Skonec Entertainment Co., Ltd. (hereinafter, "Skonec Entertainment" or "Company") values the privacy of its users and complies with relevant laws such as the PERSONAL INFORMATION PROTECTION ACT.

• The Company will inform the users of the purpose and manner in which the personal information the users provide is used and what measures are being taken to protect the users’ personal information through the Privacy Policy.
• If the Company revises the Privacy Policy, it will notify the users through a notice on the homepage (or individual notice).

The Company discloses the following in accordance with Article 30 (Establishment and Disclosure of Privacy Policy) of the PERSONAL INFORMATION PROTECTION ACT.

• ①Consent to the collection and use of personal information
• ②Purpose of collection and use of personal information
• ③Particulars and procedures of personal information to be collected
• ④Disclosure of personal information to third parties
• ⑤The period for retaining and using personal information
• ⑥Procedures and methods of destruction of personal information
• ⑦The content of the outsource the processing of personal information and the outsourcer
• ⑧Rights of the users and legal representatives and how to exercise them
• ⑨Notification of business transfers, etc.
• ⑩Installation and operation of automatic personal information collection devices and rejection thereof
• ⑪Measures to ensure the safety of personal information
• ⑫Privacy Officer and the department of remedial procedures
• ⑬Installation and operation of an automatic collection tool for personal information of visual data processing devices, and the denial thereof
• ⑭Notification obligation

1. Consent to the collection and use of personal information

The Company collects, uses, and provides personal information based on the user's consent, actively guarantees the user's rights (right to self-determination of personal information), and complies with regulations and guidelines related to personal information protection in Korea.

2.Purpose of collection and use of personal information

• A.The Company uses personal information collected from the users for the following purposes. The collected personal information will not be used for any purpose other than the following, and prior consent will be obtained from the user when the purpose of use is changed.
• ①Job applications and talent (pool) registration : Used as the basis for recruitment such as documentation and interview selection, and as a reference for ongoing recruitment.
• ②Technical support: Basic materials for technical support consultation
• ③Receiving inquiries on the website: Replying to the results of handling complaints and grievances and receiving business proposals.
• ④Company visits: confirm and direct visitors to the Company
• ⑤Video information: crime and fire prevention, facility safety management
• ⑥Use of the Platform and Services: Settlement of fees according to use of platform and services, content provision and purchase, fee payment, delivery of goods or billing address, etc., identity verification, member management
• B.The Company may use personal information collected in connection with the use of the platform and services, for the following purpose with the prior consent obtained from the user.
• ①Utilization of platform and service-related marketing and advertising
• ②Provision of functions of automatic addition and registration of friend in platform and services

3. Particulars and procedures of personal information to be collected

• A.The Company collects and uses personal information provided by the users. However, the user has the right to refuse to consent to the collection and use of personal information, but if the user refuses to consent, the process such as recruitment may not proceed. The Company will collect the users’ personal information with the consent of the users in case where such consent is required according to the relevant laws and regulations.

The following information may be collected during job application (new) and personnel management (hiring and promotion, fulfillment of obligations under applicable laws and regulations, time and attendance management, workplace security, etc.).

The following information may be collected during technical support.

When receiving general inquiries through the website, the following information may be collected.

The following information may be collected during the user’s visit to the Company.

The following information may be collected during events and promotions when accessing or downloading mobile applications, console games, websites/online products and services to apply to the use of platforms and services.

• B.During the process of using the service, the following information may be automatically generated and collected:
• -Users’ browser type and operating system, browsing history (IP Address, access time), cookies.

4. Disclosure of Personal Information to Third Parties

The Company uses the user's personal information within the scope disclosed in this Privacy Policy and does not exceed the scope or provide the user's personal information to a third party without the user's prior consent, except in cases where it is necessary to provide it to an investigative agency in accordance with the procedures and methods prescribed by relevant laws or for investigative purposes.

5. The period for retaining and using personal information

• A.After the purpose of collecting and using personal information is achieved, the Company shall destroy the information without delay without exception. However, if it is necessary to preserve it in accordance with the provisions of the ACT ON PROMOTION OF INFORMATION AND COMMUNICATIONS NETWORK UTILIZATION AND INFORMATION PROTECTION and related laws and regulations, it shall be kept for a period of time separately set as follows.
• B.Each personal information processing and retention period is as follows:

Job Application and Talent Pool Registration

Technical support

Receive inquiries on the homepage

Visit a company

Video information

Website visit history

Usage data of Platform and services : If a user withdraws membership, the user's personal information will be destroyed without delay. However, in order to resolve consumer complaints and disputes related to the platform and services, and to prevent unauthorized use, the Company may retain personal information for one (1) month after withdrawal of membership, and after this period has elapsed, it may be preserved in accordance with relevant laws and regulations. Except in cases where preservation is required by relevant laws, personal information of such user will be completely deleted.

Retention	Retention Rationale	Retention Period
Records of payment and supply of goods, etc.	ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE	Five (5) years
Records of consumer complaints or dispute resolution	ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE	Three (3) years
Records of contracts or subscription withdrawals, etc.	ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE	Five (5) years
Records related to identity verification	ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE	Six (6) months
Records of visits	COMMUNICATIONS PRIVACY ACT	Three (3) months

6. Procedures and methods of destruction of personal information

The Company destroys the information without delay after the expiration of the personal information retention period and the purpose of collecting and using personal information is achieved, and the destruction procedure and destruction method are as follows.

7. The content of the outsource the processing of personal information and the Outsourcer

The Company does not outsource the collected personal information to an external company without the consent of the data subject. If such a need arises in the future, the Company will notify the users about the outsourcer and the contents of the outsource the processing through a notice seven (7) days before the implementation.

8. The Company does not outsource the collected personal information to an external company without the consent of the data subject. If such a need arises in the future, the Company will notify the users about the outsourcer and the contents of the outsource the processing through a notice seven (7) days before the implementation.

As a data subject, the users may exercise the following rights.

A. Data Subjects may exercise the following privacy-related rights against the Company at any time.

• • ①Request to view personal information
  • ②Demand correction of errors, etc.
  • ③Request deletion
  • ④Request suspension of the processing

B. The exercise of rights under Paragraph (a) may be conducted in writing, e-mail, facsimile transmission (FAX), etc. to the Company, and the Company will take action without delay.

C. If the data subject requests the correction or deletion of errors in personal information, the Company shall not use or provide the personal information until the correction or deletion is completed.

D. The exercise of the rights under paragraph (a) may be conducted through an agent, such as the legal representative of the data subject or a person who has been delegated, provided a power of attorney based on Article 45 (2) of the ENFORCEMENT DECREE OF THE PERSONAL INFORMATION PROTECTION ACT be submitted.

9. Notification of business transfers, etc.

If the Company transfers all or part of its business, or transfers its rights and obligations by merger, etc., notification of business transfers shall be made with the following contents:

A. the fact of a transfer, or merger of all or a portion of our business;

B. Name, address, telephone number, and other contact information of the person who succeeds to the rights and obligations of the service provider, etc.

10. Installation and operation of automatic personal information collection devices and rejection thereof

The Company installs and operates "cookies" that store and retrieve users’ information from time to time. A cookie is a very small text file sent to the user's browser by the server which is used to operate the Company's website and stored on the user's computer hard disk. The Company uses cookies for the following purposes:

A. Purpose of use of cookies, etc.

• • ①Providing personalized services by analyzing the access frequency and visit time of members and non-members, identifying the number of visits, etc.
  • ②Users have a choice about the installation of cookies; therefore, the users can accept all cookies, confirm each time a cookie is stored, or refuse to store all cookies by setting options in the users’ web browser.

B. How to refuse cookie settings

• ①To refuse the setting of cookies, the users can select the option of the web browser that the users use to allow all cookies, confirm each time a cookie is saved, or refuse to save all cookies.
• ②
  How to set up

  - For Internet Explorer: Tools at the top of the users’ web browser > Internet Options > Privacy > Settings

  - For Chrome: Settings menu on the right side of the web browser > Show advanced settings at the bottom of the screen > Privacy content settings button > Cookies

C. However, if the user refuses to install cookies, there may be difficulties in providing some services.

11. Measures to ensure the safety of personal information

In processing the users' personal information, the Company takes the following technical and administrative protection measures to ensure safety so that personal information is not lost, stolen, leaked, altered, damaged, etc.

• A.Minimize the personal information processing and education

  • The Company minimizes the number of persons who are responsible for processing personal information and emphasizes compliance with laws and regulations and internal policies through administrative measures such as training for personal information processors.

• B.Operation of the Personal Information Protection Department

  • The Company operates a department in charge of personal information protection to protect personal information, and does its best to check the implementation of the Privacy Policy and the compliance of the person in charge so that if any problems are found, they can be immediately resolved and corrected.

• C. Use the latest antivirus programs to protect the users' personal information and data from being leaked or compromised.

• D. Personal information is stored and managed securely through encryption, and personal information can be transmitted securely.

12. Privacy Officer and the department of remedial procedures

A. The Company designates the personal information protection officer and person in charge as follows to take overall responsibility for the processing of personal information and to handle complaints and damage relief of data subjects related to the processing of personal information.

Types	Responsible for
Privacy Officer	- Director of Business Support - Contact : 02-458-3742, insa@skonec.com
Privacy Officer (Recruitment)	- Human Resources - Contact : 02-458-3742, recruit@skonec.com
Privacy Officer (Technical support and general inquiries)	- Head of XR Business Unit / Head of Publishing Business Unit - Contact : 02-458-3742, business@skonec.com

B. Users may contact the person in charge of personal information protection and the person in charge for all personal information protection-related inquiries, complaints, damage relief, etc. that occurred while using the Company's services (or business). The Company will respond to and process the users’ inquiries without delay.

C. Users may request access to personal information pursuant to Article 35 of the PERSONAL INFORMATION PROTECTION ACT to the person in charge of personal information protection. The Company will endeavor to promptly process the data subject's request for access to personal information.

D. In addition to the access request processing department in Paragraph 1, the users may also request access to personal information through the Ministry of the Interior and Safety’s “Personal Information Protection Comprehensive Support Portal” website (www.privacy.go.kr).

Types	Contacts
Ministry of the Interior and Safety General Support Portal for Personal Information Protection → Personal Information Complaint → Request for Access to Personal Information
If the users are not satisfied with the results of the Company’s internal privacy complaint handling, or if the users would like further assistance, the users may contact an organization separate from the Company.
Privacy Reporting Center	- Homepage : http://privacy.kisa.or.kr - Contact : 118(without area code)
Privacy Dispute Resolution Board	- Homepage : https://www.kopico.go.kr - Contact : 1833-6972
Attorney General’s Cybercrime Unit	- Homepage : https://www.spo.go.kr/spo/index.jsp - Contact : 1301(without area code)
National Police Agency Cybercrime Investigation Unit	- Homepage : https://ecrm.police.go.kr - Contact : 182(without area code)

13. Installation and operation of an automatic collection tool for personal information of visual data processing devices, and the denial thereof

The company installs and operates an automatic collection tool for personal information of visual data processing devices as follows.

• A. Basis, purpose, and location of installation of an automatic collection tool for personal information of visual data processing devices

  • ①The Company installs and operates video information processing equipment for the following purposes in accordance with Article 25 (1) of the PERSONAL INFORMATION PROTECTION ACT.
  • ②Crime prevention and fire prevention / facility safety management

• B. Shooting time and scope, storage period, storage location and processing method of video information

  • ①Number of installations : 5 / Operating hours (shooting): 24 hours (ongoing)
  • ②Installation location and coverage : Entrances and exits, major facilities in the building
  • ②Storage period / Storage location : Within 60 days from the shooting date / Headquarters TPS room
  • ③Processing method : Record and manage requests regarding the use of personal visual information for other purposes, provision to third parties, destruction, and viewing, and permanently delete (shred or burn in the case of printouts) in a way that cannot be restored upon expiration of the storage period.

• C. In order to protect video information and handle complaints related to personal video information, the Company has arranged the person in charge of video information management and access authorization as follows.

Types	Responsible for
Administrative Officer	- Director of Business Support - Contact : 02-458-3742, insa@skonec.com
Access permissions	- Human Resources - Contact : 02-458-3742, recruit@skonec.com

• D. How and where to check personal video information

  • ①Verification method : Contact the person in charge of video information management or access authority in advance and visit
  • ②Confirmation location : Headquarters Human Resources Team

• E. Measures to respond to requests from data subjects to view video information

  • The users shall apply with an application for access to personal video information, and access is allowed only when the data subject himself or herself is filmed or when it is clearly necessary for the life, body, or property interests of the data subject.

• F. Measures to secure the stability of video information

  • The video information processed by the Company is safely managed through encryption measures, and access to the video information is granted as an administrative measure to protect the video information, and the date of creation of the video information is recorded to prevent falsification or alteration of the video information.

14. Notification Obligation

he Company will notify the users of any additions, deletions, and modifications to the contents of this Privacy Policy at least seven (7) days prior to the Effective Date through the notice on the Company's homepage. However, changes to the contents that are important to the users' valuable rights or obligations will be notified at least thirty (30) days in advance.

• - Privacy Policy Notice Date: 11 month 17 day, 2023
• - Privacy Policy Effective Date: 11 month 24 day, 2023