The Company processes personal information to respond to product and technical inquiries and to provide the requested support. If the purpose changes, the Company will take the measures required by applicable law, including obtaining separate consent where necessary.

The Company processes and retains personal information within the period prescribed by law or agreed to by the data subject at the time of collection. Information submitted through product and technical inquiry forms is retained for one year. Information may be retained beyond that period when required by another law or when separate consent has been obtained.

The Company processes personal information only within the stated purposes and provides it to a third party only with the data subject’s consent or when permitted or required by applicable law. In an emergency involving disasters, infectious diseases, imminent danger to life or physical safety, or urgent property loss, information may be provided to relevant authorities without consent as permitted by law.

When outsourcing personal information processing, the Company documents the required safeguards, including purpose limitation, technical and administrative protection, scope of work, restrictions on subcontracting, security measures, supervision, and liability. Any change to an outsourced task or service provider will be disclosed through this policy without undue delay.

The Company does not collect, use, or provide personal information for transfer outside the Republic of Korea.

Data subjects, or their legal representatives where applicable, may request access to, correction or deletion of, or suspension of processing of their personal information at any time. Requests may be submitted in writing, by email, or by fax, and the Company will respond without undue delay. A representative must submit the required power-of-attorney form. Rights may be restricted where permitted by law, and deletion cannot be requested when another law requires the information to be collected or retained. The Company may verify the identity and authority of the person making a request.

For product and technical inquiries, the Company may process the following information: first name, last name, email address, company or organization, department, and telephone number.

When personal information is no longer required because the retention period has expired or the processing purpose has been fulfilled, the Company destroys it without undue delay. If another law requires continued retention, the information is moved to a separate database or stored separately. Electronic records are destroyed so that they cannot be restored, and paper records are shredded or incinerated after approval by the privacy officer.

The Company destroys information belonging to users who have not used the service for one year, unless another law requires a longer retention period. Where required, the Company notifies the user by an available method, such as email or text message, at least 30 days before destruction, stating the scheduled date and the information to be destroyed.

The Company maintains an internal privacy management plan, limits and trains personnel who handle personal information, controls access to relevant systems, retains and protects access logs, encrypts personal information and important data, operates security software and monitoring measures against hacking and malware, and controls physical access to facilities where personal information systems are located.

The Company uses cookies to store and retrieve usage information. Cookies are small data files sent by the server and may be stored on the user’s device. They are used to understand visit history and secure connection status, identify errors, and prevent misuse. Users can refuse cookies through their browser settings; however, some services may not function properly when cookies are disabled.

• Internet Explorer: Tools → Internet Options → Privacy
• Chrome: Settings → Privacy and Security → Cookies and other site data

The Company does not collect, use, or provide behavioral information for online personalized advertising.

The Company designates the following personnel to protect personal information and handle related inquiries and complaints.

Requests under Article 35 of the Korean Personal Information Protection Act may be submitted to the Company’s Privacy Office at 043-218-0242 or iprism@daum.net. The Company will make reasonable efforts to process requests promptly.

For consultation or remedies concerning a privacy infringement, data subjects may contact the following independent authorities:

• Personal Information Infringement Report Center: privacy.kisa.or.kr / 118
• Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
• Supreme Prosecutors’ Office: www.spo.go.kr / 1301
• Korean National Police Agency: ecrm.cyber.go.kr / 182

This policy took effect on October 1, 2022. Additions, deletions, or revisions resulting from changes in laws, policies, or security technologies will be announced on the website.