VAIM Co., Ltd. Privacy Policy VAIM Co., Ltd. (hereinafter referred to as the 'Company') has established and published the following personal information handling guidelines in order to protect the personal information of information subjects in accordance with Article 30 of the Personal Information Protection Act and to promptly and smoothly handle related distress. Article 1 (Purpose of processing personal information) The company processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be implemented. Inquiry handling: Personal information is processed for the purpose of inquirer identity verification, inquiry confirmation, contact/notification for processing, and notification of the processed result. Article 2 (Processing and retention period of personal information) When the company collects personal information from the information subject, personal information retention, and its use, personal information is processed and retained within the period of retention and use of personal information agreed upon when collecting personal information in accordance with laws and regulations. Article 3 (Rights, duties, and method of exercising of information subjects and legal representatives) ① The information subject can exercise the right to view, modify, delete, and suspend processing of personal information at any time with respect to the company. ② The exercise of rights under Paragraph 1 may be done in writing, e-mail, fax, etc. in accordance with Article 41 Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act for the company, and the company will take action without delay. ③ The exercise of rights under Paragraph 1 may be done through an agent, such as a legal representative of the information subject or a person who has been delegated. In this case, you must submit a power of attorney in accordance with Form 11 of the Enforcement Regulations of the Personal Information Protection Act. ④ The rights of the information subject may be restricted in accordance with Article 35 (5) and Article 37 (2) of the Personal Information Protection Act for requests to view and suspend processing of personal information. ⑤ Request for modification and deletion of personal information cannot be requested if the personal information is specified as a collection target in other laws. ⑥ The company confirms whether the person who made the request to view, modify, delete, or suspend the processing, is the same person or a legitimate agent according to the rights of the information subject. Article 4 (Items of personal information to be processed) The company handles the following personal information items. - Personal information collection item: Personal information such as ‘name, e-mail address, and phone number (mobile phone number)’ is collected to provide various inquiry services such as product, employment, and partnership inquiries. - Personal information collection method: Personal information is collected through the inquiry board. Article 5 (Destruction of personal information) ① The company destroys the personal information without delay when the personal information becomes unnecessary, such as the expiration of the personal information retention period or achievement of processing purposes. ② If the personal information retention period agreed upon by the information subject has expired or the personal information needs to be kept in accordance with other laws despite the achievement of processing purpose, personal information is to be moved to a separate database (DB) or change the storage location and conserved. ③ The procedure and method of personal information destruction are as follows. 1. Destruction procedure The company selects the personal information for which the reason for destruction has occurred, and destroys the personal information with the approval of the person in charge of personal information protection. 2. Destruction method The company destroys personal information documented and stored in the form of electronic files so that the record cannot be reproduced, and personal information documented and stored in paper documents is destroyed by shredding with a shredder or incineration. Article 6 (Measures to ensure the safety of personal information) The company is taking the following measures to ensure the safety of personal information. 1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc. 2. Technical measures: Management of access rights of personal information processing systems, etc. 3. Physical measures: Access control of computer rooms, data storage rooms, etc. Article 7 (Matters concerning installation, operation, and rejection of automatic personal information collection devices) The company does not use 'cookies' that store and retrieve the information subject's usage information at any time. Article 8 (Personal information protection officer) ① The company is responsible for overall handling of personal information, and has designated the person in charge of personal information protection as follows to handle complaints and damage relief from information subjects related to personal information processing. Personal Information Protection Officer Name: Lee Geon-pil Position: General manager Contact: 043-731-6456, speicy@naver.com, 043-731-6455 ② The information subject may inquire about all personal information, protection-related inquiries, complaint handling, damage relief, etc. The company will respond and handle the inquiries of the information subject without delay. Article 9 (Change of personal information handling policy) This privacy policy is effective from September 1, 2019.