FactBlock
Privacy Policy

Privacy Policy FactBlock Corp.(“we” or the “Company”) legally processes and safely manages personal information in compliance with the provisions of the Personal Information Protection Act (“PIPA”) and other relevant statutes to protect the freedom and rights of users. Accordingly, in accordance with Article 30 of the PIPA, we implemented and post this Privacy Policy (this “Policy”) in order to guide users to the procedures and standards for processing of personal information and to handle related grievances promptly and smoothly. Table of Contents Article 1 (Scope of Collection, Purpose of Use, Retention and Use Period of Personal Information) Article 2 (Provision of Personal Information to Third Parties) Article 3 (Entrustment of Personal Information Processing) Article 4 (Cross-border Transfer of Personal Information) Article 5 (Procedures and Methods for Destroying Personal Information) Article 6 (Rights and Duties of Users and Legal Representatives and Methods of Exercising them) Article 7 (Measures to Ensure Safety of Personal Information) Article 8 (Privacy Officer) Article 9 (Methods of Remedy for Infringement of Rights and Interests) Article 10 (Changes to the Privacy Policy) Article 1 (Scope of Collection, Purpose of Use, Retention and Use Period of Personal Information) (1) The Company processes users(“users” or “participants”)' personal information for the following purposes. The personal information to be processed will not be used for any purpose other than the following purposes, and if the purpose of use is changed, necessary measures, such as obtaining a separate consent pursuant to Article 18 of the PIPA, will be implemented: - Purpose of Use : Verification and management of KBW2026 participants, operation of KBW2026, and sending of informational emails - Collected Items : Participant's name, email address, affiliation, job title, and country of residence - Retention and Use Period : Until three years from the end date of KBW2026 - Purpose of Use : Promotion of KBW2026 sponsors - Collected Items : Participant's name, email address - Retention and Use Period : Until three years from the end date of KBW2026 (2) In cases where laws require continued retention, the Company may keep personal information for specified periods even after the purpose of collection and use is achieved. - Legal Grounds: Electronic Financial Transactions Act - Items Retained : Records related to electronic transactions - Retention Period : 5 years - Legal Grounds: Electronic Financial Transactions Act - Items Retained : Records of contracts or subscription withdrawals - Retention Period : 5 years - Legal Grounds: Electronic Financial Transactions Act - Items Retained : Records of payments and goods supply - Retention Period : 5 years - Legal Grounds: Electronic Financial Transactions Act - Items Retained : Consumer complaints or dispute handling - Retention Period : 3 years - Legal Grounds: Electronic Financial Transactions Act - Items Retained : Advertising records - Retention Period : 6 months Article 2 (Provision of Personal Information to Third Parties) (1) The Company will process users' personal information only within the scope specified in the purpose of processing personal information, and will not provide it to a third party without the user's consent. (2) The Company provides personal information to third parties for smooth provision of the service as follows: - Receiver : Seoul Tourism Organization, Korea Tourism Organization - Purpose of Provision : Management of subsidy payments to the Company - Items Provided : Participant’s name - Grounds for Provision : Participants’ consent - Retention and Use Period : Until one year from the end date of KBW2026 (3) The Company may provide personal information to a third party without the consent of the user when the Company is obligated to submit personal information pursuant to the relevant laws and regulations, or in case of resolving emergency situations such as disasters, infectious diseases, events or accidents that pose an imminent danger to life or body, or imminent loss of property. Article 3 (Entrustment of Personal Information Processing) (1) The Company entrusts the following personal information processing tasks for the smooth processing of personal information. - Person to Be Entrusted (consignee) : Eximbay - Details of Entrusted Work : Payment processing - Person to Be Entrusted (consignee) : Brevo - Details of Entrusted Work : Email delivery - Person to Be Entrusted (consignee) : Nowis - Details of Entrusted Work : Participant management, name tag issuance, participant registration management - Person to Be Entrusted (consignee) : FACTBLOCK GLOBAL PTE. LTD. - Details of Entrusted Work : KBW2026 Ticket Management and Operations (2) In accordance with Article 26 of the PIPA, when entering into a consignment contract, the Company specifies in documents such as contracts certain matters including prohibition of processing personal information other than for the purpose of performing consignment work, technical and administrative protection measures, restrictions on re-consignment, management and supervision of the consignee, and liability for damages, etc., and supervises whether the consignee handles personal information safely. (3) If the content of the entrusted work or the consignee is changed, the Company will disclose it through this Policy without delay. Article 4 (Cross-border Transfer of Personal Information) (1) The Company may transfer users' personal information overseas for the purposes specified in this Privacy Policy and for the provision of services. (2) When transferring personal information overseas, the Company, in accordance with Article 28-8 of the Personal Information Protection Act, will inform users of the specific personal information being transferred, the destination country, the date and method of transfer, the recipient’s name (or, in the case of a corporation, its name and the contact information of the information management officer), the purpose for which the recipient will use the personal information, and the retention and usage period. The Company will obtain user consent as a general principle and specify such details in this Privacy Policy. (3) The Company transfers personal information collected from users overseas as described below. If users refuse the transfer of their personal information overseas, service usage may be restricted. Users who do not wish for their information to be transferred overseas may decline the transfer via the website or customer service center through the ticket page or customer service (ticket@koreablockchainweek.com). - Legal Grounds: Personal Information Protection Act, Article 28-2 (1) 3 - Receiver (Country) : FACTBLOCK GLOBAL PTE. LTD. (Singapore) - Transfer Date and Method : Commencing from the Participant's FABLO App Registration / Remote Transmission via a Dedicated Network - Transferred Items : Participant name, email address, company, job title, country of residence and KBW2026 ticket information - Purpose of Use : KBW2026 Ticket Management and Operation - Retention and Use Period : Until three years after the end of KBW2026 Article 5 (Procedures and Methods for Destroying Personal Information) (1) When the personal information becomes unnecessary, such as the expiration of the retention period of personal information or the achievement of the purpose of processing, the Company destroys the personal information without delay. (2) In cases where personal information must continue to be preserved pursuant to other laws and regulations despite the expiration of the personal information retention period agreed upon by the user or the purpose of processing has been achieved, the personal information will be transferred to a separate database or stored in a different storage location. (3) The procedures and methods of destroying personal information are as follows: 1. Destruction procedure: The Company will select the personal information for which the reason for destruction has occurred and destroy the personal information with the approval of the Privacy Officer of the Company; 2. Destruction method: The Company will destroy personal information recorded and stored in the form of electronic files so that the records cannot be reproduced, and the personal information recorded and stored in paper documents will be destroyed by shredding or incineration. Article 6 (Rights and Duties of Users and Legal Representatives and Methods of Exercising them) (1) Users may exercise their rights to the Company at any time, such as requesting viewing, correction, deletion, and suspension of processing of personal information. However, the exercise of the right, such as the request for viewing, correction, deletion, suspension of processing of personal information, by the user shall be limited under the provisions of the relevant statutes such as Article 35 (4), Article 36 (1), and Article 37 (2) of PIPA. (2) Users may exercise their rights through e-mail, telephone, etc. in accordance with Article 41 (1) of the Enforcement Decree of the PIPA, and the Company will take action without delay. (3) The exercise of the rights under Paragraph (1) may be made through the legal representative of the user or an agent such as a person who has been delegated. In this case, a power of attorney in the attached Form 11 of the "Public Notice on Personal Information Processing Methods (No. 2020-7)" shall be submitted. (4) Users and their legal representatives may view or correct personal information in 'Settings> Profile Management> Account Information' after logging into the service. (5) When requesting correction or deletion of personal information, if the personal information is specified as the object of collection in other statutes, the deletion cannot be requested. (6) The Company will confirm whether the person who made the request for access, correction or deletion, or suspension of processing, etc. according to the user's right is the identical person or a legitimate agent. Article 7 (Measures to Ensure Safety of Personal Information) The Company takes the following measures to ensure safety of personal information: (1) Administrative measures: 1. Establishment and implementation of internal management plan: For the safe handling of personal information, a Privacy Officer is designated and an internal management plan is established and implemented. 2. Minimization of the number of personnel handling personal information and training on information protection: The minimum number of personnel handling personal information is designated and operated, and information protection training and inspections are conducted for persons handling personal information. (2). Technical measures: 1. Preparation of technical measures against hacking, etc.: The Company installs security programs to prevent the leakage or damage of users' personal information due to hacking or computer viruses, and manages to protect it safely through periodic checks and updates of the latest patches. 2. Management of access rights to the personal information processing system: The Company establishes and operates access control measures for personal information by granting, changing, and revoking access rights to the system that processes personal information, and controls unauthorized access from the outside using an intrusion prevention system. 3. Encryption of personal information: The Company stores and manages important personal information such as user passwords by applying a secure encryption algorithm. (3). Physical measures: 1. Designation and operation of protected areas: The Company separately designates, operates and manages computer rooms, etc., where important information such as users' personal information is handled as protected areas such as control areas or restricted areas. 2. Access control for unauthorized persons: The Company establishes and operates access control procedures for protected areas, and prevents leakage and damage of users' personal information. Article 8 (Privacy Officer) (1) The user may file a request for access to personal information pursuant to Article 35 of the PIPA to the following person or department in charge. The Company will endeavor to promptly process the personal information access request of the data subject. - Department in charge of personal information protection: - Department Name: Operations Department - Email: ticket@koreablockchainweek.com (2) Users may contact the Privacy Officer or the department in charge of personal information protection about all personal information protection inquiries, complaints, and damage relief caused by using the Company's service. The Company will respond to and handle inquiries from users. (3) The Company is not liable for any damages not attributable to the Company, such as user negligence or accidents in areas not managed by the Company, even though the Company has fulfilled the technical, physical and administrative measures required by law to protect personal information. Article 9 (Methods of Remedy for Infringement of Rights and Interests) (1) Users may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Center of the Korea Internet and Security Agency, etc. For other reports and consultations of personal information infringement, please contact the following agencies: Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr); Personal Information Infringement Reporting Center: (without area code) 118 (privacy.kisa.or.kr); Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr); National Police Agency: (without area code) 182 (ecrm.cyber.go.kr). (2) Any person whose rights or interests have been infringed due to the disposition or omission made by the head of a public institution in response to a request under Articles 35, 36 and 37 of the PIPA may file an administrative appeal under the provisions of the Administrative Appeals Act. Central Administrative Appeals Commission: (without area code) 110 (www.simpan.go.kr) Article 10 (Changes to the Privacy Policy) This Policy is effective as of February 26, 2026.