In accordance with Article 30 of the Personal Information Protection Act, <Samkwang Co., Ltd.> establishes and discloses personal information processing guidelines as follows to protect personal information of information subjects (customers) and handle their complaints quickly and smoothly.

1. Purpose of processing personal information

<Samkwang Co., Ltd.> processes personal information for the following purposes and shall not use it for any purpose other than the following.

- Job application information: Collect information about job applicants and manage recruitment

- ethical management reporting center: Identification of the person who reports corruption, abuse of power, etc. and post-processing

2. Processing and retention period of personal information

① <Samkwang Co., Ltd.> processes and retains personal information within the personal information retention and use period agreed upon when collecting personal information from the information subject or personal information retention and use period according to laws and regulations.

② Specific personal information processing and retention periods are as follows.

- The company uses the personal information until its purpose is achieved and keep the personal information and answers for five (5) years for customer management (immediate deletion upon request)

3. Provision of personal information to third parties

<Samkwang Co., Ltd.> does not provide personal information to third parties unless it falls under Article 17 of the Personal Information Protection Act, such as the separate consent of the data subject or special provisions of the law.

The company's website does not use your personal information or provide it to others or other companies or institutions beyond the scope notified by "Personal Information Collection and Use Purpose" in any case, except with your consent or in accordance with relevant laws. In the case of providing or sharing your personal information, the company will inform you about the recipient of the information, business type, provided or shared personal information, and the purpose of providing or sharing personal information individually by e-mail or in writing to obtain your consent in advance.

4. Consigning of personal information processing

① <Samkwang Co., Ltd.> outsources personal information processing as follows for smooth personal information processing.

- Consigned operator: GNGnet
- Details of consigned work: Website and system management
- Consigned personal information items: Recruitment related information

② In accordance with Article 25 of the Personal Information Protection Act, <Samkwang Co., Ltd.> stipulates the prohibition of processing personal information, restriction of re-consignment, management, supervision, and responsibility of the consignee in the document, and supervises whether the consignee handles personal information safely.

5. Rights, obligations, and exercise methods of information subjects and legal representatives

The information subject can exercise the following personal information protection rights at any time with respect to <Samkwang Co., Ltd.>.

Users and their legal representatives can view or correct registered users' personal information at any time.
If users and their legal representatives request to view, correct, or delete their personal information by phone or e-mail to the personal information manager, the company will act without delay after going through the identification process.
If users request correction of an error in personal information, the personal information will not be used or provided until the correction is completed. Also, if the wrong personal information has already been provided to a third party, the company will notify the third party of the result of the correction without delay so that the correction can be made.
The company handles personal information that has been canceled or deleted at the request of users or their legal representatives in accordance with the “period of retention and use of personal information collected by the company” so that is not viewed or used for any other purpose.

6. Personal information items processed

<Samkwang Co., Ltd.> processes the following personal information items.

- Name, date of birth, contact information, e-mail, address, educational background, experience, military service and other matters, qualifications and licenses, educational history, personal competency matters, family matters

7. Destruction of personal information

① <Samkwang Co., Ltd.> destroys the personal information without delay when personal information becomes unnecessary, such as the lapse of the personal information retention period and the achievement of the purpose of processing the personal information.

② <Samkwang Co., Ltd.> destroys personal information in the following ways.

1) Destruction procedure
Information entered for membership registration, etc. is moved to a separate DB after the purpose is achieved (separate filing cabinet in the case of paper) and stored for a certain period of time according to internal policies and information protection reasons according to other relevant laws (refer to retention and use period) before being destroyed later. The personal information moved to a separate DB is not used for any purpose other than being retained unless it is under the law.

2) Destruction method
- Personal information stored in electronic file format will be deleted using a technical method that cannot reproduce the record.
- Personal information printed on paper is shredded with a shredder or destroyed through incineration.

8. Measures to ensure the safety of personal information

<Samkwang Co., Ltd.> is taking the following measures to ensure the safety of personal information.

1) Technical measures
① Your personal information is protected by a separate security function by encrypting files and transmission data or using the file lock function (Lock).
② The company website uses vaccine programs to prevent damage caused by computer viruses. Vaccine programs are updated regularly, and in the event of a sudden virus outbreak, the vaccine is provided as soon as it is released to prevent infringement of personal information.
③ In preparation for external intrusions such as hacking, each server uses an intrusion prevention system and a vulnerability analysis system to ensure security.

2) Administrative measures
① The company website limits access to your personal information to a minimum number of people. The minimum number of people is as follows.
- Persons in charge of personal information management, such as the person in charge of personal information protection and management
- Others who need to handle personal information for business
② The company's website is not responsible for the user's personal mistakes or for any incidents that occur due to the basic risk of the Internet.

9. Matters concerning the installation, operation, and rejection of automatic personal information collection devices

① <Samkwang Co., Ltd.> uses 'cookies' to store and retrieve usage information from time to time to provide customized services to users.

② Cookies are a small amount of information that the server (http) used to operate the website sends to the user's computer browser and is also stored on the hard disk of the user's PC computer.

A. Purpose of use of cookies: They are used to provide optimized information to users by identifying the types of visits and usage of each service and website visited by the user, popular search terms, and whether or not secure access is available.
B. Installation, operation, and rejection of cookies: You can refuse the storage of cookies by setting options in Tools>Internet Options>Personal Information menu at the top of the web browser.
C. If you refuse the storage of cookies, you may experience difficulties in using customized services.

10. Person in charge of personal information management

<Samkwang Co., Ltd.> designates a manager as follows in accordance with the Personal Information Protection Guidelines (Article 22 Paragraph 1) enforced by the Ministry of Information and Communication.

11. Changes to the Privacy Policy

This personal information processing policy will be applied from December 1, 2021.