< zentry >('https://zentry.kr/' hereafter referred to as 'zentry inc.')protects the privacy of the subjects under Article 30 of the 「Personal Information Protection Act」. We establish and disclose the personal information policy as follows to ensure that related grievances are promptly and smoothly resolved.

○ This privacy policy will be applied from January 1, 2022.

Article 1 (Purpose of processing personal information)

< zentry >('https://zentry.kr/' hereafter referred to as 'zentry inc.') processes personal information for the following purposes. The processed information will not be used for any purpose other than the following, and if the purpose of the use is changed, necessary measures such as obtaining separate consent under Article 18 of the 「Personal Information Protection Act」 will be implemented.

Article 2 (Processing and Retention Period of Personal Information)

< zentry > processes and retains personal information within the period of retention and use of personal information under laws and regulations or within the period of retention and use of personal information agreed upon when collecting personal information from the information subject.

② Period of each personal information processing and retention is as follows.

Article 3 (Provision of Personal Information to Third Parties)

< zentry >processes personal information only within the scope specified in Article 1 (Purpose of processing personal information). We provide personal information to third parties only in cases falling under the provisions of Articles 17 and 18 of the 「Personal Information Protection Act」 that include the consent of the information subject and special provisions of the law

< zentry > provides personal information to third parties as follows.

Article 4 (Consignment of Personal Information Processing)

< zentry >entrusts the following personal information processing tasks for smooth personal information processing.

< zentry >prohibits the processing of personal information other than to perform entrusted work, implements technical and administrative protection measures, as well as restrictions on re-entrustment, specifies management and supervision of the trustee, compensation for damages Responsibilities are specified in documents such as contracts, and the trustee is supervising the safe handling of personal information under Article 26 of the 「Personal Information Protection Act」 at the time of concluding the consignment contract

③ If the contents of the consignment work or the trustee are changed, we will disclose it through this personal information processing policy without delay.

Article 5 (Rights and Duties of Information Subjects and Legal Representatives and Method of Exercising them)

① The information subject can exercise the right to view, correct, delete, and suspend the processing of personal information at any time for zentry.

② The exercise of the rights under Paragraph 1 can be done in writing, e-mail, fax, etc. under Article 41 Paragraph 1 of the Enforcement Decree of the 「Personal Information Protection Act」 for zentry, and zentry will respond without delay and will take action immediately.

③ The exercise of rights under Paragraph 1 may be done through an agent such as a legal representative of the information subject or a person who has been delegated. In this case, submission needed of power of attorney according to the form attached under “Personal Information Processing Method Notice (No.2020-7)”.

④ The rights of the information subject may be restricted under Articles 35 paragraph 4 and Article 37 paragraph 2 of the 「Personal Information Protection Act」.

⑤ Request for correction and deletion of personal information cannot be requested if the personal information is specified as a collection subject in other laws.

⑥ zentry confirms whether the person who made the request, such as a request for browsing, a request for correction or deletion, or a request for suspension of processing, is the identical person or a legitimate agent according to the rights of the information subject.

Article 6 (Filling items of personal information to be processed)

< zentry>processes the following personal information items.

Article 7 (Destruction of personal information)

① < zentry >
destroys the personal information without delay when the personal information becomes unnecessary, such as the elapse of the personal information retention period or achievement of the processing purpose.

② If the personal information retention period agreed by the information subject has elapsed or the personal information has to be kept under other laws despite the achievement of the purpose of processing, zentry moves the personal information to a separate database (DB) or changes the storage location otherwise.
1. Legal basis:
2. Items of personal information to be preserved: account information, transaction date

③ The procedure and method of personal information destruction are as follows.
1. Destruction procedure
< zentry > selects the personal information for which the reason for destruction occurred and destroys the personal information with the approval of the personal information protection manager of < zentry >.

2. Destruction method

Information in the form of electronic files uses a technical method that cannot reproduce records.

Personal information printed on paper is shredded with a shredder or destroyed through incineration.

Article 8 (Measures to ensure the safety of personal information)

< zentry >
is taking the following measures to ensure the safety of personal information.

1. Minimization of personnel handling personal information and training
We are implementing measures to manage personal information by designating employees who handle personal information and limiting them to the person in charge.

2. Establishment and implementation of an internal management plan
We have established and implemented an internal management plan for the safe handling of personal information.

3. Technical measures against hacking, etc.
<zentry>('zentry inc.')installs a security program to prevent leakage and damage of personal information caused by hacking or computer viruses and performs periodic updates and inspections. We are monitoring and blocking technically and physically.

4. Encryption of personal information
The user's personal information is stored and managed with an encrypted password, so only the user can know it. For important data, a separate security function is used, such as in encrypting files and transmitting data or using a file lock function.

5. Restricting access to personal information
We take necessary measures to control access to personal information by granting, changing, and canceling access rights to the database system that processes personal information, and use an intrusion prevention system to control unauthorized access from outside.

6. Use of locks for document security
Documents and auxiliary storage media containing personal information are stored in a safe place with a lock..

7. Access control for unauthorized persons
A separate physical storage place for personal information is made and access control procedures are established and operated.

Article 9 (Matters concerning the installation, operation, and rejection of automatic personal information collection devices)

① zentry uses 'cookies' to store and retrieve user information from time to time to provide users with individually customized services.
② Cookies are a small amount of information that the server (HTTP) used to operate the website sends to the user's computer browser and is also stored on the hard disk of the user's PC.
Purpose of use of cookies: It is used to provide optimized information to users by identifying the types of visits and usage, popular search terms, secure access, etc. to each service and website visited by the user.
B. Installation, operation, and rejection of cookies: You can refuse to store cookies by setting options in the Tools>Internet Options>Personal Information menu at the top of the web browser.
C. If you refuse to store cookies, you may experience difficulties in using customized services.

Article 10 (Personal Information Protection Officer)

zentry is responsible for the overall handling of personal information and designates a person in charge of personal information protection as follows for complaint handling and damage relief of information subjects related to personal information processing.

※ You will be connected to the team in charge of personal information protection.

② The information subject may inquire about all personal information protection-related inquiries, complaint handling, damage relief, etc. that occurred while using zentry's service (or business) to the person in charge of personal information protection and the team in charge. zentry will answer and handle inquiries from information subjects without delay.

Article 11 (Request for browsing personal information)
The information subject may file a request for access to personal information under Article 35 of the Personal Information Protection Act to the following teams.
< zentry >will make every effort to promptly process the personal information access request of the information subject.

Article 12 (Remedies for Infringement of Rights)

The information subject may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency or the Personal Information Infringement Report Center to receive relief from personal information infringement. In addition, for other personal information infringement reports and consultations, please contact the following organizations.

1. Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)
4. National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)

A person whose rights or interests have been infringed due to a disposition or omission taken by the head of a public institution who responds to a request under Article 35 (Perusal of Personal Information), Article 36 (Correction/Deletion of Personal Information), and Article 37 (Suspension of Processing of Personal Information, etc.) of the 「Personal Information Protection Act」, may file an administrative appeal under the Administrative Appeals Act.

※ Please refer to the Central Administrative Adjudication Committee website (www.simpan.go.kr) for more information on administrative adjudication.

Article 13 (Change of Privacy Policy)

① This personal information processing policy is effective from January 1st, 2022.