Busan Museum of Movies establishes and publishes this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to promptly and smoothly handle related grievances.

Article 1 (Purpose of Processing Personal Information)

The purposes for processing personal information files registered and disclosed by the Busan Museum of Movies in accordance with Article 32 of the Personal Information Protection Act are as follows:

• 1. Personal Information File Name : Reservation Verification
  • Purpose of Personal Information Processing : Verification of group & facility rental reservations
  • Collection Method : Main Website
  • Legal Basis for Retention : Data Subject Consent
  • Retention Period : 1 year
  • Related Laws: Records related to credit information collection/processing and use: 3 years
• 2. Personal Information File Name : Civil Affairs Processing
  • Purpose of Processing : Verification of petitioner’s identity
  • Collection Method : Website
  • Legal Basis : Data subject consent
  • Retention Period : 3 months
  •  
  • Related Legislations : Records related to collection, processing, and use of credit information : 3 years retention

Article 2 (Personal Information Impact Assessment Results)

Busan Museum of Movies processes and retains personal information within the retention period prescribed by law or agreed upon with data subjects at the time of collection.

Article 3 (Third-party Provision of Personal Information)

Busan Museum of Movies processes personal information only within the scope specified in Article 1(Purpose of Processing Personal Information) and provides personal information to third parties only in cases stipulated in Articles 17 and 18 of the Personal Information Protection Act, including consent from data subjects or special legal provisions.

Article 4 (Outsourcing of Personal Information Processing)

• ① Busan Museum of Movies outsources the following personal information processing tasks for efficient operations.
  • 1. Website Maintenance
    • Processor: The Well
    • Outsourced Tasks: Website maintenance and management
    • Contract Period :
• ② All outsourcing contracts comply with Article 26 of the Personal Information Protection Act, specifying data protection requirements, sub-contracting restrictions, supervision measures, and liability provisions. We actively monitor all contractors for compliance.
• ③ Any changes to outsourced services or contractors will be promptly disclosed through this Privacy Policy.

Article 5 (Data Destruction Procedures and Methods)

Busan Museum of Movies destroys personal information without delay once the purpose of processing has been achieved. However, this does not apply when retention is required by other laws. The procedures, timelines, and methods for destruction are as follows:

• 1. Destruction Procedures

  Unnecessary personal information and personal information files are processed under the responsibility of the Privacy Protection Officer according to internal policy procedures as follows.

  • - Expired personal information is destroyed immediately after retention period expires.
  • - When the purpose of processing a personal information file has been fulfilled, or when the relevant service is discontinued or the business is terminated, and the file is deemed unnecessary, the Busan Museum of Movies will promptly destroy the personal information file without delay from the date it is recognized as no longer needed.
  • - Accessed Logs, cookies, IP addresses, visit timestamps, and accessed page URLs
• 2. Destruction Procedures
  • - Personal information printed on paper is destroyed by shredding with a shredder or through incineration.
  • - Electronic file information is destroyed using technical methods that make the records irreproducible.

Article 6 (Rights·Duties of Information Subjects and Legal Representative and Methods of Exercise)

• ① Subjects may exercise their rights to request access, correction, deletion, or suspension of processing of personal information from the Busan Museum of Movies at any time.
• ② The exercise of rights under paragraph 1 may be made to the Busan Museum of Movies in writing, by email, facsimile (FAX), etc., in accordance with Article 41, paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Busan Museum of Movies will take measures without delay.
• ③ The exercise of rights under paragraph 1 may be exercised through an agent such as a legal representative of the information subject or an authorized person. In this case, a power of attorney in accordance with Form No. 11 attached to the "Public Notice on Personal Information Processing Methods (No. 2020-7)" must be submitted.
• ④ Requests for access to personal information and suspension of processing may be restricted under Article 35, paragraph 4 and Article 37, paragraph 2 of the Personal Information Protection Act.
• ⑤ Requests for correction and deletion of personal information cannot be made if the personal information is specified as a collection target in other laws and regulations.
• ⑥ Busan Museum of Movies verifies whether the person making a request for access, correction/deletion, or suspension of processing in accordance with information subject rights is the person themselves or a legitimate representative.

Article 7 (Measures to Ensure Safety of Personal Information)

Busan Museum of Movies takes the following measures to ensure the safety of personal information.

• 1. Internal Management Plan

  We have established and implemented an internal management plan to ensure the safe processing of personal information.

• 2. Minimization and Training of Personnel

  We designate specific employees to handle personal information and minimize the number of authorized personnel through restricted access and regular training programs.

• 3. Access Restriction to Personal Information

  We implement necessary access control measures for personal information through granting, modifying, and revoking access permissions to database systems that process personal information. We also employ intrusion prevention systems to control unauthorized external access.

• 4. Encryption of Personal Information

  User passwords are encrypted during storage and management, ensuring only the account holder has access. Important data is protected through file and transmission encryption, file locking features, and additional security functions.

• 5. Technical Measures Against Hacking

  Busan Museum of Movies has implemented security programs to prevent the leakage or damage of personal information caused by hacking or computer viruses, and these programs are regularly updated and inspected. The systems are installed in access-controlled areas and are technically and physically monitored and protected to block any unauthorized access.

Article 8 (Installation and Operation of Automatic Data Collection Devices)

• ① Busan Museum of Movies uses ‘cookie’ to store and retrieve usage information to provide personalized services to users.
• ② Cookies are small pieces of information sent from our web server (http) to your browser and may be stored on your computer's hard drive.
  • a. Purpose of Cookies : To analyze visitor patterns, usage behavior, popular search terms, and secure connections to provide optimized information and services.
  • b. Cookie Installation•Management•Decline : You can refuse cookie storage through your browser settings: Tools > Internet Options > Privacy menu.
  • c. Refusing cookies may result in difficulties using personalized services.

Article 10(Privacy Protection Officer)

Busan Museum of Movies has designated a Privacy Protection Officer to oversee all personal information processing operations and to handle complaints and provide remedies related to personal information processing as follows.

• - Privacy Officer : Director Ahn Kyung-soo
• - Mobile: 051-715-4200, 4202
• - Email: bommoviebusan@naver.com

Article 12 (Remedies for Privacy Rights Violations)

Data subjects may seek remedies for personal information infringement by filing for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency's Privacy Violation Report Center, and other relevant organizations.

In accordance with Articles 35 (Access to Personal Information), 36 (Correction and Deletion), and 37 (Suspension of Processing) of the Personal Information Protection Act, individuals whose rights or interests have been infringed by actions or omissions of public institution heads may file administrative appeals as prescribed by the Administrative Appeals Act.

※ For detailed information on administrative appeals, please visit the Central Administrative Appeals Commission website at www.simpan.go.kr

Article 14 (Privacy Policy Changes)

• ① This Privacy Policy is effective from October 1, 2023.
• ② Previous versions of the Privacy Policy can be found below.