Privacy Policy

We recognize the importance of protecting personal information and consider the proper handling of such information to be our social responsibility. Accordingly, we hereby declare that we will strive to protect personal information based on the following policy (hereinafter referred to as the “Privacy Policy”).
Unless otherwise defined in this Privacy Policy, terms used herein shall be interpreted in accordance with the definitions set forth in the Act on the Protection of Personal Information (Act No. 57 of 2003) and other related laws and regulations (hereinafter referred to as the “Applicable Data Protection Laws”).

1. Company Information

Please refer to the "Company Overview" section under "About Us" on our website.

2. Compliance with Applicable Laws and Regulations

In carrying out operations involving the handling of personal information, we comply with applicable data protection laws and regulations, guidelines, industry self-regulatory rules, and internal policies.

3. Collection of Personal Information

We collect personal information by lawful and fair means.
In addition, we do not collect sensitive personal information without obtaining the prior consent of the individual, except where permitted under applicable data protection laws.

4. Use of Personal Information

(1) We use personal information within the scope of the purposes of use publicly announced in advance or specified at the time of collection, and only to the extent necessary for the performance of our business.

(2) We do not use personal information in a manner that may encourage or induce illegal or improper acts.

(3) When we share personal data with third parties or entrust the handling of personal data to third parties, we conduct thorough due diligence on such parties and exercise appropriate supervision to ensure the confidentiality of the personal data.

5. Provision of Personal Information to Third Parties

We do not provide personal data to third parties without obtaining the prior consent of the individual, except where permitted under applicable data protection laws.

6. Cross-Border Transfer of Personal Data

When we disclose or provide personal data to third parties in foreign countries, we comply with applicable data protection laws and regulations. In principle, we obtain the prior consent of the individual after providing the information required under such laws and regulations.

7. Security Measures for Personal Information

(1) We strive to keep personal information accurate and up to date and to properly store and manage such information. We also implement necessary security measures to prevent unauthorized access to, or leakage of, personal information.

(2) The specific security measures we implement are as follows:

(i) Establishment of a Basic Policy and Development of Rules for the Handling of Personal
To ensure the proper handling of personal data, we have established a basic policy that includes compliance with applicable data protection laws and regulations, as well as procedures for handling inquiries and complaints.

(ii) Organizational Security Measures
We have appointed a person responsible for the handling of personal data, clarified the scope of personal data handled by employees and the employees responsible for such handling, and established a reporting system to ensure that any actual or suspected violations of applicable data protection laws or internal regulations are promptly reported to the responsible person.
We conduct periodic self-assessments of the handling of personal data, as well as audits by other departments and external parties.

(iii) Personnel Security Measures
We provide training to employees on the proper handling of personal data.
We include provisions regarding confidentiality of personal data in our employment regulations.

(iv) Physical Security Measures
We implement measures to control employee entry to and exit from areas where personal data is handled, restrict the equipment brought into such areas, and prevent unauthorized persons from accessing personal data.

(v) Technical Security Measures
We implement access controls to restrict the scope of personnel authorized to handle personal data and the personal data databases they may access.
We implement measures to protect information systems that handle personal data from unauthorized external access and malicious software.

8. Requests for Notification, Disclosure, Correction, Suspension of Use, and Deletion of Retained Personal Data

We will respond appropriately and promptly, within a reasonable scope, to requests for notification of purpose of use, disclosure, correction, suspension of use, and deletion of retained personal data, as well as to complaints and inquiries, in accordance with applicable data protection laws and regulations.
Please contact the “Personal Information Inquiry Desk” provided separately.

9. Personal Information Protection Compliance Program

In order to implement this Privacy Policy, we establish a Personal Information Protection Compliance Program (including this Privacy Policy, the personal information protection rules, and other related rules and regulations).
We ensure that this program is fully communicated to and implemented by our employees and other relevant parties, and we maintain and continuously review and improve it to ensure the proper management of personal information.