1. Collected personal information and methods of collection

The Company collects personal information for membership, service provision, counseling, and other related reasons. In addition, the Company can request personal information to be recorded for statistical analysis or prize redemption purposes in surveys or events. However, the Company does not collect sensitive personal information such as race and ethnicity, place of birth and permanent address, political and religious affiliation, criminal records, and other attributes that may violate members’ basic human rights. Collected information will not be used for any reason other than those mentioned below and prior consent will be obtained in exceptional cases.

The details of collected personal information are as follows:

2. Purpose of personal information collection

The company collects personal information for the following purposes.

3. Personal information collection and usage agreement.

The Company asks for consent to collect personal information of its members and has prepared necessary procedures. If you click the checkbox “I agree to the Privacy Policy and Terms & Conditions,” you will be regarded as being aware of the collection of personal information.

4. Personal information usage

Refer to Article 2 (Purpose of Personal Information Collection) to learn about the instances where the Company uses members' personal information. The Company does not disclose its personal information database to anyone outside the Company. However, exceptions are made in the following cases.

• 1. When members agree to disclose their personal information in advance
• 2. Where there is a request from an investigative agency in accordance with the procedure and methods as prescribed in pertinent laws and regulations

5. Regulations related to sharing personal information to third parties

6. Personal information retention and usage period

The Company retains personal information of its members until their membership expires. Personal information will be disposed upon member’s request or if the purpose of collection and use (including temporary purposes such as surveys, events, etc.) has been achieved.

The Company can retain previous members’ personal information up to a year in cases where members abused their rights, had issues regarding infringement of right/defamation or/and was subjected to investigation.

The Company has the right to keep membership information for a certain period of time if necessary, under the provisions of relevant statutes such as the Act on the Consumer Protection in Electronic Commerce. In this case, the Company will use the information for the purpose of storage only. The retention period is as follows.

7. Disposal processes of personal information and its methods

A member can view or edit registered personal information, or request to cancel memberships at any time. Viewing or editing personal information is possible after logging in. Everything can be edited except for IDs and names. It is possible to cancel memberships on the website; members should take this step with care as cancellation will delete all registered information. Limitations may also follow upon re-registration in cases of terminated accounts.

The process and method for disposing personal information is as below.

8. Rights of the user and legal representative

Users and legal representatives can view or edit their information or those younger than 14, respectively, at any time. It is also possible to request to cancel memberships anytime.

To view/edit information of users or of members under 14, select “Edit Member Information” (or “Change Member Information”, etc.), and to cancel membership select “Cancel Membership.” After a verification process it will be possible to view, edit, or cancel memberships.

Members can contact the personal information manager in person, by phone, or by email; following actions will be promptly taken.

When the user has requested correction of erroneous personal information, personal information will not be used or provided until it is fixed. If the error has already been provided to a third party, they will be notified of the correction promptly.

Personal information disposed or deleted at the company, user, or legal representative’s request will be processed according to what is noted in “Possession of Personal Information and Its Duration” and will not be made available for use or viewing for any other purposes. Users as subjects of this information can request to process them according to relevant laws or to view, edit, dispose, and suspend processing of personal information.

The company will report its according actions within 10 days. Viewing, editing, deleting, and suspension of procession requests should be submitted to the company.

9. Installment and operation of the automatic personal information collection device, and cases of rejection

Cookies are small data files sent from http servers to browsers and are saved on the user’s computer. The company uses these cookies to obtain the form of the user’s browser or the form of service use. Such cookie information is used to provide more convenient, tailored services for our members.

Members can exercise choice over cookies. They can select the option and allow all cookies, request confirmation whenever cookies are saved, or reject all saved cookies. In this last case, none of the company’s services that require Log-in will be available to the user.

10. Technical and administrative measures for protecting personal information

A member’s personal information is protected by their password. Only members must have possession of their own passwords. Checking and changing personal information is only possible by the owner of the password themselves. Thus, members must never share passwords with others. It is wise to log-out and close the web browser after the task is finished. This is especially necessary after using shared or public computers as to prevent others from accessing personal information. The company does not take responsibility for leaked personal information due to user negligence or network errors.

The company is enacting the following technical and administrative measures to protect personal information:

• 1. The company is committed to maintaining a firewall and security systems to prevent hacking.
• 2. The SSL secure server certification is installed when sending and receiving personal information to protect said information.
• 3. Access to personal information is limited to relevant personnel and those who cannot bypass processing personal information while conducting business.
• 4. Managers of personal information are trained regularly and repeatedly.
• 5. The personal information processing system’s access log is maintained and supervised regularly.
• 6. Protective actions are taken in case of copying or printing personal information.

11. Personal information of underaged members

The company does not collect personal information of members under 14. But in special cases, it may collect members’ personal information under the legal representative’s consent.

The company puts its best endeavors to protecting its members’ personal information. But members themselves must beware of revealing information such as passwords to third parties. Please be especially vigilant against leaking passwords and other information via public computers.

Under no circumstance does the company ask for the user’s password through phone or email. Thus, members must only their IDs and passwords themselves and change passwords often. The company does its best to protect personal information but does not take responsibility for said information leaked due to user error or problems not resulting from the company’s actions.

12. Personal information manager

Should you have any objections to the company’s personal information processing policies, email a request and we will promptly take action and inform you of the results. The manager of personal information is:

13. Other

Any changes to the current personal information processing policies will be notified on the website at least 7 days prior to said changes are made.

- Personal information processing measure enforcement date : 2017-04-20