Sealon (Hereinafter referred to as “Company”) considers the personal information of the subject, establish and make the < Personal Information Processing Policy>in public to comply with the related acts like ‘Personal Information Protection Act.’

Items of Personal Information Processing Policy

Article 1 General Rule

Article 2 Items and Objectives of Personal Information Processing

Article 3 Terms of Processing and Keeping the Personal Information

Article 4 Destroy of the Personal Information

Article 5 Provision of the Personal Information Processing Policy to Third Party

Article 6 Rights and Obligations of the Subject of Information and Execution Methods

Article 7 Acquiring the Safety on the Personal Information Processing Policy

Article 8 Matters on the Installation, Operation and Rejection of the Automatic Collection Unit for Personal Information Processing Policy

Article 9 Person in Charge of Protecting the Personal Information Processing Policy

Article 10 Changes on the Personal Information Processing Policy Processing Policy

• Article 1 General Rule “Personal Information” is the one on the individuals alive that means the information (Including the information to identity by combining easily with other information in spite that the specific personal cannot be identified with only the corresponding information.) to identify the corresponding individual by means of the name and social security No. The “Subject of Information” is a person who can be identified by the processing information, and it means the people who become the subject of such information. The Company makes to identity easily and always by showing the Personal Information Processing Policy on the first screen of the website. Moreover, in the event of revising the Personal Information Processing Policy Processing Policy, it will be disclosed via website (Or individual notice). For respective business division, the separate Personal Information Processing Policy suitable to the work characteristics may be run. In this case, the Personal Information Processing Policy of the respective business division is applied preferentially and advised to check the Personal Information Processing Policy made in public at the corresponding website.

• Article 2 Points and Objectives of Personal Information Processing The Company processes the personal information within the minimum scope required for service provision.

  Points to be processed

  The points to be collected at the query registration

  Name, company name, e-mail address and phone No

  The points to be collected by automatic creation in the course of website using

  Contact IP address, service use records, contact log, cookie and MAC address

  Objectives of Processing

  User identification, user query respond, petition processing like proposal, complaint and after sales service issues

  Stabilized service operation and quality improvement via analyzing the services for the users like the identification of the contact frequency and service use statistics

• Article 3 Terms of Processing and Keeping the Personal Information The Company destroys immediately the corresponding information once the objectives of collecting and using are achieved. However, the following information is kept for the specified terms by the following reasons. It shall be made by the consent of the subject of the information at the necessity.

  Points to be collected at the query registration

  Terms of keeping: 1 year

  Reasons of keeping : User identification, user’s query respond, petition processing and informing public notice

  Points to be collected at the registration to the Reporting Center

  Terms of keeping: 1 year

  Reasons of keeping : User identification, irregularity reporting and petition processing The points to be collected by automatic creation in the course of website using

  The points to be collected by automatic creation in the course of website using

  Terms of keeping: 6 months

  Reasons of keeping : To identify the contact frequency and service use statistics

• Article 4 Destroy of the Personal Information The Company shall destroy the corresponding personal information immediately when the terms of keeping are expired, achieved the processing objectives and unnecessary for the personal information. In case of keeping the personal information according to the other acts nonetheless the keeping terms are expired and achieved the processing objective, the corresponding personal information is transferred to another database (DB) and moved to other space. The personal information is destroyed as follows;

  The personal information recorded and saved in electronic files is deleted with the technical methods not to reproduce it.

  The personal information recorded and saved in paper document are destroyed by a spy killer or by incinerating

• Article 5 Provision of the Personal Information to Third Party The Company shall use the personal information within the scope of collection and shall not use it beyond such scope, provide and share with any third party. However, the following cases are exceptional.

  In case of having consent from the subject of the information

  In case that special regulations are stipulated in other acts

  In case that the subject of the information or its regal proxy are situated at the conditions of impossibility for expression or impossibility of having pre-consent due to the unknown address, and when those cases are recognized as necessary for the life, body and property of the third party

  In case of providing the personal information in the format of de-identification on specific people for the purposes of statistics and academic study

  In case that such using or provision was evaluated and made in resolution by the Protection Committee as the competent works defined in the acts cannot be performed without using or providing the personal information to the third party

  At the necessities of providing to foreign governments and international agencies to keep the treaty and other international agreements

  At the necessities of criminal investigation, filing and keeping an indictment

  At the necessity of juridical process in the court

  At the necessity of executing the punishment, incarceration and protection process

• Article 6 Rights and Obligations of the Subject of the Information and How to Execute The subject of the information may execute the rights related to the following personal information at any time.

  At the request on viewing the personal information

  At the request of correcting on the errors

  At the request of deletion

  At the request of suspension on processing
  The execution of the rights related to the personal information may be processed against the Company via letter, e-mail and facsimile, and the Company will take action immediately on it.
  At the request of correction and deletion of the personal information by the subject of the information, the Company shall not use and provide the corresponding information till its correction or deletion.
  The execution of the rights may be made via the legal proxy or the person with power of attorney from the subject of the information. In this case, the power of attorney shall be submitted.

• Article 7 Securement on the Personal Information The Company takes the following action to acquire the security on the personal information.

  Administrative action : Internal management plan establishment, execution and regular training to the employees

  Technical action: Installing the access controlling system, making password on the important information, protection against the computer virus by using vaccine programs, personal information transmission security device(SSL) by using code algorithm on the network and operation of the anti-hacking system

• Article 8 Installation, Operation and Rejection of the Personal Information Automatic Collector The Company may operate the ‘cookie’ that saves and finds your information from time to time. A cookie means a small test file to be sent to your browser by the website server, and it is saved into the hard disk in your computer.

  The Company uses the cookie for the following purposes.

  To identify the user’s taste and interest and traces by analyzing the contact frequency and visiting time and etc.

  Target marketing and customized service provision through identifying the degree of involving into the events and visiting frequency.
  o You have a choice on the cookie installation. Accordingly, you may allow, confirm otherwise reject the saving the cookie by setting the option on the web browser.
  Choosing the option on the web browser may allow, confirm or reject the saving of the cookie.
  How to set (For internet explorer): Tool at the top of web browser > Internet option > Personal Information, however, the service provision may be impossible at the rejection on the cookie installation.

• Article 9 Person in Charge of Personal Information
  ProtectionThe Company designates the person in charge and the competent department for personal information protection to protect and process the personal information and petition as follows;

  Person in Charge of Personal Information Protection

  Name: Jung Yeol Kim

  Position: Representative Director

  E-mail: jykim@i-sealon.com

  The subject of the information may make queries on the issues of personal information protection, petition processing and damage rescue to the person in charge and competent department. The Company will answer and process quickly the queries from the subject of the information.

  Contact to the following agencies for reporting or consulting on the infringement of personal information.

  Korea Internet & Security Agency( privacy.kisa.or.kr/118)

  Personal Information Dispute Mediation Committee( www.kopico.go.kr/1833-6972)

  Prosecution Service( www.spo.go.kr/1301)

  Korean National Police Agency Cyber Bureau( cyberbureau.police.go.kr/182)

• Article 10 Changes on the Personal Information Processing Policy This Personal Information Processing Policy shall be applied from January 1, 2023 (The first notice)