In accordance with Article 30 of the Personal Information Protection Act, Changsin C&T shall protect the personal information of the data subject and promptly file related grievances In order to facilitate processing, we establish and disclose a personal information processing policy as follows.

○ This personal information processing policy will take effect from May 1, 2024.

Article 1 (Purpose of Processing Personal Information) Changsin C&T processes personal information for the following purposes. Personal information being processed shall not be used for any purpose other than the following purposes, and where the purpose of use is changed, pursuant to Article 18 of the Personal Information Protection Act We will take necessary measures, such as obtaining separate consent.

1. Register and manage website membership Confirmation of membership intention, identification and certification according to the provision of membership services, maintenance and management of membership status, prevention of fraudulent use of services, Personal information is processed for various notifications and notifications.

2. Providing goods or services Process personal information for the purpose of providing services, providing content, and providing customized services.

3. Use in marketing and advertising Process personal information for the purpose of developing new services (products) and providing customized services, providing events and advertising information, and providing opportunities to participate.

Article 2 (Processing and Retaining Period of Personal Information)
① Changsin C&T obtained consent when holding and using personal information or collecting personal information from the data subject according to laws and regulations Process and retain personal information within the retention and use period of personal information.

② The processing and retention periods of each personal information are as follows.

1. Register and manage homepage membership Personal information related to registration and management of website membership is collected.Hold for the above purpose of use up to three years from the date of consent for use.It will be used.
Grounds for possession: For consumer complaints or disputes
Related Acts and subordinate statutes: records on consumer complaints or disputes (3 years)

2. Use in marketing and advertising Collect personal information related to marketing and advertising.Hold for the above purpose of use up to one year from the date of consent for use.It will be used.
Holding grounds: For display/advertisement
Related statutes: Marking/Advertising records: 6 months

3. Providing goods or services Collect personal information related to the provision of goods or services.Hold for the above purpose of use up to three years from the date of consent for use.It will be used.
Grounds for possession: For consumer complaints or disputes
Related Acts and subordinate statutes: records on consumer complaints or disputes (3 years)

Article 3 (Rights and obligations of data subjects and legal representatives, and methods of exercising them)
① The data subject may exercise the right to view, correct, delete, and suspend processing of personal information to Changsin C&T at any time.

② The exercise of the rights under paragraph (1) shall be made in writing, e-mail, in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act to Changsin C&T, You can do it through FAX, and Changsin C&T will take action without delay.

③ The exercise of rights under paragraph 1 may be carried out through an agent, such as a legal representative of the data subject or a person entrusted. In this case, "Notice on how to process personal information (No. 2020-7)" You must submit a power of attorney in attached Form 11.

④ Requests to view and suspend processing of personal information may limit the rights of the data subject under Articles 35 (4) and 37 (2) of the Personal Information Protection Act.

⑤ A request for correction and deletion of personal information cannot be requested to be deleted if the personal information is specified as a collection target in other laws.

⑥ Changsin C&T requests permission to view, request correction and deletion, access upon request for suspension of processing, etc. in accordance with the rights of the data subject Verify that the person who made the request is himself or a legitimate representative.

Article 4 (Preparation of Items of Personal Information to be Processed)
① Changsin C&T handles the following personal information items.

1. Provision of goods or services
Required Items: PhoneNumber
Select items: Gender, date of birth, name, data for job search (career, place of residence, educational background, email, nationality, profile photo, visa, topic, resume file data)

Article 5 (Destruction of Personal Information)
① Changsin C&T will destroy the personal information without delay when it becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the purpose of processing.

② In accordance with other statutes, the period of retention of personal information agreed by the data subject has elapsed or the purpose of processing has been achieved If you need to keep your personal information, move it to a separate database (DB) or keep it in a different storage location.

③ The procedure and method of destroying personal information are as follows.
1. Destruction procedure Changsin C&T selects personal information that has been destroyed and destroys personal information with the approval of the person in charge of personal information protection of Changsin C&T.

2. How to destroy it Information in the form of electronic files uses a technical method that does not allow records to be played back

Article 6 (Measures to ensure the safety of personal information)
Changshin C&T is taking the following measures to ensure the safety of personal information.

1. Minimization and training of personnel handling personal information We are implementing measures to manage personal information by designating employees who handle personal information and minimizing them by limiting them to those in charge.

2. Technical countermeasures against hacking, etc Changsin C&T installed security programs to prevent leakage and damage of personal information by hacking or computer viruses Periodic updates and inspections are conducted, systems are installed in areas with controlled access from outside, and technical and physical monitoring and blocking.

3. Encrypting Personal Information The user's personal information is encrypted, stored, and managed, so only the person can know it Critical data uses separate security features, such as encrypting file and transfer data or using file lock functions.

4. Storage of access records and prevention of forgery Records accessing the personal information processing system shall be kept and managed for at least one year; Provided, That personal information shall be added to more than 50,000 data subjects, In the case of processing unique identification or sensitive information, it is stored and managed for more than two years. In addition, we use security features to prevent forgery, theft, and loss of access records.

5. Restricting access to personal information To control access to personal information by granting, changing, and canceling access to database systems that process personal information We are taking the necessary measures and using the intrusion prevention system to control unauthorized access from outside.

Article 7 (Matters concerning the installation, operation, and refusal of automatic personal information collection devices) ① Changsin C&T uses "cookie," which stores usage information and calls it from time to time, to provide individual customized services to users.

② A cookie is a small amount of information that the server (http) used to run the website sends to your computer browser It can also be stored on a hard disk on a user's PC computer. A. Purpose of Use of Cookies: Visits and usage types for each service and website visited by the user, popular search terms, It is used to provide optimized information to users by identifying whether they have secure access or not. B. Installation, operation, and rejection of cookies: You can refuse to save cookies by setting options in Tools > Internet Options > Privacy Menu at the top of your web browser. C. Refusing to save cookies may cause difficulty in using customized services.

Article 8 (Personal Information Protection Officer) ① Changsin C&T is responsible for the processing of personal information, handling complaints from data subjects related to the processing of personal information, and For damage relief, the person in charge of personal information protection is designated as follows.

▶ a person information protection officer Position: Team leader Contact: master@giwacorp.com,

Article 9 (Processing of pseudonymized information) Changsin C&T processes pseudonym information for the following purposes.

▶ Purpose of processing pseudonym information - To provide anonymity

▶ Processing and retention period of pseudonym information - It is created using random integers and strings and stored for 3 years after withdrawal

▶ Items of personal information processed by pseudonyms - Name

Article 10 (Request for Access to Personal Information) The data subject may request the following departments to view personal information pursuant to Article 35 of the Personal Information Protection Act. Changsin C&T will make efforts to expedite the data subject's request to view personal information.

▶ Department for receiving and processing requests for access to personal information Contact: master@giwacorp.com

Article 11 (Method of remedy for infringement of rights) In order to receive relief from personal information infringement, the data subject is the Personal Information Dispute Mediation Committee and the Korea Internet Promotion Agency You can apply for dispute resolution or counseling at the Personal Information Infringement Reporting Center. In addition, please contact the following institution for reporting and consulting other personal information infringement. 1. Personal Information Dispute Mediation Committee: (without country code) 1833-6972 (www.kopico.go.kr ) 2. Personal Information Infringement Reporting Center: (without country code) 118 (privacy.kisa.or.kr ) 3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr ) 4. National Police Agency: 182 (ecrm.cyber.go.kr )

Article 35 of the Personal Information Protection Act (reading personal information), Article 36 (correction and deletion of personal information), According to the provisions of Article 37 (Suspension of Processing of Personal Information, etc.) A person who has been infringed upon by rights or interests due to disposition or omission made by the head of a public institution in response to a request You can request an administrative trial as prescribed by the Administrative Trial Act.

※ For more information on administrative trials, please refer to the website of the Central Administrative Trial Committee (www.simpan.go.kr ).

Article 12 (Change of Personal Information Processing Policy)

① This privacy policy will take effect from September 1, 2023.