Privacy Policy

• NEOWIZ (hereinafter referred to as 'the Company') actively ensures the rights of data subjects and transparently discloses its Privacy Policy to comply with relevant laws, regulations, and guidelines regarding Personal Information protection.

• The Company makes various efforts such as providing key information labeled for easy understanding of the principal Personal Information processing status by data subjects.

1. Purpose of Collection and Use of Personal Information

The Company utilizes the collected Personal Information for the following purposes.

2. Period of Retention and Use of Personal Information

The Company promptly destroys the collected information once the purpose of collection and usage of Personal Information is achieved. However, the following information is retained for the stated period for the reasons listed below. If the data subject requests deletion of Personal Information, the Company will promptly delete the relevant information.

3. Procedures and Methods for Destruction of Personal Information

The Company generally destroys Personal Information without delay once the purpose of collection and use has been achieved. The procedures and methods for destruction are as follows:

1)Destruction Procedure: Personal Information collected is transferred to a separate database (or a separate filing cabinet in the case of paper documents) according to internal policies and other relevant laws and regulations (refer to retention and usage period) based on the reasons such as the achievement of the collection purpose. This information is stored for a certain period and then destroyed. Personal Information transferred to a separate database is not used for purposes other than the retention purpose unless required by law.

2)Destruction Method: Personal Information printed on paper is shredded or incinerated, and Personal Information stored in electronic file formats is deleted using technological methods that prevent record retrieval.

4. Sharing of Personal Information with 3rd Parties

1)The Company may share Personal Information with NEOWIZ HOLDINGS Corp. and its subsidiaries for effective management of advertising inquiries and business proposals.

- Purpose of Sharing: Transmitting advertising inquiries and business proposals to subsidiaries

- Provided Data: Email Address, advertising and business inquiry content

- Sharing Period: Retained for up to one year from the date of submission of advertising inquiries and business proposals.

2)The Company does not share the user's Personal Information or provide it to a third party without the user's consent, other than the cases described in Paragraph 1. However, if there is a request from the government or investigative agencies in accordance with the relevant laws and regulations, it may be provided in accordance with legal procedures.

5. Consignment of Personal Information Processing

When the Company consigns the processing of Personal Information, in order to ensure the safety and protection of the Personal Information, the Company will prohibit processing of Personal Information for purposes other than performing consigned work, technical and administrative protection measures, management/supervision of the consignee, compensation for damages, restrictions on re-consignment, and processing. The Company will clearly stipulate in the document the return or destruction of Personal Information after termination, and supervise the consignee in handling the Personal Information safely.

Data subjects may refuse an overseas transfer of Personal Information through the Company's Personal Information Protection Officer or relevant department. If the data subject refuses the overseas transfer of Personal Information, the Company will exclude that data subject's Personal Information from the overseas transfer. However, in this case, use of Personal Information for the purpose of transfer may be restricted.

6. Technical and Administrative Measures for Personal Information Protection

The Company has implemented the following technical and administrative measures to ensure the security of Personal Information from loss, theft, leakage, alteration, or damage during the processing of data subject Personal Information.

1) Technical Measures

① The company prevents potential leakage of Personal Information on the network by employing intrusion blocking systems (Firewalls) and intrusion prevention systems (IPS) against external malicious attacks. Additionally, the Company maintains the security of Personal Information through risk management systems (RMS) for data storage systems.

② The Company adopts security devices (SSL) that use encryption algorithms to securely transmit Personal Information over the network.

③The Company regularly backs up Personal Information in preparation for contingencies and takes measures to prevent damage from computer viruses using antivirus programs.

④The Company continuously strives to enhance security through measures such as access control, authorization management, and vulnerability checks for the systems.

2) Administrative Measures

①The Company restricts access to Personal Information by establishing a separate department composed of a minimum number of personnel, including a Personal Information Processing Officer.

②Regular in-house and externally commissioned education is provided to employees processing Personal Information regarding the acquisition of new security technologies and obligations for Personal Information protection.

③The handover of duties for personnel handling Personal Information is carried out meticulously under secure conditions. While the Company ensures clear accountability for Personal Information incidents before and after employment termination, it acknowledges that data transmission over the internet cannot be guaranteed to be completely secure. Additionally, the Company promises to accumulate expertise in technology and management for protecting applicants' Personal Information in the future.

7. Rights of Data Subjects and Methods of Exercising Them

1) Data subjects have the right to withdraw their consent for the collection of Personal Information by submitting a request in writing, by phone, or via email to the Personal Information Protection Officer. In such cases, the Company, excluding cases specified by law, will take the necessary actions, such as destruction of the Personal Information after verifying the identity of the individual.

2) If a data subject wishes to have their information deleted, they may request deletion of their Personal Information in writing, by phone, or via email to the Personal Information Protection Officer. In such cases, the Company will take the necessary actions accordingly.

3) When a representative of the data subject visits to request access or correction of Personal information, the Company will verify whether the representative is the true agent of the data subject. In such cases, the Company may request presentation of evidence demonstrating the agency relationship.

4) If there are legitimate reasons for refusing to allow data subjects to access or correct their Personal Information in whole or in part, the Company will promptly notify the data subject of the reasons for refusal and provide an explanation.

5) For the smooth and stable provision of services, the Company may request a separate procedure from the data subject for changes to mandatory input items such as name and email address provided by the data subject.

8. Collection, Use, and Rejection of Behavioral Information

1)The Company may use 'Cookies' to store and retrieve usage information periodically to support faster and more convenient website usage and to provide customized services.

2)Cookies are very small text files sent by the server operating the website to the user's computer browser and stored on the user's computer.

3)Users have the option to control cookie installation. Therefore, users can allow all cookies, require confirmation each time a cookie is stored, or refuse all cookies by adjusting options in their web browsers. However, refusing cookie installation may inconvenience web usage.

4)Examples of Settings:

① Microsoft Edge Tools menu at the top of the web browser > Internet Options > Privacy > Settings

② Chrome Settings menu on the right side of the web browser > Show Advanced Settings at the bottom of the screen > Content settings button under Privacy > Cookies

9. Personal Information Protection Officer and Complaint Services

1)The Company operates a dedicated department for the collection of opinions and handling of complaints regarding Personal Information, called the Personal Information Protection Officer and Complaint Services Department. Contact information for the Personal Information Protection Officer can be found below.

2)Individuals using the Company's services may report any complaints related to Personal Information protection to the Personal Information Protection Officer or the relevant department. The Company will promptly provide sufficient responses to the reported issues from users.

10. Notification of Changes to Privacy Policy

In the event of additions, deletions, or modifications to the contents due to changes in laws, policies, or security technologies, we will notify data subjects with the revised Privacy Policy at least 7 days prior to its enforcement through our website, explaining the reasons and details of the changes. However, in cases where significant changes affecting the rights of data subjects, such as changes in the items of collected Personal Information or the purposes of use, occur, the announcement will be made at least 30 days prior to the effective date.

Privacy Policy Announcement Date: [July] [8th], 2024

Privacy Policy Effective Date: [July] [15th], 2024