All personal information handled by the Personal Information Protection Commission (hereinafter: ‘PIPC’) for the purpose of organizing GPA 2025 Seoul is collected, retained, and processed in accordance with relevant laws. The PIPC has established the following privacy policy to protect the personal information and rights of individuals and efficiently handles their complaints related to personal information according to Article 30 of the Personal Information Protection Act (hereinafter: ‘Protection Act’)

The PIPC processes personal information for the following purposes. Personal information collected shall not be used for any purposes other than those explicitly stated below. In the event of a change in the intended purpose of use, the PIPC shall take necessary measures, such as obtaining separate consent from the data subject, in accordance with Article 18 of the Protection Act.

In accordance with the Protection Act, the PIPC collects, retains, and uses personal information as follows for the purpose of organizing and managing the Assembly. Furthermore, the PIPC processes and retains personal information only within the period prescribed by applicable laws or within the period consented to by the data subject at the time of collection.


The PIPC processes the following items of personal information without the consent of the data subject, based on relevant legal grounds.

Category	Item Collected	Legal Basis	Purpose of Collection and Use	Retention Period
Participant Registration Management	Name, email address, mobile phone number, Courtesy title, affiliation, department, position, country of residence, nationality, inquiry details	Article 15(1)(4) of the Protection Act (performance of a contract)	Reception of participant registration; provision of notices and information	Until three months after the conclusion of the Assembly (Sep. 19)
Student Status Verification	Student verification documents	Article 15(1)(1) of the Protection Act (consent of the data subject)	Verification of student status	Disposed immediately after verification
Registration Fee Payment	[Card and PayPal payment] Name, email address, card issuer, card number [Bank transfer] Refund account number, account holder’s name, bank name, payment amount	Article 15(1)(4) of the Protection Act (performance of a contract)	Payment of registration fee and refunds in case of cancellation	Until six months after the conclusion of the Assembly (Sep. 19)

The PIPC processes the following items of personal information with the consent of the data subject, based on relevant legal grounds.

Category	Item Collected	Legal Basis	Purpose of Collection and Use	Retention Period
Publicity	Email address	Article 15(1)(1) of the Protection Act (consent of the data subject)	Provision of newsletters, promotion of Assembly programs, event participation, etc.	Until one year after the conclusion of the Assembly (Sep. 19)
Meal Provision	Special dietary requirements	Article 23(1)(1) of the Protection Act (explicit consent of the data subject – sensitive data)	Provision of meals for participants	Disposed immediately after the conclusion of the Assembly (Sep. 19)

Data subjects may voluntarily provide the PIPC with certain information that may be considered sensitive personal information, such as special dietary requirements. Such information may, in some cases, give rise to the inference of the data subject’s health conditions or religious beliefs. The PIPC is committed to processing sensitive personal information only to the minimum extent necessary and in a manner that safeguards the rights and freedoms of the data subject.Where the processing of sensitive personal information is requested by the data subject, the PIPC obtains the data subject’s explicit consent in accordance with the relevant provisions of the Protection Act.

The PIPC does not provide any personal information of individuals to any third party beyond the purposes specified as the purposes for which personal information is processed. However, the PIPC may provide personal information to third parties in cases falling under Articles 17 and 18 of the Protection Act.

The PIPC outsources the processing of personal information to efficiently operate and manage the GPA 2025 Seoul, as follows:

Outsourcee	Purpose
WEtheTEAM Inc.	Event Administration and Participant Management, Inquiry Handling
SomethingHow	Website Administration and Participant Data Management
Toss Payments	Electronic Payment Processing Services

The PIPC has established necessary measures for ensuring the safety of personal information as follows:

The PIPC designates the chief privacy officer and working-level staff to protect personal information and handle complaints related to personal information processing as follows:

Designation	Department	Name	Contact Information
Chief privacy officer	Director-general for coordination and planning	Eunyoung Ko	Tel. 02-2100-2485 Fax. 02-2100-3003 Email. j0zun4220@korea.kr
Privacy protection manager	Inspection officer of the Internatinal Cooperation Division	Yoonjeong Choi
Privacy protection working-level staff	Inspection officer of the Internatinal Cooperation Division	Jaeyeong Jeon

Data subjects may file a request for dispute resolution or consultation regarding the infringement of personal information with institutions such as the Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Center of the Korea Internet & Security Agency. For other inquiries or reports related to the infringement of personal information, please contact one of the institutions listed below:

This Privacy Policy shall take effect as of July 25, 2025.

Previous versions of the Privacy Policy may be accessed below:

- Applicable from July 14, 2025 to July 25, 2025 (Click here)