RCA Regional Office collects and processes minimal personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the "Personal Information Protection Act."

1. 1 APEX Network

1. 1 RCA Regional Office processes and retains personal information within the period specified by law or the period agreed upon by the data subject when collecting personal information.
2. 2 The processing and retention periods for each type of personal information are as follows:

1. 1 The processing purposes, retention periods, and personal information items recorded in the personal information files registered and disclosed pursuant to Article 32 of the "Personal Information Protection Act" are as follows:

RCA Regional Office provides personal information to third parties only in cases where it corresponds to Article 17 and Article 18 of the "Personal Information Protection Act," such as with the consent of the data subject or specific legal provisions.

1. 1 When obtaining separate consent from the data subject.
2. 2 When there are specific legal provisions.
3. 3 When it is clearly recognized as necessary for the urgent interests of the data subject or a third party's life, body, property, etc., in situations where the data subject or legal representative is unable to express consent due to incapacity or address unknown.
4. 4 When it is necessary for statistical compilation, academic research, etc., and personal information is provided in a form that cannot identify specific individuals.
5. 5 When unable to perform duties stipulated by other laws without undergoing deliberation and resolution by the Protection Committee, and personal information is not used for purposes other than intended or provided to third parties.
6. 6 When necessary to provide personal information to foreign governments or international organizations for the implementation of treaties or other international agreements.
7. 7 When necessary for the investigation, prosecution, and maintenance of charges for criminal activities.
8. 8 When necessary for the performance of judicial duties by courts.
9. 9 When necessary for the execution of sentences, protective dispositions, or probation.

1. 1 RCA Regional Office promptly destroys personal information when it becomes unnecessary due to the expiration of the retention period or the achievement of the processing purpose. However, this does not apply if preservation is required by other laws.
2. 2 The procedures and methods for the destruction of personal information are as follows:
   1. 1. Destruction procedures:
      When the processing purpose of personal information is achieved or the retention period expires, RCA Regional Office destroys the personal information according to its internal management plan.
   2. 2. Method of destruction:
      Personal information recorded and stored in electronic file format is destroyed to the extent that it cannot be regenerated, and personal information recorded and stored on paper documents is shredded or incinerated for destruction. However, if it is difficult to destroy only part of the personal information using the above methods, appropriate measures are taken according to the internal management plan.

1. 1 Data subjects have the right to exercise rights such as access, correction, deletion, and suspension of processing of personal information at any time with regard to RCA Regional Office.
   ※ Requests for access to personal information regarding children under 14 years of age must be made directly by their legal guardian. Data subjects who are minors aged 14 or older may exercise their rights regarding their personal information themselves or through their legal guardian.
2. 2 The exercise of rights can be made in writing, via electronic mail, facsimile transmission (FAX), etc., to RCA Regional Office in accordance with Article 41(1) of the Enforcement Decree of the "Personal Information Protection Act," and RCA Regional Office will promptly take necessary actions.
3. 3 The exercise of rights can also be made through a legal guardian or a delegated representative. In this case, a power of attorney according to the format specified in Annex 11 of the "Guidelines on Personal Information Processing Methods (No. 2020-7)" must be submitted.
4. 4 Requests for access to personal information and suspension of processing may be restricted under Article 35(4) and Article 37(2) of the "Personal Information Protection Act."
5. 5 Requests for correction and deletion of personal information cannot be made if the personal information is explicitly specified as a collection target in other laws.
6. 6 RCA Regional Office verifies whether the requester for access, correction, deletion, or suspension of processing is the data subject or a legitimate representative when such requests are made.

RCA Regional Office takes the following measures to ensure the security of personal information.

1. 1 Administrative measures: establishment of internal management plan and implementation, regular employee training, etc.
2. 2 Technical measures: Management of access rights of personal information processing system, etc., installation of access control system, encryption of unique identification information, installation of security program
3. 3 Physical measures: Control access to computer rooms, data storage rooms, etc.

1. 1 RCA Regional Office utilizes 'cookies' to store and retrieve usage information.
2. 2 Cookies are small pieces of information sent by the server (http) operating the website to the user's computer browser and may also be stored on the hard disk of users' PCs.
   1. a. Purpose of cookie usage: Cookies are used to close pop-up windows for a certain period (24 hours).
   2. b. Installation, operation, and rejection of cookies: You can refuse cookie storage by adjusting the option settings in the Tools > Internet Options > Privacy menu of your web browser.
   3. c. Refusing cookie storage does not restrict usage.

RCA Regional Office takes overall responsibility for personal information processing and has designated a privacy officer to oversee personal information processing and handle complaints and remedies related to data subjects as follows:

1. 1 Data subjects who have suffered damages due to privacy infringement may seek remedy by requesting dispute resolution or counseling from the Personal Information Dispute Mediation Committee or the KISA Personal Information Infringement Report Center.
   1. 1. Personal Information Dispute Mediation Committee: 1833-6972, (www.kopico.go.kr)
   2. 2. Personal Information Infringement Report Center: (No area code) 118, (privacy.kisa.or.kr)
   3. 3. Cybercrime Investigation Division, Prosecution Service: (No area code) 1301, (www.spo.go.kr)
   4. 4. Cyber Investigation Bureau, Korea National Police Agency: (No area code) 182, (cyberbureau.police.go.kr)
2. 2 Those who have suffered infringement of rights or interests due to decisions made by the head of a public agency or due to misconduct may file an administrative lawsuit according to the Administrative Adjudication Act.
   ※ For more information on administrative adjudication, please refer to the website of the Central Administrative Appeals Commission
   (www.simpan.go.kr).

The privacy policy of RCA Regional Office will be effective from 2024.0.00. The previous privacy policy can be found on the bulletin board below.