Exicon Co., Ltd. (hereinafter referred to as the “Company”) complies with the provisions of the Personal Information Protection Act and related laws to protect the freedom and rights of information subjects, lawfully processes and safely manages personal information. 

Accordingly, in accordance with Article 30 of the Personal Information Protection Act, in order to inform information subjects of the procedures and standards for the processing and protection of personal information and to promptly and smoothly handle complaints related thereto, we have established the personal information processing policy as follows. Established and disclosed

Article 1 Purpose of processing personal information

The company processes personal information for the following purposes.

The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Civil complaint processing

Personal information is processed for the purposes of verifying the identity of the complainant, confirming complaints, contacting and notifying for factual investigation, and notifying processing results.

2. Provision of information subject rights guarantee service

The company processes personal information collected to provide answers to inquiries made by the information subject regarding personal information, deliver results of requests, and secure a smooth communication path between users and the company.

Article 2 Personal information items to be processed, processing and retention period

① The company collects and uses personal information to the minimum extent necessary to provide it.

② 2 The company processes and retains personal information within the personal information retention and use period pursuant to the law or the personal information retention and use period agreed upon when collecting personal information from the information subject.

Article 3 Entrustment of Personal Information Processing

To ensure smooth personal information processing, the company entrusts personal information processing tasks as follows.

The company manages and supervises personal information to be safely processed by the entrusted trustee, and to be retained and used in accordance with the company's retention period policy.

In accordance with Article 26 of the Personal Information Protection Act, the company stipulates in documents such as contracts the prohibition of processing personal information for purposes other than the purpose of performing consignment work, technical and physical protection measures, restrictions on re-entrustment, management and supervision of trustees, and liability issues such as compensation for damages. , supervises whether the trustee handles personal information securely.

1. Website operation and management

- Entrusted person: Giant Soft Co., Ltd.

- Address of consignee: 775, Gyeongin-ro, Yeongdeungpo-gu, Seoul, 3-507 (Ace High Tech City Building 3 Room 507)

- Contents of entrusted work: Exicon Co., Ltd. website operation work

- Retention and use period: Upon termination of consignment contract (period: 1 year)

- Entrusted Department: Smart IT Team

Article 4 Matters concerning provision of personal information to third parties

The ‘Company’ does not provide information to third parties other than for the purpose of use.

Article 5 Personal information destruction procedures and methods

① When personal information becomes unnecessary, such as when the personal information retention period has passed or the purpose of processing has been achieved, the company destroys the personal information without delay.

② In cases where personal information must continue to be preserved pursuant to other laws and regulations despite the expiration of the personal information retention period agreed upon by the information subject or the purpose of processing has been achieved, the personal information shall be transferred to a separate database (DB) or storage location changed. Save it differently.

③ The procedures and methods for destroying personal information are as follows.

1. Destruction procedure 

The company selects the personal information that requires destruction and destroys the personal information with the approval of the company's personal information protection manager. 

2. Method of destruction 

The company destroys personal information recorded and stored in the form of electronic files so that the records cannot be reproduced, and personal information recorded and stored in  paper documents is destroyed by shredding or incineration.

Article 6 Measures to ensure the safety of personal information

① The company is taking the following measures to ensure the safety of personal information. 

1. Management measures: regular employee training 

2. Technical measures: Management of access rights to personal information processing system, installation of access control system, installation and update of security program 

3. Physical measures: Access control to computer rooms, data storage rooms, etc.

In order to ensure the safety of personal information, the company is carrying out the following activities in addition to matters stipulated by law.

- Acquired information security certification: ISO/IEC 27001

Article 7 Rights, obligations and methods of exercise of information subjects and legal representatives

① The information subject may exercise his/her rights (hereinafter referred to as “exercise of rights”) to the company at any time, such as requesting viewing, correction, deletion, suspension of processing and withdrawal of personal information, refusal of automated decisions, or request for explanation. 

※ Requests to view personal information regarding children under the age of 14 must be made directly by the legal representative. Information subjects who are minors over the age of 14 may exercise their rights regarding the personal information of the information subject themselves or through their legal representative. It may be possible.

② Rights can be exercised against the company through writing, e-mail, facsimile (fax), etc. in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the company will take action without delay.

③ Rights may be exercised through an agent, such as the information subject's legal representative or a person authorized to do so. In this case, you must submit a power of attorney in the form of Appendix No. 11 of the “Notice on Personal Information Processing Methods.”

④ The right of the information subject to request suspension of viewing and processing of personal information may be limited by Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.

⑤ If the personal information is specified as a collection object in other laws, deletion of the personal information cannot be requested. 

⑥ The company confirms whether the person exercising the right is the person himself or a legitimate agent.

⑦ The company may exercise its rights to the departments below. The company will strive to ensure that the exercise of the rights of information subjects is processed promptly.

▶ Request reception and processing department for personal information viewing, etc.

Address: Exicon Co., Ltd., 28, Pangyo-ro 255beon-gil, Bundang-gu, Seongnam-si, Gyeonggi-do (Sampyeong-dong, DHK Solution Building 7F)

Contact: (Tel) 031-639-9154, (Email) swyoo@exicon.co.kr, (FAX) 031-639-9160

Article 8 Matters concerning the installation, operation and refusal of automatic personal information collection devices

The company does not use ‘cookies’ to store and frequently retrieve user usage information.

Article 9 Personal information protection manager

① The company is responsible for overall management of personal information processing, and has designated a personal information protection manager as follows to handle complaints and provide relief for damage from information subjects related to personal information processing. 

② The information subject may inquire about all personal information protection-related inquiries, complaint handling, damage relief, etc. that arise while using the company's services to the personal information protection manager and responsible department. The company will respond and process inquiries from information subjects without delay.

▶ Personal information protection officer 

- Name: Yoo Sang-won

- Position: personnel affairs supervisor

- Contact: (Tel) 031-639-9154, (Email) swyoo@exicon.co.kr, (FAX) 031-639-9160

※ You will be connected to the personal information protection department.

Article 10 Request to view personal information

The information subject may request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the department below. The company will strive to promptly process the information subject's request to view personal information.

▶ Personal information access request reception and processing department

- Name: Yoo Sang-won

- Position: personnel affairs supervisor

- Contact: (Tel) 031-639-9154, (Email) swyoo@exicon.co.kr, (FAX) 031-639-9160

Article 11 Relief for infringement of rights and interests 

① In order to receive relief from personal information infringement, the information subject may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency Personal Information Infringement Reporting Center, etc. For other personal information infringement reports and consultations, please contact the organizations below. 

1. Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr) 

2. Personal Information Infringement Reporting Center: (without area code) 118 (privacy.kisa.or.kr) 

3. Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr) 

4. National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)

② Dispositions made by the head of a public institution in response to requests pursuant to the provisions of Article 35 (view of personal information), Article 36 (correction/deletion of personal information), and Article 37 (suspension of processing of personal information, etc.) of the Personal Information Protection Act. Or, a person whose rights or interests have been infringed due to an omission may request an administrative trial in accordance with the provisions of the Administrative Appeals Act.

※ For more information about administrative trials, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).

Article 12 Changes to personal information processing policy

① This personal information processing policy is effective from June 19, 2024. 

② You can check the previous personal information processing policy below. - Apply 2021-09-14