3.If any subject of personal information or its legal representative is not in a position to express its intention or a prior notice cannot be obtained due to an unknown address, etc and it is explicitly acknowledged that such use or provision of personal information is urgently necessary for the benefit of the life, body, or property of any subject of personal information or any third party.

 

(2) The Company shall inform subjects of personal information of the following when obtaining consent under subparagraph 1 of Paragraph (1). If there is any change in any of the following, the Company shall inform subjects of personal information of such change and obtain consent therefrom.

 

1.The person who are provided with personal information;

2.The purposes of using personal information (when personal information is provided, the purposes of using by the person to whom personal information is provided);

3.Items of personal information that is used or provided;

4.Period of holding and using personal information (when personal information is provided, it refers to the period of holding and using by the person to whom such personal information is provided);

5.The fact that relevant subject of personal information is entitled to refuse to grant consent and the details of disadvantage (if any) arising from a refusal to grant consent.

 

3. Entrustment of Management of Personal Information

 

The Company, in principle, shall not entrust the management of personal information to any third party. If it is necessary to entrust the management of personal information hereafter, the Company shall notify of the persons subject to the entrustment, content of the entrusted work, period of entrustment and the terms and conditions of the entrustment contract (which sets forth compliance with laws and regulations relating to the protection of personal information, the prohibition of providing personal information to any third party and responsibilities, etc.) through its personal information protection policy. If necessary, the Company shall receive a prior consent thereto.

 

4. Rights and Obligations of Subjects of Personal Information

 

(1) Subjects of personal information and the legal representatives of children under age 16 (hereinafter collectively referred to as “subject of personal information” for the purpose of this Article) may file an application for inspection of personal information to the Company by submitting to the Company a written request for inspection of personal information of relevant subjects of personal information and children under age 16 (only in the case of legal representatives) managed by the Company. In such case, except upon special circumstances, the Company shall reply to such request whether such inspection is possible or not within ten days after the submission of a request for inspection. If the Company refuses or delays a request for inspection, the Company shall notify relevant subject of personal information of its reasons for refusal or delay. In any of the following cases, the Company may restrict or refuse an inspection of personal information after notifying a subject of personal information of the reasons therefor.

 

1.If any inspection is prohibited or restricted under laws; or

2.If any inspection of personal information is likely to cause harm to the life or body of other person or likely to infringe unreasonably on the property or other interest of other person;

 

(2) Any subject of personal information who has inspected its own personal information may request the Company to correct or delete its personal information which is untrue or impossible to Company. Provided, however, that a subject of personal information may not make a request for deletion of personal information if such personal information is explicitly classified as personal information subject to collection under other laws.

 

(3) In case the Company corrects, deletes, etc relevant personal information within ten days after the receipt from a subject of personal information of a request for correction or deletion of personal information pursuant to Paragraph (2), the Company shall inform relevant subject of personal information of the measures taken, and if the Company does not act on such request, the Company shall notify relevant subject of personal information of the fact that the Company refused to act on such request, the reasons therefor and the ways to raise an objection thereto, with a notice on the result of correction or deletion of personal information.

 

(4) Any subject of personal information may request the Company to suspend managing its personal information. Provided, however, in any of the following cases or if there is any justifiable reason, the Company may turn down such request for the suspension of management of personal information by notifying relevant subject of personal information of the reasons therefor.

 

1.If there are special provisions under laws or if it is inevitable in order to perform obligations under laws;

2.If it is likely to do harm to the life or body of other person or it is likely to infringe unreasonably on the property or other interest of other person;

3.If it is difficult to perform an agreement such as the case in which the service agreed with any subject of personal information is not provided if personal information is not managed, and if the subject of personal information has failed make its intention to terminate relevant agreement clearly known;

 

(5) Within ten days after the receipt of a request for suspension of management of personal information from any subject of personal information under Paragraph (4), if any measures were taken to suspend the management of relevant personal information, the Company shall notify relevant subject of personal information of the details of the measures taken with a notice on the result of suspension of management of personal information. If the Company does not act on such request, the Company shall notify relevant subject of personal information of the reasons therefor and the ways to raise an objection with the notice above.

 

5. International transfer of personal information

 

The data that the Company collects from you will be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It will also be processed by staff operating outside the EEA who work for the Company.

 

(1) The personal information the Company collects is processed in, or transferred to, the following jurisdictions:

 

• where the Company headquarters and IT servers are located: Republic of Korea

 

(2) The purpose of such personal information transfers are the following:

 

• the storage and further processing on the Company’s servers in Seoul;

 

• the handling of your services requests

 

By submitting your personal data, you agree to this transfer, storing or processing. The Company will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

 

Unfortunately, the transmission of information via the internet is not completely secure. Although the Company will do our best to protect your personal data, the Company cannot guarantee the security of your data transmitted to the Company site; any transmission is at your own risk. Once the Company have received your information, the Company will use strict procedures and security features to try to prevent unauthorized access.

 

6. Destruction of Personal Information

 

(1) If the period of holding personal information under Article 1 ends, the Company shall destroy relevant personal information within five days after the last day of such period of holding, unless there is a justifiable reason. If personal information is deemed to be unnecessary because the purpose of management of personal information is achieved, the Company shall, unless there is a justifiable reason, destroy relevant personal information within five days after it is deemed that management of personal information is unnecessary.

 

(2) The printouts, documents, etc on which personal information is written shall be destroyed through crushing or incineration, and any personal information in an electronic file shall be destroyed by deleting such information permanently in a way that is impossible to restore such personal information.

 

7. Measures to Secure Safety of Personal Information

 

The Company shall take technical, administrative and physical measures necessary to secure safety as follows.

 

(1) Encryption of Personal Information

 

Your passwords will be kept and managed after encryption, and only you who know the passwords can check and modify your passwords.

 

(2) Anti-hacking Measures

 

To prevent leak of your personal information as a result of intrusion to our information and communications networks, such as hacking, computer virus, etc., the Company installs the security program within the area where external access is limited. To prevent an intrusion, your personal information is backed up from time to time and the newest vaccine program is using, and for secure transmission on networks, personal information in transit is protected through encryption and so on.

 

(3) Minimization and Training of Personal Information Managers

 

We limit the number of our employees who handle personal information to the minimum level necessary and impress on them the compliance of protection of personal information through managerial safeguards, including but not limited to their training.

 

8. Cookies

 

The Company may install and manage automated tools such as “cookies” for the purpose of correct operation like the user language preferences. You have an option to accept or refuse installation of cookies. Therefore, you can choose the options of your web browser to accept all cookies, to receive notice when cookies are installed, or to refuse all cookies. The following site, https://www.aboutcookies.org/how-to-control-cookies/,will provide information how to enable/disable cookies.

 

9. Openness and Your Refusal or Withdrawal of Consent

 

You have the right to refuse or withdraw consent to collection of personal information.

 

– How to to refuse or withdraw consent to collection of personal information

 

*Click Settings, and then click Privacy Information Management.

 

10. Data Protection Officer

 

The Company exerts his best efforts to help you use our services safely. You can report any complaint on privacy issues in relation to the use of our services, to the personal information protection manager as follows.

 

Classification	Data Protection Officer
Team/Position	B&P/COO
Name	Shanjie Xu
Contact	315050431@qq.com

11. Changes in Personal Information Management Policies

 

(1) The personal information handling policy shall be applied from June 17, 2018.

 

(2) The Company shall continue to disclose any change in personal information management policies, time of implementation thereof and the details of such change.