kt altimedia Privacy Policy

General Provisions

KT Altimedia Corp. (hereinafter referred to as the “Company”) complies with the Personal Information Protection Act and relevant laws and regulations to protect the rights and freedoms of data subjects, processing personal information lawfully and managing it securely. Accordingly, pursuant to Article 30 of the Personal Information Protection Act, the Company establishes and discloses this Privacy Policy to inform data subjects of the procedures and standards regarding the processing and protection of personal information and to handle related grievances promptly and smoothly.

Purposes of Processing Personal Information

The Company processes personal information for the following purposes. Personal information being processed will not be used for any purpose other than the following, and if the purpose of use changes, necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act, will be implemented.

 

1. Inquiry Response and Client Management

Processing personal information for identifying inquirers, replying to inquiries, providing service information, sending guidance on seminars and events, managing client contact information, and resolving grievances.

 

2. Service Provision and Operations

Processing personal information for handling inquiries regarding products and services, providing technical support, communicating for contract execution or business cooperation, and delivering necessary notices for service usage.

 

3. Service Improvement and Analysis

Processing personal information for analyzing inquiry patterns, enhancing service quality, identifying client requirements, and other service improvements.

 

4. New Service Planning

Processing personal information for reference and analysis to improve existing services and develop new offerings.

Items of Personal Information Processed

The Company collects and uses personal information based on legal grounds as follows:

 

1. Items of Personal Information Processed with the Data Subject’s Consent

The Company processes the following items of personal information upon obtaining consent from the data subject:

  1) Product/Service Inquiries and Seminar (Exhibition) Consultations

      a. Legal Basis: Article 15, Paragraph 1, Item 1 of the Personal Information Protection Act (Consent)

      b. Collected Items: Name, email, contact number, country, company name, inquiry details

Processing and Retention Period of Personal Information

The Company processes and retains personal information within the personal information retention and usage period prescribed by relevant laws or agreed upon when collecting personal information from the data subject.

 

1. Processing of Product/Service Inquiries and Seminar (Exhibition) Consultations

  1) Retention Period: 5 years from the date of collection

  2) Collected Items: Name, email, contact number, country, company name, inquiry details

  3) Legal Ground for Retention: Consent of the data subject (Article 15, Paragraph 1, Item 1 of the Personal Information Protection Act)

Procedures and Methods for Destruction of Personal Information

The Company promptly destroys the personal information when it becomes unnecessary, such as upon the expiration of the retention period or fulfillment of the processing purpose.

 

If personal information must continue to be preserved pursuant to other applicable laws notwithstanding the expiration of the agreed retention period or fulfillment of the processing purpose, such personal information shall be stored in a separate database (DB) or in an alternate storage location.

 

The procedures and methods for destroying personal information are as follows:

 

1. Destruction Procedure

The Company identifies the personal information for which reasons for destruction have occurred and destroys it upon approval from the Company’s Data Protection Officer.

 

2. Destruction Method

Personal information recorded and stored in electronic file formats is destroyed so that records cannot be reproduced, while personal information recorded on paper documents is shredded or incinerated.

Measures to Ensure the Security of Personal Information

The Company implements the following security measures to ensure the protection of personal information:

 

1. Administrative Measures

Establishment and implementation of internal management plans, regular employee training, and operation of dedicated security teams.

 

2. Technical Measures

Access authority management for personal information processing systems, installation of access control systems and related safeguards, internet network segregation measures, encryption of personal information, retention and monitoring of access logs, installation and updating of security software, and vulnerability assessments and remediation for personal information systems.

 

3. Physical Measures

Access control for server rooms and data archives, secure storage of physical documents and auxiliary storage media in locked facilities, disaster and accident mitigation measures, and strict control over the entry and exit of auxiliary storage devices.

Rights and Obligations of Data Subjects and Legal Representatives, and Methods of Exercise

Data subjects may exercise their rights to inspect, correct, delete, suspend processing, or withdraw consent regarding their personal information at any time.

 

Such rights may be exercised via writing, email, phone, etc., pursuant to Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will take prompt action accordingly. As the Company does not operate a user registration/membership service, self-modification and self-deletion features are not directly provided on the website.

 

Rights may also be exercised through legal representatives or authorized agents. In such cases, a power of attorney formatted according to Form 11 of the “Notification on Personal Information Processing Methods” must be submitted.

 

Requests to inspect or suspend the processing of personal information may be restricted under Article 35, Paragraph 4, and Article 37, Paragraph 2 of the Personal Information Protection Act.

 

Deletion requests cannot be accepted for personal information explicitly designated for collection under other applicable laws. The Company verifies whether the applicant exercising these rights is the actual individual or a duly authorized representative.

 

Data subjects may submit requests to the department below, and the Company will respond within 10 days of receipt:

 

▶ Department in Charge of Personal Information Rights Requests & Inquiries

– Department: AX Engineering Team

– Address: 2F, 16, Banpo-daero 27-gil, Seocho-gu, Seoul, Republic of Korea

– Contact: +82-2-3470-4010, infosec@altimedia.com

Data Protection Officer

The Company designates a Data Protection Officer (DPO) as follows to oversee the overall management of personal information processing and to address grievances and remedies for data subjects:

Data Protection Officer (DPO)

– Name: Jeongcheol Park

– Title: Head of AX Division

– Contact: +82-2-3470-4010, jc.park@altimedia.com

Department in Charge of Personal Information Protection

– Department: AX Engineering Team

– Contact: +82-2-3470-4010, infosec@altimedia.com

Data subjects may contact the Data Protection Officer or the relevant department with any inquiries, complaints, or remedies related to personal information protection arising from the use of the Company’s services (or business). The Company will respond to and process all inquiries promptly.

Amendments to the Privacy Policy

This Privacy Policy takes effect on December 9, 2025.