AllConnect does not use members' personal information beyond the scope notified in this article without the consent of the member or unless provided by the laws and regulations. The purposes of using the collected personal information are as follows:

[Mandatory Usage]

To confirm the intention of membership registration, for personal identification, to prevent the misuse and unauthorized use of bad members, to limit the registration and number of registrations, for age verification, to verify the identity of the legal representative later, for record preservation for dispute resolution, for complaint handling, etc., personal information is used for member management.

In addition to providing services, personal information is used for analyzing service usage records and access frequency, statistics on service use, providing customized services based on service analysis and statistics, demographic analysis, analysis of service visits and usage records, etc., for discovering new service elements and improving existing services.

For limiting the use of members who violate the terms and conditions of service and laws, preventing and sanctioning acts that interfere with the smooth operation of the service, including fraudulent use, preventing account theft and fraudulent transactions, delivering notices such as terms and conditions amendments, preserving records for dispute resolution, handling complaints, etc., personal information is used for user protection and service operation.

Personal information is used for identity verification for payment of usage fees and for registering payment information.

[Optional Usage]

Personal information is used for marketing and promotional purposes such as providing event information and participation opportunities, promotional information, etc.

Personal information is used to build a service usage environment where users can feel secure in terms of security, privacy, and safety.

Collection and use for identifying and handling causes in case of an accident

A. Items of Personal Information Collected

1) Depending on the type of member, AllConnect collects the following personal information as mandatory items:

· Mobile phone number

· Business registration number

· Name

· Address and detailed address

· Signature

2) During the service usage process or business processing, the following information may be automatically generated and collected:

· IP Address, cookies, visit date and time, service usage records, bad usage records, device information, consultation history (service-related inquiries, call contents, etc.), app installation information, network location information, etc.

3) AllConnect may regularly verify or confirm the information of members deemed necessary for service operation.

B. Method of Collecting Personal Information

AllConnect collects personal information by the following methods:

· Membership registration and information modification

· Provided by partners

a. AllConnect may retain and use the personal information of members as long as they maintain their membership.

b. Upon a member's withdrawal or loss of eligibility, AllConnect will delete or destroy the collected member information without a separate request from the member. However, regardless of the member's withdrawal or loss of eligibility, the following information will be preserved for the specified period for the reasons below:

1) Information retention according to internal policy

· Record of member information for the restriction of rejoining of withdrawn members: 3 months

· Record of member information for the restriction of rejoining of restricted users and abusers: 1 year or permanently (stored separately) depending on the restriction period

2) Reasons for information retention according to relevant laws

· Records on display/advertising: 6 months (Act on Consumer Protection in Electronic Commerce, Etc.)

· Records related to contracts or withdrawal of offers: 5 years (Act on Consumer Protection in Electronic Commerce, Etc.)

· Records on payment and supply of goods, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, Etc.)

· Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce, Etc.)

· Login records, data on the tracking of the location of the information and communication equipment used by the internet user for accessing the information and communication network: 3 months (Protection of Communications Secrets Act)

· Records on electronic financial transactions: 5 years (Electronic Financial Transactions Act)

· Other telecommunication fact confirmation data (subscriber's telecommunication date and time, start/end time of communication, frequency of use, location tracking data of the base station that can confirm the location of the information and communication equipment connected to the information and communication network): stored for 12 months each

Members have the right to refuse consent to the collection and use of personal information. However, if they refuse to consent to the collection and use of the minimum necessary personal information for contract execution and fulfillment, service use will be impossible, and if they refuse to consent to the collection and use of personal information for marketing activities and promotions and/or to optional collection and use, they may not receive information on events, benefits, or be ineligible for gifts, promotional items, partner services, discount benefits, and point accumulation, among other disadvantages.

AllConnect will, in principle, destroy the information without delay once the purpose of collecting and using the personal information has been achieved. However, if it is necessary to retain personal information according to related laws, the information will be destroyed in an irrecoverable manner after the expiration of the retention period, and the procedure and method of personal information destruction by AllConnect are as follows:

a. Destruction Procedure

The information entered by the member is transferred to a separate database (in the case of paper, to a separate document box) after the purpose is achieved and is stored for a certain period according to internal regulations and other relevant laws or is immediately destroyed. At this time, personal information transferred to the database will not be used for other purposes unless required by law.

b. Destruction Method

Electronic files are destroyed using methods that prevent recovery and reproduction. Personal information printed on paper is destroyed by shredding or incinerating.

A. Members and legal representatives can exercise the following rights regarding personal information protection at any time, and can request access, correction, deletion, and suspension of processing of their or their representative's registered personal information.

· Demand for access to personal information

· Request for correction in case of errors, etc.

· Request for deletion

· Request for suspension of processing

B. The exercise of rights under paragraph A of this Article can be done in writing or via email, and Olconek will take immediate action and notify the processing results by writing or text message, etc.

C. If a member requests correction of an error in personal information, Olconek will not use or provide the personal information to a third party until the correction is completed. Furthermore, if incorrect personal information has been provided to a third party, Olconek will immediately notify the third party of the correction results.

D. If a member requests the deletion of personal information, it will be in accordance with the personal information processing and retention period specified in Article 3 and the destruction procedure and method of personal information specified in Article 5.

Olconek uses 'cookies' that store and retrieve members' information from time to time. A cookie is a very small text file sent by the server used to operate the website and mobile app of the city to the member's browser and stored on the member's computer hard disk. The purpose of using cookies and how to refuse cookie settings are as follows.

B. How to refuse cookie settings

1) Members have the option to install cookies. Therefore, members can allow all cookies, go through confirmation every time a cookie is stored, or refuse the storage of all cookies by setting options in their web browser.

2) The method of setting whether to allow the installation of cookies (in the case of Internet Explorer) is as follows:

Tools at the top of the web browser > Internet Options > Privacy

3) However, if a member refuses the installation of cookies, there may be difficulties in providing technical support and services, and in such cases, Olconek will not be responsible.

Olconek processes users' personal information only within the scope of "1. Purpose of Collection and Use of Personal Information" and "2. Items of Personal Information Collected", and will not use or provide the members' personal information beyond the agreed scope without prior consent of the member. However, in the following cases, Olconek may use and provide members' personal information with care:

· In cases where the member has agreed in advance to the provision to third parties

· When necessary for fee settlement, transferring necessary information for insurance contracts, etc., according to the provisions of the law or for the purpose of investigation, under the procedures and methods prescribed by law at the request of investigative agencies and supervisory authorities

· When necessary for the creation of statistics, academic research, or market research, and provided in a form that cannot identify specific individuals

In other cases where it is necessary to provide personal information to a third party for better service provision, Olconek will specify in advance the recipient of the information, the purpose of personal information use by the recipient, the items of personal information provided, the period of retention and use of personal information by the recipient, the fact that the member has the right to refuse consent to information provision, and the disadvantages of refusing consent, and will obtain the member's consent.

Olconnec entrusts part of the tasks that are essential for the provision of services to external contractors and ensures that the entrusted company (contractee) processes personal information in accordance with laws related to personal information by prohibiting the processing of personal information for purposes other than the execution of entrusted tasks, implementing technical and managerial protective measures, limiting re-entrustment, managing and supervising the contractee, and stipulating responsibilities for damages through "Personal Information Processing Entrustment Contract" and other documents.

In cases where it is necessary to entrust the processing of personal information for the performance of service provision contracts and for the convenience of "members", consent to entrustment is replaced by the disclosure of this personal information processing policy in accordance with Article 25, Paragraph 2 of the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., and Olconnec will immediately disclose any changes in the content of the processing tasks or the contractee through this personal information processing policy.

For the performance of service provision contracts and the enhancement of member convenience, Olconnec entrusts the following tasks to external companies:

Contractee: Entrusted Tasks

(Inc.)ALL-CONEC: Text message dispatching agency

Olconnec strives to manage members' personal information securely and takes the following measures to protect personal information beyond the level required by the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., and the Personal Information Protection Act.

1) Administrative measures: Designating a personal information management officer, establishing and implementing an internal management plan that includes the composition of a personal information protection organization, limiting the processing of personal information to the minimum necessary, matters concerning operation, and matters concerning the education of personal information processors.

2) Technical measures: Establishing and implementing standards for granting, changing, and deleting access rights to the systematically organized database system that enables the processing of personal information, storing and supervising the access date and time, processing details, etc., when personal information processors access the personal information processing system and process personal information.

To protect members' personal information and handle complaints related to personal information, Olconnec has designated the following department and personal information manager. Members can report all personal information protection-related complaints that occur while using the service to the personal information manager or the responsible department. Olconnec will provide prompt and sufficient responses to members' reports.

For reporting or consulting on personal information infringement, please contact the following institutions:

Personal Information Infringement Report Center (http://www.1336.or.kr/ dial 118 without area code)

Information Protection Mark Certification Committee (http://www.eprivacy.or.kr/ 02-580-0533~4)

Supreme Prosecutors' Office High-Tech Crime Investigation Division (http://spo.go.kr/ 02-3480-2000)

Korean National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr/ 02-392-0330)