1. General rule

① Personal information refers to information regarding a living individual that can identify an individual via name, resident registration number, and image (including information that can be easily combined with other information to identify a specific individual even if a specific individual cannot be identified by that information alone).
② User refers to a person who uses information and communication services provided by information and communication service providers.
③ Information subject refers to a person who can be identified by the processed information and becomes the subject of the information.
④ The company is taking measures to enable users and information subjects to view the Privacy Policy easily at any time by disclosing it on the first screen of the company's internet homepage.
⑤ When the company revises the Privacy Policy, it assigns a version number so that the revised information can be easily recognized.

2. Purpose of collection, use, and processing of personal information

① Related to LIG Sinmungo
- Response to inquiries, suggestions, compliments, complaints, etc.

② Recruitment screening
- Identification of applicants, real name verification, contact with applicants, etc.

③ Retention/Termination of Employment
- Personnel management, certificate issuance, etc.

3. Items of personal information collected and methods of collection

① Related to LIG Sinmungo
- Collection items: name, contact information (optional), mobile phone number, e-mail address
- Collection method: Company Internet homepage (LIG Sinmungo)
- Access logs, cookies, and access IP information may be collected in the process of using the service.

② Recruitment screening
- Collection items: name, date of birth, sex, photo, contact information, address, e-mail, educational background, military service, veteran status, language proficiency, qualifications, career information, etc.
- Collection method: E-mail of recruitment coordinator
- Disability status is collected and used with consent obtained separately.

③ Employment retention/management of retired worker career certificate
- Collection items: name, resident registration number, sex, photo, contact information, address, e-mail, educational background, military service, veteran status, language proficiency, qualifications, work experience, information for major insurance coverage such as national pension for workers, employment insurance, health insurance, and industrial accident insurance and for tax withholding, etc.
- Collection method: Personnel management system
- Disability status is collected and used with consent obtained separately.

4. Period of processing, retention, and use of personal information

① In principle, personal information is destroyed when the purpose of collection or processing is achieved.

② However, if personal information needs to be preserved in accordance with the relevant laws below, the company stores and manages the personal information separately from other personal information for a certain period set by the relevant laws and regulations.
- Article 6 of the Act on Consumer Protection in Electronic Commerce, etc.
Records on display and advertising: 6 months
Records on contract or withdrawal of subscription: 5 years
Records on payment and supply of goods: 5 years
Records on consumer complaints or dispute resolution: 3 years

5. Procedure and methods of destruction of personal information

① Destruction procedure
Personal information shall be destroyed according to the company's internal policy after the purpose is achieved. However, if the personal information is to be preserved for a certain period according to the related laws, it shall be destroyed after the corresponding retention period has passed.

② Destruction method
For written personal information, it is destroyed by shredding with a shredding machine or by incineration, and personal information in the form of an electronic file is deleted using dedicated device equipment or is formatted or overwritten to prevent data from being restored.

6. Providing personal information to third parties

The company that provides personal information to third parties uses personal information within the scope notified under “Purpose of Collection, Use, and Processing of Personal Information”, and does not use it beyond said scope or provide it to third parties. However, exceptions apply for the following cases.
- Where obtaining separate consent from the information subject
- Where there are special provisions in the law, or it is unavoidable for compliance with statutory obligations
- Where personal information is provided in a form that cannot identify a specific individual as it is necessary for the purpose of statistical preparation and academic research, etc.

7. Consigned processing of personal information

① The company may entrust the collection, handling, and management of personal information to improve the service.
- When entrusting the processing of personal information, we will continue to post the contents of the consigned work and the person who is entrusted with the handling of personal information on the company's Internet homepage.
- When entrusting the processing of personal information, we will clearly stipulate the service provider's strict observance of the privacy-related instructions through a consignment contract, keeping confidentiality of personal information, prohibition of provision of personal information to third parties, responsibility in case of an accident, consignment period, and the return or destruction of personal information after processing, and will preserve the contract details in writing or electronically.

② Contents of the task of entrusting the handling of personal information and the trustee
- Contents of task: collection of personal information through the company's Internet homepage, storage of collected personal information, and sending of e-mail
- Trustee: LIG System Co., Ltd.

8. Rights and obligations of users, information subjects, and their legal representatives, and methods of exercising them

① Users, information subjects, and their legal representatives may request access to view, correct, delete, and suspend the processing of personal information of themselves or those under the age of 14 that is processed by the company. However, the company may reject or limit the above requests in the following cases.
- Where there are special provisions in the law or where it is unavoidable for compliance with statutory obligations
- If there is a risk of harm to the life or body of another person or unfair infringement on the property or other interests of another person

② Users and information subjects have the right to protect their personal information, as well as the obligation to protect themselves and to not infringe upon the information of others.

③ If users and information subjects seeking to view personal information, etc. contact the person responsible for personal information management by writing, Tel, or e-mail, we will take the necessary measures immediately.

9. Matters concerning the installation, operation, and refusal of the automatic personal information collection device

The company operates cookies that frequently store and retrieve information from users and information subjects.

① Purpose of use of cookies, etc.
By analyzing the frequency of access and visit times of users of LIG Sinmungo, we identify the user's tastes and interests and track their visit pathways.

② How to refuse cookie settings, etc.
By setting the options in your web browser, you can accept all cookies, check each time a cookie is saved, or refuse to save all cookies.
Example of settings: Tools at top of web browser → Internet Options → Personal Information → Settings
However, if you refuse to install cookies, there may be difficulties in provision of the LIG Sinmungo service.

10. Measures to ensure the safety of personal information

① Technical and physical measures
In handling and processing personal information, the company takes the following technical and physical measures to prevent personal information from being lost, stolen, leaked, tampered, or damaged.
- Personal information is protected by a password, and stored files and transmitted data are encrypted.
- The company takes measures to prevent damage caused by computer viruses using a vaccine program, and continuously updates the vaccine program.
- The company is fully committed to security by applying an intrusion prevention system and vulnerability analysis system for each server in preparation against external intrusion such as hacking.
- The company keeps records of access to the personal information processing system and uses security functions to prevent forging or tampering of the records.
- For safe storage and management of personal information, the company prepares storage facilities and applies locks in the storage facilities.
– The company controls access by setting the computer room and data storage room as special protection areas.

② Administrative measures
- The company limits access to personal information to a minimum number of individuals. Those included in the minimum number of individuals are as follows.
ㆍThe persons who performs the personal information management affairs, such as the personal information protection manager and coordinator
ㆍA person who must inevitably handle personal information for other duties
- We ask the employees who handle personal information to acquire new security technologies and conduct regular in-house training and external consignment for personal information protection duties.
- We have internal procedures to prevent information leakage by people requiring the security pledge for all executives and employees upon entering the company, and to audit the implementation of the Privacy Policy and the compliance of employees.
- Transfer of duties for employees handling personal information is conducted thoroughly while security is maintained, and responsibility is clarified regarding personal information accidents after entering and leaving the company.
- The company has established and implemented an internal management plan for the safe handling of personal information.

11. Personal information protection manager and coordinator

① In order to protect personal information and to handle inquiries and complaints related to personal information, the company designates the personal information protection manager and coordinator as follows.
- Personal information protection manager
Choi Yong-jun, CEO of LIG Co., Ltd. / T. 02-6900-1931/ E-Mail : yongjoon.choi@lig.kr / Fax : 02-6900-1991
- Personal information protection coordinator
Yeo Jin-soo, Manager of LIG Management Support Team / T. 02-6900-1943 / E-Mail : jinsoo.yeo@lig.kr / Fax : 02-6900-1991

- Address to fill in when making inquiries by mail: 2nd floor, 524, Bongeunsa-ro, Gangnam-gu, Seoul
- Telephone consultation is only available from 10:00 to 18:00 on weekdays.
– We will answer inquiries by e-mail, fax, or mail diligently within 7 business days following receipt.

② If you require consultation regarding other personal information, you can contact the Personal Information Infringement Report Center.
[Personal Information Infringement Report Center]
- Tel: 118
- URL : http://www.privacy.kisa.or.kr