AIONCLOUD Privacy Policy

① The company utilizes the gathered personal information for the following purposes.

• 1. Execution of the contract for service provision: Provision of services such as content provision and prevention of malicious code intrusion.
• 2. Member management: Membership service use and identity verification, personal identification, prevention of illegal usage by wrong members and unauthorized use, confirmation of intent to join, complaint handling, and delivering information
• 3. Utilization for marketing and advertising: development and specialization of new services (products), delivery of advertising information such as events, provision of services according to demographic characteristics and advertisements, identification of access frequency, or utilization of statistics on member service use.

① The company, as a general rule, handles the personal data of the information subject within the range specified for collection purposes and use. Accordingly, the following cases will be except that the information is not processed beyond the scope of its original purpose or provided to a third party without the data subject's prior consent. However, subparagraphs 5 through 8 are limited to public associations.

• 1. In case of obtaining separate consent from the information subject
• 2. In case there are special provisions in other laws
• 3. If the information subject or their legal representatives cannot express their intention, or the prior consent cannot be obtained due to an unknown address when deemed necessary for the immediate life, body, or property of the information subject or a third party.
• 4. When providing personal information in a form that cannot identify a specific individual as required for statistical purposes and academic research
• 5. If personal information is not an intention for purposes other than the intended purpose or not provided to a third party, the Protection Committee has deliberated and decided in cases where it is impossible to carry out the duties under the jurisdiction of other laws
• 6. In case it is necessary for the investigating crimes and for maintaining prosecute a case
• 7. In case it is necessary to carry out the judicial affairs of the court
• 8. Where it is necessary for the execution of punishment, probation, and protective disposition

① As a general rule, the company destroys personal information after achieving the purpose of personal information processing without delay. However, this may not be the case if demanded to preserve under other laws. The procedures, deadlines, and processes of destruction are as follows.

• 1. Destruction Procedures
• Internal procedures handle unnecessary personal data and information files under the person's responsibility for personal information protection.
• • 1) Destruction of personal data
• • Personal information that has expired will be destroyed without delay from the termination date.
• • 2) Destruction of personal data files
• • When the personal information file becomes unnecessary, like achieving processing of personal data files, the service abolition, or the business termination, the personal information file is destroyed immediately from the date where the processing of the personal data turns unnecessary.
• 2. Destruction method
• • 1) Information in electronic form utilizes a technical method that cannot reproduce records.
• • 2) Personal information printed on paper is shredded with a shredder or destroyed through incineration.
• 3. Separate storage
• • 1) After the retention period has elapsed, it is stored separately through a separate backup procedure if it is necessary to retain it without destroying it by law.

①. At any time, users and their legal representatives may request to inquire, modify, delete, or politicize their registered personal information.

②. Users can inquire, modify and delete (revoke) their personal information at any time via the website.

③. Consider that the member cannot challenge, modify, delete, or request breaking processing of personal information through the website. In that case, the member can exercise their rights by sending the 'Form No. 8 Attachment to the Enforcement Regulations of the Personal Information Protection Act' in writing, e-mail, and fax.

④. Exercise of one's right can be possible through an agent such as a legal representative of the information object or a delegate. When the company gets to exercise one's right, it may request identification, resident registration, and family relationship certificate to confirm whether the member is a legitimate representative.

⑤. The company regulates personal information that has been canceled or deleted from users' request or their legal representatives as stipulated in "Chapter 2 Personal Information Processing and Retention Period". So, it prevents viewing or uses for other purposes.

①. The personal information subject may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, or Korea Internet & Security Agency Personal Information Infringement, and Report Center to alleviate the damage caused by private information infringement.

• 1. Privacy Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)
• 2. Supreme Prosecutors' Office Cyber Investigation Division: (without area code) 1301, privacy@spo.go.kr, (www.spo.go.kr)
• 3. National Police Agency Cyber Security Bureau: (without area code)

① The information subject may file a request for access to personal information under Article 35 of the Personal Information Protection Act to the following departments.

• 1. Receiving and addressing requests for personal information access Department name: Business Management Headquarters Human Resources Education Team Person in charge: Seo Dong-hark, Contact: (Tel: 02-749-0799)