① The Company collects and processes personal information for the following purposes. The personal information processed will not be used for other purposes than the specified, and any change in the specified purposes will require necessary steps under Article 18 of the Personal Information Protection Act, such as prior consent by data subjects

② Personal information is processed for the following purposes.

1. To handle customers’ email inquiries
2. To handle the inquiries reported through the Ethics Helpline
3. To keep records on contracts, payments or consumer disputes

① A data subject (his/her legal representative in the case of a minor aged under 14) may at any time exercise his/her right by making a request to the Company regarding any of the following matters.

1. Request to view personal information
2. Request to correct inaccurate personal information
3. Request to delete personal information
4. Request to suspend processing personal information

② A data subject may exercise the right under Paragraph 1 by making a request to the Company in writing or by telephone, e-mail or fax, and the Company will take prompt steps upon receiving such a request.

③ The Company, when requested from a data subject to correct or delete personal information for its inaccuracy or other reasons, will not use or provide such information until the correction or deletion is completed.

④ The right under Paragraph 1 may be exercised by a data subject’s legal representative or other agents authorized to act for the data subject. In this case, the representative or agent shall submit a designated power of attorney (Form 11 attached to the Enforcement Decree of the Personal Information Protection Act).

⑤ A data subject shall not infringe on the privacy of the subject whose information is processed by the Company or other people by violating the Personal Information Protection Act or other relevant laws.

① The Company may install and operate web cookies to store and search the information of customers who use the services on the Company’s website. A web cookie is a string of data that a server sends to the user’s web browser, and the browser may store it and send it back with the next request to the same server. The cookies stored in the user’s browser allow the user to use the services on the website without entering additional information like user’s name.

② The information the Company collects through web cookies includes user’s name, e-mail address and contact numbers, but other data than such information is not to be collected. The information collected through cookies by the Company may be used for the following purposes.

1. To search the contents visited by the user in order to provide the user with customized services when he/she logs on to the website later
2. To analyze the patterns of users so as to make improvements in services
3. To use the data in updating the website

③ The user may configure the browser to accept all cookies, reject all cookies, or notify the user when a cookie is sent. The configuration can be checked, at the top of the browser, in Tools > Internet Options > Privacy > Advanced. Disabling cookies, however, may affect the user’s ability to use the services or the scope of the services provided by the Company.

④ Cookies expire when the browser is closed.

① To handle customer inquiries

1. Name
2. Contact information
3. E-mail address

② To handle inquiries reported through the Ethics Helpline

1. Name
2. E-mail address

① The Company destroys personal information forthwith when it becomes unnecessary to retain the personal information, such cases as expiration of the retention period thereof or fulfillment of the purpose for which the information has been processed.

② Where personal information needs to be retained by law, regardless of the expiration of the retention period thereof or fulfillment of the purpose for which the information has been processed, the personal information will be moved to separate database or stored in other separate locations.

③ Personal information is destroyed in the following way.

1. Procedure for destruction
   – The Company selects the personal information that needs to be destroyed and within five days from the selection, destroys the information approved by the privacy officer specified in Article 10 of the Privacy Policy.
2. Method for destruction
   – The personal information recorded and stored in electronic form is destroyed in ways that make it impossible to reproduce the record, such a method as low level formatting, while paper documents on personal information is destroyed with a shredder or by incineration.

① Administrative measure : Formulating and implementing internal management plans, and periodic training for employees

② Technical measure : Managing access rights to the personal information processing system, installing an access control system, encrypting unique identification information, and installing security programs

③ Physical measure : Controlling the access to the computer rooms, archives and other such locations

① The Company destroys personal information forthwith when it becomes unnecessary to retain the personal information, such cases as expiration of the retention period thereof or fulfillment of the purpose for which the information has been processed.

② A data subject may contact the privacy officer or team in charge for inquiries about personal information protection, complaints, compensation for damages, or other matters regarding personal information in connection with the services (or businesses) of the Company.
The Company will make prompt responses to such inquiries.