Introduction

The Korean Register (hereinafter referred to as "Korean Register") is the Personal Information Protection Act in order to protect the personal information of the data subject pursuant to Article 30 and to quickly and smoothly handle related grievances, the personal information processing policy is established and disclosed as follows.

This Privacy Policy shall enter into force on October 15 2023

1. Purpose of processing personal information

Korean Register processes personal information for the purposes stated in the following. Personal information thus processed will not be used for a purpose other than what is stated below. If there is a change in the said purposes, we will ask for your consent in advance. We process personal information for the following purposes:

1. A. Homepage membership subscription and management
2. Checking if users actually want to subscribe for membership, verifying identification information concerning provision of service for members, membership management, personal identification in accordance with the system of Limited Verification of Identity, preventing dishonest use of service, sending notifications and announcements, handling complaints, and preserving records such as notices or records for dispute mediation.

1. B. Handling users’ complaints and requests
2. Verifying submitters' identities, communicating for fact-finding, and having them informed of the result of our processing.

2. Personal information items collected and period of retention

Korean Register collects, retains, and uses information stated below that is required for membership subscription, smooth customer consultation, provision of services, and hiring of employees, etc.

1. A. Name of personal information file:Membership Registration Information
2. Personal information items collected, retained, and used by us
3. Required items: name, email address, password, company, department, country.
4. Collection method: homepage membership subscription
5. Purpose of collection: provision of the content, verification of identification, etc.
6. Period of retention: to be destroyed after one year upon membership withdrawal

3. The subject of information’s rights and how to exercise them

As subjects of personal information, service users may exercise the following rights.

1. A. The subjects of personal information may exercise the following rights regarding the protection of personal information to the Korean Register.
2. 1) The right to ask us for accessing their personal information retained by us
3. 2) The right to ask us to correct errors included in their personal information retained by us
4. 3) The right to ask us to delete their personal information retained by us
5. 4) The right to ask us to stop processing their personal information retained by us
6. 5) The right to ask us to transmit their personal information kept by us to themselves or a third party
7. 6) The right to object to profiling (the subject may refuse to let personally important matters to be decided by automated process such as profiling)

B. Service users may exercise their rights stated in the foregoing 1, using a written form, email or fax as stipulated in Schedule No. 8, the Enforcement Riles to Personal Information Protection Act. We will comply with their requests in due course.

C. If the subject of information has asked for correction of an error in, or deletion of, his/her personal information retained by us, we shall not use the personal information until the completion of the requested action.

D. If the exercise of the rights stated in the foregoing 1 is done through a legal agent or trustee, a power of attorney shall be submitted, using the form provided in Schedule No. 11, Enforcement Rule of the Personal Information Protection Act.

E. An application for our online service from a minor aged under 16 shall be processed with the consent of a person with parental rights.

4. Destruction of personal information

Korean Register shall destroy personal information upon attaining the purpose of processing it as follows. We shall destroy service users’ personal information upon attaining the purpose of collecting and using it.

1. A. Destruction procedure
2. Upon attaining the purpose, the personal information provided by service users for membership subscription, etc. shall be transferred to a separate database (or a document file in the case of a paper document) and retained there until destruction under the in-house guidelines and the law (Ref. Period of Retention and Using in this Privacy Policy). The said personal information shall not be used for any other purpose unless required by the laws.

1. B. Destruction method
2. Printouts containing personal information shall be shredded or incinerated.
3. Electronic files containing personal information shall be deleted in a non-recoverable way.

5. Measures taken to keep personal information safe

Korean Register takes technical/administrative/physical protective measures as follows to keep personal information safe in compliance with Article 29 of the Personal Information Protection Act.

1. A. Keeping the number of personal information processing employees to a minimum and providing education
2. We let only designated employees process personal information, keep their number to a minimum, and have them manage personal information adequately.

1. B. Destruction method
2. We carry out periodic in-house inspection to ensure that personal information is processed adequately.

1. C. Carrying out in-house management plan
2. We carry out in-house management plan to keep personal information safe.

1. D. Encoding passwords
2. Our homepage membership IDs and passwords are encoded when transmitted, stored, and managed. Access to, or change of, personal information can only be done by the subject of information, who knows the password.

1. E. Technical measures against hacking, etc.
2. To protect personal information from hacking or computer virus, we operate security programs, renew them periodically, keep the relevant system in an off-limits area, and monitor it technically and physically.

1. F. Access control to personal information
2. We control access to our database system processing personal information by granting, changing, and expiring such authorization, check the status of access rights allowed periodically, and operate the intrusion detection system to keep the users’ personal information safe from unauthorized access.

1. G. Keeping documents in a locked place

2. We keep documents or auxiliary storage devices containing personal information in a locked place for safety.

1. H. Off-limits to unauthorized personnel
2. We keep personal information in a physically separate place and control unauthorized access by establishing and operating access control system.

6. Matters pertaining to operation of a device automatically collecting personal information and refusal to accept it

Cookies, which are very small text files sent to your browser by the server used to operate our website, are used to help you connect to our homepage and stored in your computer hard drive. We use cookies for the following purposes.

1. ▶Purpose for using cookies: User ID information
2. 1. To check user login information
   2. To disable popup windows

You may use an option in the web browser to accept all cookies or block all cookies or make it required to ask for your acceptance each time when a cookie is stored.

7. Designation of personal information manager

A. Korean Register designates a personal information manager as follows to handle complaints from the subjects of personal information and make up loss incurred by them concerning our processing of their personal information.

1. ▶ Personal Information Manager (Security Officer)
2. 1. Name: CHOI Sungsik
   2. Department: General Affairs Team
   3. Position: General Manager
   4. Contact number: +82-70-8799-8600, sschoi@krs.co.kr, FAX: +82-70-8799-8629

1. ▶ Computer Personal Information Manager (Information Security Officer)
2. 1. Name: LEE Yunhan
   2. Department: DT System Development Team
   3. Position: General Manager
   4. Contact number: +82-70-8799-8664, leeyh@krs.co.kr, FAX: +82-70-8799-8674

B. For inquiries about our personal information protection, your complaints, and your requests for making up loss incurred by you while using our services, please contact the Personal Information Manager and the relevant team. Korean Register will handle your inquiries and get back to you promptly.

8. Changes in the content of these Guidelines

These Guidelines shall enter into force on the date of enforcement stated in the following. Addition to, or deletion/correction of, the content in accordance with revision of the law will be posted at least 7 (seven) days in advance.

Date of posting: October 05 2023

Date of enforcement: October 15 2023