1. Personal Information Items Collected and Method of Collection

• Items Collected: Email address
• Automatically Collected Items: Cookies, connection IP, visit and click history — Collected through Google Ads, Google Analytics (GA4), Naver Premium Log Analysis, etc.
• Method of Collection: Direct input by users through the newsletter subscription form on the Site and automatic collection during service use.

2. Installation, Operation, and Refusal of Automatic Collection Devices such as Cookies

• The Company uses ‘cookies’ that store and periodically retrieve user information to provide customized services to users.
• Through cookies, Google Analytics (GA4), Google Ads, and Naver Premium Log Analysis collect information for website visit statistics and advertising effectiveness analysis.
• Users may refuse to store cookies through their web browser settings. In this case, there may be difficulties in using some services.

3. Purpose of Collection and Use of Personal Information

• Sending newsletters including TOY CON SEOUL event news, participating artist/exhibition information, and operational guidance.
• Website visit statistical analysis and advertising effectiveness measurement.

4. Retention and Use Period of Personal Information

• Destroyed immediately upon cancellation of subscription (opt-out).
• If not explicitly cancelled, it will be destroyed within 2 years after the end of the event.
• Information collected through cookies is retained in accordance with the policies of each analysis/advertising tool operator (Google, Naver).

5. Entrustment of Personal Information Processing

The Company entrusts the processing of personal information to an external company for newsletter dispatch duties as follows:

• Entrusted Entity: Stibee Inc.
• Details of Entrusted Work: Email newsletter dispatch and subscriber management

6. Provision of Personal Information to Third Parties

• In principle, the Company does not provide users’ personal information to external parties (except as required by laws and regulations).
• Information collected through Naver Premium Log Analysis is provided to Naver for the purpose of analyzing advertising effectiveness.

7. Overseas Transfer of Personal Information

The Company transfers personal information overseas as follows for the use of Google Analytics (GA4) and Google Ads.

Users have the right to refuse consent to the overseas transfer above. If you refuse, there are no specific disadvantages to using the website (however, if cookies are blocked, some functions may be limited).

8. Measures to Ensure the Safety of Personal Information

In accordance with Article 29 of the Personal Information Protection Act, the Company takes the following technical and administrative measures necessary to ensure safety:

• Administrative Measures: Minimization and training of personnel handling personal information.
• Technical Measures: Management of access rights to the personal information processing system, encryption (HTTPS) applied during transmission.
• The entrusted company (Stibee) holds the ISO 27001 certification, an international standard for information security management systems.

9. Rights, Duties, and Method of Exercise of Information Subjects

• Users can withdraw their consent at any time through opt-out (unsubscribing), and request access, correction, deletion, or suspension of processing of their personal information through the unsubscribe link at the bottom of the sent emails or via the contact information of the Privacy Officer in Article 11.
• The legal representative of a child under the age of 14 may exercise the same rights.

10. Destruction Procedure and Method of Personal Information

Personal information stored in electronic file format is deleted using a method that makes recovery and regeneration impossible.

11. Privacy Officer

Name: Junghwan Kim

Contact: 02-6272-0032

12. Duty of Notification

This policy applies from [Effective Date: Opening Date of the Website (Subscription Form)]. In the event of additions, deletions, or modifications to the contents, notification will be made through the Site from 7 days prior to enforcement.