① The Company processes the personal information of data subjects as follows:

② In the process of using the service, the following personal (location) information items may be automatically generated and collected:
- IP address, cookies, MAC address, mobile device OS information, service usage history, visit history, call logs during consultation, etc.

The Company does not collect personal information of children under 14 years old, and their membership registration is not allowed.

① The Company processes the data subject's personal information only within the scope specified for the purpose of processing the personal information. Personal information is provided to third parties only when it falls under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the data subject and special provisions in other statute; otherwise, the Company does not provide the personal information of the data subject to third parties.

② The company provides personal information to third parties as follows:

③ In the event of emergencies, such as disaster, infectious disease, incident or accident causing urgent life or bodily harm, and imminent property loss, the Company may provide personal information to the relevant organizations. For more information, please click here (link to the Personal Information Handling and Protection Rules in Emergency Situations, jointly announced by the relevant government departments in October 2021).
※ In this case, the Company will provide only the minimum necessary personal information based on applicable laws and will not provide information for purposes other than those specified.

① In order to facilitate personal information processing, the Company entrusts personal information processing as follows:

② In order to facilitate personal information processing, the Company re-entrusts personal information processing as follows:

③ When entering into a consignment contract, the Company complies with Article 26 of the Personal Information Protection Act, specifying in documents responsibilities, including prevention of personal information processing for other purposes than performing the entrusted work, technical and managerial safeguards of personal information, restriction on reconsignment, management and supervision of consignees, and compensation for damages. The Company supervises whether consignees process personal information safely.

④ In case any change is made to the content of the consigned tasks and consignees, the Company will promptly disclose it through this Privacy Policy.

① When the retention period expires, or the purpose of processing is achieved for personal information, which thereby becomes no longer necessary, the Company shall destroy such personal information without delay. The procedure, deadline, and method of destruction are as follows:

② If the personal information collected upon the data subject’s consent must be preserved under different laws despite the retention period having expired, and the purpose of processing has been achieved, the Company transfers the personal information to a separate database (DB) or preserves it in a different storage location.

③ When the Company achieves the purpose of collection, use, or provision of the collected personal location information, it shall destroy the personal location information without delay unless the information must be recorded and preserved to verify the collection, use, and provision of location information in accordance with Article 16 Paragraph 2 of the Act On The Protection And Use Of Location Information.
However, the Company shall immediately destroy the information after using it within the scope of the purpose agreed to by the customer in accordance with Article 23 of the Act On The Protection And Use Of Location Information.
In this case, when destroying the personal location information or data verifying the collection of location information, the Company uses technically irreversible methods to delete, shred, or incinerate the record.

Users, as the data subject, may recognize the following obligations and exercise their rights at any time according to the procedures with respect to the Company.

※ If the data subject requests correction or deletion of personal information, the Company will not use or provide such personal information until the correction or deletion is completed.

The Company takes technical/managerial and physical measures necessary to ensure security in accordance with Article 29 of the Personal Information Protection Act.

Under Article 29 of the Personal Information Protection Act, the Company takes technical/managerial and physical measures to ensure safety as follows:

• ① The Company uses cookies, storing and retrieving usage records, to provide individualized custom services to users.
• ② Cookies are small blocks of data that a server (HTTP) used to run the website sends to the user’s computer browser and may be stored on the user’s PC hard drive.
• ③ Purpose of using cookies
  Cookies are used to understand users' visit and use patterns, whether secured access is made, etc., for each service and website they visit to provide optimized information to users.
• ④ Installation, operation, and rejection of cookies
  Users can reject storing cookies by setting the options in the web browser menu, as shown below.

※ However, rejecting cookie storage may prevent the use of some services that require login.

① In the process of using the service, the company collects and uses behavioral information as follows to provide optimized customized services, benefits, and online customized advertisements.

② Users can block the collection of behavioral information at any time through the following methods.

[Web browser]
- Above '9. You can block the collection of behavioral information by following the methods provided in Article 4 of ‘Installation/Operation and Rejection of Devices that Automatically Collect Personal Information’.
[Smartphone]
- Android: Settings → Google → Advertising → Delete Advertising ID
- iOS: Settings → Privacy & Security → Tracking → Allow apps to request tracking OFF

① The Company is responsible for the overall management of information processing and appoints a Chief Personal Information Officer, as described below, to address data subjects’ complaints and provide remedies related to personal information processing.

② The Information Agency may request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the departments below. The company will strive to promptly process the information subject's request to view personal information.

※ Data subjects may contact the Chief Personal Information Protection Officer for any matters related to personal information protection inquiries, complaint handling, damage relief, etc., arising from the use of the Company’s services (or businesses). The Company will respond to and handle inquiries from data subjects promptly.

① The Company seeks opinions from members regarding their personal information and has established procedures and methods to address complaints. If consultation is needed for other personal information, individuals may contact the Privacy Call Center (operated by the Korea Internet Security Agency), the Personal Information Dispute Mediation Committee, the Cybercrime Investigation Division of the Supreme Prosecutors’ Office, and the Cyber Bureau of the National Police Agency.

② The Company guarantees the data subjects’ right to self-determination of personal information and strives to provide consultation and damage relief related to personal information infringement. If reporting or consultation is necessary, individuals can contact the responsible department below.

① The Company installs and operates visual data processing devices as follows:
1. Grounds and purposes for installation of visual data processing devices
- Company facility safety and fire prevention
- Crime prevention for customer safety
- Prevention of vehicle theft and damage

2. Number of installations and locations: Number of installations by branch and branch locations

3. Visual data officer, responsible department, and person with access to visual data: Each branch’s person in charge
4. Visual data filming hours, retention period, storage location, and processing method
- Filming hours: 24 hours
- Retention period: 30 days from the time of filming
- Storage location and processing method: stored and processed in each branch’s visual data processing device management system
5. Method and place for checking visual data: Request each branch’s person in charge
6. Measures in response to data subjects’ request to view visual data: An application must be made with a request for inspection/confirmation of the existence of the personal visual data, and access is allowed only when the data subject himself/herself is filmed, or when it is explicitly required for the benefit of the data subject’s life, body, and property.
7. Technical, managerial, and physical measures to protect visual data: Establishment of an internal management plan, access control and restriction of access rights, application of safe storage and transmission technology of visual data, storage of processing records and measures for preventing forgery or alteration, and provision of storage facilities and installation of locking devices.

① Any addition, deletion, and correction of the Privacy Policy made pursuant to changes in applicable laws, policies, or security technologies will be notified on the website at least seven (7) days prior to the enforcement date of such the amended Privacy Policy, including reasons and details of the changes.

② This Privacy Policy is effective from 29, May, 2025.