KOAMI MESSE Co., Ltd. is the organizer of the Asia Machinery & Manufacturing Expo (hereinafter referred to as “AMXPO”; www.amxpo.org). In accordance with Article 30 of the Personal Information Protection Act, KOAMI MESSE Co., Ltd. has established and published this Privacy Policy in order to protect personal data and to handle related issues effectively and smoothly. Hereinafter, KOAMI MESSE Co., Ltd. shall be referred to as “AMXPO” for convenience.
We recognize the importance of personal data protection and responsibly manage the personal information of all stakeholders, including clients, partner companies, executives, employees, and community members, in a manner that complies with the legal requirements of the countries where our business operates.
Data and information are collected in the course of using AMXPO’s products and services, accessing our website, or engaging in business communications. This Privacy Policy outlines AMXPO’s approach to safeguarding and maintaining collected personal information, detailing the types of information collected, the purposes of use, the legal grounds for processing, and your rights regarding such information.
1. Purpose of Personal Data Processing
- Website Membership Registration and Management
Personal data is processed for purposes such as confirming the intention to join, identification and authentication for membership services, maintenance and management of membership status, identity verification under the limited identification system, prevention of illegal service use, confirmation of legal guardian consent when collecting personal data of children under 14, various notifications, grievance handling, and record preservation for dispute resolution.
- Handling of Complaints and Civil Matters
Personal data is processed for verifying the identity of complainants, checking complaint details, contacting or notifying for fact-finding investigations, and notifying resolution results.
- Product/Service Inquiries, Sales, and Management
We collect details such as the data subject's name, country, job title, company name, postal address, email address, telephone number, department, and business details as part of purchasing products/services, submitting inquiries, requesting information, or managing accounts. When inquiries are made regarding our products or services via online meetings, face-to-face meetings, or phone calls, we use the requester's contact information to answer inquiries or take action on requests prior to entering into a contract. Phone calls with sales representatives may be recorded for training and monitoring purposes. In the case of call recordings, specific technical measures are applied following prior notice to minimize personal data processing (e.g., identifiable information is deleted where feasible).
- Marketing and Advertising
Personal data is processed for developing new services/products, providing customized services, offering participation opportunities in events and advertising activities, delivering services and advertisements based on demographic characteristics, verifying service validity, analyzing access frequency, or compiling statistics on service usage. Data subjects have the right to opt out of future marketing emails at any time, and instructions on how to refuse personal data collection will be provided. Data subjects reserve the right to modify their marketing preferences at any time.
- If a data subject's personal data is relevant to a specific product and is freely available through public sources (such as the website of the company to which the data subject belongs), we may, as a commercial entity, use such personal data to promote our products within the scope permitted by law as part of our legitimate interests.
- We may request personal profile photos from exhibitors or buyers to access the event's matchmaking platform.
In addition, photos and videos taken at our events may feature visitors, speakers, sponsors, or exhibitors. Photos and videos containing such data subjects may be used for promotional purposes on our website or social media accounts (Legal basis: consent or controller’s legitimate interest according to applicable laws).
- We may combine visitor session information or other data collected through tracking technologies with personally identifiable information to understand and measure online activities and experiences, and to determine products, promotions, and services of interest.
Technical methods are also used in HTML emails for purposes including: (i) determining whether recipients have opened/forwarded emails or clicked on links, (ii) displaying customized banner ads and other messages after closing an email, and (iii) determining whether a visitor made an inquiry or purchase in response to a particular email.
- When personal information is disclosed on any public bulletin board or chat area of this website or connected third-party websites, such information may be collected and used by third parties using the bulletin board or chat space. This may result in unsolicited messages from other participants or third parties, for which we are not responsible. When participating in customer inquiry chats, all provided information may be used to recommend products/services or assist with order confirmation.
2. Personal Data Items to be Processed
“AMXPO” processes the following personal data items.
1) Exhibition Pre-Registration
Of the items collected, industry, business nature, fields of interest, purpose of visit, job function, annual purchasing budget, and purchasing authority shall only be used for visitor statistics and providing buyer matchmaking services in accordance with Article 18 of the Personal Information Protection Act.
- Required Items: Gender, name, email, company name, zip code, company address, department, position, company phone number, mobile phone number, industry, business nature, fields of interest, purpose of visit, job function, annual purchasing budget, purchasing authority, annual turnover, number of employees
- Optional Items: English name, English company name
- Collection Method: Website, on-site registration
- Grounds for Retention: Consent from data subjects
- Retention Period: 2 years
2) Exhibition Application
- Required Items: Company name, website, company address, contact person name, department, position, phone number, fax number, mobile phone number, email
- Optional Items: Contact person name for tax invoice, department, position, phone number, fax number, business nature, purpose of participation, key exhibit items, detailed exhibit items, booth application and participation fee
- Collection Method: Website, email, written application form
- Grounds for Retention: Consent from data subjects
- Retention Period: 2 years
3) Exhibition and Participation Inquiries
- Required Items: Inquiry category, title/salutation, name, position, company name, email, mobile phone number, inquiry details
- Collection Method: Website, quote inquiry page (Moaform), phone, email
- Grounds for Retention: Consent from data subjects
- Retention Period: 2 years
3. Retention and Usage Period of Personal Data
1) “AMXPO” shall process and retain personal data within the retention and usage period in accordance with relevant statutes or within the retention and usage period agreed upon when collecting personal data from data subjects.
2) The retention and usage periods for personal data are as follows:
(1) Personal data related to service provision is retained and used for two (2) years from the date consent is given to collection and use.
- Grounds for retention: Consent from data subjects
(2) Personal data related to marketing and advertising is retained and used for two (2) years from the date consent is given to collection and use.
- Grounds for retention: Consent from data subjects
(3) Personal data collected via on-site registration is retained and used in the same manner as personal data processed for exhibition pre-registration.
- Grounds for retention: Consent from data subjects
4. Provision of Personal Data to a Third Party
- “AMXPO” shall process personal data of data subjects only within the scope specified in Section 1 (Purpose of Personal Data Processing), providing personal data to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with consent from the data subject or under special provisions of law.
- “AMXPO” provides personal data to third parties as follows:
1) (Deemed Consent Notice) Agreeing to these terms during online pre-registration or on-site registration on the exhibition website is deemed as consent to the provision of personal data to third parties.
2) (On-site Implied Consent) Scanning the admission badge (barcode) at an exhibitor’s booth for consultation or event participation during the exhibition is deemed as implied consent to providing personal data to that exhibitor.
- Recipients of Personal Data: Exhibition Exhibitors (AMXPO), KOAMI MESSE Co., Ltd., Association of Korean Exhibition Industry
- Purpose of Use by Recipients: Development of new services (products), provision of customized services, provision of event and advertising information, and participation opportunities
- Items Provided: Gender, name, email, company name, zip code, company address, department, job title/position, company phone number, mobile phone number, industry, business nature, fields of interest, job title, annual purchasing budget, annual turnover, number of employees
- Retention and Usage Period: Two (2) years from the date personal data is provided
5. Outsourcing of Personal Data Processing
- For seamless processing of personal data, personal data processing tasks are outsourced as follows:
| Outsourcee |
Tasks to be outsourced |
Personal data retention & usage period |
| Govent Inc. |
Exhibitors and Visitors’ identification and issuance of badges |
Until the end of the exhibition or termination of outsourcing contract |
| FAMPPY Inc. |
Exhibitors’ identification, Application for participation in the exhibition |
Until the end of the exhibition or termination of outsourcing contract |
| TBC |
Exhibitors’ identification |
Until the end of the exhibition or termination of outsourcing contract |
| KINTEX |
Exhibitors’ identification |
Until the end of the exhibition or termination of outsourcing contract |
| Korea Exhibition Industry Promotion Association |
Exhibitors and Visitors’ identification |
One (1) year from the date personal data is provided |
| KOAMI MESSE Co., Ltd. |
Visitor pre-registration, application for participation in the exhibition and various services, data storage, and service operation |
Two (2) years from the date personal data is provided |
- When signing an outsourcing contract, the Secretariat specifies in documents such as contracts the prohibition of personal data processing for purposes other than the outsourced purpose, technical and managerial protection measures, limitations on re-outsourcing, management and supervision over outsourcees, and liabilities such as compensation for damages in accordance with Article 25 of the Personal Information Protection Act, and supervises whether outsourcees process personal data safely.
- If there are any changes to the content of the outsourced tasks or the outsourcees, we will disclose them via this Privacy Policy without delay.
6. Rights and Obligations of Data Subjects and Methods for Exercise of Rights
Rights and obligations of data subjects and their legal representatives, and methods for exercise of rights. Users as personal data subjects may exercise the following rights.
- Data subjects may exercise rights such as requesting access, correction, deletion, or suspension of processing of personal data from the Secretariat at any time.
- Rights under Paragraph 1 may be exercised via written letter, email, opt-out forms, etc., in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Secretariat shall take action without delay.
- Rights under Paragraph 1 may be exercised through a legal representative or a delegated agent. In this case, a power of attorney pursuant to Form 11 of the Enforcement Rule of the Personal Information Protection Act must be submitted.
- Requests for access to and suspension of processing of personal data may be restricted pursuant to Article 35(5) and Article 37(2) of the Personal Information Protection Act.
- Requests for correction and deletion of personal data cannot be made if that personal data is specified as a subject of collection in other statutes.
- The Secretariat verifies whether the person making the request for access, correction/deletion, or suspension of processing is the data subject themselves or a legitimate representative.
7. Destroying Personal Data
In principle, the Secretariat shall destroy personal data without delay once the purpose of personal data processing has been achieved. The procedures, timelines, and methods for destruction are as follows.
- Destruction Procedure
Information entered by users is transferred to a separate database (or separate paper documents) after the purpose is achieved, stored for a specified period according to internal policies and relevant statutes, or immediately destroyed. At this time, personal data transferred to the database will not be used for any other purpose unless required by law.
- Destruction Timeline
User personal data shall be destroyed within five (5) days from the end of the retention period when the retention period expires, or within five (5) days from the date personal data processing is recognized as unnecessary due to fulfillment of purpose, cancellation of the service, or termination of business.
- Destruction Method
Electronic files are destroyed using technical methods that render records unrecoverable, and personal data recorded or stored on paper documents is shredded with a paper shredder or incinerated.
8. Installation, Operation, and Rejection of Automatic Personal Information Collection Devices
- The Secretariat uses 'cookies' to store and retrieve usage information from time to time in order to provide individual customized services.
- Cookies are small amounts of information sent by the server (http) operating the website to the user's computer browser and may be stored on the hard disk of the user's PC. A. Purpose of Cookies: Used to optimize information provided to users by identifying visit patterns, usage forms, popular search terms, and secure connections across visited services and websites. B. Installation, Operation, and Rejection of Cookies: Users can refuse to store cookies by configuring options in the web browser menu: Tools > Internet Options > Privacy. C. Refusing cookie storage may result in difficulties when using customized services.
9. Privacy Officer
“AMXPO” is overall responsible for personal data processing and has designated a Privacy Officer as follows to handle grievances and remedial compensation related to personal data processing:
▶ Privacy Manager
Department: KOAMI MESSE Co., Ltd.
Manager: Representative (CEO)
Contact: [tel : 02-369-7800], [email: info@amxpo.org]
Data subjects may inquire about all privacy protection matters, grievance handling, damage relief, etc., arising while using the Secretariat's services to the Privacy Officer and responsible department. The Secretariat will respond to and process inquiries without delay.
10. Changes in Privacy Policy
This Privacy Policy applies from the effective date. Any additions, deletions, or corrections to changes in accordance with statutes and policies will be notified through announcements seven (7) days prior to the implementation of changes.
11. Measures to Ensure Safety of Personal Data
The Secretariat takes the following technical, managerial, and physical measures necessary to ensure safety in accordance with Article 29 of the Personal Information Protection Act:
- Conducting Regular Self-Audits
Regular self-audits (once per quarter) are conducted to secure stability regarding personal data handling.
- Minimization and Training of Employees Handling Personal Data
Employees handling personal data are designated and limited to responsible staff to implement data management measures.
- Establishment and Implementation of Internal Management Plan
Internal management plans are established and executed for safe processing of personal data.
- Technical Measures Against Hacking, etc.
Security programs are installed, periodically updated, and inspected to prevent personal data leakage or damage caused by hacking or computer viruses. Systems are installed in areas with controlled access from the outside, monitoring and blocking access technically and physically.
- Encryption of Personal Data
User passwords are stored and managed with encryption, accessible only by the user. Important data uses separate security functions such as encrypting files/transmission data or using file locks.
- Retention of Access Logs and Prevention of Forgery/Falsification
Logs of access to the personal data processing system are retained and managed for at least six (6) months, using security functions to prevent falsification, theft, or loss.
- Restricting Access to Personal Data
Necessary measures are taken to control access to personal data databases by granting, changing, and revoking access rights, with intrusion prevention systems controlling unauthorized external access.
- Locking Devices for Document Security
Documents and secondary storage media containing personal data are kept in a safe place equipped with locking mechanisms.
- Access Control for Unauthorized Persons
Physical storage locations holding personal data are placed separately, with access control procedures established and operated.
12. Remedy Against Infringement upon Rights
Data subjects may inquire with the following institutions regarding damage relief and consultation for personal data infringement. (The institutions below are separate from KOAMI MESSE Co., Ltd. If you are not satisfied with the Secretariat's internal grievance handling or relief results, or need more detailed assistance, please contact them.)
▶ Personal Information Infringement Report Center (Operated by KISA)
- Scope: Report personal data infringement, apply for consultation
- Website: privacy.kisa.or.kr
- Phone: 118 (without area code)
- Address: Korea Internet & Security Agency, 9 Jinheung-gil, Naju-si, Jeollanam-do
▶ Personal Information Dispute Mediation Committee
- Scope: Personal data dispute mediation application, collective dispute mediation (Civil resolution)
- Website: www.kopico.go.kr
- Phone: 1833-6972
- Address: 4th Floor, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul
▶ Cybercrime Investigation Division of Supreme Prosecutors' Office
- (without area code) 1301, cid@spo.go.kr (www.spo.go.kr)
▶ Cyber Bureau of National Police Agency
- (without area code) 182 (cyberbureau.police.go.kr)
Persons whose rights or interests have been infringed due to dispositions or omissions by heads of public agencies regarding requests for access, correction, deletion, or suspension of processing of personal data may file an administrative appeal pursuant to the Administrative Appeals Act.
☞ Refer to Central Administrative Appeals Commission (www.simpan.go.kr) phone directory.
[Special Provisions on Personal Information]
I agree to comply with the exhibition participation regulations and confirm that I have read and understood the organizer's personal data protection contents within said regulations, and understand my right to withhold consent regarding the collection of my personal information.
Furthermore, I understand that if I do not agree (✓) to the three items below, I may not receive various services provided by the organizer to exhibitors, such as marketing support, notifications related to exhibition preparation, and side service benefits. Exhibitors may withdraw consent from the organizer at any time, and the organizer shall accept it.
- I agree to the collection and use of my personal information in accordance with the details stated above.
- I agree to the provision to third parties and cross-border transfer of personal information in accordance with the details stated above.
- I agree to the use and provision of personal information for marketing purposes, including receiving marketing messages via SMS, email, etc., in accordance with the details stated above.