SMH Co.,Ltd.

Article 1 General provisions

1. Personal information is information about a living individual, and refers to information that can identify the individual by the member registration information included in the information (Even if the information alone cannot identify a specific individual, including information that can be easily combined with other information for identification).

2. SMH values the protection of customers' personal information and complies with the 『Act on Promotion of Information and Communications Network Utilization and Information Protection』 and 『Personal Information Protection Act』. We notify our customers of the handling of personal information provided by customers through the processing policy.

3. This policy applies to all customers who use all services of SMH, including the SMH website. However, if a separate regulation or policy for each service is notified of contents different from this policy, the regulation or policy takes precedence.

Article 2 Purpose of processing personal information

We process personal information for the following purposes. The processed personal information will not be used for purposes other than the following, and prior consent will be sought when the purpose of use is changed. SMH handles personal information to respond to service inquiries and requests from users and to provide useful information to users.

Article 3 Personal information items and retention period

We collect the minimum personal information required for the purpose of processing personal information, and we collect the minimum personal information for new transactions, proposals for cooperation, issuance of career certificates, reservations for access, and recruitment of talent. Detailed personal information items and collection methods are as follows.

Article 4 Rights and obligations of data subjects and legal representatives and how to exercise them

The information subject can exercise the following rights with respect to SMH.

1. The information subject may exercise the right to view, correct, delete, or stop processing of personal information at any time with respect to SMH.

2. The exercise of rights pursuant to Paragraph 1 can be done in writing, e-mail, or fax (FAX) in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act for SMH, and SMH will take action without delay.

3. The exercise of rights pursuant to Paragraph 1 can be done through an agent, such as a legal representative of the information subject or a person who has been delegated. In this case, you must submit a power of attorney in accordance with Attachment No. 11 of the Enforcement Rules of the Personal Information Protection Act.

4. Requests for viewing and suspension of processing of personal information may be restricted according to Articles 35 (5) and 37 (2) of the Personal Information Protection Act.

5. Requests for correction and deletion of personal information cannot be requested if the personal information is specified as the subject of collection in other laws and regulations.

Article 5 Destruction of personal information

After the purpose of processing personal information is achieved or the retention and use period has elapsed, the personal information is destroyed without delay. The specific destruction procedure and method are as follows.

1. 1. Destruction procedure : Information collected through customer inquiries is processed in a separate DB after the purpose is achieved, stored for a certain period of time, and then destroyed.

2. 2. Destruction method : Personal information printed on paper is shredded with a shredder or destroyed by incineration, and personal information stored in the form of electronic files is deleted using a technical method that cannot reproduce the record.

Article 6 Measures to ensure safety of personal information

In accordance with Article 29 of the Personal Information Protection Act, SMH takes the following technical/managerial and physical measures to ensure safety.

1. 1. Minimization and training of personal information handling staff
The minimum number of staff handling personal information is set, and regular training is conducted for safe handling of personal information.

2. Conducting regular self-audits
Regular self-audits are conducted to ensure safety in relation to personal information processing.

3. Management and training of trustee
To ensure safety in relation to personal information processing, we receive regular reports on the trustee's information processing management, and monitor and check the trustee's self-audit and training.

4. Establishment and execution of internal management plan
We establish and execute the internal management plan for safe handling of personal information.

5. Restriction of access to personal information
Necessary measures are taken to control access to personal information by granting, changing, or canceling access rights to the DB system that processes personal information, and unauthorized access from outside is controlled using an intrusion prevention system.

6. Use of locking device for document security
Documents and auxiliary storage media containing personal information are stored in a safe place with a locking device.

7. Access Control for Unauthorized Persons
A separate physical storage location for storing personal information is established and access control procedures are established and operated.

Article 7 Matters concerning the installation, operation and refusal of automatic personal information collection devices

According to Article 29 of the Personal Information Protection Act, SMH takes the following technical, managerial and physical measures necessary to secure safety.

1. SMH installs and operates cookies, and users can reject them.

2. A cookie is a very small text file sent to your browser by the server used to run the website and stored on your computer's hard disk.

3. Purpose of using cookies
The frequency of access or visit time of members and non-members is analyzed, the tastes and interests of users are identified, and their traces are also tracked. It is used to provide target marketing and personalized services by identifying the degree of participation in various events and the number of visits.

4. How to reject cookie settings
Users have the option to install cookies. Therefore, by setting options in your web browser, you can allow all cookies, go through confirmation whenever a cookie is saved, or refuse to save all cookies.
Example (for Internet Explorer): Settings in [Tools at the top of the web browser] > [Internet Options] > [Personal Information] > [Advanced]
Example (for Chrome): Settings in [Tools at the right of the web browser] > [Show advanced settings at the bottom of the screen] > [Content setting button for personal information] > [cookie]

Article 8 Personal information protection officer and person in charge

In order to protect personal information and handle complaints related to personal information, SMH appoints a person in charge of personal information protection and hands-on worker as follows.

【Personal information protection manager】
Name :
Tel :

【Personal information protection hands-on worker】
Name :
Tel :

【Personal image information protection manager】
Name :
Tel :

Article 9 Remedy for infringement of rights and interests

In order to receive relief from personal information infringement, the information subject may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee or the Personal Information Infringement Reporting Center of the Korea Internet & Security Agency. In addition, for reporting and consulting of other personal information infringement, please contact the following organizations.

1. Personal Information Dispute Mediation Committee : www.kopico.go.kr / 1833 -6972
2. Information Protection Certification Mark Committee : www.eprivacy.or.kr / 02 - 550 - 9531 ~ 2
3. Supreme Prosecutor’s Office Cyber Crime Investigation Team : www.spo.go.kr / 02 - 3480 - 3571
4. National Police Agency Cyber Terror Response Center : www.ctrc.go.kr / 1566 - 0112

Article 10 Changes in personal information processing policy

This processing policy is applied from the enforcement date, and if there is an addition, deletion, or correction of changes in accordance with laws and policies, it will be notified through notices 7 days before the implementation of the changes.

Date of change of privacy policy : November 6, 2021

Date of announcement : October 29, 2021

Date of implementation : November 6, 2021