Article 1 (Purposes of Processing Personal Information)
The Administrator processes personal information for the purposes set forth below. Personal information that has been processed shall not be used for any purpose other than those expressly stated below. If any purpose of processing changes, the Administrator shall take the measures required under applicable laws and regulations, including obtaining separate consent where required.
| Purpose of Processing | Details |
|---|---|
| Receiving Applications and Managing Participants | Identifying Participants; providing Google Account-based login; receiving applications; checking for duplicate applications; reviewing application information; and responding to inquiries. |
| Verifying Eligibility and Parental or Legal Guardian Consent | Determining a Participant’s eligibility and whether consent from a parent or legal guardian is required based on the Participant’s date of birth and country of residence and, where necessary, verifying whether such consent has been obtained. |
| Receiving Submissions and Administering the Evaluation Process | Receiving materials including the game title, game description, playable link, thumbnail, demonstration video, and description of the development process, and using such materials to conduct the preliminary evaluation and select Participants or teams to advance to the final round. |
| Providing Information About and Operating the Final Event | Notifying finalists; providing information regarding the schedule and venue; administering on-site activities; verifying Participants; conducting presentations and demonstrations; selecting winners; and delivering relevant notices. |
| Providing Rewards and Benefits | Verifying recipients of Rewards, including OpenAI credits and ChatGPT Pro subscriptions; providing instructions regarding delivery; and responding to related inquiries after delivery. |
| Maintaining Service Security and Preventing Misuse | Preventing abnormal or unauthorized access, false applications, duplicate Submissions, misuse or abuse of the Service, and security incidents. |
Article 2 (Categories of Personal Information Processed)
The Administrator collects and uses only the minimum personal information necessary to operate the Service.
| Category | Required Information | Optional Information | Purpose of Collection and Use |
|---|---|---|---|
| Google Login | Google Account unique identifier, email address, name, and profile image | - | Login; identification of applicants; processing participation applications; and verification of the Team Representative. |
| Participation Application | Country of residence, date of birth, name, team name, availability to attend the final event, and mobile telephone number of the Team Representative | Affiliation, number of team members, and consent to receive promotional information | Receiving participation applications; verifying eligibility; providing information regarding the final event; and operating the event. |
| Where Consent of a Parent or Legal Guardian Is Required | Name of the parent or legal guardian, relationship to the Participant, mobile telephone number or email address of the parent or legal guardian, whether consent was provided, and the date and time of consent | Information entered directly where “Other” is selected as the relationship to the Participant | Verifying the consent of a parent or legal guardian to the collection and use of a child’s personal information. |
| Project Submission | Game title, game description, link to a playable version of the game, and game thumbnail image | Demonstration video link, description of the development process using Codex, platform information, and any other platform information entered by the Participant | Receiving Submissions; conducting evaluations; and operating the public gallery. |
| Automatically Generated Information | Access IP address, date and time of access, browser and device information, cookies, Service usage records, and error logs | - | Maintaining security; restricting access; ensuring the stability of the Service; and preventing misuse. |
Article 3 (Processing and Retention Periods for Personal Information)
| Category of Personal Information | Retention Period | Notes |
|---|---|---|
| Participation Application and Submission Information | Until one year after the date on which the event ends. | If the provision of Rewards or the handling of a dispute remains ongoing, the information shall be retained until the relevant matter is completed and shall thereafter be destroyed without undue delay. |
| Information Relating to Consent of a Parent or Legal Guardian | Until one year after the date on which the event ends. | The retention period may be adjusted depending on the applicable parent or legal guardian verification procedure. If a related dispute is ongoing, the information shall be retained until the dispute is resolved and shall thereafter be destroyed without undue delay. |
| Login Session Information | For the duration of the valid session. The information shall be destroyed upon logout or expiration of the session. | - |
| Security and Access Records | Until one year after the date on which the event ends. | - |
Article 4 (Provision of Personal Information to Third Parties)
The Administrator processes the personal information of Data Subjects within the scope of the purposes specified in Article 1. The Administrator provides personal information to a third party only where the Data Subject has provided separate consent or where such provision is specifically permitted or required by applicable laws and regulations.
The Administrator may provide personal information to OpenAI OpCo, L.L.C. for the purposes of supporting the operation and evaluation of the hackathon, verifying Participants who advance to the final round, and providing Rewards such as OpenAI credits or ChatGPT Pro subscriptions.
The personal information that may be provided includes the Data Subject’s name, email address, contact information, team name, information relating to the Submission, and information regarding advancement to the final round and receipt of an award.
Personal information provided for the delivery of Rewards shall be retained and used until the delivery of the applicable Reward and any related follow-up procedures have been completed. Personal information provided for event operation shall be retained and used until the operation of the event and any related follow-up procedures have been completed.
Article 5 (International Transfer of Personal Information)
In the course of providing the Service, personal information may be transferred outside the Republic of Korea where authentication, cloud, Reward delivery, or operational support services provided by businesses located overseas are used. Where an international transfer of personal information is necessary, the Administrator shall provide information regarding the recipient, destination country, categories of personal information transferred, purpose of the transfer, and retention and use period, and shall obtain any consent required under applicable laws and regulations.
A Data Subject who wishes to refuse an international transfer of personal information or withdraw previously provided consent may submit a request to the department responsible for personal information protection specified in Article 10. Where refusal of an international transfer may restrict access to certain parts of the Service, the specific restrictions are described under “Effect of Refusing the Transfer” for the applicable transfer. For other inquiries, Data Subjects may contact the OpenAI Game Builders Seoul Organizing Committee.
| Recipient | Destination Country | Information Transferred | Purpose of Transfer | Retention and Use Period |
|---|---|---|---|---|
| Google LLC. / (googlekrsupport@google.com) | United States | Google Account identification information, email address, name, and profile image | Google Account login and authentication | Where a Participant elects to use Google Login, the information is received from Google and is handled in accordance with Google’s Privacy Policy. |
| OpenAI OpCo, L.L.C. / (dsar@openai.com) | United States | Email address, name, and information identifying the recipient of a Reward | Delivery of Rewards and verification of eligible recipients. A Data Subject may refuse to consent to the international transfer; however, refusal may restrict the delivery of Rewards provided by OpenAI. | Until the delivery of the applicable Reward and any related follow-up procedures have been completed. |
Article 6 (Procedures and Methods for Destruction of Personal Information)
When the applicable retention period for personal information expires or the purpose for which the personal information was processed has been fulfilled, the Administrator shall destroy the personal information without undue delay.
Where personal information must be retained pursuant to applicable laws and regulations, the Administrator shall store such personal information separately from other personal information for the legally required retention period and shall destroy it upon expiration of that period.
Personal information stored in electronic files shall be permanently deleted using a method that prevents the information from being restored or reproduced.
Personal information contained in paper documents shall be destroyed by shredding or incineration.
Article 7 (Rights and Obligations of Data Subjects and Legal Guardians and Methods of Exercising Such Rights)
A Data Subject may submit a written or email request to the department responsible for personal information protection specified in Article 10 to exercise the right to access, correct or delete, suspend the processing of, or withdraw consent to the processing of their personal information.
A legal guardian of a Data Subject or a person authorized by the Data Subject may also exercise such rights. In such cases, the Administrator may request documentation necessary to verify the legal guardianship or authorization. The Administrator shall process such requests within the periods and in accordance with the procedures prescribed by applicable laws and regulations.
| Right | Details |
|---|---|
| Access | A Data Subject may request confirmation of the categories of personal information processed by the Administrator and the status of such processing. |
| Correction or Deletion | A Data Subject may request the correction or deletion of personal information where the information is inaccurate or is no longer necessary. |
| Suspension of Processing or Withdrawal of Consent | A Data Subject may request that the processing of personal information be suspended or may withdraw previously provided consent. |
Article 8 (Measures to Ensure the Security of Personal Information)
The Administrator implements the following measures to ensure the security of personal information:
| Measure | Details |
|---|---|
| Administrative Measures | Minimizing the number of personnel authorized to process personal information; establishing an internal management plan; providing personal information protection training; and managing access rights. |
| Technical Measures | Encrypting stored personal information; protecting personal information during transmission; implementing access controls; managing access logs; applying security programs; and conducting vulnerability assessments. |
| Physical Measures | Restricting access to systems and materials in which personal information is stored and implementing protective measures for locations where such materials are kept. |
Article 9 (Installation, Operation, and Refusal of Automatic Personal Information Collection Technologies)
The Service may use cookies or similar technologies for the purposes described below.
| Category | Details |
|---|---|
| Purposes of Use | Maintaining login status; maintaining the Service usage environment; ensuring security and preventing misuse; and reviewing access statistics. |
| How to Refuse | A Data Subject may refuse the storage of cookies by changing the settings of their web browser. |
| Effect of Refusal | If a Data Subject refuses the storage of cookies, login functionality or access to certain parts of the Service may be restricted. |
Article 10 (Chief Privacy Officers and Contact Information)
The Organizer and the Administrator are responsible for overseeing matters relating to the processing of personal information and have designated privacy officers and contact channels to handle complaints, requests for remedies, and other matters relating to personal information.
Information regarding personal information processed directly by each company is available in the respective privacy policies listed below.
Data Subjects may contact the applicable privacy officer or responsible department regarding inquiries, complaints, or requests for remedies arising in connection with their use of the Service. The Organizer and the Administrator shall respond to and process such inquiries without undue delay.
Organizer Terms and Policies: https://openai.com/policies/privacy-policy/
Administrator Terms and Policies: https://terms.withhive.com/terms/policy/view/M56/T36#index3
Article 11 (Remedies for Infringement of Rights)
A Data Subject may contact the following institutions for consultation, reporting, or dispute resolution regarding an infringement of personal information rights:
| Institution | Website | Telephone |
|---|---|---|
| Personal Information Infringement Report Center | privacy.kisa.or.kr | 118 (without an area code) |
| Personal Information Dispute Mediation Committee | www.kopico.go.kr | 1833-6972 |
| Cyber Investigation Department of the Supreme Prosecutors’ Office | www.spo.go.kr | 1301 (without an area code) |
| Korean National Police Agency Cybercrime Reporting System | ecrm.police.go.kr | 182 (without an area code) |
Article 12 (Changes to This Privacy Policy)
This Privacy Policy shall apply from its effective date. If this Privacy Policy is amended due to changes in applicable laws and regulations, the content of the Service, or the manner in which personal information is processed, the Administrator shall provide notice of the changes through the Service page or by another separate notice method.