Art. 1Purposes of Processing, Items Processed, and Retention Period

① The Company processes personal information for the following purposes and destroys personal information without delay once the purpose of processing has been achieved or the retention period has expired.

② Where a file attached to a customer inquiry contains personal information, the Company uses it only for the purpose of responding to the inquiry and destroys it together with the inquiry details when the retention period expires.

③ The Company does not collect unique identification information or sensitive information. Where a file attached to an inquiry contains unique identification information or sensitive information, the Company does not use it and destroys it without delay.

④ The Company does not collect personal information of children under the age of 14.

Art. 2Provision of Personal Information to Third Parties

① The Company processes personal information only within the scope of the purposes of collection and use. Personal information is provided to third parties only where it falls under Articles 17 and 18 of the Personal Information Protection Act, such as where the data subject has consented or where there is a special provision in law.

② The Company currently does not provide personal information to third parties.

Art. 3Entrustment of Personal Information Processing

① For the smooth processing of personal information, the Company entrusts personal information processing as follows.

② When concluding an entrustment contract, the Company specifies in the contract or other documents, pursuant to Article 26 of the Personal Information Protection Act, the prohibition of processing personal information for purposes other than performing the entrusted work, technical and managerial safeguards, restrictions on re-entrustment, management and supervision of the trustee, and liability such as compensation for damages, and supervises whether the trustee processes personal information securely.

③ If the details of the entrusted work or the trustee change, the Company will disclose the changes through this Policy without delay.

④ The Company does not transfer personal information overseas.

Art. 4Procedures and Methods of Destruction

① The Company destroys personal information without delay when its retention period has expired or the purpose of processing has been achieved.

② Personal information whose retention period has expired or whose purpose of processing has been achieved is destroyed after confirmation by the responsible department.

③ The methods of destruction are as follows.

1. Personal information in electronic file form: permanently deleted using a method that makes recovery impossible

2. Personal information recorded on paper: shredded or incinerated

④ Personal information that must be retained under laws is stored and managed separately from other personal information, with the legal basis for retention and the items retained specified.

Art. 5Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them

① Data subjects may request access to, correction or deletion of, or suspension of processing of their personal information, or withdraw their consent, from the Company at any time.

② Data subjects may exercise the rights under paragraph (1) in writing, by telephone, by email, etc., and the Company will take action without delay.

③ Where a data subject requests the correction or deletion of errors in personal information, the Company will not use or provide the personal information until the correction or deletion is completed.

④ The rights under paragraph (1) may be exercised through a representative, such as the data subject's legal representative or a person delegated by the data subject. In this case, a power of attorney in the form prescribed by public notice (Annex Form No. 11) must be submitted, and the form can be obtained from the Company's website or the responsible department.

View power of attorney form and instructions →

⑤ When receiving a request for access, correction, deletion, or suspension of processing, the Company verifies whether the requester is the data subject or a legitimate representative.

⑥ A data subject who disagrees with the Company's action on a request under paragraph (1) may file an objection by the methods under paragraph (2).

⑦ The exercise of a data subject's rights may be restricted pursuant to Article 35(4), Article 37(2), etc. of the Personal Information Protection Act where there are grounds prescribed by law (such as a risk of harm to the life or property of another person).

Art. 6Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information.

1. Managerial measures: establishing and implementing an internal management plan for personal information, limiting personal information handlers to the minimum number necessary for their duties, providing regular training to and managing and supervising personal information handlers, and managing and supervising trustees

2. Technical measures: restricting and differentiating access rights to personal information processing systems, retaining and inspecting access records, encrypting personal information, installing and updating security programs to prevent malware, and preventing unauthorized external access through firewalls

3. Physical measures: storing documents and auxiliary storage media containing personal information in locked places, and controlling access to computer rooms, data storage rooms, etc.

Art. 7Installation, Operation, and Refusal of Devices that Automatically Collect Personal Information

① The Company uses cookies, which store and retrieve usage information from time to time, for the normal use and security of the website.

② A cookie is a small information file that a website server sends to a user's web browser, and it may be stored on the user's computer.

③ The cookies used by the Company are used for session maintenance and security of the website, and the Company does not use third-party cookies for advertising or visitor analytics.

④ Users can refuse the storage of cookies or delete stored cookies through their web browser settings.

1. Chrome: Settings > Privacy and security > Third-party cookies / Delete browsing data

2. Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data

3. Safari: Settings > Privacy > Cookies and website data

⑤ Menu names and paths may differ depending on the type and version of the browser.

⑥ If you refuse the storage of cookies, you may have difficulty using some functions of the website.

Art. 8Automated Decisions

The Company does not make automated decisions that affect the rights or obligations of data subjects.

Art. 9Chief Privacy Officer and Responsible Department

The Company designates a Chief Privacy Officer as follows to take overall responsibility for the processing of personal information and to handle complaints and provide remedies for data subjects in relation to the processing of personal information.

Data subjects may direct all inquiries, complaints, and requests for remedies related to personal information protection to the department above. The Company will respond to and handle data subjects' inquiries without delay.

Art. 10Remedies for Infringement of Rights

Data subjects may apply to the following organizations for dispute resolution or counseling to obtain remedies for infringement of personal information.

Art. 11Changes to the Privacy Policy

① This Policy (Version 2.0) applies from November 2, 2026.

② Where there are additions, deletions, or modifications to this Policy, the Company will disclose the changes and the effective date through the website.

③ Changes will be disclosed with a comparison of the content before and after the change so that data subjects can easily check them.

④ Previous privacy policies can be found on the website.