privacy

<Perfect K Co., Ltd. (‘https://perfect-k.com ‘ or ‘Perfect Kinc’) establishes and discloses a personal information processing policy as follows in order to protect the personal information of the data subject in accordance with Article 30 of the Personal Information Protection Act and to promptly and smoothly deal with related grievances.

○ This privacy policy will take effect on August 1, 2023.

Article 1 (Purpose of Processing Personal Information)

<Perfect K Co., Ltd. (‘https://perfect-k.com ‘ or ‘Perfect Kinc’) processes personal information for the following purposes: The personal information being processed will not be used for any purpose other than the following purposes, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act.

1. Membership registration and management on the website

Personal information is processed for the purpose of confirming the intention to join, identifying and certifying oneself according to the provision of membership services, maintaining and managing membership qualifications, preventing illegal use of services, confirming the consent of legal representatives when processing personal information for children under the age of 14.

2. the provision of goods or services

Personal information is processed for the purpose of delivering goods, providing services, sending contracts and invoices, providing content, providing customized services, personal authentication, age authentication, payment and settlement, and collection of bonds.

3. Use for marketing and advertising

Process personal information for the purpose of developing new services (products) and providing customized services, providing event and advertising information and opportunities to participate, providing services and advertising according to demographic characteristics, verifying service validity, identifying access frequency, or statistics on members’ service use.

Article 2 (Period of Processing and Retention of Personal Information)

① <Perfect K Co., Ltd.> processes and holds personal information within the period of holding and using personal information under the Act or the period of holding and using personal information agreed upon when collecting personal information from the data subject.

② Each of these personal information processing and retention periods is as follows.

1. <Home page membership registration and management>

Personal information related to <Homepage Membership Registration and Management> is collected.Hold for the purpose of use above from the date of consent to use to <1 year>.It’s used.

Grounds for possession: Regulations of relevant statutes, such as the Commercial Act and the Consumer Protection Act in Electronic Commerce, etc.

Related Laws: 1) Records on labeling/advertising: 6 months

2) Records on withdrawal of contracts or subscriptions: 5 years

3) Records on payment and supply of goods, etc.: 5 years

4) Records on consumer complaints or disputes: 3 years

5) Records on the collection, processing, and use of credit information: 3 years

Reason for Exception:

Article 3 (items of personal information to be processed)

① <Perfect K Co., Ltd. is handling the following personal information items.

1 <Home page membership registration and management>

Mandatory items: name, date of birth, gender, login ID, password, mobile phone number, e-mail, credit card information, payment record, access IP information, cookies, access logs, service usage record, device-specific information

Selections:

Article 4 (Matters concerning the processing of personal information of children under the age of 14)

① <Personal Information Handler Name> collects the minimum amount of personal information necessary to perform the service with the consent of a legal representative when collecting personal information for children under the age of 14.

• Required items: Name, relationship, and contact information of the legal representative

② In addition, separate consent is obtained from the legal representative when collecting children’s personal information for the purpose of processing for the promotion of <Personal Information Handler Name>.

③ When collecting personal information of children under the age of 14, <Personal Information Handler Name> can request minimum information from the child, such as the name and contact information of the legal representative, and confirm whether the legal representative has agreed in one of the following ways.

• A method of requiring a legal representative to indicate whether he/she agrees on an Internet site where the consent is posted, and informing the personal information controller that the consent has been confirmed by the legal representative’s mobile phone text message.

• How to have a legal representative indicate whether he/she agrees on the Internet site where the consent is posted, and to receive card information such as credit card and debit card of the legal representative;

• A method of requiring a legal representative to indicate whether he/she agrees on the Internet site where the consent is posted, and verifying whether he/she is the identity through the mobile phone identification, etc. of the legal representative.

• Method of issuing a document containing the consent to the legal representative directly, delivering it by mail or fax, and having the legal representative sign and seal the consent and submit it.

• How to send an e-mail with consent and receive an e-mail with consent from a legal representative.

• How to inform the legal representative of the consent by phone, obtain consent, or guide him on how to verify the consent, such as the Internet address, and obtain consent through phone call again.

• Other methods of informing the legal representative of the contents of consent and confirming the expression of consent in the same way as above;

Article 5 (Matters concerning the provision of personal information to a third party)

① <Perfect K Corporation> processes personal information only within the scope specified in Article 1 (Personal Information Processing Purpose), and provides personal information to third parties only if they fall under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the data subject and special provisions of the law.

② <Perfect K Co., Ltd. provides personal information to third parties as follows.

1. <Google, Apple, Meta, Steam, Unity, End and Investigation Agency>

Who gets personal information: Google, Apple, Meta, Steam, Unity, End and Investigation Agency

Person’s personal information usage purpose: name, date of birth, gender, login ID, password, mobile phone number, e-mail, credit card information, payment record, access IP information, cookies, access logs, service usage record, device information

the possession of a recipientExpiration date: 1 year

Article 6 (Procedures for Destruction of Personal Information and Method of Destruction)

① <Perfect K Co., Ltd.> If personal information becomes unnecessary, such as the expiration of the retention period of personal information and the achievement of the purpose of processing, the relevant personal information shall be destroyed without delay.

② If the retention period of personal information agreed by the data subject has elapsed or the purpose of processing has been achieved, the personal information needs to be preserved according to other laws and regulations, the personal information is transferred to a separate database (DB) or stored differently.

1. Statutory grounds:

2. Personal information items to be saved: Account information, transaction date

③ The procedures and methods of destroying personal information are as follows.

1. Reversal procedure

<Perfect K Co., Ltd.> selects personal information for which the reason for destruction occurred, and destroys the personal information with the approval of the personal information protection officer of <Perfect K Co., Ltd.>.

2. How to destroy

Personal information printed on paper is crushed with a shredder or destroyed through incineration.

Information in the form of electronic files uses a technical method that does not allow the recording to be played.

Article 7 (Measures concerning the Destruction, etc. of Personal Information of Unused Users)

① <Personal Information Handler Name> is destroying the information of users who have not used the service for one year. However, it can be stored and managed separately from other users’ personal information until the preservation period specified by other laws and regulations has elapsed.

② <Personal Information Handler Name> informs users of the fact that personal information is destroyed 30 days before the destruction of personal information, the expiration date of the period, and the items of destroyed personal information by e-mail or text message.

③ If you don’t want to destroy your personal information, you can log in to the service before the expiration of the period.

Article 8 (Matters concerning the rights and obligations of the data subject and legal representative and the method of exercise thereof)

① The data subject may exercise the right to view, correct, delete, and suspend processing of personal information at any time against Perfect K Co., Ltd.

② The exercise of rights under paragraph 1 may be made to Perfect K Co., Ltd. in writing, e-mail, or copy transmission (FAX) pursuant to Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and Perfect K Co., Ltd. will take action without delay.

③ The exercise of rights under paragraph 1 may be made through an agent, such as a legal representative of the data subject or a person who has been delegated.In this case, “Notification on how to process personal information (No. 2020-7)” You must submit a power of attorney in accordance with the attached Form 11.

④ The right of the data subject may be restricted in accordance with Articles 35 (4) and 37 (2) of the Personal Information Protection Act to request the suspension of reading and processing of personal information.

⑤ A request for correction and deletion of personal information cannot be requested for deletion if the personal information is specified as the subject of collection in other laws and regulations.

⑥ Perfect K Co., Ltd. checks whether the person who made the request for access, correction and deletion, or access when requesting suspension of processing according to the right of the data subject is the person or a legitimate agent.

Article 9 (Matters concerning measures to ensure the safety of personal information)

<Perfect K Co., Ltd. is taking the following measures to ensure the safety of personal information.

1. Establishment and implementation of an internal management plan

An internal management plan is established and implemented for the safe processing of personal information.

2. Minimize and train personal information handling staff

We are implementing measures to manage personal information by designating employees who handle personal information and minimizing them by limiting them to those in charge.

3. Conduct regular self-audit

In order to secure stability related to personal information handling, self-audit is conducted regularly (once a quarter).

4. Restrictions on Access to Personal Information

We take necessary measures to control access to personal information by granting, changing, and canceling access to the database system that processes personal information, and control unauthorized access from outside using an intrusion prevention system.

5. Storage and forgery prevention of connection records

Records accessed to the personal information processing system are stored and managed for at least one year, but when personal information is added to more than 50,000 data subjects or when processing unique identification or sensitive information, they are stored and managed for more than two years.

In addition, security features are used to prevent forgery, theft, or loss of connection records.

6. encryption of personal information

The password of the user’s personal information is encrypted, stored and managed, and only you can know it, and important data uses separate security functions such as encrypting files and transmission data or using file lock functions.

7. Technical measures against hacking, etc.

<Perfect K Inc> (‘Perfect Kinc’) installs security programs, regularly updates and inspects personal information to prevent leakage and damage caused by hacking or computer viruses, installs systems in areas where access is controlled from the outside, and monitors and blocks technically and physically.

8. Control of Access to Unauthorized Persons

There is a separate physical storage place that stores personal information, and access control procedures are established and operated.

9. Using locks for document security

Documents containing personal information and auxiliary storage media are stored in a safe place with locks.

Article 10 (Matters concerning the installation and operation of devices that automatically collect personal information and their refusal)

① Perfect K Co., Ltd. uses a “cookie” that stores usage information and fetches it from time to time to provide individual customized services to users.

② Cookies are small amounts of information sent by the server (http) used to run the website to the user’s computer browser and are sometimes stored on hard disks in the user’s PC computer.

A. Purpose of use of cookies: It is used to provide optimized information to users by identifying the type of visits and use of each service and website visited by the user, popular search terms, security access, etc.

B. Install, operate, and reject cookies: You can reject saving cookies through the Tools at the top of the web browser > Internet Options > Options settings on the Privacy menu.

C. Refusing to save cookies may cause difficulties in using customized services.

Article 11 (Matters concerning the collection, use, provision, rejection, etc. of behavioral information)

① <Personal Information Handler> collects and uses behavioral information to provide customized services and benefits optimized for data subjects and online customized advertisements in the process of using the service.

② <Personal Information Handler> collects behavioral information as follows:

<Where a third party (online advertising business operator, etc.) is allowed to collect and process user behavior information for online customized advertisements, etc.>

③ <Personal Information Handler> allows online customized advertising operators to collect and process behavioral information as follows.

– Advertising operators that want to collect and process behavioral information: Google, Apple, Meta, Steam, Unity, etc.

– How to collect behavioral information: Automatically collect and send when users visit our website or run apps.

– Behavioral information items collected and processed: User’s web/app visit history, search history, purchase history

– Retention and use period: 365 days

④ The Personal Information Handler collects only the minimum behavioral information necessary for online customized advertisements, and does not collect sensitive behavioral information that may clearly infringe on individual rights, interests, or privacy, such as thoughts, beliefs, family and relatives, educational background, medical history, and other social activities.

⑤ <Personal Information Handler> does not collect behavioral information for customized advertising purposes from children under the age of 14 or online services that are the main users of children under the age of 14, and does not provide customized advertisements to children under the age of 14.

⑥ <Personal Information Handler> collects and uses advertisement identifiers for online customized advertisements in mobile apps. The data subject can block and allow customized advertisements on the app by changing the settings of the mobile device.

‣ Blocking/Allowing Ad Identifiers on Smartphones

(1) (Android) ① Setting → ② Privacy → ③ Advertising → ③ Resetting or deleting ad IDs

(2) (iPhone) ① Settings → ② Privacy → ③ Tracking → ④ Allow apps to request tracking

※ Depending on the mobile OS version, the menu and method may vary slightly.

⑦ The data subject can block and allow online customized advertisements by changing the cookie settings of web browsers. However, changes to cookie settings may affect the use of some services, such as automatic login to the website.

⑧ The data subject can inquire about the behavioral information through the contact information below, the exercise of the right to veto, and the receipt of a damage report.

‣ Personal Information Protection Department

Department name: Personal information manager

Person in charge: Kwon Hyuk-jung

연락처 : 821025153258, backhell337@perfect-k.com

Article 12 (Criteria for judging additional use and provision)

<Perfect K Co., Ltd.> In accordance with Article 15 (3) and Article 17 (4) of the Personal Information Protection Act, personal information may be additionally used and provided without the consent of the data subject in consideration of the matters under Article 14-2 of the Enforcement Decree of the Personal Information Protection Act. Accordingly, in order to provide additional use and provision without the consent of the data subject, <Perfect K Co., Ltd.> has considered the following matters.

▶ Whether the purpose of additionally using and providing personal information is related to the original purpose of collection;

▶ Whether there is any predictability of additional use or provision in light of the circumstances in which personal information has been collected or the practice of processing it.

▶ Whether the additional use and provision of personal information unreasonably infringes the interests of the data subject.

▶ Whether measures necessary to ensure safety, such as pseudonymization or encryption, have been taken;

Article 13 (Matters concerning the processing of pseudonym information when processing pseudonym information)

<Perfect K Co., Ltd.> is not processing pseudonym information for the following purposes.

Article 14 (Matters concerning personal information protection officers)

① Perfect K Co., Ltd. is in charge of handling personal information, and designates a person in charge of personal information protection as follows to handle complaints and remedy damages by data subjects related to personal information processing.

▶ Personal Information Protection Officer

Name: Perfect K Co., Ltd.

Position: Representative

Position: Director

연락처 :821025153258, backhell337@perfect-k.com,

※ You will be connected to the privacy department.

▶ Personal Information Protection Department

Department name: Person in charge of personal information

Person in charge: Kwon Hyuk-jung

연락처 :821025153258, backhell337@perfect-k.com,

② The data subject may contact the person in charge of personal information protection and the department in charge for any personal information protection inquiries, complaints, and damage relief that occurred while using the service (or business) of Perfect K Co., Ltd. Perfect K Co., Ltd. will respond and process the information subject’s inquiries without delay.

Article 15 (Department that receives and processes requests for access to personal information)

The data subject may request the following departments to view personal information pursuant to Article 35 of the Personal Information Protection Act.

<Perfect K Co., Ltd.> will make efforts to expedite the request for personal information access by the data subject.

▶ Department of receipt and processing of request for access to personal information

Department name: Personal information

Person in charge: Kwon Hyuk-jung

연락처 : 821025153258, backhell337@perfect-k.com,

Article 16 (Method of remedy for infringement of rights and interests of data subjects)

In order to receive relief from personal information infringement, the data subject may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee and the Personal Information Infringement Reporting Center of the Korea Internet & Security Agency. In addition, please contact the following institutions for other reports and counseling of personal information infringement.

1. Personal Information Dispute Mediation Committee: (without country code) 1833-6972 (www.kopico.go.kr )

2. Personal Information Infringement Reporting Center: (without country code) 118 (privacy.kisa.or.kr )

3. Supreme Prosecutors’ Office: 1301 (www.spo.go.kr )

4. National Police Agency: 182 (ecrm.cyber.go.kr )

A person who has been infringed on rights or interests due to a disposition or omission made by the head of a public institution against a request under Articles 35 (reading personal information), 36 (correction and deletion of personal information), and 37 (suspension of processing of personal information) of the Personal Information Protection Act may request an administrative trial as prescribed by the Administrative Trial Act.

※ For more information on administrative trials, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr ).

Article 17 (Change of Personal Information Processing Policy)

① This privacy policy will take effect on August 1, 2023.