Article 1 (Consent to collecting personal information)

We believe that we have agreed to collect personal information if there is an expression of consent by establishing a procedure to click the "agree" button on the contents of the personal information handling policy or terms and conditions when signing up for the first time.

Article 2 (Purpose and item of use and method of collecting personal information)

1. The purpose of collecting personal information is to provide optimized and customized services by confirming the identity of members and their intention to use the service.

We only receive the minimum information necessary to facilitate service delivery upon initial membership and may collect additional information necessary for payment, delivery, and refund based on the use of the services we provide.

We do not use personal information for any purpose other than the basic purpose of collecting and using it or provide it to a third party without the consent of the member.

2. We collect and use personal information for the following purposes.

① Name, social security number, ID, password: Identification according to the use of the services provided by the company, provision of age-restricted services, etc

② Representative name, business registration number, business contact number: To provide business member services, etc

③ E-mail address, telephone number, mobile phone number, address: Smooth progress of transactions between members, confirmation of one's intention, handling of complaints, guidance of new information and notices, etc

④ Credit card information, bank account information: provision of payment service, etc

⑤ IP Address, Date and time of visit: Prevention of illegal use of defective members, prevention of unauthorized use, etc

⑥ Other selection items: Data, etc. for providing services tailored to the characteristics of members

⑦ I-PIN number, date of birth, name, connection information: Identification of I-PIN certified subscribers, handling complaints, providing age-restricted services, etc

3. When collecting members' personal information, we must collect them with the consent of the members, and we do not collect information such as race, place of origin, place of origin, ideology, political orientation, criminal records, and health conditions that are likely to violate the members' basic human rights.

4. We collect personal information in the following ways. ① Ask the website, written form, fax, phone, or customer center

② Collection via Generated Information Collection Tool

Article 3 (Operation and utilization of cookies)

1. We operate cookies for the user's convenience. Cookies are a small amount of information that the website sends to your computer browser. When a user accesses the website, the service provider's computer reads the contents of the cookie in the user's browser and finds the user's additional information on his or her computer, and provides the service without additional input such as ID and password according to the connection. However, cookies identify the user's computer but do not personally identify the user.

2. You have a choice of cookies. You have the option to accept all cookies by adjusting the options in Tools > Internet Options tab at the top of your web browser, to send a notification when the cookies are installed, or to reject all cookies. However, if you refuse to set up cookies, you may not receive services that require the cookie acceptance setting.

Article 4 (Use of personal information for other purposes and provision to third parties)

1. The Company uses the personal information of its members within the scope notified in the "Purpose and Item of Collection and Use of Personal Information" and does not use it beyond the scope or, in principle, provide it to a third party.

2. However, in the following cases, personal information may be provided or used with the consent of the members through appropriate procedures.

① Affiliate: In order to provide better services, we can provide members' personal information to the affiliates. In such cases, we will go through the process of individual consent to the members in advance for the affiliates, the items of personal information provided, the purpose of providing personal information, the period of provision, and the protection of personal information. If there is no consent from the members, we will not provide it to the affiliates and will notify them of any changes or termination in the partnership. When the partnership is terminated, we will take measures to destroy the personal information provided without the consent of the members without delay, and we can withdraw the consent at any time even if we agree to provide personal information.

② Entrustment processing: In order to facilitate business processing and provide better services to members, members' personal information may be entrusted and processed, and in such cases, the name and purpose of the entrusted company, the scope of personal information to be entrusted, the period of entrustment, etc. shall be notified in advance.

③ Sale, M&A: If the rights and obligations of the service provider are succeeded or transferred, they must be notified in advance and given the right to withdraw consent from the members' personal information.

3. Except as follows: ① Where there are special provisions in the relevant laws and regulations

② Where necessary for the settlement of charges according to the provision of services

Article 5 (Reading and Correcting Personal Information)

1. Members may view or correct their registered personal information at any time. ID, name, and resident (business) registration number cannot be corrected, but it is exceptionally possible to change the name due to renaming or to change the resident registration number due to administrative problems.

2. If you wish to view and correct your personal information, you can view and correct it at any time at the "My Profile" at the top of the site after logging in, and contact our Customer Center or Personal Information Management Officer or person in charge by writing, telephone, fax or e-mail.

3. If a member requests correction of a personal information error, the personal information will not be used or provided until the correction is completed, and the revised information will be applied immediately from the time the correction process is completed. Measures are taken to notify third parties of previously provided information without delay to correct it, but it may take a considerable amount of time to correct it.

Article 6 (Withdrawal of consent for collecting, using, and providing personal information)

1. Members may withdraw their consent at any time for the collection, use, and provision of personal information through membership registration, etc.

2. With the withdrawal of consent, if you contact the person in charge of personal information management and the person in charge in writing, by phone, fax, e-mail, etc., we will immediately take necessary measures such as deleting personal information.

3. We take the necessary measures to make it easier to withdraw consent to the collection of personal information than to collect personal information.

Article 7 (Period of retention and use of personal information)

1. When we collect members' personal information, the retention period shall, in principle, be until the termination of the contract under Article 10 of the purchasing membership agreement and the termination under Article 10 of the designer membership agreement. If the contract is terminated, we will immediately destroy the members' personal information and take measures to destroy the information provided to a third party without delay. (In order to prevent re-registration during the grace period of re-registration, we shall destroy it two months after the end of the contract.) In addition, personal information shall be retained for each of the following periods. 1. Where it is necessary to preserve it pursuant to the provisions of laws and regulations, such as the Commercial Act, the details of transactions and the minimum basic information shall be retained during the preservation period prescribed by laws and regulations

2. Where the holding period is notified in advance and the holding period has not elapsed and the consent of the members is obtained individually, the holding period shall be held for the agreed period

3. Retaining personal information for a specified period of time in the following cases

□ Record of withdrawal of contract or subscription, etc.: 5 years

□ Record of payment and supply of services, etc.: 5 years

□ Record of consumer complaints or dispute settlement: 3 years

2. In order to protect the customer's personal information and prevent any damage caused by the leakage of personal information, the company destroys the personal information through the following methods.

□ Personal information printed on paper is shredded with a grinder or destroyed by incineration.

□ Personal information stored in electronic file format is deleted using a technical method that cannot be reproduced.

3. If there is a request for permission of the member to read the personal information held by the member with the consent of the member, we will take measures to read and confirm it without delay.

Article 8 (Technical and Management Measures for the Protection of Personal Information)

1. technical countermeasures

In handling members' personal information, we are preparing the following technical measures to ensure stability so that personal information is not lost, stolen, leaked, tampered with, or damaged.

① Installation of advanced security systems

In order to protect the personal information of members, a chip-in-blocking system (firewall) and an intrusion detection system are installed on all networks to perform access control and 24-hour monitoring. In addition, we have established a DB security system to control access to the personal information processing system and conduct 24-hour monitoring.

② Password generation rules have been established and applied so that numbers that are easy for others to guess, such as birthdays and phone numbers, are not used as passwords.

③ All executives and employees' PCs are obligated to install and use virus vaccination programs, and the use of P2P programs is prohibited.

④ SSL Security System

When entering information and personal information entered at the time of registration, the 128Bit Secure Socket Layer (SSL) Protocol certified by Verisign is encrypted and sent to us to ensure that personal information on the network can be transmitted safely.

2. administrative measures

① We limit members' access to personal information to the minimum number of people required to provide services. Due to the nature of work, the minimum number of people who can handle personal information is as follows.

□ A person who performs marketing work directly against users.

□ A person who performs personal information management, such as a person in charge of personal information management and a person in charge.

□ A person whose handling of personal information is inevitable for other business purposes.

② If the person who handles personal information changes, such as leaving the company or moving to the department, the access to personal information through the account is immediately canceled. In addition, regular personal information security/management training is provided to employees who handle personal information, and through this, the personal information handlers always have the best security mindset.

③ We prepare a security contract for all employees to prevent personal information leakage and prevent information leakage by employees in advance through the in-house security system. In addition, we regularly check for implementation and compliance with the privacy policy.

④ The transition of the personal information-related handler's work takes place while security is maintained, and the responsibility for personal information accidents after entering and leaving the company is clarified.

Article 9 (Limitation of Liability to Link Sites)

We may provide members with links to other websites or materials. In this case, we have no control over external sites and materials, so we cannot be responsible or guarantee the usefulness of the services or materials provided by them. If you click on a link that we contain and move to another site, the privacy policy of the site is irrelevant to us, so please be sure to review the privacy policy of the newly visited site.

Article 10 (Consignment management of personal information)

1. For smooth customer service and management, we can entrust personal information to other companies in a limited range after prior notification to members.

2. We entrust the processing of personal information as follows, and we take necessary measures to ensure that personal information is safely managed during consignment contracts in accordance with the relevant laws and regulations. In addition, the information to be consigned is limited to the minimum information necessary to provide smooth customer service. In the case of a consignment contract with a consignment processing company, it clearly stipulates the order of personal information protection, confidentiality of personal information, prohibition of provision to a third party and liability in case of an accident, the period of consignment, the return or destruction of personal information after the completion of the processing, and keep the details of the contract in writing or electronically.

Article 11 (Precautions for users to protect personal information)

1. Our members' personal information is protected by passwords. Members should not tell anyone the password, and they themselves will be responsible for their leakage, so please pay special attention.

2. After using our service, be sure to end the member's account and close the web browser window. This is to prevent others from seeing the member's personal information and communication details when members share and use computers with others, or if they use computers in public places such as Internet cafes, PC cafes, and libraries.

3. Members need to keep their personal information up-to-date to prevent unexpected accidents, and the responsibility for accidents caused by members' inaccurate input of information lies with the members themselves.

4. When registering or trading by stealing another person's resident registration number, you may be sentenced to up to three years in prison or fined up to 10 million won under the Resident Registration Act, along with loss of membership.

Article 12 (Collection of opinions and handling of complaints)

1. We value the opinions of our members regarding personal information and we will always give sincere answers to inquiries about personal information.

2. We operate a customer center for smooth communication with members, and the details are as follows.

□ [Customer Center] □ Phone: +32-220-5290

□ □ E-mail : nalae.pa.system@gmail.com

□ Address: Bluetec, No. 209 on the 2nd floor of the coexistence, 158, Bodru-ro, Seo-gu, Incheon, Republic of Korea

3. The telephone consultation hours of the customer center are from 09:00 to 18:00 on weekdays and are not open on Saturdays and holidays.

4. If you need consultation on other personal information, please contact the following institution.

□ Personal Information Infringement Reporting Center (www.118.or.kr / 118)

□ Information Protection Mark Certification Committee (www.eprivacy.or.kr / 02-580-0533~4)

□ Cybercrime Investigation Unit of the Supreme Prosecutors' Office (www.spo.go.kr / 02-3480-2000)

□ National Police Agency Cyber Terrorism Response Center (www.netan.go.kr / 02-393-9112)

Article 13 (Restrictions on Membership of Children Under the Age of 14)

We do not accept membership for children under the age of 14 who need the consent of their legal representative.

Article 14 (Obligation to notify)

The privacy policy may be changed by the government's policy or the company's needs, and if there is addition, deletion, or modification of the contents, it will be immediately notified on the website, and this policy will take effect on the date of public announcement.

– Personal information protection policy implementation date: March 1, 2023

If you have any comments or complaints about customer privacy, please contact the person responsible for privacy and the person responsible for it. We'll make sure to take care of it quickly and accurately.

Phone: +32-220-5290

Or e-mail: nalae.pa.system@gmail.com