EXPORUM

Privacy Policy

EXPORUM INC. (hereinafter the "Company") complies with applicable laws, including the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the Fair Hiring Procedure Act, and does its utmost to protect the personal information of data subjects (Site visitors, inquirers, and job applicants). This Privacy Policy provides information on the items, purposes, retention periods, safety measures, and methods for data subjects to exercise their rights with respect to personal information processed by the Company.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information solely for the following purposes, and shall take necessary measures, including obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act, if the purpose of processing changes.

  • Receipt of and response to inquiries through the Site, and processing of information and consultation requests
  • Conducting recruitment procedures for applicants, including document screening, interviews, and notification of results
  • Information regarding participation in and attendance at exhibitions, conventions, and events (MICE) hosted or organized by the Company
  • Statistics and analysis for the prevention of unauthorized use and stable operation of the Site

Article 2 (Items of Personal Information Collected and Methods of Collection)

The Company collects only the following items and does not exceed the minimum scope necessary.

  • Inquiry Form
    • Required: Name, company (organization) name, contact number (telephone/mobile), email, inquiry subject and content
    • Optional: Information contained in attached files
  • Recruitment Application Form
    • Required: Name, date of birth, contact number, email, address, education and career history, application field
    • Optional: Information contained in attached files such as resume, cover letter, and portfolio
  • Automatically Generated Information: Access logs, access IP, browser and device information, and cookies (automatically generated in the course of accessing and using the Site)

Methods of collection: Inquiry and recruitment application forms on the Site, email, fax, telephone, written forms, submission of business cards, and automatic generation during use of the Site.

Article 3 (Processing and Retention Period of Personal Information)

The Company processes and retains personal information within the retention and use period stipulated by applicable laws or the period consented to by the data subject at the time of collection, and shall destroy such information without delay upon the expiration of the retention period.

  • Inquiry information: Retained for 3 years and then destroyed (based on records of consumer complaints and dispute resolution under the Act on Consumer Protection in Electronic Commerce)
  • Recruitment application information: Retained for 180 days after the recruitment process ends and then destroyed (for the purpose of responding to applicants' requests for return or objection under Article 11 of the Fair Hiring Procedure Act; if an applicant separately requests destruction, it shall be destroyed without delay)
  • Site access records (logs, access IP): 3 months (Protection of Communications Secrets Act)

Article 4 (Provision of Personal Information to Third Parties and Entrustment of Processing)

  1. 1. The Company shall not, in principle, provide the personal information of data subjects to external parties. However, exceptions shall be made in the following cases:
    • Where separate consent has been obtained from the data subject
    • Where there are special provisions in applicable laws or where it is unavoidable in order to comply with legal obligations
    • Where the data subject or the data subject's legal representative is unable to express intent or where prior consent cannot be obtained due to unknown address or similar reasons, and it is clearly deemed necessary for the urgent life, body, or property interests of the data subject or a third party
    • Where an investigative agency requests such information for investigative purposes in accordance with the procedures and methods prescribed by law
  2. 2. There is currently no personal information processing work entrusted by the Company to any third party. In the event of future entrustment, the Company shall stipulate related matters through an entrustment contract in accordance with Article 26 of the Personal Information Protection Act, manage and supervise the entrusted party, and provide notice without delay through this Privacy Policy.

Article 5 (Rights and Obligations of Data Subjects and Method of Exercise)

  1. 1. Data subjects may at any time request access to, correction of, deletion of, or suspension of processing of their personal information submitted to the Company (including inquiry and recruitment application data).
  2. 2. The rights under paragraph 1 may be exercised by requesting the Personal Information Protection Officer in writing, by telephone, or by email (privacy@exporum.com), and the Company shall take action without delay. The Company may request identification documents for identity verification.
  3. 3. If a data subject requests correction or deletion of personal information due to errors or the like, the Company shall not use or provide such personal information until the correction or deletion is completed.
  4. 4. The rights under paragraph 1 may also be exercised through the data subject's legal representative or a duly authorized agent, in which case a power of attorney shall be submitted.

Article 6 (Procedures and Methods for Destruction of Personal Information)

The Company shall destroy personal information without delay when it becomes unnecessary due to the expiration of the retention period, achievement of the purpose of processing, or other reasons.

  • Destruction procedure: The personal information for which grounds for destruction have arisen shall be selected and destroyed with the approval of the Company's Personal Information Protection Officer.
  • Destruction method: Information in electronic file form shall be deleted using technical methods that render the records irretrievable, and personal information printed on paper shall be destroyed by shredding or incineration.

Article 7 (Measures to Ensure the Safety of Personal Information and Operation of Automatic Collection Devices)

The Company implements the following technical, administrative, and physical measures in accordance with Article 29 of the Personal Information Protection Act.

  • Minimization of personnel handling personal information and regular training
  • Restriction of access to personal information and differential granting of access authority
  • Installation and operation of access control systems (firewalls, etc.)
  • Encrypted storage and transmission of personal information
  • Retention of access records and prevention of forgery/alteration
  • Installation and operation of antivirus programs and maintenance of security programs in the latest state
  • Physical access control of servers, computer rooms, and data storage rooms

In addition, the Company may use "cookies" that store usage information for the purposes of Site operation and statistics. Data subjects may choose to allow cookies, confirm each time cookies are stored, or refuse the storage of all cookies through their web browser settings. If storage is refused, some functions of the Site may be limited.

Article 8 (Personal Information Protection Officer)

The Company designates the following Personal Information Protection Officer to take overall responsibility for personal information processing operations and to handle inquiries, complaints, and remedies from data subjects in connection with personal information processing.

  • Name: Jinhyun Kim
  • Position: Head of Digital Innovation Division
  • Telephone: 02-6000-6677
  • Email: privacy@exporum.com

Data subjects may direct all personal information protection-related inquiries arising in the course of using the Company's services to the Personal Information Protection Officer, and the Company shall respond and take action without delay.

Article 9 (Remedies for Infringement of Rights)

Data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Personal Information Infringement Reporting Center of the Korea Internet & Security Agency, and other bodies in order to obtain relief for personal information infringement.

  • Personal Information Dispute Mediation Committee: 1833-6972 (no area code) (www.kopico.go.kr)
  • Personal Information Infringement Reporting Center: 118 (no area code) (privacy.kisa.or.kr)
  • Supreme Prosecutors' Office Cybercrime Investigation Unit: 1301 (no area code) (www.spo.go.kr)
  • National Police Agency Cyber Investigation Bureau: 182 (no area code) (ecrm.police.go.kr)

Article 10 (Changes to the Privacy Policy)

This Privacy Policy shall take effect from the effective date, and any additions, deletions, or corrections to the contents due to changes in laws or policies shall be announced through the Site notice at least seven (7) days prior to the effective date of the changes.

Supplementary Provisions

  • Date of announcement: July 28, 2026
  • Effective date: July 28, 2026