■ Items of Personal Information Collected

The Company collects the following personal information for consultation, service application, and other purposes.

• · Collected Items: Name, Date of Birth, Gender, Email, Service Usage Records, Access Logs, Cookies, Connection IP Information
• · Collection Methods: Website (Membership Registration, Bulletin Boards)

■ Purpose of Collection and Use of Personal Information

The Company utilizes the collected personal information for the following purposes:

• · Member Management
• - Identity verification according to the use of membership services, personal identification, prevention of unauthorized and fraudulent use by rogue members, confirmation of intent to join, age verification, and confirmation of legal guardian consent when collecting personal information of children under 14.
• · Marketing and Advertising
• - Tracking access frequency or generating statistics on members' service usage.

■ Retention and Use Period of Personal Information

In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved. However, if it is necessary to preserve the information according to the provisions of relevant laws, the Company retains the member information for a certain period as stipulated by the relevant laws below:

• · Records related to display/advertisement: 6 months (Act on the Consumer Protection in Electronic Commerce, etc.)
• · Records related to contracts or cancellation of subscriptions: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• · Records related to payment and supply of goods, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• · Records related to consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• · Records related to the collection/processing and use of credit information: 3 years (Credit Information Use and Protection Act)

■ Procedures and Methods for Destroying Personal Information

In principle, the Company destroys personal information without delay after the purpose of its collection and use has been achieved.

The destruction procedures and methods are as follows:

• · Destruction Procedure
• - Personal information transferred to a separate DB will not be used for any purpose other than retention unless required by law.
• · Destruction Method
• - Personal information stored in electronic file formats is deleted using technical methods that render the records unrecoverable.

■ Provision of Personal Information

The Company, in principle, does not provide users' personal information to external parties.

However, exceptions are made in the following cases:

• - If users have given prior consent.
• - In accordance with the provisions of laws and regulations, or if there is a request from investigative agencies for investigative purposes in accordance with the procedures and methods prescribed by law.

■ Consignment of Collected Personal Information

The Company does not consign your information to external companies without your consent. If such a need arises in the future, we will notify you of the entrusted party and the details of the entrusted tasks, and obtain your prior consent if necessary.

■ Rights of Users and Legal Guardians and Methods of Exercise

Users may view or modify their registered personal information at any time and may also request the cancellation of their membership.

To view or modify personal information, users can click 'Modify Personal Information' (or 'Edit Member Information', etc.). To cancel membership (withdraw consent), users can click 'Withdraw Membership' and directly view, correct, or withdraw after going through the identity verification process.

Alternatively, you may contact the Chief Privacy Officer in writing, by phone, or by email, and we will take action without delay.

If you request the correction of errors in personal information, we will not use or provide the personal information until the correction is completed. Furthermore, if incorrect personal information has already been provided to a third party, we will notify the third party of the correction result without delay so that the correction can be made.

The Company processes personal information that has been canceled or deleted at the request of the user in accordance with the "Retention and Use Period of Personal Information Collected by the Company," and ensures that it cannot be viewed or used for any other purpose.

■ Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

The Company operates 'cookies' that frequently store and retrieve your information.

A cookie is a very small text file sent by the server used to operate the website to your browser and is stored on your computer's hard disk.

The Company uses cookies for the following purposes:

• · Purpose of Using Cookies, etc.
• - To provide targeted marketing and personalized services by analyzing access frequency and visiting times of members and non-members, identifying users' preferences and interests, tracking traces, and determining the degree of participation in various events and the number of visits.
• - You have the option to install cookies. Therefore, you can allow all cookies, require confirmation every time a cookie is saved, or refuse the storage of all cookies by setting the options in your web browser.
• · How to Refuse Cookie Settings
• - Example: You can refuse cookie settings by selecting the options of your web browser to allow all cookies, require confirmation every time a cookie is saved, or refuse the storage of all cookies.
• - Example of Setting Method (For Internet Explorer): Tools at the top of the web browser > Internet Options > Privacy
• - However, if you refuse to install cookies, there may be difficulties in providing the service.

■ Customer Service Regarding Personal Information

To protect customers' personal information and handle complaints related to personal information, the Company has designated the following relevant department and Chief Privacy Officer.

■ Chief Privacy Officer (CPO)

• · Name:
• · Contact: 062.940.8311
• · Email: efgwhow@howon.com

You may report all complaints related to personal information protection arising from the use of the Company's services to the Chief Privacy Officer or the department in charge.

The Company will provide prompt and sufficient responses to users' reports.

If you need to report or consult about other personal information infringements, please contact the following organizations:

• 1. Personal Information Dispute Mediation Committee (www.kopico.go.kr / Dial 1833-6972)
• 2. E-Privacy Mark Certification Committee (www.eprivacy.or.kr / +82-2-550-9531~2)
• 3. Supreme Prosecutors' Office Cyber Investigation Division (www.spo.go.kr / Dial 1301)
• 4. National Police Agency Cyber Bureau (ecrm.police.go.kr / Dial 182)