Personal Information Handling Policy (or Privacy Policy)

Verification of users’ intention to subscribe to services, the provision of services for users and resultant verification and authentication of their identity, maintenance and management of members’ qualification, prevention of illegal uses of services, payments, settlement, supply and delivery of goods or services, demographic analysis, analyses of visits to service sites and user logs, formation of relationships between users (based on their personal information and interests), new service development and existing service improvement (including the provision of tailor-made services based on users’ acquaintances and interests), use of marketing and ads, handling of users’ complaints (verification of the identity of users filing complaints, verification of complaints, ntacting and notifying users for factual surveys, notification, and notification of survey results)

User subscription and management: Until the termination of a service user agreement or a user agreement, until fulfilling the purpose of preventing confusion in the use of services and illegal use of services (abnormal use of services, such as illicit subscription), including resolution of complaints and disputes, and until the settlement of remaining claims and obligations

Records on contracts, withdrawal of offers, payments, and goods purchased on electronic commercial transactions: five (5) years; Records on customers’ complaints or dispute- resolution: three (3) years; Records on indication and advertisements: six (6) months

I. Right to demand access to their personal information

II. Right to demand correction of errors and others

III. Right to delete their personal information

IV. Right to suspend their personal information handling

I. Mandatory items: Date of birth, e-mail, password, name, phone number, country of residence, service user logs, access logs, cookies, access IP information, payment records, name of user’s legal representative, legal representative’s e-mail, legal representative’s telephone number, Google account information via Google sign-up/sign-in (personal open information about Google user information such as name, access information to Google services such as app, browser or device, and activity logs), various forms of media (including audio clips, photos, and video clips) submitted voluntarily by users for various purposes such as help requests, social media channel in use, category of contents, subcategory of contents

II. Optional items: Occupation

I. If users agree on the collection of their personal information and enter such information by themselves in the course of obtaining membership and using services, then the Company collects such information.

II. Users’ personal information may be collected during consultation with the Company’s customer center via website, mail, fax or phone

III. Users’ personal information may be collected in writing during events and seminars which are held offline.

IV. The Company may be provided with personal information by its affiliated companies or organizations.

V. Information, such as device information, may be automatically created and collected in the course of using PC websites/mobile websites/applications.

Destruction procedure

Destruction Deadline

I. Purpose of using cookies: The Company gathers and uses information regarding users’ visits, type(s) and use of each service and website that users use, popular search words, and whether users are using secure access, in order to provide users with optimized information.

II. Installation, operation, and rejection of cookies: Users may reject the storing cookies on their computers by clicking Tools > Internet Options > Personal Information Menu > Option Settings. If users reject the storing of cookies, they may have difficulty in using tailor-made services.

Privacy Officer

Department in Charge of Protecting Personal Information

A. Administrative measures: Internal management planning & execution, regular employee training

B. Technological measures: Controlling access to user information, installation of access prevention system, encryption of identifiable information, use of security programs

C. Physical measures: Limited access to data centers & file cabinets