Article 1. (Purpose of Handling of Personal Information)

① The Company handles personal information for cases such as sharing contents.

② Personal information handled by the Company shall not be used for the purposes other than intended ones, and if the purpose of use is changed, the
necessary measures shall be taken such as obtaining a separate consent pursuant to Article 18 of the Personal Information Protection Act.

③ Methods of collecting personal information

The Company is collecting a user’s personal information with the following methods:

1. Collection through the web site

2. Collection from the information automatically generated in the system when using services.

Article 2. (Period of Handling, Retention, and Usage of Personal Information)

① The Company handles and retains personal information only for the purpose stated herein within the period of personal information retention∙usage pursuant to applicable laws or the consent obtained from a subject of information when collecting personal information.

② The period of handling and retaining personal information consented by a subject of information is as follows.

③ The period of handling and retaining personal information pursuant to applicable laws is as follows

Article 3. (Provision of Personal Information to Third Party)

① The Company limits the handling of personal information of subject of information to the extent stipulated in the Article 1. (Purpose of Handling Personal Information), and provides personal information to a third party only when it conforms to Article 17 of Personal Information Protection Act including, but not limited to, the consent of subject of information and special provisions of applicable law.

Article 4. (Consignment of Personal Information Processing)

① In order to handle the personal information tasks smoothly, the Company consigns tasks of handling personal information as follows.

② When signing a consignment contract, pursuant to Article 25 of Personal Information Protection Act, the Company specifies in documents such as a contract responsibilities including, without limitation to, prohibition of handling of personal information other than the purpose of performing consignment work, technical∙administrative protection measures, restrictions on re-consignment, management and supervision on Consignee Company, and compensation for damages, and supervises Consignee Company whether it is handling personal information safely.

③ When the contents of tasks to consign or Consignee Company change, the Company will disclose such changes through this Privacy Policy without delay.

Article 5. (Rights·Duties of Subject of Information, and Method of Exercising Rights)

① A subject of information may exercise the following rights in connection with personal information protection to the Company at any time:

1. A right to request an inspection of personal information

2. A right to request a correction when there is an error, or etc.

3. A right to request deletion

4. A right to halt handling

② Exercise of rights pursuant to the Paragraph 1 may be done in writing, and via telephone, email, and facsimile (FAX) to the Company, and the Company will take action without delay.

③ In case a subject of information request to correct or delete an error in personal information, etc., the Company shall not use or provide such personal information until completing the correction or deletion of personal information in question.

④ Exercise of rights pursuant to the Paragraph 1 may be done by representative of a subject of information such as a legal representative or a delegated person. In this case, the subject of information shall submit a letter of attorney in accordance with the form of Appendix No. 11 of Enforcement Rules to the Personal Information Protection Act.

⑤ A subject of information shall not infringe on personal information or privacy of a subject of information him/herself or others handled by the Company in violation of applicable laws such as Personal Information Protection Act.

Article 6. (Items of Personal Information Being Handled)

The Company is handling personal information for cases such as sending newsletters and posted comments.

Article 7. (Destruction of Personal Information)

① When personal information becomes unnecessary as its retention period expires, its purpose of handling is achieved and by any other ground, the Company shall destroy the personal information without delay.

② Notwithstanding expiration of retention period consented by a subject of information or achievement of handling purpose, if the personal information is required to be preserved pursuant to any other statute, the Company shall preserve the personal information by relocating the personal information in question to separate database (DB) or save it in other storage.

③ Procedure and method for destruction of personal information are as follows.

1. Destruction procedure

The Company shall select personal information that is required to be destroyed, and destroy the personal information under the permission of the Company’s personal information protection manager.

2. Destruction method The Company shall destroy personal information that is recorded and saved in the form of electronic files using methods such as Low Level Format to prevent viewing of such records, and personal information recorded and stored in paper documents shall be destroyed by shredding with shredder or incineration.

Article 8. (Securing Safety of Personal Information)

When handling personal information, the Company is taking the following administrative, technical, and physical measures to safeguard personal information from being lost, stolen, revealed, forged, or damaged:

1. Administrative measures: Establishment · observance · monitoring of in-house policies to protect personal information, regular training programs, etc.

2. Technical measures: Management of access right to systems such as personal information management system, installation of access control system, encryption of unique identification information, installation of security program, etc.

3. Physical measures: Access control to data processing room, data repository, etc. and installation of access authentication · monitoring system

Article 9. (Matters Concerning the Installation∙Operation and Rejection of Automatic Personal Information Collection Devices)

① The Company uses ‘cookies’ that store and import usage information from time to time in order to provide personalized services to users.

② Cookies are a small amount of information sent to the users’ computer browser by the server (http) that is used to operate the website, and may be stored on the hard disk in the users’ PC computer.

A. Purpose of using cookies: It is used to provide optimized information to users by identifying the types of visits and usage, popular search words, secure access, or any other information for each service and web sites visited by users.

B. Installation ∙ operation and rejection of cookies: Users can refuse storing cookies by setting options in the Tools>Internet Options>Personal Information menu tap at the top of the web browser.

C. If users refuse to store cookies, users may experience difficulties in using customized services.

Article 10. (Personal Information Protection Manager)

① The Company designates a person in charge of personal information protection as follows in order to take full responsibility for the handling of personal information and to deal with complaints and remedies against damages of subject of information in connection with handling of personal information.

② A subject of information may make inquiry to the person and the department in charge of personal information protection with respect to query, handling of
complaints, damage remedy, and any other inquiries on personal information protection that occurred while using the Company's service. The Company will
respond and address the inquiries from the subject of information without delay.

Article 11. (Remedy for the Infringement of Rights and Interests of Subject of Information)

A subject of information may make an inquiry to the following organizations for damage remedy, consultation, and any other assistance for personal information infringement.

The following organizations are independent of the Company, and thus please contact us if you are not satisfied with the results of the Company's own handling of personal information complaints and remedies against damages or if you need more detailed assistance.

1. Personal Dispute Adjustment Committee (www.1336.or.kr/1336)

2. Information Protection Mark Certification Committee (www.eprivacy.or.kr/+82-2-580-0533~4)

3. Internet Crime Investigation Center, the Prosecutor General's Office (http://icic.sppo.go.kr/+82-2-3480-3600)

4. Cyber Terror Center, the National Police Agency (www.ctrc.go.kr/+82-2-392-0330)

→ Refer to the phone number guide of the Central Administrative Appeals Committee (www.simpan.go.kr)

Article 12 (Department that Receives and Processes Requests for Inspection of Personal Information)

① A subject of information may request to the following department for inspection of personal information. The Company will endeavor to swiftly process the request for inspection of personal information from the subject of information

Article 13. (Change in Privacy Policy)

① This Privacy Policy (Ver.1.0) will be applied from May 06, 2021.