Privacy Policy

KMW Co., Ltd. (hereinafter referred to as the "Company") values the personal information of its customers,
and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection.
In accordance with Article 30 of the Personal Information Protection Act, the Company establishes and discloses the following privacy policy
in order to protect the personal information of data subjects and to promptly and smoothly handle related grievances.
This policy is effective as of: March 26, 2012.

Items of Personal Information Collected

The Company collects the following personal information when a customer signs up as a member, requests consultation, or applies for a service.
- Items collected: Name, phone number, address, mobile phone number, email
- Method of collection: Website, email, fax

Purpose of Processing Personal Information

The Company processes personal information for the following purposes. The personal information being processed
will not be used for any purpose other than the following, and if the purpose of use changes, the Company will
take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.

1. Website membership registration and management
Personal information is processed for purposes such as confirming intent to register as a member, identifying and authenticating individuals for the provision of membership services, maintaining and managing membership status, verifying identity in connection with the limited real-name verification system, preventing fraudulent use of services, confirming consent of a legal representative when processing personal information of children under the age of 14, and handling various notices and grievances.
2. Provision of goods or services

Personal information is processed for purposes such as delivery of goods, provision of services, issuance of contracts/invoices, provision of content, provision of customized services, identity verification, age verification, payment/settlement of fees, and debt collection.

Period of Processing and Retention of Personal Information

① The Company processes and retains personal information within the personal information retention/use period prescribed by law or
    the retention/use period agreed to by the data subject at the time personal information was collected.
② The respective processing and retention periods for each type of personal information are as follows.

 

• 1. Website membership registration and management: Until withdrawal from business/organization website membership
  • Provided, however, that in the case of the following reasons, until such reasons are resolved
  • 1) In the event that an investigation is underway due to a violation of related laws, until the investigation is concluded
  • 2) If there is a remaining claim/obligation relationship arising from use of the website, until such claim/obligation relationship is settled
• 2. Provision of goods or services: Until completion of supply of goods/services and completion of payment/settlement
  • Provided, however, that in the case of the following reasons, until the relevant period ends
  • 1) Records related to transactions such as labeling/advertising, contract details, and fulfillment under the "Act on Consumer Protection in Electronic Commerce, etc."
        - Records related to labeling/advertising: 6 months
        - Records of contracts, withdrawal of subscription, payment, and supply of goods, etc.: 5 years
        - Records of consumer complaints or dispute resolution: 3 years
  • 2) Retention of communication confirmation data under Article 41 of the "Protection of Communications Secrets Act"
        - Subscriber telecommunication date/time, start/end time, counterpart subscriber number, frequency of use, originating base station location tracking data: 1 year
        - Computer communication and internet log records, access location tracking data: 3 months

Provision of Personal Information to Third Parties

The Company processes the personal information of data subjects only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases falling under Article 17 of the Personal Information Protection Act, such as with the consent of the data subject or pursuant to special provisions of law.

Outsourcing of Personal Information Processing

The Company does not outsource customers' personal information to external companies without their consent. Should such a need arise in the future, the Company will ensure that the outsourced party notifies the customer of the details of the outsourced work and, where necessary, obtains prior consent.

Rights and Obligations of Data Subjects and How to Exercise Them

① Data subjects may exercise the following personal information protection rights against the Company at any time.

1. Request to view personal information
2. Request for correction in the event of errors, etc.
3. Request for deletion
4. Request to suspend processing

② The rights under Paragraph 1 may be exercised against the Company in writing, by telephone, email, fax, etc., and
    the Company will take action on such requests without delay.
③ If a data subject requests correction or deletion of errors in their personal information, the Company will not
    use or provide the relevant personal information until the correction or deletion is completed.
④ The rights under Paragraph 1 may be exercised through a legal representative of the data subject or a person delegated by them.
    In this case, a power of attorney in accordance with Attached Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
⑤ Data subjects shall not infringe upon the personal information or privacy of themselves or others being processed by the Company in violation of the Personal Information Protection Act or other relevant laws.

Destruction of Personal Information

① When personal information becomes unnecessary, such as due to the expiration of the retention period or achievement of the processing purpose, the Company shall
    destroy the relevant personal information without delay.
② If the retention period of personal information agreed to by the data subject has expired or the processing purpose has been achieved, but the personal information must continue to be preserved pursuant to other laws,
    the Company shall move the relevant personal information to a separate database (DB) or
    store it in a different storage location.
③ The procedures and methods for destroying personal information are as follows.

1. Destruction Procedure
   The Company selects personal information for which a reason for destruction has arisen and, upon approval from the Company's
   personal information protection officer, destroys the personal information.
2. Destruction Method
   The Company destroys personal information recorded and stored in the form of electronic files using methods such as Low Level Format
   to prevent the records from being reproduced, and destroys personal information recorded and stored on paper documents by shredding or incineration.

Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information.

1. Administrative measures: Establishment and implementation of an internal management plan, regular employee training, etc.
2. Technical measures: Management of access rights to the personal information processing system, installation of an access control system,
                     encryption of unique identification information, etc., and installation of security programs
3. Physical measures: Access control for computer rooms, data storage rooms, etc.

Personal Information Protection Officer

① The Company has designated a Personal Information Protection Officer as follows to take overall responsibility for personal information processing and to handle
    complaints and remedy damages related to personal information processing for data subjects.

• Personal Information Protection Officer: Head of HR Support Group
  
• - Phone: 031-370-8895
  
• - Email: insa@kmw.co.kr
• Department in Charge of Personal Information Protection: HR Support Group
  
• - Phone: 031-370-8895
  
• - Email: insa@kmw.co.kr

② Data subjects may direct any inquiries, complaints, or requests for remedy related to personal information protection arising from the use of the Company's services (or business)
    to the Personal Information Protection Officer and the department in charge.
    The Company will respond to and handle inquiries from data subjects without delay.

Request to Access Personal Information

Data subjects may file a request to access their personal information pursuant to Article 35 of the Personal Information Protection Act with the department below.
The Company will make every effort to ensure that requests to access personal information from data subjects are processed promptly.

• Department for Receiving and Processing Requests to Access Personal Information: HR Support Group
  
• - Phone: 031-370-8895
  
• - Email: insa@kmw.co.kr

Remedies for Infringement of Rights

Data subjects may contact the following agencies for consultation and other assistance regarding remedies for infringement of their personal information.
<The agencies below are separate from the Company. If you are not satisfied with the results of the Company's own handling of complaints and remedy of damages regarding personal information,
or if you need further assistance, please contact these agencies>

• Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
  
• - Scope of work: Reporting of personal information infringement, requests for consultation
  
• - Website: privacy.kisa.or.kr
• - Phone: 118 (no area code needed)
  
• - Address: (138-950) Personal Information Infringement Report Center, Korea Internet & Security Agency, 135 Jungdae-ro, Songpa-gu, Seoul
  
• Personal Information Dispute Mediation Committee (operated by Korea Internet & Security Agency)
  
• - Scope of work: Application for personal information dispute mediation, collective dispute mediation (civil resolution)
  
• - Website: privacy.kisa.or.kr