Cospec Innolab

Cospec InnoLab Co., Ltd. (hereinafter referred to as the “Company”) values the personal information of information subjects and handles personal information lawfully and safely in compliance with the Personal Information Protection Act and other applicable laws.

The Company establishes and discloses this Personal Information Processing Policy to notify information subjects of the procedures and standards for processing personal information, as well as measures for the protection of their rights, in accordance with the Personal Information Protection Act and related laws.

This policy may be revised due to changes in relevant laws or company policy, and any changes will be announced on the company website.

In principle, the Company does not collect personally identifiable information such as names, emails, or contact information during the use of its website.

However, in the following cases, personal information may exceptionally be collected, and it will be used strictly within the scope of the stated purpose.

1. Information automatically collected when visiting the website is used solely for ensuring the stability of service operation and for security log analysis.
2. The Company’s inquiry bulletin board (1:1 secret board) operates with an alias and a four-digit password input method and does not require the entry of names or contact information. However, if a user voluntarily includes personal information (name, email, phone number, etc.) in the post content, such information will be processed temporarily only for responding to inquiries and internal review.

The Company may process the following information in the course of website operation.

1) Automatically collected items

• Collected items: IP address, access date and time, server access records, service usage records
• Collection method: automatically collected through server logs when accessing the website
• Usage: system security, service quality improvement and statistical analysis

Voluntary input information on the inquiry bulletin board (exceptional collection)

• Collected items: name, email address, phone number, etc. written by the user in the post
• Usage: responding to inquiries and replying with the processing results

The Company shall destroy collected personal information without delay after the purpose of processing has been achieved.

Exceptionally collected personal information will be retained or deleted based on the following criteria:

※ If posts include excessive or inappropriate personal information, the Company may delete or de-identify the information without prior notice.

In principle, the Company shall immediately destroy personal information after the purpose of its collection and use has been fulfilled, using the following methods:

1. Printed personal information on paper: shredded or incinerated for disposal
2. Personal information stored in electronic file format: permanently deleted using technical methods that make records unrecoverable

The Company implements administrative, technical and physical measures necessary to ensure the safety of personal information and prevent its loss, theft, leakage, alteration, or damage.

1. Establishment and implementation of an internal management plan for the secure processing of personal information: the “Internal Management Plan for Personal Information” is established and implemented based on the “Personal Information Safety Measures Standard.”
2. Minimization and training of personal information handlers: the number of designated personal information handlers is minimized, and regular training is conducted.
3. Installation, periodic inspection and updating of security programs: security programs are installed, periodically updated and inspected to prevent leakage or damage of personal information due to hacking, computer viruses, etc.

Users have the right to request access, correction, deletion or suspension of processing of their personal information related to its protection, and the Company shall handle such requests without delay. Such rights may be exercised in writing, by phone, email, fax, etc., and may also be exercised through an agent such as the user’s legal representative or a delegated person.

If the user requests correction or deletion of personal information due to errors, the Company will not use or provide the corresponding personal information to a third party until the correction or deletion is completed.

Users and legal representatives have not only the right to have their personal information protected but also the obligation to protect their own personal information and not to infringe on others’ personal information. Users and legal representatives are advised to pay attention to the protection of their own and others’ personal information in their posts.

If they fail to fulfill these obligations by infringing or damaging the personal information of others, they may be punished according to relevant laws.

※ Since the 1:1 secret board is operated on a non-member basis, there may be limitations on exercising rights if the identity of the author cannot be verified.

※ Users must not post or infringe upon others’ personal information, and if they do, they may be held civilly or criminally liable under the Personal Information Protection Act or other relevant laws.

The Company designates the following Personal Information Protection Officer to handle user complaints and exercise the rights related to personal information processing:

1) Personal Information Protection Officer

• Name: Hyun-Ku Kang
• Position: Director
• Contact: hgkang@inno-lab.co.kr / (Tel) 070-4800-5034 / (Fax) 02-6008-4956

2) Personal Information Protection Department

• Person in charge: Chul-Ku Kim
• Department name: Management Support Team
• Contact: modudl@inno-lab.co.kr / (Tel) 070-4800-0475 / (Fax) 02-6008-4956

Information subjects may contact the following organizations for dispute resolution, consultation, or damage relief due to infringement of personal information. If you need more detailed assistance, please contact these organizations:

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
• National Police Agency: 182 (ecrm.cyber.go.kr)