LION CORPORATION (KOREA) ("Company") processes personal information for the following purposes. The processed personal information is not used for any purpose other than the following, and any modification to the purpose of use will be subject to necessary measures, such as obtaining additional consent under Article 18 of the Personal Information Protection Act.

1. Purposes of processing personal information
(1) Membership subscription and management on website
(2) Handling of complaints

2. Processing and retention period of personal information
The Company utilizes the collected personal information for the following purposes:
(1) The Company processes and retains personal information within the period for retention and use of personal information under the laws and regulations or the period for retention and use of personal information agreed by the data subjects upon the collection of their personal information.
(2) The period for processing and retention of each personal information is as follows:
However, if an investigation or inquiry is underway under the relevant laws and regulations, the period is until the investigation or inquiry is completed.


3. Provision of personal information to third parties
(1) The Company processes the personal information of the data subjects only within the scope specified under Article 1 (Purposes of processing personal information), and provides personal information to third parties only where the provision falls under Article 17 of the Personal Information Protection Act, such as the consent of the data subject and special provisions in other laws.
(2) In no case whatsoever does the Company uses personal information of users or provides thereof to third parties outside the scope notified in the Purposes of the Collection and Use of Personal Information unless otherwise consented by the data subject or permitted under the relevant laws and regulations.


4. Consignment of personal information processing
(1) The Company consigns the processing of personal information as follows for smooth processing of personal information.


5. The rights and duties of data subjects and the method to exercise such rights
(1) The data subject may exercise the following privacy rights against the Company at any time:
(2) The rights under paragraph 1 may be exercised in writing, by telephone, by email, or by fax, and the Company will take action without delay.
(3) Where the data subject requests for correction or deletion of any errors, etc. in his/her personal information, the Company does not use or provide such personal information until the correction or deletion is completed.
(4) The rights under paragraph 1 may be exercised through an agent, such as a legal representative of the data subject or an authorized person. In this case, the data subject must submit a power of attorney pursuant to the attached Form 11 of the Enforcement Rule of the Personal Information Protection Act.
(5) The data subject must not invade the personal information and privacy of the data subject or a third party in violation of the relevant laws and regulations, such as the Personal Information Protection Act.


6. Items of personal information processed
The Company processes the following items of personal information.
(1) Membership subscription and management on website:
(2) The following items of personal information may be automatically generated and collected during Internet service use:


7. Destruction of personal information
(1) The Company destroys personal information without delay when personal information becomes no longer required due to reasons, such as the expiration of the retention period for personal information or the fulfillment of the processing purpose.
(2) Where it is necessary to preserve the personal information in accordance with other laws and regulations despite the expiration of the retention period for personal information agreed by the data subject or the fulfillment of the processing purpose, such personal information will be transferred to a separate database or preserved in a different storage location.
(3) The procedure and method of destructing personal information are as follows.

8. Measures to secure personal information safety
The Company enforces the following measures to ensure the safety of personal information:
(1) Administrative measures: Establishment and implementation of internal management plans, periodic training of employees, etc.
(2) Technical measures: Management of authorities to access the personal information processing system, etc., installation of an access control system, encryption of unique identifier information, and installation of security software.
(3) Physical measures: Access control of computer rooms, data storage rooms, etc.


9. Matters concerning the installation, operation and rejection of automatic personal information collection devices
(1) The Company uses "cookies" that store and frequently import user information to provide personalized Services to users.
(2) A cookie is a small amount of information sent by the server (http) used to run the website to the user's computer browser, and it may be stored on the hard disk of the user's computer.


10. Privacy officer
(1) The Company is fully responsible for processing personal information and appoints a privacy officer as follows for handling complaints and damage relief of data subjects related to personal information processing.
(2) The data subject may contact the privacy officer and the department in charge for all inquiries, complaints handling, damage relief, etc. related to personal information that arise during the use of the Services (or business) provided by the Company. The Company will respond to and process inquiries from the data subject without delay.


11. Request to access personal information
The data subject may request the following department to access his/her personal information under Article 35 of the Personal Information Protection Act. The Company will strive to rapidly handle the request to access personal information filed by the data subject.


12. How to remedy infringement on rights and interests

The data subject may inquire about damage relief, counseling, etc. for any infringement on personal information to the following institutions.
<As the following institutions are unrelated to the Company, please contact the following if you are not satisfied with the complaint handling of the Company and the results of damage relief or if you require further assistance>


13. Modification to Privacy Policy
(1) This Privacy Policy will come into effect on March 1, 2020.
(2) Previous privacy policies are available below: