Sangrim ENG Co., Ltd. (¡®Company¡¯) regards personal information of its internet website users to be valuable and makes the best effort to protect user privacy.

The Company abides by all laws and regulations related to privacy protection, such as the Act on Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., protecting user privacy by establishing and following the Privacy Policy. Also, the Company discloses its Privacy Policy on the main page of its website to be available to users at all times.

The Privacy Policy of the Company is subject to change according to changes in relevant laws, announcements, and internal operating policies. If the Privacy Policy is modified, any changes are notified on the website.

The Privacy Policy includes the following matters.

1. Personal Information Items Collected and Method of Collection
2. Purpose of Collecting and Using Personal Information
3. Sharing and Provision of Personal Information
4. Entrustment of Personal Information
5. Possession and Usage Period of Personal Information
6. Procedure and Method of Destroying Personal Information
7. Rights of Users and Legal Representatives, and Method of Exercising Rights
8. Installation/Operation and Rejection of Automatic Personal Information Collection Devices
9. Technological/Managerial Protection of Personal Information
10. Contact Information of Privacy Officer and Person in Charge
11. Others
12. Duty of Notification

1. Personal Information Items Collected and Method of Collection
First, the Company collects the following personal information items for job application, answering questions related to job application, verification of employment protection subjects, and product inquiries.
- - Name, resident registration number, alien registration number (limited to foreigners), password to edit job application information, email address, application history, phone number (telephone/mobile), birthdate, photo, address, nationality, country of residence, school, educational background, major, career, licenses, awards, family, marital status, military service (reason for incompletion if incomplete), veteran (including veteran number if applicable), disability

Second, the Company collects the following personal information items for A/S requests.
- - Company name, name of person in charge, phone number, fax number, address

Third, the Company collects the following personal information items for education requests.
- - Name, phone number, email address, password

In addition, the following information items can be generated and collected automatically in the service process or business process.
- - Internet browser and OS used by the user, visiting records (IP address, connection time), cookies

The Company collects personal information by user input through web documents of the website (http://www.sreng.co.kr), and may also collect information from printed documents or email messages.

2. Purpose of Collecting and Using Personal Information
To process job applications, edit job application forms, check application results, communicate with applicants, verify qualifications, and respond to product inquiries
B. To receive A/S requests and reply handling results
C. To receive education requests and reply handling results

3. Sharing and Provision of Personal Information
The Company uses personal information within the scope notified in ¡°2. Purpose of Collecting and Using Personal Information.¡± The Company does not exceed the scope of use without the prior consent of the user, and does not disclose user¡¯s personal information externally except for the following cases.

- If agreed by users in advance
- If deemed based on good faith to be required by laws (ex. if demanded by a government/investigation agency based on a legal procedure according to relevant laws, etc.)
- The Company may sometimes offer job applicants a job at an affiliated company (subsidiary, affiliate, etc.), in which case the Company contacts the individual applicant in advance to receive the consent before transferring the job application form to the respective company.

4. Entrustment of Personal Information
The Company entrusts personal information as follows to improve services, regulating necessary matters to manage personal information safely when signing the entrustment contract in accordance with relevant laws.

The agency entrusted to handle personal information of the Company and duties entrusted are as follows.

- Entrusted company: Sangrim ENG Co., Ltd.
- Duties entrusted: Operation and management of the recruitment procedure and development and maintenance of the website
- Personal information possession and usage period: Until membership withdrawal or termination of the entrustment contract 5. Possession and Usage Period of Personal Information
In principle, the Company destroys user¡¯s personal information without delay once the purpose of collection and use is attained.

However, the Company saves the personal information of job applicants in the labor pool to be used for non-regular recruitments. The Company deletes personal information immediately if wanted by the job applicant.

6. Procedure and Method of Destroying Personal Information
In principle, the Company destroys personal information of job applicants without delay once the purpose of collection and use is attained. The procedure and method of destroying personal information are as follows.

A. Destruction procedure
Information entered by users for job applications is moved to a separate DB (separate cabinet in the case of paper documents) after the purpose is attained to be stored for a prescribed period according to the reason for information protection (refer to Possession and Usage Period) based on internal policies and relevant laws before destruction. Personal information cannot be used for any other purposes unless required by laws.

B. Destruction method
Personal information printed on paper is shredded or incinerated.
Personal information saved as an electronic file is deleted using a technical method that prevents the opening of records.

7. Rights of Users and Legal Representatives, and Method of Exercising Rights The user may view and modify registered personal information or request the deletion of the information at any time. If you want to delete personal information, contact the person in charge of privacy via writing, phone call, or email so that measures can be taken immediately.

8. Installation/Operation and Rejection of Automatic Personal Information Collection Devices
The Company uses ¡®cookies¡¯ that save and load user information to provide appropriate services to website visitors. Cookies refer to small pieces of information sent from the website server (HTTP) to the web browser on the user PC. Cookies are sometimes saved on the hard drive of the user PC.

A. Purpose of using cookies
Cookies are used to prevent redundant pop-up announcements.
Cookies are used to keep users logged in.

B. Installation/operation and rejection of cookies
Users have the right to choose cookie installation. Therefore, users may allow all cookies, check every time a cookie is to be saved, or block all cookies by setting a browser option.
The user can allow all cookies, check every time a cookie is to be saved, or block all cookies by choosing an option on the browser.
Example (Internet Explorer): Tools > Internet Options > Privacy

9. Technological/Managerial Protection of Personal Information
The Company considers the following technical/managerial measures to secure the safety of the user¡¯s personal information by preventing loss, theft, leakage, alteration, or damaging.

A. Encryption of password
The password selected during job application or the password used to create a personal account is encrypted, and only the person who knows the password can check and change personal information.

B. Countermeasures against hacking
The Company strives to prevent leakage or damage of personal information from hacking and computer viruses. The Company backs up data in preparation for the damaging of personal information and prevents leakage of user data using the latest vaccine program. The Company also uses encrypted communication to transfer personal information safely.
In addition, the Company controls unauthorized external access using a firewall system and tries to implement all possible technical devices to ensure the security of the system.

C. Minimization and education of handling employees
Only the person in charge of privacy can handle the personal information of the Company. The person in charge of privacy is granted a password that is renewed periodically and educated frequently. The protection of the privacy of job applicants is emphasized.

D. Operation of Privacy Team
The Company runs a Privacy Team to check the fulfillment of the Privacy Policy and compliance by the person in charge. If problems occur, they are corrected immediately. However, the Company is not responsible for any problems caused by leakage of personal information such as password and resident registration number due to user¡¯s carelessness or internet issues.

10. Contact Information of Privacy Officer and Person in Charge
You may report all privacy-related complaints that arise during online job application to the privacy officer or department in charge. The Company will respond to all reported matters swiftly and sufficiently.

Privacy officer & person in charge of privacy
- Name: Kim Min-Ji
- Affiliation: Management Team
- Email: mjkim@sreng.co.kr

If you otherwise need to report privacy infringement or want to get counseling, contact the following agencies.

- Personal Information Infringement Report Center (http://www.118.or.kr / 118)
- Information Protection Mark Certification Committee (http://www.eprivacy.or.kr / 02-580-0533~4)
- Supreme Prosecutor¡¯s Office, High-Tech Crime Investigation Division (http://www.spo.go.kr / 02-3480-2000)
- National Police Agency, Cyber Terror Response Center (http://www.ctrc.go.kr / 02-392-0330)

11. Others
This ¡°Privacy Policy¡± does not apply to any acts of collecting personal information by any websites linked on http://www.sreng.co.kr.

12. Duty of Notification
The Company will notify any additions, deletions, and modifications to the Privacy Policy through ¡®Announcements¡¯ on the website.