Privacy Policy

Article 1 (Items and Methods of Personal Information Collected)

The Company collects the following personal information in the course of using the inquiry and reporting features of the website, and some information is generated and collected automatically during service use.

Article 2 (Purpose of Collection and Use of Personal Information)

The personal information collected is used only for the following purposes, and where the purpose changes, separate consent will be obtained.

• Receiving and processing inquiries and consultations, and replying with the outcome
• Receiving, investigating, and reporting the outcome of matters relating to ethics, human rights, safety, and the environment
• Service operation and improvement, prevention of misuse, and security management
• Fulfilling statutory obligations and responding to disputes

Article 3 (Retention and Use Period of Personal Information)

The Company destroys personal information without delay once the purpose of its collection and use has been achieved. However, where retention is required under the relevant statutes, the information is retained for the corresponding period.

Article 4 (Provision of Personal Information to Third Parties)

The Company does not use the personal information of data subjects beyond the scope notified in Articles 1 and 2, nor does it provide such information to third parties. However, it may provide such information only where the data subject has given prior consent, or where required by law. In the case of ethics reports, information may be provided to relevant departments or agencies, within the scope necessary to handle the matter and in accordance with a separate consent procedure.

Article 5 (Outsourcing of Personal Information Processing)

Where necessary to provide services smoothly, the Company may outsource personal information processing tasks to external parties. In such cases, the Company discloses the trustee and the details of the outsourced tasks through this Policy, and stipulates the matters necessary to ensure that the information is managed securely in accordance with the relevant statutes.

Article 6 (Rights and Obligations of Data Subjects and How to Exercise Them)

Data subjects may exercise the following rights at any time, and may submit such requests in writing, by email, or by other means. The Company will take action without delay.

• Request to access personal information
• Request to correct errors or other inaccuracies
• Request for deletion
• Request to suspend processing

Article 7 (Procedures and Methods for the Destruction of Personal Information)

Personal information for which the retention period has elapsed or the processing purpose has been achieved is destroyed without delay. Electronic files are permanently deleted using a method that renders recovery or reproduction impossible, and paper documents are shredded or incinerated.

Article 8 (Measures to Ensure the Security of Personal Information)

To ensure the security of personal information, the Company takes administrative and technical protective measures, including managing access rights, retaining access logs, encryption, and the establishment and implementation of internal management plans.

Article 9 (Operation of Cookies)

The Company may use cookies to provide users with customized services. Users may refuse the storage of cookies through their web browser settings; in that case, the use of some services may be restricted.

Article 10 (Personal Information Protection Officer)

The Company designates a Personal Information Protection Officer as follows to oversee tasks related to personal information processing and to handle inquiries and complaints from data subjects.

Article 11 (Remedies for Infringement of Rights)

If you need consultation or wish to report an infringement of personal information, you may contact the Personal Information Dispute Mediation Committee (1833-6972), the Personal Information Infringement Report Center (118), the Supreme Prosecutors’ Office (1301), or the National Police Agency (182), among others.

Article 12 (Amendment of the Privacy Policy)

This Privacy Policy may have content added, deleted, or modified in accordance with changes in statutes, policies, or security technology, and any such changes will be announced in advance through the website.