Privacy Policy

Article 1 (Purpose and Items of Processing Personal Information)

1. The ENVEX website processes personal information in accordance with the Personal Information Protection Act and related laws. Personal information being processed is not used for purposes other than those stated, and if the purpose of use changes, necessary measures such as obtaining separate consent will be taken pursuant to Article 18 of the Personal Information Protection Act.
   • 1. Administrative work related to ENVEX participation/visits and provision of domestic and overseas environmental industry information
     Personal information is processed for these purposes. Children under the age of 14 may not apply to participate in the exhibition.
   • 2. Handling of civil petitions
     Personal information is processed to verify the identity of the petitioner, confirm petition details, contact and notify for fact-finding, and notify results.
2. Personal information processed by the Korea Environmental Conservation Institute is registered and disclosed pursuant to Article 32 of the Personal Information Protection Act. The purpose of processing, retention period, and items of personal information files are as follows.

   Name of personal information file	Legal basis / Purpose of processing	Personal information items recorded in the file	Retention period
   ENVEX website user DB	(Basis) Consent of the data subject (Purpose) Administrative work for ENVEX participation/visits, service provision, and provision of domestic and overseas environmental industry information	(Required) Name, organization, position, address, telephone number, mobile number, email	3 years

3. For details on the purpose of processing, retention period, and items of other personal information files, please refer to the link below. View details

Article 2 (Processing of Personal Information of Children Under 14)

The ENVEX website does not process personal information of children under the age of 14.

Article 3 (Results of Privacy Impact Assessment)

The ENVEX website does not operate any personal information processing system subject to a “Privacy Impact Assessment” under Article 33 of the Personal Information Protection Act.

Article 4 (Processing and Retention Period of Personal Information)

1. The ENVEX website processes personal information within the retention and use period prescribed by law, or within the retention and use period agreed upon when the personal information was collected from the data subject.
2. For details on the processing and retention period and items of personal information files, please refer to the link below. View details

Article 5 (Procedures and Methods for Destroying Personal Information)

1. The ENVEX website destroys personal information without delay when it becomes unnecessary, such as upon expiry of the retention period or achievement of the processing purpose.
2. Where personal information must continue to be retained under other laws even after the agreed retention period has expired or the processing purpose has been achieved, the personal information (or personal information file) is moved to a separate database (DB) or stored in a different location.
3. The procedures and methods for destroying personal information are as follows.
   • 1. Destruction procedure
     The ENVEX website establishes a destruction plan for personal information (or personal information files) to be destroyed, selects personal information for which grounds for destruction have arisen, and destroys it with the approval of the Chief Privacy Officer of the ENVEX website.
   • 2. Destruction method
     Personal information recorded and stored in electronic file form is destroyed so that the records cannot be reproduced, and personal information recorded and stored on paper is shredded or incinerated.

Article 6 (Provision of Personal Information to Third Parties)

The ENVEX website does not provide personal information to third parties.

Article 7 (Criteria for Additional Use and Provision)

The ENVEX website does not use or provide personal information without the consent of the data subject.

Article 8 (Outsourcing of Personal Information Processing)

1. The ENVEX website outsources personal information processing tasks as follows in order to ensure smooth handling of personal information.

   Outsourcee (trustee)	Details of outsourced work
   (Trustee) Progist Co., Ltd. (Tel) 010-8636-2553	ENVEX website management

2. When entering into an outsourcing contract, the ENVEX website specifies in the contract, in accordance with Article 26 of the Personal Information Protection Act, matters such as the prohibition of processing personal information beyond the purpose of the outsourced work, technical and administrative safeguards, restrictions on re-outsourcing, management and supervision of the trustee, and liability for damages, and supervises whether the trustee processes personal information safely.
3. Pursuant to Article 26 (6) of the Personal Information Protection Act, if a trustee re-outsources the personal information processing work of the company, the consent of the ENVEX website is obtained.
4. If the details of the outsourced work or the trustee change, we will disclose the change through this privacy policy without delay.

Article 9 (Overseas Collection and Transfer of Personal Information)

The ENVEX website does not collect or transfer personal information overseas.

Article 10 (Measures to Ensure the Security of Personal Information)

1. The ENVEX website takes the following measures to ensure the security of personal information.
   • 1. Administrative measures: establishment and implementation of an internal management plan, regular staff training
   • 2. Technical measures: management of access rights to personal information processing systems, installation of access control systems, encryption of unique identifying information, installation of security programs
   • 3. Physical measures: access control for the computer room, data storage room, etc.

Article 11 (Possibility of Disclosing Sensitive Information and How to Choose Non-Disclosure)

The ENVEX website does not collect or process sensitive information.

Article 12 (Processing of Pseudonymized Information)

The ENVEX website does not collect or process pseudonymized information.

Article 13 (Installation and Operation of Devices that Automatically Collect Personal Information, and Refusal Thereof)

1. The ENVEX website uses “cookies” that store and retrieve usage information from time to time in order to provide individually customized services to users.
2. A cookie is a small amount of information sent by the server (http) used to operate the website to the user's browser, and is stored on users' PCs or mobile devices.
3. Data subjects may allow or block cookies through web browser option settings. However, if cookie storage is refused, difficulties may arise in using customized services.

   Category		Details
   Web	Chrome	Select ‘⁝’ at the top right of the browser > New Incognito window (shortcut: Ctrl+Shift+N)
   	Edge	Select ‘…’ at the top right of the browser > New InPrivate window (shortcut: Ctrl+Shift+N)
   Mobile	Chrome	Select ‘⁝’ at the top right of the mobile browser > New Incognito tab
   	Safari	Device Settings > Safari > Advanced > Block All Cookies
   	Samsung Internet	Select the ‘Tabs’ icon at the bottom of the mobile browser > Turn on Secret mode > Start

Article 14 (Collection and Use of Behavioral Information by Third Parties via Automatic Collection Devices, and Refusal Thereof)

The ENVEX website does not collect or process behavioral information.

Article 15 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)

1. Data subjects may exercise their rights at any time against the ENVEX website, including requests for access to, correction of, deletion of, and suspension of processing of their personal information, withdrawal of consent, and refusal of or explanation regarding automated decisions.
2. Rights may be exercised in writing, by email, or by facsimile (FAX) in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and the ENVEX website will take action without delay.
3. Rights may also be exercised through an agent, such as the legal representative of the data subject or a duly authorized person. In this case, a power of attorney in the form of Annex No. 11 of the “Notice on Methods of Processing Personal Information” must be submitted.
4. The right of a data subject to request access to and suspension of processing of personal information may be restricted pursuant to Article 35 (4) and Article 37 (2) of the Personal Information Protection Act.
5. Where personal information is specified as subject to collection under other laws, deletion of that personal information cannot be requested.
6. Where the data subject has consented to automated decision-making, has been informed in advance through a contract or otherwise, or where there is a clear provision in law, refusal of automated decisions is not recognized and only requests for explanation and review are possible.
   • - In addition, requests for refusal of or explanation regarding automated decisions may be rejected where there are legitimate grounds, such as a risk of unfairly infringing upon another person's life, body, property, or other interests.
7. The ENVEX website verifies whether the person making a request for access, correction, deletion, suspension of processing, or refusal of or explanation regarding an automated decision is the data subject or a duly authorized agent.
8. Requests for access to personal information, etc., may be filed with the department below. The Korea Environmental Conservation Institute will endeavor to process such requests promptly.

   ▶ Department receiving and handling requests for access, etc.

   Department: External Environmental Cooperation Office, International Cooperation & Exhibition Business Team

   Contact: (Tel) 02-3406-2523, (Email) envex@keci.or.kr, (Fax) 02-3409-8351

‣ Form downloads

Article 16 (Chief Privacy Officer, Departments in Charge, and Departments Handling Complaints)

1. The ENVEX website designates a Chief Privacy Officer as follows, who takes overall responsibility for personal information processing and handles complaints and remedies for damage from data subjects.

   ‣ Chief Privacy Officer and Privacy Officer

   Category	Person in charge	Position	Contact
   Chief Privacy Officer	Jeong Jae-hwan	Director, Human Resources Operations Office	(Tel) 02-3406-3111 (Email) keci@keci.or.kr (Fax) 02-3409-8352
   Privacy Officer	Yoon Seon-hwa	Staff	(Tel) 02-3406-3120 (Email) keci@keci.or.kr (Fax) 02-3409-8352

   ‣ Officers in charge by field

   Category	Person in charge	Position	Contact
   Officer in charge by field	Moon Tae-chun	Director, External Environmental Cooperation Office	(Tel) 02-3407-1563 (Email) envex@keci.or.kr (Fax) 02-3409-8351
   Privacy Officer	Gi Do-heon	Staff	(Tel) 02-3406-2523 (Email) envex@keci.or.kr (Fax) 02-3409-8351

2. Data subjects may contact the Chief Privacy Officer and the responsible department regarding all inquiries, complaints, and requests for remedy related to personal information protection arising while using the services (or business) of the ENVEX website. The ENVEX website will respond to and handle such inquiries without delay.

Article 17 (Remedies for Infringement of Data Subjects' Rights)

1. Data subjects may apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency Privacy Infringement Report Center. For other reports and counseling on personal information infringement, please contact the organizations below.
   • 1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
   • 2. Privacy Infringement Report Center: 118 (privacy.kisa.or.kr)
   • 3. National Police Agency: 182 (ecrm.cyber.go.kr)
2. The ENVEX website guarantees the data subject's right to control their own personal information and strives to provide counseling and remedies for damage caused by personal information infringement. If you need to file a report or receive counseling, please contact the department below.

   ‣ Customer counseling and reporting related to personal information protection

   Department: Management Planning Office, Information Management Team

   Contact: (Tel) 02-3406-3120, (Email) keci@keci.or.kr, (Fax) 02-3409-8352

3. A person whose rights or interests have been infringed by a disposition or omission of the head of a public institution in response to a request under Article 35, Article 36, or Article 37 of the Personal Information Protection Act may request an administrative appeal as prescribed by the Administrative Appeals Act.
   • ‣ Central Administrative Appeals Commission: 110 (www.simpan.go.kr)

Article 18 (Results of Personal Information Protection Level Assessment)

1. The Korea Environmental Conservation Institute, which operates the ENVEX website, undergoes the annual “Personal Information Protection Level Assessment” conducted by the Personal Information Protection Commission pursuant to Article 11-2 of the Personal Information Protection Act in order to safely manage the personal information of data subjects.
2. The Korea Environmental Conservation Institute received a Grade ‘B’ in the 2025 Personal Information Protection Level Assessment.

Article 19 (Operation and Management of Fixed Visual Data Processing Devices)

The ENVEX website does not operate or manage fixed visual data processing devices.

Article 20 (Operation and Management of Mobile Visual Data Processing Devices)

The ENVEX website does not operate or manage mobile visual data processing devices.

Article 21 (Additional Efforts for Personal Information Protection)

1. The ENVEX website does its utmost to safely manage users' personal information and makes additional efforts for personal information protection beyond the security measures required by the Personal Information Protection Act.
2. The ENVEX website also strives for safe personal information processing and the spread of a personal information protection culture through various activities, such as participating as a partner organization for Personal Information Protection Day.

Article 22 (Changes to This Privacy Policy)

1. This privacy policy is effective from September 17, 2025.
2. Previous versions of this privacy policy can be found below.
   • Applicable from September 21, 2023 to October 10, 2024 View View changes
   • Applicable from October 11, 2024 to September 16, 2025 View View changes