.

Article 9 (Request for Access to Personal Information)

1 Data subjects may submit requests for access to personal information under Article 35 of the Personal Information Protection Act to the department listed below. The Korea Film Archive will strive to ensure that requests for access to personal information by data subjects are processed promptly.

개인정보 열람청구 담당자 테이블
Department	Staff	Contact Information
Information Resources Team	Choi Eun-ji	(Phone) 02-3153-2065 (E-mail) choi8029@koreafilm.or.kr (Fax) 02-31530-2080

2 Data subjects may also submit requests for access to personal information through the Personal Information Portal of the Personal Information Protection Commission (www.privacy.go.kr) in addition to requesting to the department responsible for receiving and processing access requests as mentioned in Paragraph ①. Personal Information Portal → Personal Service → Exercising Right of Data Subject → Request for Personal Information (identity verification required)

Article 10 (Remedies for Infringement of Rights)

1 Data subjects may seek remedies and consultations regarding personal information violations at the institutions listed below.

Personal Information Dispute Mediation Committee: (No area code) 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Report Center: (No area code) 118 (privacy.kisa.or.kr)
Supreme Prosecutors' Office: (No area code) 1301 (www.spo.go.kr)
orean National Police Agency: (No area code) 182 (ecrm.cyber.go.kr)

2 A person whose rights or interests have been infringed due to a decision or omission of act made by the head of a public institution in response to a request under Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information), or Article 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act may file an administrative appeal in accordance with the Administrative Appeals Act.

Central Administrative Appeals Commission: (No area code) 110 (www.simpan.go.kr)

Article 11 (Changes to the Personal Information Processing Policy)

This privacy policy takes effect from August 23, 2024.