Romical Co., Ltd. Privacy Policy (ver 1.0)

The personal information processing policy of Romykal (hereinafter referred to as “the Company” or “Romical Co., Ltd.”) contains the following contents.

1. Items of personal information to be collected and methods of collection

A. Items of personal information to be collected

First, the company collects the following personal information from product orders, membership registration, and inquiry registration.

- When ordering products: name, e-mail, address, phone number, mobile phone number

- When registering as a member: name, e-mail, address, phone number, mobile phone number

- Online inquiry registration: name, e-mail, phone number, mobile phone number

Second, the following information may be automatically collected during the website access process or business processing process.

- IP address, cookie, visit date and time, service use record, bad use record

B. How to collect personal information

The company collects personal information in the following ways.

- Website, written form, fax, telephone, bulletin board, e-mail, delivery request

- Collection for generation information collection tool

2. Purpose of collection and use of personal information

The company uses the collected personal information for the following purposes

- Member management: Identification for website use, personal identification

- Product delivery: Collecting orderer and delivery address information for product delivery

3. Sharing and Provision of Personal Information

The company protects users' personal information "2. Purpose of collection and use of personal information”, and we do not use it beyond the scope without the user's prior consent or disclose the user's personal information to the outside in principle. However, exceptions are made in the following cases

- When users consent to disclosure in advance

- When there is a request from an investigation agency in accordance with the provisions of laws and regulations or in accordance with the procedures and methods stipulated in laws and regulations for the purpose of investigation

4. Consignment of handling of personal information

The company does not entrust personal information.

5. Period of retention and use of personal information

In principle, users' personal information is destroyed without delay when the purpose of collection and use of personal information is achieved. However, the following information is retained for the specified period for the following reasons.

A. Reasons for information retention according to company internal policy

- Retirees registered in HR information are kept for 30 years in consideration of re-entry

- In case of temporary employment registration (website registration), it is stored for 3 years

- In case of inquiry registration (website registration), it is kept for 5 years

B. Reasons for information retention according to related laws

First, records by identification

Reason for retention: Act on Promotion of Information and Communications Network Utilization and Information Protection

Retention period: 6 months

Second, website visit history

Reason for Retention: Communication Secret Protection Act

Retention period: 3 months

6. Personal information destruction procedures and methods

In principle, personal information of users is destroyed without delay when the purpose of collection and use of personal information is achieved. The company's personal information destruction procedures and methods are as follows.

A. destruction procedure

- The information entered by the user for membership registration, etc. is moved to a separate DB after the purpose is achieved (separate filing cabinet in the case of paper) and in accordance with the use of information protection according to internal policies and other related laws (refer to retention and use period) It is destroyed after being stored for a certain period of time.

B. Destruction method

- Personal information printed on paper is shredded with a shredder or destroyed through incineration.

- Personal information stored in the form of electronic files will be deleted using a technical method that cannot create records.

7. Rights of information subjects and legal representatives and how to exercise them

- The information subject can inquire or modify his or her registered personal information at any time and request destruction

(If you write, call or e-mail the person in charge of personal information management, we will take action without delay)

- If the information subject requests correction of errors in personal information, the personal information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, we will notify the third party of the result of the correction without delay so that the correction can be made.

- The Company shall provide for personal information that has been canceled or deleted at the request of the in formation subject or legal representative in “5. Period of retention and use of personal information” and processing it so that it cannot be viewed or used for any other purpose.

8. Matters concerning the installation/operation and rejection of automatic personal information collection devices

The company uses 'cookies' to store and retrieve user information from time to time for the following purposes. Cookies are very small text files that the server used to operate the website sends to the user's browser and are stored on the hard disk of the user's computer.

A. Purpose of use of cookies

- It is used to provide optimized information to users by identifying the types of visits and usage, secure access status, and the size of users to each service and web site visited by users.

B. Installation/operation and rejection of cookies

- Users have the option to install cookies. Therefore, the user can accept all cookies by setting options in the web browser, check each time a cookie is saved, or refuse to save all cookies.

- How to specify whether to allow the installation of cookies (for Internet Explorer)

① Select [Internet Options] from the [Tools] menu.

② Click [Personal Information Tab].

③ You can set [Level of Personal Information Handling].

9. Technical/Administrative Protection Measures for Personal Information

In handling users' personal information, the company is taking the following technical/administrative measures to ensure stability so that personal information is not lost, stolen, leaked, altered or damaged.

A. Countermeasures against hacking, etc.

- The company is doing its best to prevent leakage or damage to members' personal information by hacking or viruses. Data are frequently backed up in preparation for damage to personal information, and the latest vaccine program is used to prevent leakage or damage to users' personal information or data. In addition, we use an intrusion prevention system to control unauthorized access from the outside, and we are trying to have all possible technical devices to secure it systematically.

B. Minimization and training of handling staff

- The company's personal information handling staff is limited to the person in charge, and we always emphasize compliance with the personal information handling policy of Romical Co., Ltd. through the preparation and storage of the security pledge, and frequent training for the person in charge.

All. Operation of a dedicated organization for personal information protection

- In addition, we operate an in-house personal information protection organization, check the compliance with the personal information handling policy and the person in charge, and make an effort to correct and rectify any problems immediately.

- However, the company is not responsible for any problems caused by the leakage of personal information such as resident number due to the user's negligence or problems on the Internet.

10. Contact information of the person in charge of personal information management and the person in charge

You can report any complaints related to personal information protection that occur while using the company's services to the person in charge of personal information management or the department in charge.

The company will promptly and sufficiently respond to users' reports

Personal information manager

Name: Naingi

Affiliation: Management/Planning

Phone: 070-4365-3870

Position: Planning Director

E-mail: ld@ld-fan.co.kr

Person in charge of personal information management

Name: Choi Seung-bong

Affiliation: Hongseong Factory Production Headquarters

Phone: 070-4123-6873

Position: Managing Director

Mail: sbchoi@romical.co.kr

If you need to report or consult on other personal information infringement, please contact the following organizations.

- Personal Information Infringement Report Center (www.118.or.kr / 118)

- Information Protection Mark Certification Committee ( www.eprivacy.or.kr / 02-580-0533~4)

- Advanced Crime Investigation Division, Supreme Prosecutors' Office ( www.spo.go.kr / 02-3480-2000)

- National Police Agency Cyber ​​Terror Response Center ( www.ctrc.go.kr / 02-392-0330)

11. Other

We inform you that this “Romykal Co., Ltd. Privacy Policy” does not apply to the collection of personal information by websites linked to Romykal.

12. Duty of Notice

If there are any additions, deletions, or modifications to the current personal information processing policy, we will notify you through the ‘pop-up window’ on the website at least 7 days before the revision.

- Notice effective date: January 01, 2016