FLY ASIA values the personal information of its users and makes every effort to protect it in the most proactive and effective manner. This Privacy Policy may be revised in accordance with changes in applicable laws and guidelines, or in internal operating policies. In the event of any such changes, FLY ASIA will provide notice through the notice board on its website at least 7 days prior to the effective date (or at least 30 days prior, in the case of changes that materially affect the rights of users).

Purposes of Processing and Use of Personal Information

Busan Startup Investment Agency and the Busan Creative Economy Innovation Center (hereinafter the "Company") process and retain personal information for the following purposes.

1. Performance of contractual obligations related to service provision : provision of content
2. Member management : membership-based services for identity verification, prevention of unauthorized use by delinquent members, confirmation of intent to register, and handling of complaints
3. Management of event registration and program applications : application for and receipt of participation in FLY ASIA events, registration and screening for programs (meetups, sessions, booths, etc.), notification of confirmed participation, issuance of admission badges, and communications necessary for event operations
4. Marketing and advertising : provision of promotional information collected through events, verification of visit frequency, and compilation of statistics on service usage

Of the above purposes, items (1), (2), and (3) involve information required for the provision of the Service; if a user does not consent, membership registration and event/program registration may be restricted. Item (4) is optional, and users may use the Service without restriction even if they decline to consent.

Retention and Use Period of Personal Information

Personal information is destroyed without delay once the purpose of processing has been achieved, in principle. The retention period by purpose is as follows.

1. Personal information for member management purposes : until withdrawal of membership or achievement of the purpose (provided that, where retention is required under applicable law, such information shall be retained for the period prescribed by that law)
2. Personal information related to marketing and promotional information : 5 years from the date of collection, or until consent is withdrawn (retained for the purpose of promoting and providing notice of future events)
3. Other items processed : destroyed immediately upon achievement of the purpose, within a maximum period of 5 years

Where a request for destruction is received from the data provider, the Company destroys the user's personal information without exception. Information provided is used only for the purposes specified above.

Provision of Personal Information to Third Parties

The Company processes personal information only within the scope specified under "Purposes of Processing and Use of Personal Information," and provides personal information to third parties only where permitted under Article 17 of the Personal Information Protection Act, such as with the consent of the data subject or pursuant to specific statutory provisions. For the smooth conduct of its operations, the Company provides personal information to third parties as follows.

1. Recipient of personal information : 2M Inc.
2. Purpose of use by the recipient : meetup matchmaking and coordination, notice of event schedules, guidance on event facilities, issuance of admission badges, etc.
3. Items of personal information provided : name, affiliation, position/title, phone number, email address, and other information necessary for service provision and performance of related duties
4. Retention and use period by the recipient : until the purpose of provision is achieved or the entrustment agreement is terminated (up to a maximum of 1 year)

※ The above personal information is provided only with the consent of the data subject, who has the right to decline such consent. However, in the case of services for which the provision of personal information is required, declining consent may restrict the user's ability to use the relevant service.

Entrustment of Personal Information Processing

To enhance its services, the Company entrusts the processing of personal information to the following service providers, and sets forth the necessary matters in its entrustment agreements to ensure that personal information is managed securely.

1. Trustee : 2M Inc.
   1. Entrusted tasks : meetup matchmaking and coordination, notice of event schedules, guidance on event facilities, issuance of admission badges, etc.
   2. Retention and use period : until termination of the entrustment agreement
2. Trustee : Frable
   1. Entrusted tasks : operation and maintenance of the FLY ASIA website system
   2. Retention and use period : until termination of the entrustment agreement

In accordance with Article 26 of the Personal Information Protection Act, the Company specifies in its entrustment agreements matters including the prohibition on processing personal information for purposes other than the entrusted business, technical and administrative protective measures, restrictions on re-entrustment, supervision and management of the trustee, and liability for damages, and supervises whether the trustee processes personal information securely.

The Company's trustees may change from time to time in the course of its business operations. In such cases, the following principles shall apply.

1. In the event a trustee is changed, the Company shall, without delay, disclose the name of the new trustee, the entrusted tasks, and the retention period, by revising this Privacy Policy.
2. The Company shall specify in the entrustment agreement that any new trustee is obligated to implement personal information protection measures equal to or exceeding those of the previous trustee, and the Company shall verify this in advance.
3. A trustee whose entrustment agreement has been terminated shall, immediately upon termination, either return the entrusted personal information (including originals and backups) to the Company or destroy it by a method that renders recovery or reproduction impossible, and the Company shall obtain written confirmation of such performance. However, where necessary for the smooth handover of duties to a successor trustee, the entrusted personal information may be transferred directly to the successor trustee with the Company's approval.

Overseas Transfer of Personal Information

In the course of operating FLY ASIA events, the Company may cooperate with overseas partner organizations and speakers. In such cases, the Company may transfer personal information overseas within the minimum necessary scope, either with the separate consent of the data subject or on the basis of applicable law, in accordance with Article 28-8 of the Personal Information Protection Act. Where an overseas transfer occurs, the Company will inform the data subject of the necessary matters in accordance with applicable law, including the recipient, the receiving country, the items transferred, and the purpose of transfer.

Photography and Use of Photographs/Videos in Connection with Event Participation

1. The Company may photograph or film participants during FLY ASIA events for purposes such as event coverage, promotion, and outcome reporting.
2. Photographs and videos taken may be used on the FLY ASIA website, official social media channels, press releases, and performance reports, and will not be used for purposes beyond this scope, such as commercial use by third parties.
3. Participants who wish to request the removal of photographs or videos already published may contact the Personal Information Protection Officer, and the Company will take prompt action on legitimate requests.

Rights and Obligations of Data Subjects and Legal Representatives, and Methods of Exercising Such Rights

1. Data subjects may exercise their rights to access, correct, delete, or suspend the processing of their personal information with the Company at any time.
2. Rights under paragraph (1) may be exercised with the Company in writing, by email, by fax, or by other means, pursuant to Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.
3. Rights under paragraph (1) may be exercised through a legal representative of the data subject or a duly authorized agent. In such cases, a power of attorney in the form set out in Appended Form No. 11 of the Enforcement Rule of the Personal Information Protection Act must be submitted.
4. Requests to access or suspend the processing of personal information may be restricted pursuant to Article 35(5) and Article 37(2) of the Personal Information Protection Act.
5. A request to correct or delete personal information may not be made where the personal information concerned is specifically required to be collected under other statutes.
6. When a data subject makes a request to access, correct, delete, or suspend the processing of personal information, the Company will verify whether the requester is the data subject or a duly authorized agent.

Items of Personal Information Processed

The Company processes the following personal information for membership registration, inquiries, event participation applications, and program registration.

1. Items processed : name, company name, company website, company address, industry, ID, password, phone number, email address, access logs, cookies, IP information, company description, revenue, year of establishment, number of employees, etc.
2. Method of processing : registration on the website (https://fly-asia.org) and the event participation and program registration process
3. Where the Company operates a program targeting children under the age of 14, it shall collect and use personal information only after obtaining the consent of a legal representative, in accordance with Article 22-2 of the Personal Information Protection Act, and shall verify that such consent has been obtained. A legal representative has the right to request access to, correction or deletion of, and suspension of processing of, the child's personal information.

Destruction of Personal Information

1. The Company destroys personal information without delay once the retention period has expired or the purpose of processing has been achieved and the personal information is no longer necessary.
2. Where personal information must continue to be preserved under other statutes despite the expiration of the retention period consented to by the data subject or the achievement of the purpose of processing, such personal information (or personal information file) shall be transferred to a separate database or otherwise stored separately.
3. The procedures and methods for destroying personal information are as follows.
   1. Destruction procedure : The Company establishes a destruction plan for personal information (or personal information files) that must be destroyed. Personal information (or personal information files) for which grounds for destruction have arisen are selected, and destruction is carried out upon approval of the Personal Information Protection Officer.
   2. Destruction method : The Company destroys personal information recorded and stored in electronic file form in a manner that renders the records unrecoverable, and destroys personal information recorded and stored on paper by shredding or incineration.

Personal Information Protection Officer and Contact Information

The Company designates a Personal Information Protection Officer as set out below, who takes overall responsibility for personal information processing and handles complaints and remedies for data subjects in connection with personal information processing.

Data subjects may direct any inquiries, complaints, or requests for remedies relating to personal information protection arising in connection with the use of FLY ASIA's services (or business) to the Personal Information Protection Officer or the responsible department. FLY ASIA will respond to and address such inquiries without delay.

1. Personal Information Protection Officer : Manager, Busan Startup Investment Agency (051-715-1797)
2. Personal Information Protection Manager : Manager, Busan Startup Investment Agency (051-715-1765)

Remedies for Infringement of Data Subjects' Rights

Data subjects may apply for dispute resolution or consultation with the following organizations to seek remedies for infringement of their personal information. These organizations are independent of the Company; if you are not satisfied with the outcome of the Company's own handling of complaints or remedies, or require further assistance, please contact them directly.

1. Personal Information Infringement Report Center (operated by the Korea Internet & Security Agency) : 118 (no area code) / privacy.kisa.or.kr
2. Personal Information Dispute Mediation Committee : 1833-6972 / www.kopico.go.kr
3. Supreme Prosecutors' Office : 1301 (no area code) / www.spo.go.kr
4. National Police Agency : 182 (no area code) / ecrm.cyber.go.kr

Measures to Ensure the Security of Personal Information

The Company implements the following measures to ensure the security of personal information.

1. Administrative measures : establishment and implementation of an internal management plan, regular employee training, etc.
2. Technical measures : management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
3. Physical measures : access control for computer rooms, data storage rooms, etc.

Installation, Operation, and Opt-Out of Automatic Personal Information Collection Devices

1. The Company uses "cookies" that store and periodically retrieve usage information in order to provide personalized services to users.
2. A cookie is a small piece of data sent by the server (http) operating the website to the user's web browser, and may be stored on the hard disk of the user's computer.
   1. Purpose of use of cookies : to identify users' visit and usage patterns across services and websites, popular search terms, and secure connection status, in order to provide users with optimized information.
   2. Installation, operation, and refusal of cookies : Users may refuse to allow cookies to be stored by adjusting the relevant settings under Tools > Internet Options > Privacy in their web browser.
   3. If a user refuses to allow cookies to be stored, this may result in difficulty using certain personalized services.

Transmission of Advertising Information and Opt-Out

1. The Company transmits advertising information, such as event notices and program updates, by email, text message (SMS), or other means, only where it has obtained the prior consent of the user.
2. Data subjects may withdraw their consent to receive advertising information at any time. To opt out, users may use the unsubscribe link included in the relevant email or text message, or contact the Personal Information Protection Manager.
3. The Company will act on opt-out requests without delay, and users will not be disadvantaged in any way as a result of opting out.

Copyright Policy

1. All content provided by FLY ASIA (including articles, photographs, graphics, videos, audio, attachments, and database information) is protected under copyright law, and the copyright therein belongs to FLY ASIA.
2. Without FLY ASIA's prior authorization, no person may forge, copy, distribute, publish, display, sell, or otherwise use such content, directly or indirectly, through any medium, or use it in connection with any information service, including the internet, mobile services, or databases.
3. In particular, the use of such content by any company or organization that builds and operates its own database or provides information services is limited to internal use, and any such use for non-commercial purposes likewise constitutes a violation of copyright law.

Amendments to this Privacy Policy

This Privacy Policy is effective as of its effective date.

1. Date of enactment : November 25, 2022
2. Date of amendment : July 20, 2026 (change of service provider and revision of provisions)