3. Handling of Personal Information in Entrusted Operations

The Company may be entrusted with the handling of personal information by customers (the Entruster) based on an operational entrustment agreement. In such cases, the personal information will be used solely for the purpose of fulfilling the entrusted operations, and will be handled in accordance with the instructions of the Entruster, while implementing safety management measures equivalent to or greater than those stipulated in this Policy. The information will not be provided to any third party or used for other purposes of the Company without the instructions of the Entruster.

         In the event that the operations are sub-entrusted, the Company will obtain the prior consent of

the Entruster and impose safety management obligations on the sub-entrustee that are equivalent to or greater than those applicable to the Company. Upon completion of the entrusted operations or upon request, the Company will promptly return or erase the received personal information using a secure method and certify the results thereof.

4. Provision of Personal Information to Third Parties (Including Transfer to Foreign Countries)

The Company will not provide personal information to third parties, except in the following cases:

• When the consent of the individual is obtained

• When required by laws and regulations

• When outsourcing operations within the scope necessary to achieve the purposes of use (e.g., development contractors, cloud service providers, etc.) In such cases, appropriate supervision will be exercised over the outsourced party.

The Company may provide personal data to group bases located in the Socialist Republic of Vietnam (hereinafter referred to as "Overseas Bases") as operationally required. In such cases, the following measures will be implemented:

The scope of personal data to be transferred will be restricted to the minimum necessary for the execution of operations.

       A contract will be concluded with the Overseas Bases imposing obligations for safety management measures equivalent to or greater than those stipulated in this Policy.

When actions based on Article 28 of the Act on the Protection of Personal Information are required (such as obtaining the individual's consent), appropriate measures will be taken in accordance with relevant laws and regulations.

 

5. Security Management of Personal Information

The Company will implement the following measures to prevent leaks, loss, or damage of personal information:

• Technical measures such as access restrictions and log management

• Organizational and human resource measures such as information management rules and the execution of confidentiality pledges

• Application of security management measures when sharing information with overseas offices

• Periodic reviews of the personal information handling environment

​

6. Disclosure, Correction, and Suspension of Use of Personal Information

When requested by the individual, the Company will respond appropriately and promptly in accordance with laws and regulations.​

      Please contact the inquiry desk listed below to submit your request. Upon verification of your identity, we will respond in writing or via email within the period prescribed by laws and regulations.

​

<Items to be Notified Upon Request>

• Your full name and contact information (address or email address)

• The type of request (Disclosure / Correction, Addition, or Deletion / Suspension of Use or Erasure / Cessation of Provision to Third Parties)

• Details of the personal information subject to the request (Please describe as specifically as possible)

​

<Fees and Estimated Response Time>

For disclosure requests, an amount equivalent to actual costs may be charged. Requests for correction, suspension of use, etc., are free of charge. As a general rule, we aim to provide a response within approximately two weeks after confirming the details of your request.

​​

7. Handling of Cookies and Access Logs
The Company’s website may acquire Cookies and access logs for the purposes of improving service quality and analyzing usage status. These may include access analysis tools such as Google Analytics.

      The acquired information will not be used for the purpose of identifying specific individuals, but will be utilized solely for statistical analysis and service improvement. It is possible to disable Cookies through your browser settings; however, please note that doing so may prevent some services from functioning properly.

​

8. Continuous Improvement

The Company will endeavor to review internal regulations and strengthen the educational system to continuously improve its personal information protection framework.