HYST SERIES

The Privacy Policy on the Company’s website contains the following information.

• 1. The Company collects the following information
  
  • ▶ Required Information: Name, company name, region, email address, contact information The following information may also be generated and collected during the use or processing of services
  • ▶ Access logs, cookies, IP address information
• 2. The Company collects personal information using the following methods.
  
  • ▶ Inquiries submitted in writing, by phone, or by fax
  • ▶ Access logs, etc.: Data collection tools

The Company collects and uses personal information to provide users with customized information.

• 1. The Company destroys personal information provided by users once the purpose of collection and use has been achieved.
• 2. However, personal information may be retained for a certain period if required by applicable laws and regulations, as follows.
  
  • ▶ Records of consumer complaints or dispute resolution: 3 years
  • ▶ Records related to indications and advertising: 6 months
  • ▶ Records related to contracts or withdrawal of subscriptions: 5 years
  • ▶ Records related to the collection, processing, and use of credit information: 5 years
  • ▶ Records related to payment and the supply of goods, etc.: 5 years

The Company does not provide users’ personal information to third parties without their consent, except where required by law.

• 1. To provide services, the Company entrusts the processing of users’ personal information as follows.
  
  • ▶ Purpose of entrustment: Service management and maintenance
  • ▶ Entrusted party: 000
  • ▶ Information entrusted: All personal information collected
• 2. When entrusting the processing of personal information, the Company clearly sets forth, through entrustment agreements and other relevant contracts, the service provider’s obligations regarding compliance with personal information protection instructions, confidentiality, prohibition of providing personal information to third parties, and liability in the event of an incident. and retains such contracts in written or electronic form.

As a general rule, the Company destroys personal information without delay upon achieving the purposes of its collection and use. The procedures and methods for destruction are as follows.

• 1. Procedures for Destroying Personal Information
  

  Information entered by users is stored for a certain period after the purpose has been achieved, for information protection reasons pursuant to the Company’s internal policies and applicable laws and regulations (see “Retention and Use Period of Personal Information”), and is subsequently destroyed.

• 2. Destruction Methods
  

  Personal information printed on paper is destroyed by shredding or incineration, and personal information stored in electronic file format is deleted using technical methods that make the records unrecoverable.

• 1. To access or correct your personal information, please contact our Personal Information Manager by email, and the necessary measures will be taken.
• 2. If a user requests the correction of an error in their personal information, the relevant personal information will not be used until the correction is completed.
• 3. Users may withdraw their consent to the collection, use, and provision of their personal information at any time. To withdraw consent, please contact our Personal Information Manager by email or other means, and the Company will promptly take the necessary measures, such as deleting the personal information.
• 4. Unless a user withdraws their consent to the collection and use of personal information, the Company retains and uses the personal information collected for as long as the services are provided, for purposes such as providing the services.
• 5. Additionally, the Company destroys users’ personal information without delay once the purpose of its collection or use has been achieved or the Company decides to discontinue providing the service in accordance with its operating policies.
• 6. For children under 14 years of age, their legal representatives have the right to access or modify the child’s personal information and to withdraw consent to its collection and use.

• 1. The Company uses “cookies” to temporarily store and retrieve information about users. Cookies identify users’ computers but do not identify individual users. In addition, users can choose how cookies are handled in their web browser settings. They can accept all cookies, receive notifications when cookies are installed, or reject all cookies.
• 2. Purposes of Using Cookies Cookies are information sent from the Company’s server to a user’s web browser and do not affect any other part of the user’s PC. When a user accesses the Company’s website, the Company’s server reads the cookie information in the user’s browser. This enables the user to receive services without providing additional information. Cookies may also be used to analyze visit frequency and times and identify users’ preferences and areas of interest for service personalization purposes.
• 3. How to Disable Cookies Users can manage their cookie settings through their web browser options by allowing all cookies, receiving a confirmation each time a cookie is saved, or rejecting all cookies.
• - How to Manage Settings (Internet Explorer): Tools > Internet Options > Privacy

In handling users' personal information, the Company implements the following technical measures to ensure its security and prevent it from being lost, stolen, disclosed, altered, or damaged.

• 1. Important data within users’ personal information is stored in encrypted form, and personal information is securely stored in a safe zone with a dual firewall.
• 2. To protect users' personal information from leakage caused by hacking or other means, the Company uses devices that block external intrusions and installs an intrusion detection system on each server, monitoring for intrusions 24 hours a day.
• 3. The Company restricts access to personal information to designated personnel and assigns dedicated passwords for this purpose, updating them on a regular basis.
• 4. The Company assumes no liability for any issues arising from the leakage of personal information caused by the user’s own negligence or problems on the Internet.

The Company collects user feedback regarding personal information protection and has established procedures and methods to handle complaints. Users may report complaints via phone or email by referring to the affiliation, name, and contact details of the Personal Information Manager specified in Section K. The Company will provide prompt and thorough responses to users’ complaints. Alternatively, users may file complaints with the following agencies, which are established and operated by the government.

• - Personal Information Dispute Mediation Committee: 118 (no area code)
• - Information Protection Mark Certification Committee: +82-2-580-0533, www.eprivacy.or.kr
• - Cyber Terror Response Center, Korean National Police Agency: 1566-0112, www.ctrc.go.kr

The person responsible for handling users' personal information is listed below. The Personal Information Manager responds to all personal information inquiries promptly and diligently.

• 1. Personal Information Manager
  
  • - Name: Kim Jun-seok, Assistant Manager
  • - Affiliation: Management Planning Division, SMEC Co., Ltd.
  • - Phone: +82-55-340-4924
  • - E-mail: junseok@esmec.com
• 2. Personal Information Protection Manager
  
  • - Name: Park Jong-ho, Team Leader
  • - Affiliation: Management Planning Division, SMEC Co., Ltd.

This Privacy Policy was revised on August 3, 2018. Any additions, deletions, or modifications to its content due to changes in government policies or security technologies will be announced at least 10 days prior to the revision.

This Privacy Policy (v. 1.0) takes effect on August 3, 2018.