H2 Iron & Steel Making Forum 2022

October 12(Wed)-13(Thu), 2022 FOTOGRAFISKA, STOCKHOLM / ON-LINE
Hosted by ssab logo and posco logo
Key Dates
To be announced
OVERVIEW
Hybrid International Forum ‘HyIS Forum 2022’

Opportunity to share the most advanced hydrogen ironmaking technology
and discuss collaborated approaches at the Online & Onsite
Hosted by posco logo
Supported by
HyIS Forum 2022: Personal Information Processing Policy  
1. General provisions 
POSCO HylS Forum 2022 (hereinafter, ‘the company’) shall establish and publish the following personal information processing policies in order to protect users’ personal information and to resolve related conflicts in a quick and seamless way in accordance with the Personal Information Protection Act.   

2. Purposes of personal information processing  
The company shall process personal information for the following purposes. Personal information shall not be used for any purposes other than those as specified below. In case the purpose of information use is revised, the company shall take necessary measures such as ‘obtaining separate consent’ in accordance with Article 18 of the Personal Information Protection Act:  

○ Homepage membership and management  
‘Checking willingness to apply for membership,’ ‘identification & authentication for membership services,’ ‘membership maintenance,’ ‘identification attributed to the implementation of limited identification systems,’ ‘prohibition of the illegal use of services.’  
○ Service delivery 
The company shall process personal information for ‘offering general information and forum-related information,’ ‘sharing schedules,’ and others.   
○ QnA and information service   
The company shall process personal information for ‘checking QnA and information,’ ‘contacting/reporting for fact-finding,’ ‘delivering processing results,’ and others.     

3. Personal information items   
The company shall process the following personal information:  
○ Homepage membership and management  
- Required items: name, affiliation, position, telephone number, nationality, email address and password   
○ Service delivery  
- Required items: name, affiliation, position, telephone number, nationality, email address and password   
○ QnA and information service   
- Required items: Name, E-mail address, Contact Number
○ Personal information collection methods  
- Personal information shall be gathered and collected based on consent when users directly enter their information in the process of applying for membership and using services.  
- Users’ personal information can be gathered via web pages, email, fax, phone, and others in the process of giving consultation services via customer service centers.   
- In the case of offline events, personal information can be collected in written form. 

4. Personal information processing and retention period  
The company shall process and retain personal information only during the personal information utilization and retention period as specified in related laws or during the utilization and retention period agreed when collecting personal information from users.  
The personal information processing and retention period is as follows:  
○ Homepage membership and management: destroyed immediately after the forum ends.  
 However, personal information is utilized and retained until the reasons cease to exist in the following cases:    
 1) In case investigations are under way for violation of related laws, personal information is utilized and retained until the investigations are terminated.  
○ Goods or service delivery: destroyed immediately after the forum ends.  
○ Q&A and information services: destroyed immediately after the forum ends.   

5. Personal information processing outsourcing  
The company shall outsource personal information processing as follows in order to manage personal information seamlessly:  
○ Call center operation and information services  
- Outsourcee: SuPL A Korea  
- Outsourced business: phone counseling and email services  
- Retention and utilization period: until the forum ends or by when the outsourcing agreement is terminated.  

In case the outsourcing agreement is concluded, the company shall clearly specify obligations-related provisions such as the ‘prohibition of the processing of personal information for any purposes other than those outsourced,’ ‘technological and managerial protection,’ ‘limitations in re-outsourcing,’ ‘management and supervision of the outsourcee,’ ‘indemnification for damage’ and others therein, checking whether the outsourcee manages and processes personal information safely, in accordance with Article 25 of the Personal Information Protection Act.    
If the outsourced business or the outsourcee is revised, the company will promptly disclose such changes through this personal information processing policy.  

6. Rights and duties of users and ways to exercise the rights   
○ Reading and correction of personal information  
- Users and their legal representatives can read and correct their personal information registered at any time. 
- Personal information can be directly read and corrected by clicking ‘Revise Personal Information’ after logging in. Please contact the personal information administrator in writing or via phone and email and necessary measures will be promptly taken.   
- In case users ask for correcting personal information errors, the personal information will not be used until the correction is completed. Moreover, if wrong information is already delivered to a third party, correction results will be promptly reported to the party.  

○ Suspension of personal information processing  
- Users can ask for suspending the processing of personal information. However, when such a request is made, it can be rejected in accordance with Article 37, Paragraph 2 of the Personal Information Protection Act.   
○ Request to withdraw and delete consent  
- Users and their legal representatives can withdraw their consent for the company collecting/using and delivering their personal information to a third party and outsourcing the processing thereof and apply to cancel their membership at any time.    
○ In case users’ request to exercise their rights is rejected, the procedures for raising objection are as follows:  
- In case the personal information management team rejects the request to read (, etc.) personal information or delays the processing thereof, valid reasons and ways to raise objection shall be reported to users within 10 days after the request is made. 
- The personal information management team receives the objection made by users in writing or via phone or email.   
  The personal information administrator checks the information.  
- The chief personal information manager finally reviews the results.  
- The personal information management team notifies users of the results.  

7. Destruction of personal information  
In principle, the company shall promptly destroy personal data if the purpose of personal information processing is met or in case the retention period expires. In case personal information should be continuously retained pursuant to other laws even though the agreed retention period expires or the purpose is met, the personal information is transferred to a separate DB or is retained in another space.   
Personal information destruction procedures and methods are as follows:  
○ Destruction procedures 
- Personal information whose retention period expires shall be destroyed immediately after the expiration date.   
○ Destruction methods
- Printed personal data shall be shredded or incinerated. Electronic files shall be permanently destroyed in an irreversible way. 

8. Measures for ensuring the safety of personal information  
The company shall take the following measures to prevent personal information from being lost, stolen, leaked, forged, or damaged and thereby to ensure the safety of the information.    
○ Managerial measures
  - Internal management planning/implementation, regular employee training, and so forth.  
○ Technological measures 
  - Personal information processing system access control, access control system establishment, personal data encryption, security program installation, and so forth.  
○ Physical measures 
   - Control of access to a computer center, a data room, and so forth.  

[Installation and operation of automatic collection systems]
9. Matters regarding the installation and operation of automatic collection systems and a refusal thereto  
○ The company shall not use ‘cookie’ through which users’ personal information is stored and frequently retrieved.    
○ You have options for ‘cookie’.  You can accept all cookies or make them checked whenever they are stored or refuse the storage of all cookies by choosing [Tool] > [Internet Option] > [Security] > [User-Defined Level] on a web browser.  

10. Chief personal information manager and personal information administrator  
○ The company shall appoint a chief personal information manager and a personal information administrator as specified below in order to protect users’ personal information and to deal with their complaints.   
- Chief personal information manager  
  . Name: Shin Myeong-kyun  
  . Team: Low-carbon process R&D  
  . Position: Team leader
  . Phone: 054-220-5208
  . Email: shinmk@posco.com

- Personal information administrator  
  . Name: Ji Young-in   
  . Team: R&D and planning  
  . Position: Employee
  . Phone: 054-220-6084
  . Email: wlduddls123@posco.com

○ If you have opinions or need information regarding your personal information protection, please contact the chief personal information manager or the personal information administrator.    

11. Rectification of infringements on rights and interests  
You can consult the following agencies about the infringements of personal information and ways to rectify them. (The agencies listed below are those separated from the company. Please contact them if you are not satisfied with ways for the company to deal with and rectify personal information infringements or in case you need more help.)              
○ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)   
- Business: Personal information infringement management, counseling, etc.   
- Homepage: privacy.kisa.or.kr 
- Phone: (Direct Line) 118 
- Address: (58324) Personal Information Infringement Report Center, 3F, Jingheung-gil 9 (301-2, Vitgaram-dong), Naju, Jeonnam.   
○ Personal Information Dispute Mediation Committee  
- Business: Mediating personal information disputes; mediating collective disputes (civil resolution)   
- Homepage: www.kopico.go.kr 
- Phone: (Direct line) 1833-6972
- Address: (03171) 4F, Central Government Complex, 209, Sejongdae-ro, Jongno-gu, Seoul  
○ Cybercrime Investigation Department, Supreme Prosecutor’s Office: 02-3480-3573 (www.spo.go.kr)
○ Cyber Bureau, National Police Agency: 182 (http://cyberbureau.police.go.kr)

12. Revision of personal information processing policy  
This personal information processing policy shall be effective on June 01, 2022. If it is added, deleted, or revised, related information shall be provided via the company’s homepage (announcements) seven days before the enforcement of such changes.