Privacy > XISOM Solution for Smart Factory & Digital Transfomration

1. This site places great importance on protecting your personal information and complies with the regulations on personal information protection under the "Act on Promotion of Information and Communications Network Utilization" and the "Guidelines for Personal Information Protection" established by the Ministry of Information and Communication.
2. This site informs you through the privacy policy how the personal information you provide is used and what measures are being taken to protect your privacy.
3. This site displays the privacy policy at the bottom of the main page of the homepage, making it easily accessible at any time.
4. If the privacy policy is revised, it will be notified on the website’s notice board (or individually).

This site has procedures for you to click the "Agree" or "Disagree" button on the content of the privacy policy or terms of use. Clicking the "Agree" button is considered consent to the collection of personal information.

1. This site collects personal information for the following purposes:
   1. Establishment of a contract for service provision: Identification and confirmation of intent
   2. Service implementation: Delivery of goods and payment processing
   3. Member management: Identity verification, individual identification, age verification, complaint handling, etc., related to member services
   4. Providing information on new services, products, or events
2. However, sensitive personal information that may infringe on the user’s basic rights (e.g., race, ethnicity, ideology, creed, place of origin, criminal record, health status, or sexual life) is not collected.

This site collects the following personal information for membership, counseling, service applications, and so on:

1. Items collected: Name, date of birth, gender, login ID, password, home phone number, home address, mobile phone number, email, resident registration number, access logs, IP information, payment records
2. Methods of collection: Website (membership registration)

This site uses "cookies" to store and retrieve information about you. Cookies are small pieces of information sent to your computer’s browser (Netscape, Internet Explorer, etc.) by a website. When you visit the website, this site’s server reads the contents of the cookie in your browser, and additional information can be retrieved from your computer to provide services without requiring additional input of your name, etc.

Cookies identify your computer but not you personally. You also have the option to manage cookies. By adjusting the options of your web browser, you can accept all cookies, be notified whenever a cookie is set, or reject all cookies.

1. Purpose of using cookies: Analyze users' access frequency or visit time, identify user preferences and interests, track user activity, and provide targeted marketing and personalized services.
2. How to reject cookies: You can adjust your web browser’s settings to allow all cookies, confirm each time a cookie is saved, or block all cookies.
3. Example settings: For Internet Explorer → Tools at the top of the browser > Internet Options > Privacy
4. Note: Rejecting cookies may make it difficult to provide services.

1. This site uses your personal information only within the scope of the "Purpose of Collection and Use of Personal Information" and does not use it beyond that scope or provide it to others or other companies/institutions.
2. However, for better service, your personal information may be provided to or shared with affiliates. If your information is provided or shared, you will be notified in advance about the affiliate, the items of personal information being shared, why it is provided or shared, and how it will be protected and managed. Your consent will be obtained, and if you do not agree, it will not be provided or shared.
3. Personal information may be disclosed in the following exceptional cases:
   1. With prior consent from users
   2. When required by law or for investigation purposes as stipulated by law

1. You may view or correct your registered personal information at any time. To do so, click on "Edit Member Information" to directly access or modify your information, or contact the person responsible for personal information management via email.
2. If you request a correction of any errors in your personal information, the site will not use the personal information until the correction is completed.

1. You may withdraw your consent to the collection, use, and provision of your personal information, which you previously agreed to during membership registration. To withdraw consent, click "Member Withdrawal (Withdrawal of Consent)" in "My Page" or contact the person responsible for personal information management via email. Necessary actions such as deleting your personal information will be taken immediately.
2. The site will ensure that withdrawing consent for personal information collection can be exercised using methods and procedures equivalent to those at the time of collection.

1. In principle, personal information is destroyed immediately after the purpose of its collection and use is achieved. However, the following information is retained for the specified periods for the reasons stated below:
   1. Retention Items: Membership information (login ID, name, nickname)
   2. Reason for Retention: To prevent reuse of the same ID by other members after withdrawal.
   3. Retention Period: Until site closure or termination of operations.
2. If required by relevant laws such as the Commercial Act, the company will retain transaction and membership information for a certain period as stipulated by those laws:
   1. Retention Items: Records of contracts or withdrawal of subscription, payment and supply of goods, complaints, or dispute handling
   2. Reason for Retention: To comply with the Act on Consumer Protection in Electronic Commerce
   3. Retention Period: Contract or subscription withdrawal records (5 years), payment and goods supply records (5 years), complaint or dispute handling records (3 years)
3. If retention is required beyond these periods, your consent will be obtained.

Personal information is destroyed immediately after achieving the purpose of its collection and use. The procedures and methods are as follows:

1. Destruction Procedure: Information entered for membership registration, etc., is transferred to a separate database (or a separate document box for paper records) after the purpose is achieved. It is stored for a certain period per internal policies and other related laws before being destroyed. Personal information transferred to a separate database will not be used for any purpose other than retention by law.
2. Destruction Method: Personal information stored in electronic file formats is deleted using technical methods to prevent its recovery.

1. This site requires the consent of a legal guardian when collecting personal information from children under the age of 14.
2. Legal guardians of children under 14 may request access, correction, or withdrawal of consent regarding the child's personal information. The site will promptly take necessary actions upon receiving such requests.

The site takes the following technical measures to ensure the safety of personal information, preventing its loss, theft, leakage, alteration, or damage:

1. Your personal information is protected by passwords. Critical data is encrypted or locked with file lock features for added security.
2. The site uses antivirus programs to prevent damage from computer viruses. These programs are regularly updated, and emergency updates are provided when new viruses emerge.
3. Intrusion prevention systems are used to protect personal information from unauthorized access and hacking.

For service improvements, the site may outsource the processing of your personal information:

1. If personal information is outsourced, the site will notify you in advance.
2. When outsourcing, the contract will explicitly define instructions on personal information protection, confidentiality, prohibition of provision to third parties, and liability for incidents, and these contracts will be stored electronically or in writing.

1. The site has opened channels for users to provide feedback or file complaints regarding personal information protection. If you have any complaints or opinions, contact the personal information protection officer. Actions will be taken immediately, and the result will be communicated to you.
   1. Personal Information Protection Officer: Kim Boram
   2. Phone: 010-5015-3052
   3. Email: st3052@xisom.com
2. For further complaints or consultations regarding personal information breaches, contact the following organizations:
   1. Personal Dispute Mediation Committee: www.1336.or.kr / 1336
   2. Korea Internet & Security Agency: www.eprivacy.or.kr / 02-580-0533~4
   3. Supreme Prosecutors' Office Cyber Crime Investigation Center: icic.sppo.go.kr / 02-3480-3600
   4. Police Cyber Terror Response Center: www.ctrc.go.kr / 02-392-0330

1. This policy is effective from 2018년 01월 01일.