Document

In accordance with Article 30 of the Personal Information Protection Act, IMPIX (hereinafter referred to as the Company) establishes and discloses the following personal information processing guidelines to protect the personal information of information subjects and to promptly and smoothly handle grievances related thereto.

Article 1 (Purpose of Processing Personal Information) Company

1.The Company collects and retains personal information only in accordance with the provisions of laws and regulations and the consent of the information subject.

2. The Company processes personal information for the following purposes. The personal information processed will not be used for any purpose other than the following purposes, and prior consent will be obtained if the purpose of use is changed.

Category	Purpose of collection	Collection items	Retention period	Basis for collection	Method of collection
Our members	Company service provision	[Common to all members] Name, gender, email, phone number, mobile phone number, address, ID, nickname [Our corporate members] Business registration number, company name, company address, representative name, industry, main business activities, capital, annual sales, company classification, company website, company logo, company introduction [Job Matching] Name, date of birth, mobile phone number, telephone number, email address, address, educational background, career history, affiliation, and all other information registered in the resume by the data subject. [Recruitment Information] Eligibility requirements, work location, working conditions, and other recruitment information	3 years, upon withdrawal of membership	Consent of the data subject	Online collection

Article 2 (Provision of Personal Information to Third Parties)

1. The Company shall process the personal information of information subjects only within the scope specified in Article 1 (Purpose of Personal Information Processing) and shall provide personal information to third parties only in cases specified in Article 17 of the Personal Information Protection Act, such as with the consent of the information subject or when specifically stipulated by law.

2. The Company provides personal information to third parties as follows.

Category	Recipient	Purpos of provision	Provided items	Retention period
Our members	Operating agency	Inquiries and service consultation	Name, date of birth, address, mobile phone number, telephone number, educational background, qualifications, career history, desired job type, and all other information registered in the resume by the information subject	3 years, upon withdrawal from membership
	Our corporate members	Provision of talent information for recruitment purposes		3 years, upon withdrawal from membership

Article 3 (Consignment of Personal Information Processing)

1. The Company entrusts the processing of personal information as follows for the smooth handling of personal information.

Category	Trustee	Details of the consignment
IMPIX	Visionmeet Co.	System maintenance

2. In accordance with Article 25 of the Personal Information Protection Act, when entering into a consignment contract, the Company specifies in documents such as contracts the prohibition of processing personal information other than for the purpose of performing consignment work, technical and administrative protection measures, restrictions on re-consignment, management and supervision of the consignee, and responsibilities such as damages, and supervises whether the consignee handles personal information safely.

Article 4 (Rights and Obligations of the Information Subject and Legal Representative and Method of Exercise) 

1. The information subject may exercise the right to access, correct, delete, or suspend the processing of personal information at any time against the Company.

2. The exercise of the rights under Paragraph 1 can be made in writing, e-mail, facsimile transmission (FAX), etc. to the Company in accordance with Article 11 of the Enforcement Rules of the Personal Information Protection Act, and the Company will take action without delay.

3. The exercise of the rights under Paragraph 1 may be made through an agent, such as the legal representative of the information subject or a person who has been delegated. In this case, a power of attorney in the form of Appendix No. 11 to the Enforcement Rules of the Personal Information Protection Act must be submitted.

4. Requests for access to personal information and suspension of processing may limit the rights of the information subject pursuant to Articles 35 and 37 of the Personal Information Protection Act.

5. A request for correction and deletion of personal information cannot be made if the personal information is specified as the subject of collection under other laws.

6. The Company shall verify whether the person making the request for access, correction or deletion, or suspension of processing is the person or his/her legitimate representative in accordance with the rights of the information subject.

Article 5 (Items of Personal Information Processed)

1. The Company processes the following personal information items 

   ■ Homepage membership registration and management

         • Required items: name, gender, email, phone number, mobile phone number, address, ID, nickname

    ■ Homepage corporate membership registration and management

         • Required items: business license number, company name, company address, name of representative, industry, main business, capital, annual sales

    ■ Providing member services such as job matching

         • Required items: name, date of birth, mobile phone number, phone number, email, address, education, license, work history, and all other information registered in the resume by the information subject

    ■ The following personal information items may be automatically generated and collected in the process of using the Internet service.

         • IP address, cookies, MAC address, service usage records, visit records, bad usage records, etc.

Article 6 (Destruction of Personal Information) 

1. The Company shall destroy the personal information without delay when it becomes unnecessary, such as the expiration of the retention period or the achievement of the purpose of processing.

2. If the retention period of personal information agreed to by the information subject has elapsed or the purpose of processing has been achieved, but the personal information must continue to be preserved in accordance with other laws and regulations, the personal information (or personal information file) shall be transferred to a separate database (DB) or preserved in a different storage location.

3. The procedures and methods for destroying personal information are as follows.

    ■ Destruction Procedure

         • The Company shall establish a personal information destruction plan for the personal information (or personal information file) to be destroyed and destroy it.

            The Company selects the personal information (or personal information file) for which the reason for destruction has occurred, and the Company destroys the personal information (or personal information file) with the approval of the person in charge of personal information protection.

    ■ Method of Destruction

         • The Company destroys personal information recorded in the form of electronic files using a method that does not allow the records to be reproduced, and destroys personal information recorded in paper documents by shredding or incineration.

Article 7 (Measures to ensure the safety of personal information) 

1. The Company takes the following measures to ensure the safety of personal information. 

   • Administrative measures: Regular employee training, etc.

   • Technical measures: management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs, and prevention of falsification of access logs and security logs of personal information processing systems.

 

Article 8 (Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)

1. The Company uses 'cookies' that store and retrieve usage information from time to time to provide individualized customized services to users.

2. Cookies are small amounts of information sent to the user's computer browser by the server (http) used to operate the website and are sometimes stored on the hard disk of the user's PC computer.

   • Purpose of use of cookies: Cookies are used to provide optimized information to users by identifying the type of visit and use of each service and website visited by the user, popular search terms, and whether the user has a secure connection. 

   • Installation, operation and rejection of cookies: You can reject the storage of cookies by setting the options in the Tools>Internet Options>Privacy menu at the top of your web browser.

   • If you refuse to save cookies, you may experience difficulties in using customized services.

Article 9 (Personal Information Protection Officer)

1. The Company is responsible for the processing of personal information in general, and appoints a person in charge of personal information protection as follows to handle complaints and damage relief of information subjects related to the processing of personal information.

Privacy officer		Phone number
CEO Lee Sang-ho		02-745-8324

2. The information subject may inquire about all personal information protection-related inquiries, complaints, and damage relief arising from the use of the Company's services to the personal information protection officer and the department in charge.

  The Company will promptly respond to and handle inquiries from information subjects.

Article 10 (Remedies for infringement of rights and interests) 

1. The information subject may contact the following organizations for damage relief, consultation, etc. regarding personal information infringement.

2. The following organizations are separate from the Company, and if you are not satisfied with the results of the Company's own personal information complaint handling, damage relief, or need further assistance, please contact them.

Name of institution	Phone number	Website	Responsibilities
Personal Information Infringement Reporting Center	118	privacy.kisa.or.kr	Reporting personal information infringement, requesting consultation
Personal Information Dispute Resolution Committee	1833-6972	www.kopico.go.kr	Application for personal information dispute mediation, collective dispute mediation (civil resolution)
Cybercrime Investigation Unit, Supreme Prosecutors' Office	02-3480-3573	www.spo.go.kr
Cyber Security Bureau, National Police Agency	182	cyberbureau.police.go.kr

Article 11 (Changes to the Privacy Policy)

1. This Privacy Policy is effective as of March 16, 2020.