Privacy Policy｜PNPSECURE

Article 1 (Purposes of Processing Personal Information)

The Company processes the personal information of the user for the following purposes. The processed personal information is not used for
purposes other than the ones stated below, and should changes occur, the Company must follow Article 18 of the Personal Information Protection Act

and meet requirements such as acquiring separate consent before proceeding with the modification.

1. Product inquiry service via the homepage

- The Company processes personal information to provide better services regarding product promotion, technical support, and implementation inquiries.

2. Applying for a position

- The Company processes personal information to provide better guidance to applicants and inquiries and expedite the recruitment process.

Article 2 (Use and Retention Period of Personal Information)

① The Company uses and retains personal information for the period stated by the law or consented by the data subject at the time of collection.

② The period of use and retention for different types of personal information is as follows.

1. Personal information for the homepage product inquiry service: Until the inquiry is answered or the service is provided

2. Position applications: 2 years from the date of collection

The information is retained until the end of the case for the following scenarios.

1) Investigation of relevant law violation - information retained until the end of the case or investigation

2) Occurrence of debt or financial obligations resulting from the use of the homepage - information retained until the debt is paid or the issue is solved

Article 3 (Processed Personal Information)

The Company processes the following personal information.

1. Product inquiry service via the homepage

- Mandatory: Name, affiliation, team/title, e-mail, contact number

2. Applying for a position

- Mandatory: Name, photo, e-mail, date of birth, gender, contact number, nationality, education, academic degree, profession,
experience (for experienced applicants), military service status (reasons for exemption for the exempted)

- Optional: Experience (for new applicants), qualifications, awards, language proficiency, volunteering work,
eligibility for veteran's compensation (if eligible, include veteran's compensation number)

3. The following information may be created or collected automatically while using Internet services.

- IP address, cookie, MAC address, service use history, access history, malicious behavior history, etc.

Article 4 (Disposing of Personal Information and Methods)

① The Company shall dispose of the personal information that has been made obsolete due to expiry, fulfillment of purpose,
or other reasons without delay.

② If the personal information of the data subject has to be retained as per relevant law even after expiration or fulfillment of purpose,
the information is transferred to and stored inside a separate DB or storage.

③ The process and method of disposal are as follows.

1. Disposal process

- The Company shall designate personal information that meets the disposal criteria and dispose of the information after receiving approval
from the executive in charge of personal information protection.

2. Disposal method

- The Company must permanently dispose of the digitally-stored personal information so that it may not be restored,
and shred or incinerate physical copies containing the information.

Article 5 (Rights of Users and Legal Representatives and Methods of Exercising the Rights)

① The data subject may exercise the following rights regarding the protection of their personal information at any time.

1. Right to request access to their personal information

2. Right to request changes to personal information in case of errors

3. Right to request deletion

4. Right to request cessation of processing

② The data subject may make a request to the Company as per Paragraph 1 of this article via letters, phone calls, e-mails, fax, and other means,
and the Company shall process the request without delay.

③ Should the data subject request their information be deleted or changed due to errors, the Company must not use or provide
the personal information until it is changed or deleted.

④ The data subject may exercise their rights stated in Paragraph 1 of this article through their legal representative or delegate.
In such a case, the data subject must submit a power of attorney that follows the format in the Enforcement Appendix of the Personal Information
Protection Act, Sub-paragraph 11.

⑤ As for the request to access personal information and cessation of processing, the rights of the data subject may be limited as per Article 35,
Paragraph 4, and Article 37, Paragraph 2 of the 「Personal Information Protection Act」.

⑥ As for the request to change or delete the personal information, the data subject cannot request the deletion if the personal information is designated
as a subject of collection in other laws.

⑦ The data subject shall not violate relevant laws such as Personal Information Protection Act and breach the privacy or access the personal information
of themselves or other parties that is processed by the Company.

Article 6 (Security Measures for Personal Information)

The Company is taking the following measures to ensure that the personal information is secure.

1. Managerial: Create and execute internal management plan, regularly educate staff members

2. Technological: Manage access permissions for systems such as personal information processing systems, install access control systems,
encrypt unique identification,install security programs

3. Physical: Limit access to the computing room, data archive, and other related facilities

Article 7 (Terms of Refusing to Install or Operate Automatic Personal Information Collecting Tool)

① The Company utilizes Google Analytics, a log analysis tool provided by Google, for the purpose of analyzing the service use statistics.

② The Company collects the activity history of service users via Google Analytics. Such information cannot be used to identify individuals.

③ To stop the analysis of web logs, go to My Settings on the guiding page below to block the feature.
Doing so will not affect the use of the service.

See how to disable Google Analytics in the settings

Article 8 (Person in Charge of Protecting Personal Information)

① The Company has appointed the following person in charge of overseeing, managing, and protecting personal information
to process complaints of data subjects regarding the processing of personal information and to remedy the damage caused.

▶ Head of personal information protection

Name: Rak-Chan Jung

Position: Director of Management Support Division

E-mail: rcjung@pnpecure.com

Contact: 02-6988-1103

FAX : 02-6988-1299

② The data subject may send all inquiries regarding the protection of personal information, complaints, and damage relief that arise
from using the Company's service (or business) to the head of personal information protection or the relevant division.
The Company shall answer the data subject and process their inquiries without delay.

Article 10 (Remedying Damage Caused by Breaching of Rights)

The data subject may consult with the following organizations regarding the damage caused by the breach of personal information and relief.

· Korean National Police Agency - Cyber Bureau http://cyberbureau.police.go.kr / 182 (without regional number)

· Supreme Prosecutor's Office of the Republic of Korea - Cybercrime Investigation Division http://www.spo.go.kr / 1301 (without regional number)

· Personal Information Infringement Report Center (Under Korea Internet & Security Agency) https://privacy.kisa.or.kr / 118 (without regional number)

· Personal Information Dispute Mediation Committee (Under Korea Internet & Security Agency) https://www.kopico.go.kr / 1833-6972

<PNPSECURE Co., Ltd.>
Privacy Policy, Effective from May 22nd, 2023

Article 1 (Purposes of Processing Personal Information)

Article 2 (Use and Retention Period of Personal Information)

Article 3 (Processed Personal Information)

Article 4 (Disposing of Personal Information and Methods)

Article 5 (Rights of Users and Legal Representatives and Methods of Exercising the Rights)

Article 6 (Security Measures for Personal Information)

Article 7 (Terms of Refusing to Install or Operate Automatic Personal Information Collecting Tool)

Article 8 (Person in Charge of Protecting Personal Information)

Article 9 (Requesting to Access Personal Information)

Article 10 (Remedying Damage Caused by Breaching of Rights)

Article 11 (Execution and Change of Privacy Policy)

<PNPSECURE Co., Ltd.>Privacy Policy, Effective from May 22nd, 2023

Article 1 (Purposes of Processing Personal Information)

Article 2 (Use and Retention Period of Personal Information)

Article 3 (Processed Personal Information)

Article 4 (Disposing of Personal Information and Methods)

Article 5 (Rights of Users and Legal Representatives and Methods of Exercising the Rights)

Article 6 (Security Measures for Personal Information)

Article 7 (Terms of Refusing to Install or Operate Automatic Personal Information Collecting Tool)

Article 8 (Person in Charge of Protecting Personal Information)

Article 9 (Requesting to Access Personal Information)

Article 10 (Remedying Damage Caused by Breaching of Rights)

Article 11 (Execution and Change of Privacy Policy)

<PNPSECURE Co., Ltd.>
Privacy Policy, Effective from May 22nd, 2023