Article 1 (Purpose)
NEXVIOne co., Ltd. (hereinafter referred to as the “Company”) establishes the following personal information processing policy (hereinafter referred to as “this Policy”) to protect the information (hereinafter referred to as “personal information”) of individuals (hereinafter referred to as “users” or “individuals”) who use the services (hereinafter referred to as “Company Services”) provided by the Company, comply with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection (hereinafter referred to as the “Information and Communications Network Act”), and to promptly and smoothly process complaints regarding personal information protection of users of the Service.

Article 2 (Principles of Personal Information Processing)
In accordance with relevant laws and this Policy, the Company may collect users' personal information. The collected personal information may only be provided to third parties with the individual's consent. However, if required by law or other legal obligations, the Company may provide users' collected personal information to third parties without the individual's prior consent.

Article 3 (Disclosure of this Policy)
①The Company discloses this Policy through the homepage of the Company's website or through a connected screen from the homepage, allowing users to easily access and review it at any time.
②When disclosing this Policy in accordance with Paragraph 1, the Company utilizes font size, color, and other methods to ensure that users can easily recognize and review the Policy.

Article 4 (Amendment of this Policy)
①This Policy may be revised in accordance with changes in personal information-related laws, guidelines, notifications, or changes in the government or Company Services' policies or content.
②If the Policy is revised in accordance with Paragraph 1, the Company will notify users through one or more of the following methods:
1. By announcing it on the notice section of the main screen of the Company's website or through a separate pop-up window.
2. Notification to Users through Written Notice, Facsimile(FAX), Email, or similar methods.
③The Company shall notify users of the amendments described in Paragraph 2 at least 7 days before the effective date of the revised Policy. However, if there is a significant change in users' rights, the Company shall provide notice at least 30 days in advance.

Article 5 (Information for Providing Company Services)
The Company collects the following information to provide services to users:
1. Required information: Name, Position/Title, Contact Information, Email, Company Name, Sales Volume

Article 6 (Methods of Collecting Personal Information)
The Company collects personal information from users through the following methods:
1. When the user enters their personal information on homepage of the Company's website
2. When the user receives and enters personal information in response to an email sent by the Company.
3. When the user enters information during the use of Company services, such as customer service consultations or activities on the bulletin board.

Article 7 (Use of Personal Information)
The Company uses personal information in the following cases:
1. When necessary for the operation of the Company, such as delivering notices.
2. When responding to user inquiries, handling complaints, or improving services for users.
3. When providing the Company's services.
4. When developing new services.
5. For marketing purposes, such as event and promotional announcements.
6. For demographic analysis, and for analyzing service visit and usage records.

Article 8 (Retention and Use Period of Personal Information)
① The Company retains and uses the user's personal information for the period necessary to achieve the purpose of collecting and using the personal information.
② Notwithstanding the previous paragraph, according to the Company's internal policies, the Company retains records of fraudulent service usage for up to one year from the time of user withdrawal to prevent fraudulent registration and use.

Article 9 (Retention and Use Period of Personal Information According to Relevant Laws)
The Company retains and uses personal information as follows, in accordance with relevant laws:
1. Retention information and retention period under the Act on the Consumer Protection in Electronic Commerce, etc.:
· Records related to contracts or withdrawal of offers: 5 years
· Records related to payment and supply of goods: 5 years
· Records related to consumer complaints or dispute resolution: 3 years
· Records related to display and advertising: 6 months
2. Retention information and retention period under the Protection of Communications Secrets Act:
· Website log records: 3 months
3. Retention information and retention period under the Electronic Financial Transactions Act:
· Records related to electronic financial transactions: 5 years
4. Retention information and retention period under the Act on the Protection and Use of Location Information:
· Records related to personal location information: 6 months

Article 10 (Principles of Personal Information Destruction)
The Company, in principle, will promptly destroy personal information when the purpose of processing that information has been achieved, when the retention and use period has elapsed, or when the information is no longer necessary.

Article 11 (Handling of Personal Information for Inactive Users)
① The Company will notify users in advance and either destroy or separately store the personal information of users who have not used the Company's services for one year.
② The personal information of long-term inactive users will be securely stored separately, and the notification regarding this will be sent to the user's email address at least 30 days before the date of separate storage.
③ If long-term inactive users wish to continue using the service before their information is separately stored in the inactive user database, they can log in to the website (including the mobile app).
④ Long-term inactive users can restore their accounts with their consent by logging into the website.
⑤ The Company will destroy the separately stored personal information after four years without delay.

Article 12 (Procedure for Personal Information Destruction)
① The information entered by users for membership registration or other purposes is transferred to a separate database (in the case of paper, to a separate filing cabinet) after the purpose of processing is achieved and stored for a certain period according to internal policies and other relevant laws (refer to retention and use periods) before being destroyed.
② The Company will destroy personal information after it has been approved for destruction by the responsible person for protection.

Article 13 (Method of Personal Information Destruction)The Company deletes electronically stored personal information using technical methods that prevent the records from being recovered. Personal information printed on paper is destroyed by shredding or incineration.

Article 14 (Measures for Sending Advertising Information)
①The Company will obtain the explicit prior consent of the user when sending advertising information for commercial purposes using digital transmission media. However, in the following cases, prior consent is not required:
1. If the Company has directly collected the contact information from the recipient through a transaction relationship involving goods or services, and the Company intends to send advertising information for commercial purposes related to similar goods or services within six months from the date the transaction was completed.
2. If a telemarketer, in accordance with the on 「Door-to-Door Sales, etc. Act」, verbally informs the recipient of the source of the personal information and makes a telephone solicitation.
② Notwithstanding the previous paragraph, the Company will not send advertising information for commercial purposes if the recipient has expressed an intention to reject such information or has withdrawn their prior consent. The Company will notify the recipient of the results of processing their rejection or withdrawal of consent.
③ If the Company sends advertising information for commercial purposes using digital transmission media between 9 PM and 8 AM the following day, the Company will obtain separate prior consent from the recipient, even if they have previously given consent as per Paragraph 1.
④ When the Company sends advertising information for commercial purposes using digital transmission media, it will clearly specify the following details in the advertisement:
1. The Company name and contact information.
2. Instructions on how to reject receiving further information or withdraw consent.
⑤ The Company will not engage in the following actions when sending advertising information for commercial purposes using digital transmission media:
1. Actions that avoid or hinder the recipient's ability to reject receiving further information or withdraw consent.
2. Automatically generating contact information such as phone numbers or email addresses by combining numbers, symbols, or characters.
3. Automatically registering phone numbers or email addresses for the purpose of sending advertising information for commercial purposes.
4. Taking measures to hide the identity of the sender or the source of the advertisement.
5. Deceptive actions intended to induce the recipient to respond for the purpose of sending advertising information for commercial purposes.

Article 15 (Protection of Children's Personal Information)
① The Company permits membership registration only for users who are 14 years of age or older to protect the personal information of children under the age of 14.
② Notwithstanding Paragraph 1, if the user is a child under the age of 14, the Company will obtain consent for the collection, use, and provision of the child's personal information from the child's legal guardian.
③ In the case of Paragraph 2, the Company will additionally collect information such as the legal guardian's name, date of birth, gender, duplicate registration confirmation information (ID), and mobile phone number.

Article 16 (Access to Personal Information and Withdrawal of Consent)
① Users and legal guardians may view or modify their registered personal information at any time and may request the withdrawal of consent for the collection of personal information.
② To withdraw consent for the collection of personal information or to correct their registration information, users and legal guardians may contact the Personal Information Protection Officer or the responsible department in writing, by phone, or by email, and the Company will take prompt action.

Article 17 (Change of Personal Information, etc.)
① Users may request the correction of errors in their personal information through the method outlined in the preceding article.
② In the case of the previous paragraph, the Company will not use or provide the personal information until the correction is completed. If incorrect personal information has already been provided to a third party, the Company will promptly notify the third party of the correction request and ensure that the correction is made.

Article 18 (User Obligations)
① Users are responsible for keeping their personal information accurate and up-to-date. The user is responsible for any issues arising from the provision of inaccurate information.
② If a user registers with stolen personal information, their membership may be revoked, and they may be subject to punishment under relevant personal information protection laws.
③Users are responsible for maintaining the security of their email addresses and passwords, and other credentials, and they must not transfer or lend them to third parties.

Article 19 (Company's Management of Personal Information)
The Company takes the following technical and administrative protective measures to ensure the security of users' personal information and to prevent loss, theft, leakage, alteration, or damage:

Article 20 (Handling of Deleted Information)
Personal information that has been terminated or deleted at the request of the user or their legal guardian is handled according to the "Retention and Use Period of Personal Information" specified by the Company and is processed in a manner that prevents it from being accessed or used for any other purpose.

Article 21 (Encryption of Passwords)
User passwords are stored and managed using one-way encryption, and personal information can only be accessed or modified by the user who knows the password.

Article 22 (Measures Against Hacking, etc.)
① The Company is committed to preventing the leakage or damage of users' personal information due to hacking, computer viruses, or other intrusions into the information and communications network.
② The Company uses the latest antivirus programs to prevent users' personal information or data from being leaked or damaged.
③ The Company employs an intrusion prevention system and makes every effort to maintain security in preparation for any possible contingencies.
④ The Company ensures that sensitive personal information(whether collected and retained) is securely transmitted over the network using encrypted communication and other methods.

Article 23 (Minimization of Personal Information Handling and Education)The Company limits the number of personnel responsible for handling personal information to the minimum necessary and emphasizes compliance with relevant laws and internal policies through management measures, including education for those handling personal information.

Article 24 (Measures in the Event of Personal Information Leakage, etc.)
When the Company becomes aware of any loss, theft, or leakage (hereinafter referred to as "leakage, etc.") of personal information, the Company will promptly notify the affected users of the following details and report the incident to the Korea Communications Commission or the Korea Internet & Security Agency:
1. The items of personal information that were leaked, etc.
2. The time at which the leakage, etc., occurred
3. Measures that users can take
4. Actions taken by the information and communications service provider
5. Contact information of the department where users can file inquiries or receive consultation

Article 25 (Exceptions to Measures in the Event of Personal Information Leakage, etc.)If the Company has a legitimate reason, such as not being able to find out the user's contact information despite the preceding article the Company may take measures to replace the notification in the preceding article by posting the notice on the Company's website for more than 30 days.

Article 26 (Protection of Personal Information Transferred Overseas)
① The Company does not enter into international agreements regarding users' personal information that would violate the Personal Information Protection Act or other relevant laws.
② The Company will obtain the user's consent before providing (including cases where personal information is looked up), outsourcing, or storing (hereinafter referred to as "transfer") users' personal information overseas. However, if all items under Paragraph 3 of this Article are disclosed in accordance with the Personal Information Protection Act and other relevant laws, or if the user is notified via email or other methods prescribed by Presidential Decree, the Company may not require consent for the outsourcing or storage of personal information.
③ In order to obtain the consent mentioned in Paragraph 2 of this Article, the Company will inform the user of all the following items in advance:
1. The items of personal information to be transferred
2. The country to which the personal information will be transferred, the transfer date, and the transfer method
3. The name of the recipient of the personal information (if a corporation, the name of the corporation and the contact information of the person responsible for information management)
4. The purpose of use and the retention and use period of the personal information by the recipient
④ When the Company transfers personal information overseas with the consent obtained as per Paragraph 2 of this Article, it will take protective measures in accordance with the Personal Information Protection Act, Presidential Decree, and other relevant laws and regulations.

Article 27 (User's Right to Choose Cookie Installation)
① Users have the right to choose whether or not to allow the installation of cookies. Therefore, users can set options in their web browser to allow all cookies, be prompted each time a cookie is saved, or refuse all cookies.
② However, if the storage of cookies is refused, some of the Company's services that require login may be difficult to use.

Article 28 (Method to Specify Cookie Installation Permission)
The method for specifying whether to allow cookie installation (for Internet Explorer) is as follows:
a. Select [Internet Options] from the [Tools] menu.
b. Click the [Privacy] tab.
c. Adjust the settings in [Advanced].

Article 29 (Designation of the Company's Personal Information Protection Officer)
① The Company designates the following related department and Personal Information Protection Officer to protect users' personal information and handle complaints related to personal information.
a. Personal Information Protection Officer
- Name: Sales Division
- Phone Number: 025524200
- Email: nexvione_pr@nexvionedrive.com
b. Personal Information Protection Manager
- Department: Sales Division
- Name of Person in Charge: Sales Division
- Phone Number: 025524200
- Email: nexvione_pr@nexvionedrive.com

Addendum
Article 1 This policy is effective from January 1, 2023.

Addendum
Article 1 This policy is effective from September 1, 2024.