Personal information processing policy

In accordance with the Personal Information Protection Act, Lai Pack has established and implemented a personal information processing policy to protect the personal information of the data subject and to handle related grievances quickly and smoothly.

The company's personal information processing policy contains the following information.
1. Purpose of processing personal information
The company processes personal information for the following purposes. The personal information being processed is not used for any purpose other than the following, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent under the Personal Information Protection Act.

A. Contact Us – Check and reply to customer inquiries
B. Recruitment screening – proceeding with the applicants' recruitment process

2. Personal information items to be processed
A. Contact Us
Category collection items
Contact Us Name, Phone Number, Email
B. Recruitment screening
Category collection items
When submitting a job application,
• Personal information: photo, name (Korean, English), date of birth, gender, email, mobile phone number, address
• Academic background information: school period, school name, major, graduation/complete status, type of degree, location, rating/perfect score
• Experience details: Work period, job name, duties in charge, position, annual salary, reason for retirement
• Education/award, extracurricular activities: date (period), content, organization in charge, and other contents
• Language and qualifications: language, level, test name, score, type of qualification/license, place of issue, acquisition date
• Other: Military completion (reason for exemption), service period, preferential employment requirements
• Contents related to personal information described in self-introduction, career description, and other job applications;
Talent Pool registration (optional) Sangdong

3. Processing and holding period of personal information
① The company processes and holds personal information within the period of use, or the period of use of personal information agreed upon when collecting personal information from the subject of information under laws and regulations.
② The processing and holding period of each personal information is as follows.
A. Contact Us
– Destroy immediately (within 5 days) after completion of customer inquiry reply
B. Recruitment screening
- Submission of application for employment: Immediate destruction (within 5 days) after confirmation of employment status
- Registration of talent pool: Retention and destruction until the end of the year 2 years from the date of consent

4. Rights and obligations of the information subject and legal representative and the method of exercising them
① The information subject may exercise the right to view, correct, delete, and request suspension of processing of personal information to the company at any time.
② The exercise of rights under paragraph (1) may be made to the company in writing, e-mail, and fax in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and the company shall take measures without delay.
③ The exercise of rights under paragraph (1) may be conducted through a legal representative of the information subject or a delegated person, etc. In such cases, "Notification on how to process personal information (No. 2020-7)" You must submit a power of attorney in accordance with attached Form 11.
④ Requests for access to personal information and suspension of processing may be restricted by Article 35 (4) and Article 37 (2) of the Personal Information Protection Act.
⑤ Requests for correction and deletion of personal information cannot be requested if the personal information is specified as a collection target in other laws.
⑥ The company shall verify whether the person who requested permission, such as request for perusal, correction/deletion, or suspension of processing, is the person or a legitimate agent.

5. Destruction of personal information
① If personal information becomes unnecessary, such as the lapse of the personal information retention period or the achievement of the purpose of processing, the company shall destroy the personal information without delay.
② If the retention period of personal information agreed by the data subject has elapsed or the purpose of processing has been achieved, the personal information shall be moved to a separate database (DB) or stored differently.
③ The procedure and method of destroying personal information are as follows.
A. Revocation procedure
- The company selects personal information for which the reason for destruction occurred, and destroys personal information with the approval of the company's personal information protection manager.
B. Destruction method
- Information in the form of electronic files is destroyed so that records cannot be reproduced, and personal information printed on paper is destroyed by crushing or incineration with a shredder.

6. Measures to ensure the safety of personal information
The company is taking the following measures to ensure the safety of personal information.
A. Management measures: Minimize and educate employees handling personal information, establish and implement internal management plans
B. Technical measures: technical measures against illegal access to information and communication networks, such as hacking, access control to personal information, and installation of security programs
C. Physical measures: installation of intrusion prevention system, use of locking devices for document security, and control of access to unauthorized personnel

7. Matters concerning the installation, operation, and rejection of automatic personal information collection devices;
① The company uses "cookie" that stores usage information and loads it from time to time to provide individual customized services to users of the website.
② Cookies are a small amount of information that the server (http) used to run the website sends to the user's computer browser and is also stored on the hard disk in the user's PC computer.
A. Purpose of Use of Cookies
- It is used to improve the homepage and provide optimal information by grasping the user's visit record (IP Address, access time), access method, etc.
B. Installation, operation, and rejection of cookies
- Explorer: You can refuse to save cookies through the Tools > Internet Options > Options settings on the Privacy menu at the top of your web browser.
- Chrome : You can refuse to save cookies by using the Chrome Customization and Control > Settings > Options settings in the Privacy and Security menu at the top of your web browser.
- Edge : You can refuse to save cookies through the settings at the top of your web browser and through the options settings in the Cookies and Site Permissions menu.
C. Disadvantage if rejected
- Refusing to save cookies can make it difficult to use customized services.

8. Person in charge of personal information protection
The company is in charge of the affairs related to personal information processing, and designates a person in charge of personal information protection for the handling of complaints and damage relief of information subjects related to personal information processing.
Also, we operate a department in charge of personal information protection as follows.
Personal information related to Contact Us Personal information related to employment screening

070-4651-0840


9. Request for access to personal information
The information subject may request the personal information protection department in 8. above to view personal information under the Personal Information Protection Act.

10. How to remedy infringement of rights and interests
The information subject can report all complaints related to personal information protection that occur while using the company's service to the person in charge of personal information protection or the department in charge. The company will quickly and fully respond to users' reports.

If you need to report or consult on other personal information violations, please contact the institution below.
- Personal Information Infringement Reporting Center (https://privacy.kisa.or.kr)
- Cyber Investigation Division of the Supreme Prosecutors' Office's Scientific Investigation Department (https://cybercid.spo.go.kr/,, 1301)
- Cybersecurity Bureau of the National Police Agency (http://cyberbureau.police.go.kr/index.do, No. 182

11. Change of personal information processing policy
This personal information processing policy will take effect from January 13, 2022.