RaonVentures

RaonVentures Co., Ltd. (hereinafter referred to as the "Company") establishes and discloses this Privacy Policy in accordance with the relevant regulations of the Personal Information Protection Act to protect users' personal information and rights and to smoothly handle user complaints related to personal information.

Article 1 (Collection, Processing, and Retention Period of Personal Information)

The Company collects and processes the following personal information:

1. 1. 1. Records related to transactions as per the Act on Consumer Protection in Electronic Commerce

      • o Records of advertisements: 6 months

      • o Records of contracts, cancellations, payments, and supply of goods: 5 years

      • o Records of consumer complaints or dispute resolution: 3 years

   2. 2. Retention of communication data under the Protection of Communications Secrets Act

      • o Subscriber telecommunication date/time, start/end time, counterparty subscriber number, frequency of use, location tracking of originating base station: 1 year

      • o Computer communications, internet log records, access tracking data: 3 months

Article 2 (Destruction of Personal Information)

• 1. The Company will promptly destroy personal information when the retention period expires or the purpose of processing is achieved.
• 2. If personal information needs to be retained under other laws even after the agreed retention period has expired or the purpose has been achieved, it will be stored separately in a different database (DB) or storage location.
• 3. The procedures and methods for destroying personal information are as follows:

  • o Destruction Procedure: The Company selects the personal information to be destroyed and obtains approval from the personal information protection officer before destruction.

  • o Destruction Method: Personal information recorded or stored in electronic file format is destroyed in a manner that makes it unrecoverable, while personal information recorded or stored in paper documents is shredded or incinerated for disposal.

Article 3 (Provision of Personal Information to Third Parties)

• 1. The Company processes personal information only within the scope specified in Article 1 and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as when there is user consent or special legal provisions.
• 2. The Company does not provide personal information to third parties.

Article 4 (Entrustment of Personal Information Processing)

• 1. The Company does not entrust the processing of personal information to external parties.
• 2. If the Company enters into an outsourcing contract, it will include provisions in accordance with the Personal Information Protection Act to prevent unauthorized use of personal information, enforce technical and managerial protection measures, restrict subcontracting, and establish liability for damages. The Company will also supervise the entrusted party to ensure the secure processing of personal information.
• 3. If the contents of the outsourced tasks or the entrusted party change, the Company will disclose this through this Privacy Policy without delay.③ 위탁업무의 내용이나 수탁자가 변경될 경우에는 지체없이 본 개인정보 처리방침을 통하여 공개하도록 하겠습니다.

Article 5 (Rights and Obligations of Data Subjects and Their Legal Representatives & Exercise Methods)

• 1. Users may exercise the following rights regarding their personal information: access, correction, deletion, and request for processing suspension.
• 2. Requests for these rights can be made in writing, via email, or fax as per Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action promptly.
• 3. These rights may also be exercised by the user’s legal representative or an authorized agent, in which case a power of attorney must be submitted.
• 4. Requests for access or processing suspension may be restricted under Articles 35 and 37 of the Personal Information Protection Act.
• 5. Requests for correction and deletion may not be granted if another law explicitly requires the information to be retained.
• 6. The Company verifies the identity of the requester or their representative before processing access, correction, deletion, or processing suspension requests.

Article 6 (Measures to Ensure the Security of Personal Information)

To ensure the security of personal information, the Company takes the following measures:

• 1. Administrative Measures

  • o Establishment and implementation of internal management plans, minimization of personnel handling personal information, and regular employee training

  • o Access control through granting, changing, and revoking access rights to personal information processing systems

  • o Compliance with confidentiality agreements for all employees

• 2. Technical Measures

  • o Management of access rights to personal information processing systems

  • o Operation of antivirus software and other security solutions

  • o Protection of user personal information through password security, file/data encryption, and secure data transmission

  • o Storage of access records and prevention of forgery/modification

• 3. Physical Measures

  • o Designation of key protection areas as restricted zones

  • o Access control for offices, data centers, and other secured locations

  • o Monitoring via CCTV installations

Article 7 (Installation, Operation, and Rejection of Automated Data Collection Devices)

• 1. The Company uses cookies to provide customized services.
• 2. Cookies are small data files sent by the website's server to the user’s computer browser and may be stored on the user’s hard disk.

  • o Purpose of Cookies: To analyze service usage, optimize user experience, and track popular searches and security access status.

  • o Cookie Management: Users can refuse cookie storage by adjusting browser settings (Tools > Internet Options > Privacy).

  • o Note: Refusing cookies may result in difficulties in using personalized services.

Article 8 (Personal Information Protection Officer)

• The Company designates the following personnel to oversee personal information processing and handle complaints:

• The data subject may contact the Personal Information Protection Officer and the responsible department for any inquiries, complaints, or remedies related to personal information protection that arise while using the company's services. The company will respond to and process inquiries without delay.

Article 9 (Remedies for Infringement of Rights)

Users can seek resolution of disputes or file complaints regarding personal information breaches through the following organizations:

1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)

2. Korea Internet & Security Agency Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)

3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)

4. Cyber Bureau of the National Police Agency: 182 (https://ecrm.police.go.kr)3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)

Supplementary Provisions

This Privacy Policy may be amended due to changes in relevant laws, guidelines, or internal policies. Any updates will be promptly notified through the Company’s website.

Version Number: 1.0

Effective Date: March 31, 2025