("www.kostec.net " hereinafter referred to as the "Kostecsys homepage") has the following handling policies to protect users' personal information and their rights and interests in accordance with the Personal Information Protection Act and to smoothly handle users' grievances related to personal information.

("Kostecsys Homepage") will be notified through a website notice (or individual notice) when the company revises its personal information processing policy.

○ This policy will take effect on October 30, 2020.

1. The purpose of processing personal information ("www.kostec.net " hereinafter referred to as the "Kostecsys homepage") processes personal information for the following purposes. The processed personal information will not be used for any purpose other than the following purposes, and if the purpose of use changes, prior consent will be sought.

A. Subscription and management of website membership

• Personal information is processed for the purpose of identification due to the implementation of a limited identification system, prevention of illegal use of services, various notices and notifications, and preservation of records for dispute mediation.

B. Use in marketing and advertising

• Process personal information for the purpose of identifying access frequency or statistics on members' service use.

2. Personal Information File Status

The purpose of processing personal information files registered and disclosed by ("www.kostec.net " hereinafter referred to as the "Kostecsys homepage") pursuant to Article 32 of the Personal Information Protection Act is as follows.

• - Personal Information File Name: Personal Information Processing Policy
• - Collection method: Home page
• - Grounds for possession: Relevant laws and regulations
• - Retention period: 3 years
• - Related Acts and subordinate statutes: Record of display/advertisement: 6 months

※ For the disclosure of personal information file registration in other ('www.kostec.net ' hereinafter referred to as 'Kostecsys homepage') please use the Personal Information Protection Committee's General Information Protection Portal (www.privacy.go.kr ) → Civil complaints about personal information → Access to personal information → Search personal information file list menu.

3. Processing and Retention Period of Personal Information

• ① ("Kostecsys homepage") processes and holds personal information within the period of retention and use of personal information under the Act or the period of use of personal information agreed upon when collecting personal information from the data subject.
• ② The processing and retention periods of each personal information are as follows.
  • - Related personal information is retained and used for the above purpose of use from the date of consent regarding collection and use.
  • - Grounds for possession: Relevant laws and regulations
  • - Related Acts and subordinate statutes: Record of display/advertisement: 6 months
  • - Reason for Exception:

4. Matters concerning the provision of personal information to third parties

• ① ("www.kostec.net " hereinafter referred to as "Kostecsys homepage") provides personal information to third parties only if they fall under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the data subject and special provisions of the Act.
• ② ('www.kostec.net ') provides personal information to third parties as follows.
  • - Person receiving personal information: Kostecsys Co., Ltd
  • - Purpose of personal information use by recipient: e-mail
  • - Hold by the recipient. Period of use: 3 years

5. Consignment of personal information processing

• ① ("Kostecsys homepage") entrusts the processing of personal information as follows for smooth processing of personal information.
  • - Consignee (trustee): Not applicable
  • - Details of business to be entrusted: Not applicable
  • - Consignment period: Not applicable
• ② ("www.kostec.net " hereinafter referred to as the "Kostecsys homepage") stipulates matters concerning responsibilities such as prohibition of processing personal information other than the purpose of performing consignment work, technical and administrative protection measures, re-entrustment restrictions, management and supervision of trustees, and compensation for damages in accordance with Article 25 of the Information Protection Act when a consignment contract is concluded, and supervises whether the trustee handles personal information safely.
• ③ If the contents of the consignment work or the trustee changes, we will disclose it without delay through this personal information processing policy.

6. The rights and obligations of the data subject and legal representatives and the method of exercising them may exercise the following rights as a personal data subject.

• ① The data subject may exercise the right to view, correct, delete, and suspend personal information at any time regarding Kostecsys Co., Ltd.
• ② The exercise of rights under Paragraph 1 can be done by Kostecsys Co., Ltd. in writing, e-mail, or fax in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and Kostecsys Co., Ltd. will take action without delay.
• ③ The exercise of rights under paragraph (1) may be carried out through an agent, such as a legal representative of the data subject or a person who has been delegated. In such cases, a power of attorney under attached Form 11 of the Enforcement Rules of the Personal Information Protection Act shall be submitted.
• ④ Requests for suspension of reading and processing personal information may restrict the rights of data subjects pursuant to Articles 35 (5) and 37 (2) of the Personal Information Protection Act.
• ⑤ Requests for correction and deletion of personal information cannot be requested if the personal information is specified as a collection target in other laws.
• ⑥ Kostecsys Co., Ltd. checks whether the person who requested access, correction/deletion, or access in case of suspension of processing according to the data subject's rights is himself/herself or a legitimate agent.

7. Creating entries for personal information you process

• ① ("www.kostec.net " hereinafter referred to as "Kostecsys homepage") handles the following personal information items.
  • - Mandatory item: name/company name and mobile phone number
  • - Selections: Contacts, email

8. The destruction of personal information ('Kostecsys homepage') shall, in principle, destroy the personal information without delay if the purpose of processing personal information has been achieved. The procedure, deadline, and method of destruction are as follows.

• - procedure for destruction
  The information entered by the user is transferred to a separate DB after achieving the purpose (a separate document in the case of paper) and stored for a certain period of time according to internal policies and other related laws and regulations, and then destroyed immediately.
• - Destruction period
  When the retention period of the user's personal information has expired, the personal information will be destroyed within 5 days from the end of the retention period. When the personal information becomes unnecessary due to the achievement of the purpose of processing the personal information, the discontinuation of the relevant service, or the termination of the business, the personal information will be destroyed within 5 days from the date on which the processing of the personal information is deemed unnecessary.
• - How to destroy
  Information in the form of electronic files uses technical methods that make it impossible to reproduce the records.
  Personal information printed on paper is destroyed by shredding or incineration.

9. Matters concerning the installation, operation, and rejection of automatic personal information collection devices

Kostecsys Co., Ltd. does not use 'cookies' that store the information subject's usage information and call it up from time to time.

10. Create Personal Information Protection Officer

• ① Kostecsys Co., Ltd. ("www.kostec.net " hereinafter referred to as Kostecsys homepage) is in charge of handling personal information and designates a person in charge of personal information protection as follows for the handling of complaints and damage relief of information subjects related to personal information processing.
  

  ▶ a person in charge of personal information protection

  • - Name: Kim Bo-chang
  • - Position: Sales
  • - Position: Deputy Director
  • - Contact point: 032-821-8622, jeffkim@kostec.net , 032-822-4923
  
  ※※ It leads to the department in charge of personal information protection.
  

  ▶ Department in charge of personal information protection

  • - Department name: Sales
  • - Manager: Kim Bo-chang
  • - Contact point: 032-821-8622, jeffkim@kostec.net , 032-822-4923
• ② The data subject may contact the person in charge of personal information protection and the department in charge for all personal information protection-related inquiries, complaint handling, damage relief, etc. that occurred when using the service (or business) of Kostecsys Co., Ltd. ("www.kostec.net " hereinafter referred to as Kostecsys website).
  Kostecsys Co., Ltd. ("www.kostec.net " hereinafter referred to as Kostecsys website) will respond to and process the information subject's inquiries without delay.

11. Change of personal information processing policy

• ① This personal information processing policy will take effect from the date of enforcement, and if there is any addition, deletion, or correction of changes according to laws and policies, it will be notified through notice seven days before the change takes effect.

12. Measures to ensure the safety of personal information ("Kostecsys homepage") take the following technical/administrative and physical measures to ensure safety in accordance with Article 29 of the Personal Information Protection Act.

• 1. Conduct regular self-audit
  We conduct our own audits regularly (once a quarter) to secure stability related to personal information handling.
• 2. Minimization and training of personnel handling personal information
  We are implementing measures to manage personal information by designating employees who handle personal information and minimizing them only to those in charge.
• 3. Establishment and implementation of internal management plan
  An internal management plan is established and implemented for the safe processing of personal information.