Privacy Policy

The Company may use third-party advertising services, including Google AdSense, to support service operations and content delivery. Google and its partners may process cookies, advertising identifiers, IP addresses, browser and device information, page visits, and service usage information to serve ads, measure ad performance, prevent invalid activity, and provide personalized ads.

Users may restrict personalized ads and cookie usage through browser settings, device settings, or Google ad settings. More information about how Google uses information from partner sites and apps is available on Google's policy page.

As a general rule, the Company does not provide personal information of data subjects to third parties. However, when providing personal information to a third party, the Company shall inform the data subject of the recipient of the personal information, the purpose of the recipient's use, the items of personal information provided, the retention and use period, the right to refuse consent, and any disadvantages arising from refusal, and shall obtain the data subject's consent

In such cases as set forth in Paragraph 1, the Company shall not provide personal information to third parties beyond the scope of the purpose of collection. If personal information must be provided to a third party beyond the original collection purpose, the Company shall first notify the data subject of the recipient, the recipient's purpose of use, the items of personal information provided, the retention and use period, the right to refuse consent, and any disadvantages arising from refusal, and shall obtain the data subject's consent.

Notwithstanding Paragraph 1, the Company may provide personal information to third parties without the consent of the data subject in the following cases:

• Where special provisions exist under other laws;
• Where, based on laws and regulations, government agencies, public institutions, investigative agencies, or courts request information;
• Where pseudonymized information is provided for statistical compilation, scientific research, or preservation of records for the public interest;
• Where necessary for the settlement of fees arising from service provision.

Data subjects may exercise the following rights regarding their personal information processed by the Company at any time:

• The right to request access to personal information. However, access may be restricted or denied if prohibited or limited by law, or if access may harm another person's life or body, or unfairly infringe upon another person's property or other interests;
• The right to request correction or deletion of personal information. However, if the relevant personal information is specified by law as subject to collection, deletion may not be requested;
• The right to request suspension of personal information processing. However, such a request may be refused if special provisions exist in law, if processing is unavoidable to comply with legal obligations, if suspension may harm another person's life or body or unfairly infringe upon another person's property or other interests, or if suspension would prevent the Company from providing the services agreed with the data subject in the absence of clear intent to terminate the contract;
• The right to withdraw consent for the collection, use, or provision of personal information.

The data subject may exercise the rights set forth in the preceding Paragraph 1 via the bulletin on the platform operated by the Company or via an email to the Company, and the Company will promptly address their request

If the data subject requests the correction of errors or removal of personal information, the Company will not use or provide the personal information until the correction or removal is completed. If incorrect personal information is provided to any third parties, the Company will immediately notify the third parties so that it can be corrected or removed.

The legal representative of the data subject or a person authorized by the data subject may exercise the rights set forth in the preceding Paragraph 1 on behalf of the data subject if they submit a written evidence of their authority, such as a power of attorney, to the Company.

When personal information becomes unnecessary due to achievement of the processing purpose, expiration of the retention and use period, or termination of business, the Company shall promptly destroy the personal information.

Notwithstanding the preceding Paragraph 1, if the Company is required to preserve such personal information as required by the relevant laws and regulations, the relevant personal information shall be stored and managed separately from other personal information.

The procedures and method for destroying personal information are as follows.

• Destruction procedure: The Company selects personal information subject to destruction, obtains approval from the Chief Privacy Officer, and then proceeds with destruction.
• Method of destruction: Personal information stored as an electronic file is destroyed using a technical or physical method such that records cannot be reproduced, and personal information printed on paper is shredded, destroyed by incineration, masked or punched.

The Company takes the following measures to prevent the loss, theft, leakage, tampering, falsification or damage of personal information of data subjects.

• Establishment and implementation of internal protection plans, operation of a dedicated organization, periodic employee training programs;
• Restricted access control and security programs;
• Physical restrictions such as locked archive and entrance control

We have designated the department in charge and a person who acts as a Chief Privacy Officer to take responsibility of protecting personal information, resolving any related complaints, providing damage relief, and accepting a request to access.

• Name: Yoo Su-Yeon
• Title/Position: CEO
• Contact Info (email or phone number): sy.yoo@nation-a.com