Privacy Policy

Article 1. Categories of Personal Information Collected

The Company collects the following personal information.

Article 2. Methods of Collecting Personal Information

• Direct input by users who consent to personal information collection through the website
• Collection through data collection tools (access logs, cookies, etc.)
• Collection when users make inquiries via email, phone, fax, etc.

Article 3. Purpose of Using Personal Information

The Company collects and uses personal information for the following purposes. Collected personal information will not be used for purposes other than those stated below, and necessary legal measures will be taken if purposes change.

Article 4. Retention and Use Period of Personal Information

In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved, unless retention is required by relevant laws.

However, when retention is required by relevant laws, the Company retains member information for the period prescribed by such laws as follows.

Relevant Laws and Retention Periods

• Internet log records, access tracking data, and other telecommunications confirmation data: 3 months/12 months (Protection of Communications Secrets Act)
• Records on display/advertising: 6 months (Act on Consumer Protection in Electronic Commerce)
• Records on contracts or withdrawal: 5 years
• Records on payment and supply of goods: 5 years
• Records on consumer complaints or dispute resolution: 3 years

Article 5. Provision of Personal Information to Third Parties

The Company does not use or provide users' personal information to third parties under any circumstances, except when users consent or when required by relevant laws.

Article 6. Entrustment and Overseas Transfer of Personal Information

The Company may entrust personal information processing to overseas parties for smooth information provision, marketing, service stability, and provision of latest technologies. Personal information may be stored in trustee systems.

Currently no overseas entrustment

The Company supervises trustees to ensure they do not process personal information beyond the entrusted purpose, comply with technical and managerial protection measures, and do not violate personal information laws. Any changes to entrustment will be disclosed through this Privacy Policy without delay.

Article 7. Rights and Obligations of Data Subjects

Users may exercise the following personal information protection rights at any time.

• Request to access personal information
• Request correction of errors
• Request deletion
• Request suspension of processing
• Right to object

Rights may be exercised through written documents, phone, email, or fax, and the Company will take action without delay after identity verification.

In principle, the Company does not collect personal information of data subjects under 16 years of age.

Article 8. Automatic Collection of Personal Information (Cookies)

The Company uses "cookies" to store and retrieve user information to provide more appropriate and useful services. Cookies are small text files sent by the server operating the Company's website to users' computers and stored on their hard drives. Users can choose whether to use cookies. However, the Company is not responsible for service issues caused by not using cookies.

How to Refuse Cookie Settings

Users can allow all cookies, require confirmation for each cookie storage, or refuse all cookie storage by setting web browser options.

How to Set Cookie Permissions (Internet Explorer)

1. Select [Internet Options] from the [Tools] menu
2. Click [Privacy]
3. Click [Advanced]
4. Select whether to allow cookies

Article 9. Destruction Procedures and Methods

In principle, the Company destroys personal information without delay when the processing purpose has been achieved. The destruction procedures, deadlines, and methods are as follows.

Destruction Procedure

Information entered by users is transferred to a separate DB (or separate documents for paper) after the purpose is achieved and destroyed after a certain period according to internal policies and relevant laws, or immediately. Personal information transferred to the DB is not used for other purposes except as required by law.

Destruction Method

Electronic file information uses technical methods that make records unrecoverable. Personal information printed on paper is destroyed by shredding or incineration.

Article 10. Security Measures for Personal Information

The Company implements the following technical, managerial, and physical measures to ensure security.

• Managerial Measures: Establishment of information security regulations/guidelines and internal management plans, compliance, inspection, training, etc.
• Technical Measures: Access rights management/authentication for personal information processing systems, installation/operation of access control systems and security programs, encryption of personal information, encrypted transmission, etc.
• Physical Measures: Establishment/operation of computer room access control, etc.

Article 11. Privacy Officer and Contact Information

The Company designates a Privacy Protection Officer and related departments to protect users' personal information and handle complaints. The Chief Privacy Officer (CPO) also serves as the Data Protection Officer (DPO).

Please contact the Privacy Protection Officer or relevant department for any inquiries, complaints, or damage relief related to personal information protection while using our services.

For Other Personal Information Infringement Reports or Consultations

• Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)
• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• Supreme Prosecutors' Office (www.spo.go.kr / 1301)
• National Police Agency (ecrm.police.go.kr / 182)

Article 12. Changes to Privacy Policy

• Any additions, deletions, or modifications to this Privacy Policy will be announced through the "Notice" section on the website at least 7 days before revision.
• Important changes to user rights, such as personal information collection, use, and third-party provision, will be announced at least 30 days in advance.