'Hanul Nuri Co., Ltd. places importance on your personal information and complies with the Act on Promotion of Information and Communication Network Utilization and Information Protection. The company will inform you about the purpose and method of using the personal information provided by you through the privacy policy and what measures are being taken to protect the personal information. The company will notify you through a notice (or individual notice) on its website when revising the privacy policy.

Personal Information Items to Collect

The company collects the following personal information for membership registration, consultation, and service application.

• ο Collected items: name, date of birth, gender, login ID, password, password questions and answers, home phone number, home address, mobile phone number, e-mail, occupation, company name, department, position, company phone number, hobby, marital status, anniversary, legal representative information, service usage record, access log, access IP information, payment record
• ο Method of collecting personal information: homepage (member registration), written form

Purpose of collection and use of personal information

The company utilizes the collected personal information for the following purposes.

• ο Provision of contract related to service provision, provision of charge settlement contents according to service provision, purchase and charge settlement, delivery of goods or delivery of billing address, etc
• ο Member management: Identification according to the use of membership services, personal identification, age verification, confirmation of consent from legal representatives when collecting personal information for children under the age of 14, delivery of notices ο Identification of frequency of access to marketing and advertising, or statistics on members' use of services

Period of retention and use of personal information

The Company shall destroy the personal information without delay after the purpose of collecting and using the personal information has been achieved.

Procedures and methods for destroying personal information

In principle, the company shall destroy the relevant information without delay after the purpose of collecting and using personal information has been achieved. The procedure and method for destruction are as follows.

• ο Destruction procedure: The information entered by the member for membership, etc., is transferred to a separate DB after the purpose is achieved (separate document box for paper) and stored for a certain period of time according to the internal policy and other reasons for information protection under related laws (see retention and use period) and is destroyed.
  Personal information transferred to a separate DB is not used for any purpose other than being held unless it is by law.
• ο Destroy method: Personal information stored in electronic file format is deleted using a technical method that does not allow the recording to be reproduced.

Provision of Personal Information

In principle, the company does not provide the user's personal information to the outside. However, the following cases are exceptional.

• - Users have agreed in advance
• - Where there is a request from an investigative agency in accordance with the provisions of the Act or in accordance with the procedures and methods prescribed by the Act for investigation purposes

Consignment of collected personal information

The company entrusts personal information as follows to provide and improve services, and stipulates necessary matters to ensure that personal information can be safely managed during consignment contracts in accordance with relevant laws and regulations. The contents of Hwasa's personal information consignee and consignment work are as follows.

Rights of users and legal representatives and methods of exercising them

Users and legal representatives may inquire or modify the personal information of themselves or children under the age of 14 at any time and may request cancellation of their subscription.
Inquiry of personal information of users or children under the age of 14? To cancel the subscription of "personal information change" (or "member information modification" etc.) (withdrawal of consent), click "member withdrawal" and go through the identification process. Or contact the person in charge of personal information management by writing, phone or e-mail, and we will take action without delay.
If you request correction of an error in personal information, the personal information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, we will notify the third party of the correction processing result without delay so that the correction can be made.
oo processes personal information terminated or deleted at the request of the user or legal representative in accordance with the "Duration of Retention and Use of Personal Information Collected by oo" and shall not be viewed or used for other purposes.

Matters concerning the installation and operation of an automatic personal information collection device and its refusal

The company operates "cookie," which saves and finds your information from time to time. A cookie is a tiny text file sent to your browser by the server that runs ooo's website and is stored on your computer's hard disk. The company uses cookies for the following purposes.

• Purpose of use of cookies, etc
  - Target marketing and personalized services are provided by analyzing the frequency of access and visit time of members and non-members, identifying user preferences and areas of interest, tracking the degree of participation in various events, and identifying the number of visits
  You have the option of installing cookies. Therefore, you can allow all cookies by setting options in your web browser, go through
• How to reject cookie settings
  Example: To deny cookie settings, you can either accept all cookies by selecting the options in your web browser, check every time you save them, or deny saving all cookies.
  Example of how to set up (for Internet Explorer): Tools at the top of your web browser > Internet Options > Privacy
  However, if you refuse to install cookies, there may be difficulties in providing services.

Civil service regarding personal information

In order to protect the personal information of customers and to handle complaints related to personal information, the company has designated the relevant departments and personal information management officers as follows.

• Customer Service Department: Management Team
• Phone number : 043-715-9973
• E-mail : morrislim114@daum.net

• Name of person in charge of personal information management : Im Myeongseop
• Phone number : 043-715-9973
• E-mail : morrislim114@daum.net

You can report any complaints about personal information protection to the person in charge of personal information management or to the department in charge when using the company's services. The company will promptly and sufficiently respond to users' reports.

If you need to report or consult other personal information infringement, please contact the institution below.

• 1. Personal Dispute Mediation Committee (www.1336.or.kr/1336)
• 2. Information Protection Mark Certification Committee (www.eprivacy.or.kr/02-580-0533~4)
• 3. Internet Crime Investigation Center of the Supreme Prosecutors' Office (http://icic.sppo.go.kr/02-3480-3600)
• 4. National Police Agency Cyber Terror Response Center (www.ctrc.go.kr/02-392-0330)