C-SITE

C Site Trading Co., Ltd (hereinafter referred to as the "Company"), in accordance with Article 30 of the Personal Information Protection Act, establishes and discloses the following personal information processing guidelines to protect the personal information of information subjects and to promptly and smoothly handle grievances related thereto.

The Company processes personal information for the following purposes.
The personal information processed will not be used for any purpose other than the following, and if the purpose of use is changed, we will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Human resources management for employees
The Company processes personal information for the purpose of recruiting and managing employees of the Company, including concluding and maintaining employment contracts, paying wages, training, issuing certificates, providing welfare benefits to employees and their families, employment insurance, national pension, etc. for the company's personnel management, etc.
2. Ethical management report
The Company processes personal information for the purpose of verifying the identity of the informant, verifying the report, contacting and notifying the informant for fact-finding, and notifying the outcome of the process.

① The Company shall process and retain personal information within the period of retention and use of personal information in accordance with laws and regulations or the period of retention and use of personal information agreed upon when collecting personal information from the information subject.
② The processing and retention period of each personal information is as follows.
1. Human resource management for employees: 3 years after the employee's retirement
2. Ethical management report: 3 years after the verification of the report and processing of the results are completed (when the case is closed after auditing the facts of the report)

The Company processes the following personal information items
1. Human resources management for employees
- Required fields: name, social security number, contact information, address, military service information, educational background, career information, gender, email address, account number
- Optional fields: marital status, domicile, family relationship, names of family members, addresses of family members, contact information of family members
2. Ethical management report
- Required fields: name, contact, email address

① The Company processes the personal information of the information subject only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only in cases falling under Article 17 of the Personal Information Protection Act, such as the consent of the information subject or special provisions of the law.
② The Company provides personal information of employees to third parties as follows.
- Person receiving personal information: Korea Job Training Development Center, Dlog
- Purpose of use of personal information of the recipient: educational training, actuarial evaluation
- Personal information items provided: company name, work location, job title, position, employee number, name, resident registration number, employment date, resignation date
- Retention and use period by the recipient: Up to 3 years from the date of training and evaluation

① The Company shall destroy personal information without delay when it becomes unnecessary, such as the expiration of the personal information retention period or the achievement of the purpose of processig.
② If the personal information retention period agreed to by the information subject has elapsed or the purpose of processing has been achieved, but the personal information must continue to be preserved in accordance with other laws and regulations, the personal information shall be moved to a separate database (DB) or preserved in a different storage location.
③ Procedures and methods for destroying personal information are as follows.
1. Destruction procedure
The Company selects the personal information for which the reason for destruction has occurred and destroys the personal information with the approval of the person in charge of personal information protection of the Company.
2.Destruction Method
The Company destroys personal information recorded and stored in the form of electronic files using methods such as Low Level Format so that the records cannot be reproduced, and destroys personal information recorded and stored in paper documents by shredding or incinerating them.

① The information subject may exercise the right to view, correct, delete, or request suspension of processing of personal information at any time to the Company.
② The exercise of rights under Paragraph 1 may be made to the Company in writing, by telephone, e-mail, or facsimile transmission (FAX), and the Company will take action without delay.
③ The exercise of the rights under Paragraph 1 may be made through an agent, such as the legal representative of the information subject or a person who has been delegated. In this case, you must submit a power of attorney in the form of Appendix No. 11 to the "Notification on How to Handle Personal Information Protection Act (No. 2020-7)".
④ Requests for access to personal information and suspension of processing may be subject to restrictions on the rights of the information subject pursuant to Article 35, Paragraph 4, and Article 37, Paragraph 2 of the Personal Information Protection Act.
⑤ A request for the correction or deletion of personal information cannot be made if the personal information is specified as the subject of collection in another law.
⑥ The Company shall verify whether the person making the request is the person or a legitimate representative when requesting access, correction, deletion, or suspension of processing in accordance with the rights of the information subject.

The Company takes the following measures to ensure the safety of personal information.
1. Administrative measures: establishment and implementation of internal management plans, regular employee training, etc.
2. Technical measures: management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs, etc.
3. Physical measures: access control to server rooms, data storage rooms, etc.

① The Company shall designate a person in charge of personal information protection as follows to take overall responsibility for the processing of personal information and to handle complaints and damage relief of information subjects related to the processing of personal information.
Personal information protection officer
Name: Sung Soo LEE
Title : Managing Director
Tel : +82-2-2056-9100
Email : contact@c-site.co.kr
Fax : +82-2-2056-9199
② The information subject may contact the personal information protection officer and the department in charge for all personal information protection-related inquiries, complaints, and damage relief that occurred while using the Company's services (or business). The Company will respond to and process inquiries from the information subject without delay.

The information subject may request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the following departments. The Company will endeavor to promptly process the information subject's request for access to personal information.
Personal information access request reception and processing department
Department Name : Management Support Team
Deputy Director : Su Jung Heo
Tel : +82-2-2056-9178
Email : heo@c-site.co.kr
Fax : +82-2-2056-9199

① The information subject may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee or the Personal Information Infringement Reporting Center of the Korea Internet & Security Agency in order to receive relief from personal information infringement. For other reports and consultations on personal information infringement, please contact the following organizations.
- Personal Information Dispute Mediation Committee : 1833-6972 (without area code) (www.kopico.go.kr)
- Personal Information Infringement Reporting Center: 118 (without area code) (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (without area code) (www.spo.go.kr)
- National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)
② A person whose rights or interests have been infringed by a disposition or omission made by the head of a public institution in response to a request pursuant to the provisions of Articles 35 (Access to Personal Information), 36 (Correction and Deletion of Personal Information), and 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act may file an administrative appeal in accordance with the Administrative Appeals Act. - Administrative Appeals Board (without area code) 110 (www.simpan.go.kr)

① The Company installs and operates image information processing equipment as follows.
1. Rationale and purpose of installing image information processing equipment: Company's facility safety and fire prevention
2. Number of installations, installation location, and shooting range: 2 units, one at each office entrance
3. Manager, department in charge, and authorized person to access video information: Deputy Director of Management Support Team Soo Jeong Heo
4. Video information shooting time, storage period, storage place, and processing method
- Shooting time: 24 hours
- Storage period: 30 days from filming
- Storage location and processing method: Management support team server room storage and processing
5. How and where to check video information: Request to the person in charge of management (Management Support Team)
6. Measures for the request of the information subject to view the video information: It must be applied with a request to view personal image information and confirm the existence, and access is allowed only when the information subject himself/herself is filmed or when it is clearly necessary for the life, body, and property interests of the information subject.
7. Technical, administrative, and physical measures to protect video information: establishment of an internal management plan, access control and restriction of access rights, application of safe storage and transmission technology for video information, storage of processing records and measures to prevent forgery and tampering, provision of storage facilities and installation of locks, etc.