(주)그리니어 (hereinafter referred to as the 'Company') establishes and publicly discloses the following personal information processing guidelines to protect the personal information of data subjects in accordance with Article 30 of the Personal Information Protection Act, and to ensure prompt and smooth handling of related grievances.

Article 1 (Purpose of Personal Information Processing) The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those listed below, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

Homepage Membership Registration and Management Personal information is processed for the purposes of confirming membership intent, identifying and authenticating individuals for membership services, maintaining and managing membership qualifications, verifying identity in accordance with the limited real-name verification system, preventing fraudulent use of services, confirming parental consent when processing personal information of children under 14 years of age, and providing various notices and handling complaints.

Provision of Goods or Services Personal information is processed for the purposes of goods delivery, service provision, sending contracts and invoices, content provision, providing customized services, self-identification, age verification, payment and settlement of fees, and debt collection.

Complaint Handling Personal information is processed for the purposes of identifying complainants, confirming complaint details, contacting and notifying for fact-finding, and communicating processing results.

Article 2 (Period of Personal Information Processing and Retention) ① The Company processes and retains personal information within the period specified by law for personal information retention and use, or within the period agreed upon by the data subject at the time of collection. ② The processing and retention periods for each personal information item are as follows:

Homepage Membership Registration and Management: Until withdrawal from the business/organization website. However, if any of the following reasons apply, retention continues until the reason is resolved:

If an investigation or inquiry due to violation of related laws is in progress, until the completion of the investigation or inquiry.
If there are existing claims and debts due to website use, until the settlement of those claims and debts.
Provision of Goods or Services: Until the completion of goods/services supply and fee payment/settlement. However, if any of the following reasons apply, retention continues until the end of that period:

Records concerning display, advertising, contract details, and execution under the 「Act on Consumer Protection in Electronic Commerce, etc.」:
Records concerning display and advertising: 6 months
Records concerning contract or subscription withdrawal, payment of consideration, supply of goods, etc.: 5 years
Records concerning consumer complaints or dispute resolution: 3 years
Retention of communication fact verification data in accordance with Article 41 of the 「Protection of Communications Secrets Act」:
Subscriber telecommunication date, start/end time, counterpart subscriber number, usage quantity, sending base station location tracking data: 1 year
Computer communication, internet log record data, connection location tracking data: 3 months
Article 3 (Provision of Personal Information to Third Parties) ① The Company processes the personal information of data subjects only within the scope specified in Article 1 (Purpose of Personal Information Processing) and provides personal information to third parties only in cases corresponding to Article 17 and Article 18 of the Personal Information Protection Act, such as obtaining the data subject's consent or specific legal provisions. Otherwise, the Company does not provide the data subject's personal information to third parties. ② For smooth service provision, the Company may provide personal information to third parties only to the minimum extent necessary, after obtaining the data subject's consent in accordance with Article 17, Paragraph 1, Item 1 of the Personal Information Protection Act.

Recipient of personal information: (주)그리니어 Partner Companies
Purpose of use of personal information by recipient: Business partnerships such as co-hosting events
Personal information items provided: Name, address, phone number, email address, card payment account information
Retention and use period by recipient: During the transaction period for event operation
Article 4 (Rights of Data Subjects and Legal Representatives and How to Exercise Them) ① Data subjects may at any time exercise the following rights related to personal information protection against the Company:

Request to view personal information
Request for correction if there are errors, etc.
Request for deletion
Request for suspension of processing ② The exercise of rights pursuant to Paragraph 1 can be done through written requests, phone calls, email, or fax to the Company, and the Company will take action without delay. ③ If a data subject requests correction or deletion of personal information, the Company will not use or provide the personal information until the correction or deletion is completed. ④ The exercise of rights pursuant to Paragraph 1 can be done through a legal representative of the data subject or an authorized agent. In this case, a power of attorney in the format of Annex No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted. ⑤ Data subjects must not infringe on their own or others' personal information and privacy processed by the Company in violation of the Personal Information Protection Act or other related laws.
Article 5 (Items of Personal Information Processed) The Company processes the following items of personal information:

Homepage Membership Registration and Management Required items: Name, date of birth, ID, password, address, phone number, gender, email address, i-PIN number
Provision of Goods or Services Required items: Name, date of birth, ID, password, address, phone number, email address, i-PIN number Optional items: Interests, past purchase history
Article 6 (Destruction of Personal Information) ① The Company promptly destroys personal information when it becomes unnecessary due to the expiration of the personal information retention period or the achievement of the processing purpose. ② If personal information must continue to be preserved in accordance with other laws despite the expiration of the personal information retention period consented to by the data subject or the achievement of the processing purpose, the personal information is transferred to a separate database (DB) or stored in a different location. ③ The procedures and methods for personal information destruction are as follows:

Destruction Procedure The Company selects personal information for which a destruction reason has occurred and destroys it with the approval of the Company's Chief Privacy Officer.
Destruction Method The Company destroys personal information recorded and stored in electronic file format in a way that the records cannot be reproduced, and personal information recorded and stored in paper documents is shredded or incinerated.
Article 7 (Measures to Secure the Safety of Personal Information) The Company takes the following measures to ensure the safety of personal information:

Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
Technical measures: Access control management for personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs.
Physical measures: Access control for computer rooms, data storage rooms, etc.
Article 8 (Installation, Operation, and Refusal of Personal Information Automatic Collection Devices) ① The Company uses 'cookies' to store and periodically retrieve usage information to provide users with individualized customized services. ② A cookie is a small amount of information that a server (http) operating a website sends to the user's computer browser and is stored on the user's PC or mobile device. ③ Data subjects can set options in their web browser to allow or block cookies. However, refusing to store cookies may make it difficult to use customized services.

▶ Allow/Block Cookies in Web Browser

Chrome: Web browser settings > Privacy and security > Clear browsing data
Edge: Web browser settings > Cookies and site permissions > Manage and delete cookies and site data
▶ Allow/Block Cookies in Mobile Browser

Chrome: Mobile browser settings > Privacy and security > Clear browsing data
Safari: Mobile device settings > Safari > Advanced > Block all cookies
Samsung Internet: Mobile browser settings > Browsing data > Clear browsing data
④ The Company collects and uses information such as visit and usage patterns for each service and website visited by the user, popular search terms, and secure access status during the service usage process, to provide optimized information to the user.

Article 9 (Chief Privacy Officer) ① The Company is responsible for overall personal information processing and designates a Chief Privacy Officer as follows to handle user complaints and redress damages related to personal information processing.

▶ Chief Privacy Officer Name: 김채겸 (Kim Chae-gyeom) Title: Representative Contact: hello.greenear@gmail.com ※ This connects to the personal information protection department.

▶ Personal Information Protection Department Department Name: Operations Team Contact: hello.greenear@gmail.com

② Data subjects may contact the Chief Privacy Officer and the department in charge with all inquiries, complaints, and requests for damage redress related to personal information protection that arise while using the Company's services (or business). The Company will respond and process inquiries without delay.

Article 10 (Request for Access to Personal Information) Data subjects may request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the department below. The Company will strive to ensure that data subjects' requests for access to personal information are processed promptly.

▶ Department for Receiving and Processing Requests for Access to Personal Information Department Name: Operations Team Contact: hello.greenear@gmail.com

Article 11 (Methods of Redress for Infringement of Rights) Data subjects may contact the following organizations for damage redress and consultation regarding personal information infringement:

Personal Information Dispute Mediation Committee: (Toll-free) 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Report Center: (Toll-free) 118 (privacy.kisa.or.kr)
Supreme Prosecutors' Office: (Toll-free) 1301 (www.spo.go.kr)
National Police Agency: (Toll-free) 182 (ecrm.police.go.kr/minwon/main)