Ltd. (hereinafter referred to as 'ART OnO') has the following processing policy to protect the personal information and rights and interests of users in accordance with the Personal Information Protection Act and to facilitate the smooth handling of users' grievances related to personal information. ART OnO will notify you through the website notice (or individual notice) when revising the privacy policy.

• This policy is effective January 31, 2025.

Purposes of processing personal data

ART OnO processes personal information for the following purposes. The processed personal information will not be used for any purpose other than the following purposes, and prior consent will be obtained if the purpose of use is changed.

1. Sign up and manage your homepage: Personal information is processed for the purpose of confirming the intention to join the membership, identifying and authenticating the person in accordance with the provision of membership services, maintaining and managing membership, various notices and notifications, and preserving records for dispute settlement.
2. Providing goods or services: We process personal information for the purpose of providing content, etc.
3. Use in marketing and advertisingWe process personal data for the purpose of providing you with information about events and advertisements and opportunities to participate in them.

Privacy file status

• Personal information file name: Registration
• Personal information items: email, password, login ID, gender, date of birth, name, occupation
• Collection method: Homepage
• Retained on: Inside Information
• Retention period: 3 years

Processing and retention of personal information

1. ART OnO processes and retains personal information within the period of retention and use of personal information in accordance with laws and regulations or within the period of retention and use of personal information agreed upon when collecting personal information from the information subject.
2. The processing and retention periods for each are as follows
   • Sign up and manage your homepage: The relevant personal information will be retained and used for the above purposes for up to three years from the date of consent to collection and use.
   • Rationale: For internal information aggregation
   • Related laws: Records on collection/processing and use of credit information: 3 years

Disclosure of Personal Information to Third Parties

1. ART OnO will only provide personal information to third parties in accordance with Articles 17 and 18 of the Personal Data Protection Act, including the consent of the data subject and special provisions of the law.
2. ART OnO provides personal information to third parties as follows
   • To whom personal information is provided: ART OnO Co.
   • Recipient's personal information used for: email, password, login ID, gender, date of birth, name, occupation
   • Recipient's retention and use period: 3 years

Outsourcing personal data processing

1. ART OnO consigns personal information processing as follows to ensure smooth personal information processing.
2. In accordance with Article 25 of the Personal Information Protection Act, ART OnO specifies the prohibition of processing personal information other than for the purpose of performing entrusted tasks, technical and administrative protection measures, restrictions on re-consignment, management and supervision of the entrustee, and liability for damages in documents such as contracts, and supervises the entrustee's safe processing of personal information.
3. If the content of the consignment or the trustee changes, we will disclose it through this privacy policy without delay.

Rights and obligations of data subjects and legal representatives and how to exercise them

As a data subject, you can exercise the following rights

1. Data subjects may exercise their rights to access, correct, delete, or request suspension of processing of their personal information at any time with ART OnO.
2. The exercise of rights under Paragraph 1 may be made to ART OnO in writing, e-mail, facsimile transmission (FAX), etc. in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and ART OnO will take action without delay.
3. You may exercise your rights under Paragraph 1 through a representative, such as a legal representative or an authorized person. In this case, a power of attorney in the form of Appendix No. 11 to the Enforcement Rules of the Personal Information Protection Act must be submitted.
4. The rights of the information subject may be limited by Article 35 (5) and Article 37 (2) of the Personal Information Protection Act to request access to and suspension of processing of personal information.
5. A request for correction or deletion of personal information cannot be made if the personal information is subject to collection under another law.
6. ART OnO verifies whether the person making the request is the person or his/her authorized representative, including access to the information in accordance with the rights of the information subject, correction or deletion, and suspension of processing.

Items of personal data we process

1. ART OnO processes the following categories of personal data
   • Sign up and manage your homepage
     • Required: email or phone number, name, and address
     • Optional: None

Destruction of personal information

In principle, ART OnO will destroy personal information without delay when the purpose of processing has been fulfilled. The procedures, deadlines and methods of destruction are as follows.

1. Destruction Procedures: The information entered by the user is transferred to a separate DB (separate documents in case of paper) after the purpose is achieved and stored for a certain period of time in accordance with internal policies and other relevant laws or destroyed immediately. In this case, the personal information transferred to the DB will not be used for any other purpose unless required by law.
2. DestroyedThe personal information of the user shall be destroyed within 5 days from the end of the retention period if the retention period of the personal information has elapsed, or within 5 days from the date the personal information is recognized as unnecessary, such as the achievement of the purpose of processing the personal information, the abolition of the service, or the termination of the business.
3. Destruction methods: Information in electronic file form uses technical methods that make it impossible to reproduce the record. Personal information printed on paper is destroyed by shredding or incineration.

Installation, operation, and rejection of automatic personal information collection devices

1. ART OnO uses 'cookies' to store and retrieve usage information from time to time to provide individualized services.
2. Cookies are small amounts of information sent to your computer's browser by the server (http) used to run a website and are sometimes stored on the hard disk of your PC computer.
   • What do we use cookies for?It is used to provide optimized information to users by identifying the types of visits and usage, popular search terms, and secure connections for each service and website visited by users.
   • Installing, operating, and rejecting cookiesYou can refuse to store cookies by setting the options in the Tools > Internet Options > Privacy menu at the top of your web browser.
   • If you refuse to save cookies: You may have difficulty accessing personalized services.

Privacy Officer

1. ART OnO is responsible for the overall handling of personal information, and designates a person in charge of personal information protection as follows to handle complaints and damage relief from information subjects related to the handling of personal information.
   • Privacy Officer
     • Full Name: Jae Myung Noh
     • Job title: President
     • Contact: 02-707-2024, moc.ono-traobfsctd-93b8c0@ofni You will be directed to the Privacy Office.
2. The information subject may inquire about all personal information protection-related inquiries, complaints, damage relief, etc. arising from the use of ART OnO's services (or business) to the person in charge of personal information protection and the department in charge. ART OnO will respond to and handle inquiries from the information subject without delay.

Changing your privacy policy

1. This Privacy Policy will be applied from the effective date, and any additions, deletions, and corrections to the contents in accordance with laws and policies will be notified through a notice 7 days prior to the effective date of the changes.

Measures to ensure the safety of personal information

In accordance with Article 29 of the Personal Information Protection Act, ART OnO takes the following technical/administrative and physical measures to ensure safety.

1. Develop and implement an internal control plan: We have established and implemented an internal management plan for the safe handling of personal information.
2. Restrict access to personal information: We take necessary measures to control access to personal information by granting, changing, and revoking access rights to the database system that processes personal information, and control unauthorized access from the outside using an intrusion prevention system.