MEPION

MEPION Co., Ltd.(‘http://mepion.co.kr’이하 ‘MEPION’) processes personal information for the following purposes and does not use it for purposes other than the following purposes
- Confirmation of customer registration, identification of customers by providing service to customers, authentication, maintenance and management of membership, settlement of money due to supply of goods or services, supply or delivery of goods or services, etc.

① MEPION consigns the following personal information processing tasks for smooth personal information business processing.
② MEPION, when concluding a contract, agrees with the provisions of Article 25 of the Personal Information Protection Act in order to prohibit the processing of personal information except for the purpose of carrying out the contract, technical and administrative protection measures, restricting the reassignment, managing and supervising the fiduciary, It is stated in the document and supervises whether the trustee handles personal information securely.
③ If the contents of the consignment service or the fiduciary is changed, we will disclose it through this personal information processing policy without any delay.

You may exercise the following rights as your personal information.
① The Subject may exercise any of the following privacy rights with respect to MEPION.

1. Personal information request
2. If there is an error, request correction
3. Deletion request
4. Request to stop processing

① MEPION processes the following personal information items.

1. Sign Up
- Required : password, Login ID, Mobile phone number, Name, Email
- Optional : Home address, Home phone number, Preferred store

2. Online Consultation
- Required : Customer name, Contact, Email Address

3. Login History
- Collection Items : IP Address, Visit date and time

MEPION will, in principle, destroy personal information without delay when the purpose of processing personal information is achieved. The procedures, deadlines and methods of destruction are as follows.

- Destruction procedure
The information entered by the user is transferred to a separate DB after the completion of the purpose (separate documents in the case of paper) and is stored or temporarily destroyed after a certain period of time according to internal policies and other related laws. At this time, the personal information transferred to DB will not be used for other purposes unless it is under the law.

- Period of destruction
In the case where the personal information of the user has elapsed, within 5 days from the end of the period of holding the personal information, if the personal information such as accomplishing the purpose of processing personal information, abolishing the service, Within 5 days from the day when it is deemed unnecessary to process the personal information. However, the following information will be kept for the specified period for the following reasons.

- Online consultation history
Retention period : 1 Year (Consent of information entity)

MEPION, pursuant to Article 29 of the Personal Information Protection Act, has the following technical, administrative and physical measures to ensure safety.

1. Minimization and training of personal information handling staff Employees who deal with personal information are designated and limited to the person in charge, and measures are taken to minimize personal information.
2. Perform regular self-audits We conduct our own audits regularly (once a quarter) to ensure the stability of handling personal information.
3. Establish and implement an internal management plan We have established and implemented an internal management plan for the safe handling of personal information.
4. Encryption of personal information User's personal information is encrypted and stored and managed so that only the user can know, and important data is used with separate security functions such as encrypting file and transmission data or using file lock function.
5. Technical measures against hacking MEPION installs a security program, periodically updates and checks, installs the system in an area controlled from outside, and technically and physically monitors and blocks it to prevent leakage and damage of personal information caused by hacking or computer viruses.
6. Restrict access to personal information We take necessary measures to control access to personal information through granting, modifying, and deleting access rights to the database system that handles personal information, and we control unauthorized access from outside using an intrusion prevention system.
7. Keep your connection history and prevent forgery We maintain and manage the records of access to the personal information processing system for at least six months, and use security features to prevent forgery, theft, and loss of access logs.

① MEPION is responsible for the handling of personal information, and has designated the person in charge of personal information protection as follows for the complaints of the information subject related to personal information processing and remedy of damage.

▶ Privacy Officer
- Name : JUNG HYUK NAM
- Rank : CEO
- Phone Number : 02-838-4554
- Email : jhnam@mepion.co.kr

※ You will be taken to the privacy department.

① This Privacy Policy will be effective from the effective date. If there is any addition, deletion or correction of the change in accordance with the laws and policies, it will be notified from the announcement 7 days before the change.

- Date of announcement : January 1, 2008
- Date of enforcement : January 1, 2008