PRIVACY POLICY

Openmade Consulting Co., Ltd. (hereinafter referred to as the "Company") respects your personal information and is committed to doing its best to protect the personal information you provide to the Company.
The Company strives to comply with the "Act on Promotion of Information and Communications Network Utilization and Information Protection" and the "Personal Information Protection Act." Through this Privacy Policy, the Company informs users of the purposes and methods for which the personal information provided is used, as well as the measures being taken to protect personal information.
This policy shall enter into force on December 31, 2021.
The Company's Privacy Policy includes the following contents:

General Provisions
Items of Personal Information Collected and Collection Method
Purpose of Collection and Use of Personal Information
Retention and Period of Use of Personal Information
Procedures and Methods for Destruction of Personal Information
Provision of Personal Information to Third Parties
Rights of Users and Legal Representatives and How to Exercise Them
Matters Concerning the Installation, Operation, and Rejection of Automatic Personal Information Collection Devices
Other Policies Regarding the Handling of Personal Information
Information on the Chief Privacy Officer and Customer Service Department, etc.

1. General Provisions
"Personal Information" refers to information relating to a living individual that can identify the specific individual by name, resident registration number, etc., contained in the information (including information that can be easily combined with other information to identify a specific individual even if the information alone cannot identify the individual).
The Company attaches great importance to the protection of users' personal information and complies with the "Act on Promotion of Information and Communications Network Utilization and Information Protection," the "Personal Information Protection Act," and the "Personal Information Protection Guidelines" formulated by the Ministry of the Interior and Safety.
Through this Privacy Policy, the Company informs users of the purpose and manner in which the personal information they provide is used, and what measures are taken to protect it.
This Privacy Policy applies to all personal information acquired through websites operated by the Company, online and offline services provided by the Company, and various marketing and communication activities.
By disclosing this Privacy Policy, the Company takes measures so that users can easily view it at any time.

2. Items of Personal Information Collected and Collection Method
(1) Items of Personal Information Collected
The Company may collect the following personal information from users when they participate in marketing activities or use services provided by the Company.

The Company collects information necessary for identity verification and personal identification, including name, job title, company name, department, email address, mobile phone number, etc.
In addition, information such as service usage records, access logs, cookies, and IP addresses may be generated, collected, stored, and managed during the service usage process or business processing. In many cases, you can visit the Company's website without disclosing your identity. When you visit the Company's website, the Company records your IP address (the Internet address of your computer) to determine the website sections visited and the time of the visit. The Company does not link your IP address with personal information unless you register with the Company and log in using your profile.
The Company does not collect sensitive information that is likely to significantly infringe upon the user's privacy (information on ideology/beliefs, admission/withdrawal from trade unions/political parties, political views, health, sex life, etc.).
In principle, the Company does not provide services to or collect personal information from users under the age of 14. When it is unavoidable to collect personal information of a person under the age of 14 for service utilization, the consent of the legal representative will be sought in advance, and the information will be destroyed without delay as soon as the relevant business is completed, and personal information will be thoroughly managed while the business is in progress.

(2) Method of Collecting Personal Information
The Company may collect personal information of customers and users in the following ways:

The Company may collect personal information through its website. For example, when requesting information or content through the website, applying for email services or newsletters, downloading content, applying for events or participating in contests, requesting consultations, or applying for the Company's services, the Company may collect personal information for identity verification and personal identification.
When registering and participating in offline events provided by the Company, personal information may be collected through the Company's employees, phone, email, fax, etc.
The Company may collect personal information through social media generation information collection tools when users use the Company's services through browsers, mobile devices, apps, social services, etc.
The Company provides a procedure for users to select "Agree" or "Do Not Agree" to the contents of the Company's personal information collection and use consent form.

3. Purpose of Collection and Use of Personal Information
The Company utilizes the collected personal information for various purposes, including the following cases:
(1) Customer Management

Identity verification, personal identification, prevention of unauthorized use by bad members, and prevention of unauthorized use in connection with the Company's business and services.
Confirmation of intention to join the services provided by the Company.
Handling civil complaints, delivering notices - Identifying access frequency or statistics on members' service usage.

(2) Service Provision

Provision of the Company's services and information that customers may be interested in, newsletters, various contents, event application, and delivery of goods upon winning events.

(3) Marketing and Advertising

Delivery of advertising information such as events - Posting advertisements according to demographic characteristics and customer interests, delivering advertising information (*limited to members who select this option).
The Company will always notify customers and explain the purpose of collection before collecting personal information. The Company will obtain the customer's prior consent if it uses or shares the customer's personal information for purposes other than the reason for which the customer provided the personal information. In this regard, the Company will require the customer's consent, such as checking the appropriate option to express consent, so that the Company can understand the customer's preferences.

4. Retention and Period of Use of Personal Information
In principle, after the purpose of collection and use of personal information is achieved, the information is destroyed without delay.
However, if it is necessary to preserve it in accordance with the provisions of relevant laws and regulations, the Company retains member information for a certain period specified by the relevant laws and regulations as follows. In this case, the Company moves the relevant personal information to a separate database (DB) or stores it in a different place.

Records on display/advertising (Retention period: 6 months): Act on Consumer Protection in Electronic Commerce, etc.
Log records of users' internet, etc. / Tracking data upon user access, and other communication fact confirmation data (Retention period: 3 months): Protection of Communications Secrets Act.

5. Procedures and Methods for Destruction of Personal Information
In principle, the Company destroys personal information without delay after the purpose of collection and use of personal information is achieved. The destruction procedures and methods are as follows:
(1) Destruction Procedure
The user's personal information is transferred to a separate DB (a separate file cabinet in the case of paper) after the purpose is achieved, and is stored for a certain period according to internal policies and other information protection reasons under relevant laws and regulations (see Retention and Period of Use) before being destroyed. Personal information transferred to a separate DB will not be used for any purpose other than retention unless required by law.
(2) Destruction Method
Personal information stored in electronic file format is deleted using a technical method that cannot reproduce the records. Personal information printed on paper is destroyed by shredding with a shredder or by incineration.

6. Provision of Personal Information to Third Parties
In principle, the Company does not provide users' personal information to external parties. However, exceptions are made in the following cases:

When required by investigative agencies in accordance with the procedures and methods prescribed by laws and regulations for the purpose of investigation.
When necessary for fee settlement following the provision of paid services.
When provided in a form that cannot identify a specific individual for statistics formulation, academic research, or market research.
When users agree in advance.

7. Rights of Users and Legal Representatives and How to Exercise Them
Users and legal representatives may request to read, correct/delete, suspend processing, or withdraw consent for personal information related to themselves or the user under the age of 14 at any time. The Company may refuse to read or correct/delete all or part of the personal information in the following cases:

When reading is prohibited or restricted by law.
When there is a risk of harming another person's life or body, or unfairly infringing on another person's property and other interests.
If a user requests correction of errors in personal information, the personal information will not be used or provided to a third party until the correction is completed. In addition, if wrong personal information has already been provided to a third party, the result of the correction process will be notified to the third party without delay. The Company processes personal information deleted or suspended from processing at the request of the user or legal representative as specified in "4. Retention and Period of Use of Personal Information" and processes it so that it cannot be viewed or used for any other purpose.

8. Matters Concerning the Installation, Operation, and Rejection of Automatic Personal Information Collection Devices
Like many websites, the Company operates cookies, etc., to provide customized services according to the characteristics of each customer and to make visiting the Company's website easier, more efficient, and more valuable through a memory function when re-visiting the website. The Company can store and find user information from time to time based on cookies, etc. A cookie is a very small text file sent to the user's browser by the server used to operate the Company's website, and is stored on the user's computer hard disk.
(1) Cookies
Cookies are generally classified into "temporary" cookies and "permanent" cookies.

Temporary cookies do not remain on your computer after you close your browser.
Permanent cookies remain on your computer until you delete them or they expire.
(2) Purpose of Using Cookies, etc.
Implemented for the automatic login function, analyzing the access frequency or visit time of customers and non-customers, understanding the user's taste and fields of interest, tracking traces, and providing target marketing and personalized services by identifying the degree of participation in various events and the number of visits.
(3) How to Reject Cookie Settings
Users have the right to choose whether to install cookies. Therefore, by setting options in the web browser, you can allow all cookies, go through verification each time a cookie is stored, or refuse to store all cookies. However, if the user refuses to install cookies, there may be difficulties in providing services.

9. Other Policies Regarding the Handling of Personal Information
In handling users' personal information, the Company takes the following technical and managerial measures to ensure safety so that personal information is not lost, stolen, leaked, altered, or damaged.

Establishment and Implementation of Internal Management Plan: The Company establishes and implements an internal management plan for the safe handling of personal information. Through an in-house personal information protection dedicated organization, etc., the Company checks the implementation of personal information protection measures and compliance of the person in charge, and takes immediate corrective action if problems are found.
Installation and Operation of Access Control Devices: The Company controls unauthorized access from the outside using an intrusion prevention system, and strives to equip all possible technical devices to secure security systematically.
Measures to Prevent Forgery and Alteration of Access Records: The Company keeps and manages records of access to the personal information processing system and uses security functions to prevent access records from being forged or altered.
Encryption of Personal Information: The user's personal information is protected by a password, and files and transmitted data are encrypted or stored and managed using a file lock function (Lock), and important data is protected through separate security functions.
Measures Against Hacking, etc.: The Company takes measures to prevent damage caused by computer viruses using vaccine programs. Vaccine programs are updated periodically, and if a sudden virus appears, it is provided as soon as the vaccine comes out to prevent personal information from being infringed. In preparation for external intrusions such as hacking, each server utilizes intrusion prevention systems and vulnerability analysis systems to ensure security. Personal information is stored separately through a separate server without being mixed with general data.
Minimization and Education of Handling Staff: The Company limits the right of access to users' personal information to those who directly handle marketing targeting users, the Chief Privacy Officer, managers performing personal information management tasks, and others whose handling of personal information is inevitable for business. Regular in-house training and external trust training are conducted for employees handling personal information on acquiring new security technologies and personal information protection obligations. Through the security pledge of all employees upon employment, we prevent information leakage by humans in advance and establish internal procedures to audit the implementation of personal information protection policies and compliance of employees. The handover of personal information-related handlers is carried out thoroughly under a state where security is maintained, and responsibilities for personal information accidents after entry and retirement are clarified. Computer rooms and data storage rooms are designated as special protection areas to control entry and exit.
Link Site Provision Policy: The Company may provide links to other companies' websites or materials to users, and users can use products and services developed by third parties through the Company's services. In this case, since the Company has no control over third-party sites, materials, products, and services, it cannot be held responsible for and cannot guarantee the usefulness of products, services, or materials provided therefrom. If you click on a link included by the Company to move to a page of another site, the personal information protection policy of that site is unrelated to the Company, so please review the policy of the newly visited site.
Email Unauthorized Collection Rejection Policy: The Company refuses the unauthorized collection of posted email addresses using email collection programs or other technical devices. Violations of this may be punished by the "Act on Promotion of Information and Communications Network Utilization and Information Protection," etc.
Transmission of Advertising Information: The Company does not transmit profit-making advertising information against the user's explicit refusal to receive. The word "AD" may not be displayed in the email subject line, and the main contents of the email body are displayed. The email body explicitly states the name, email address, and phone number of the sender so that the user can express their intention to refuse reception, and specifies an easy method for the user to express their intention to refuse reception. When transmitting profit-making advertising information through media other than email, such as fax or mobile phone text transmission, necessary measures are taken, such as labeling the word "AD" at the beginning of the transmission content in accordance with relevant laws and regulations.

10. Information on Chief Privacy Officer and Customer Service Department, etc.
The Company designates a Chief Privacy Officer as follows to protect users' personal information and handle complaints related to personal information.
(1) Chief Privacy Officer

Name: KiHo Kim
Position: Executive Vice President
Contact: khkim@openmade.co.kr

(2) Other Agencies
Users may report all personal information protection-related complaints occurring while using the Company's services to the Chief Privacy Officer or the department in charge. The Company will provide prompt and sufficient answers to users' reports. If you need to report or consult on other personal information infringements, please contact the institutions below.

Personal Information Infringement Report Center (www.118.or.kr / 118)
Supreme Prosecutors' Office Cyber Crime Investigation Center (www.spo.go.kr / 02-3480-2000)
National Police Agency Cyber Terrorism Response Center (snsk.police.go.kr / 1566-0112)