Personal Information Collection and Usage Agreement

(mobile application 'FLUV' service) handles the following processing to protect users' personal information and rights and interests in accordance with the Personal Information Protection Act, and to smoothly handle users' complaints related to personal information We have a policy. ('FLUV') will notify you through a website notice (or individual notice) when the company revises the personal information processing policy. Effective December 12, 2014.

○ Before November 03, 2017 revision: Include 'cookie' in personal information collection Revision: Exclude 'cookie' in personal information collection

1. Purpose of processing personal information
(hereinafter referred to as 'FLUV') processes personal information for the following purposes. The processed personal information will not be used for any purpose other than the following, and prior consent will be sought when the purpose of use is changed.
A. Member registration and management Confirmation of intention to sign up for membership on the website, identification and authentication according to the provision of membership service, maintenance and management of membership, identification according to the implementation of the limited identification system, prevention of illegal use of services, and the collection of personal information for children under 14 years of age Personal information is processed for the purpose of confirming the consent of the agent, various notices and notices, handling grievances, and keeping records for dispute resolution.
B. Personal information is processed for the purpose of verifying the identity of the complainant, confirming the complaint, contacting/notifying for fact-finding, and notifying the processing result.
C. Personal information is processed for the purpose of providing goods or services, providing services, providing content, providing customized services, verifying identity, and verifying age.
D. Utilization for marketing and advertising Development of new services (products) and provision of customized services, provision of event and advertising information and participation opportunities, provision of services and advertisements according to demographic characteristics, verification of service validity, identification of access frequency, or membership We process personal information for the purpose of statistics on service use, etc.
E. Personal information is processed for the purposes of prevention and investigation of personal image information crimes, facility safety and fire prevention, traffic enforcement, and collection, analysis and provision of traffic information.

2. Personal information file status
① Personal information file name: Member DB storage- Personal information items: password, login ID, email (member registration information), access IP information, device information, service use record, access log (automatic collection)
Collection method: Member sign-up agreement / Automatically collected from device
Basis of retention: Terms and Conditions
Retention period: 5 years
Relevant laws: Records on handling consumer complaints or disputes: 3 years, Records on collection/processing and use of credit information: 3 years, Records on payment and supply of goods: 5 years, contract or subscription withdrawal Records on, etc.: 5 years, Records on display/advertisement: 6 months

3. Processing and retention period of personal information
① ('FLUV') processes and retains personal information within the period of retention and use of personal information in accordance with laws and regulations or the retention and use of personal information agreed upon when collecting personal information from the information subject do.
② Each personal information processing and retention period is as follows.
③ Personal information related to is retained and used for the above purposes for up to 3 years from the date of consent for collection and use.
Basis of retention: Terms and Conditions
-Related laws: Records on collection/processing and use of credit information: 3 years
Reason for exception:

4. Matters concerning the provision of personal information to third parties
① ('FLUV') provides personal information to third parties only when it falls under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the information subject and special provisions of the law.
② ('FLUV') does not provide personal information to third parties.

5. Consignment of personal information processing
① ('FLUV') does not entrust personal information processing.
② ('FLUV') prohibits the processing of personal information other than for the purpose of performing entrusted tasks in accordance with Article 25 of the Personal Information Protection Act when concluding the consignment contract, technical and administrative protection measures, restrictions on re-entrustment, management of trustees ․Responsibilities such as supervision and compensation for damages are specified in documents such as contracts, and the trustee manages personal information safely.
③ If the contents of the consignment work or the trustee is changed, we will disclose it through this personal information processing policy without delay.

6. Rights and obligations of data subjects and how to exercise them
Users can exercise the following rights as the subject of personal information.
① The information subject may exercise the following personal information protection-related rights to Exodus ENT Co., Ltd. ('FLUV') at any time.
Request to read personal information
Request for correction in case of errors, etc.
Request for deletion
Request to stop processing
② The exercise of rights pursuant to Paragraph 1 may be done in writing, by e-mail, or by fax (FAX) in accordance with the Enforcement Rule of the Personal Information Protection Act, Annex No. 8, for Exodus ENT Co., Ltd. ('FLUV'). Company name> ('site URL' or 'site name') will take action without delay.
③ In the event that the information subject requests correction or deletion of personal information errors, ('site URL' or 'site name') retains the personal information until the correction or deletion is completed. It is not used or provided.
④ The exercise of the rights pursuant to Paragraph 1 may be done through an agent such as the legal representative of the information subject or a person who has been delegated. In this case, you must submit a power of attorney in accordance with Form 11 of the Enforcement Regulations of the Personal Information Protection Act.

7. Creation of items of personal information to be processed
① ('FLUV') processes the following personal information items.
Required items: password, login ID, email (membership information), access IP information, device information, service use record, access log (automatic collection)

8. Destruction of personal information
In principle, ('FLUV') destroys the personal information without delay when the purpose of processing personal information is achieved. The procedures, deadlines and methods of destruction are as follows.- After the purpose of the destruction procedure is achieved, the information entered by the user is transferred to a separate DB (separate documents in the case of paper) and stored for a certain period in accordance with internal policies and other relevant laws or It will be destroyed immediately. At this time, the personal information transferred to the DB will not be used for any other purpose except in cases pursuant to the law. When the personal information becomes unnecessary, such as the achievement of the purpose of processing the personal information, the abolition of the service, or the termination of the business, the personal information is destroyed within 5 days from the date on which the processing of the personal information is recognized as unnecessary. Information in the form uses a technical method that cannot reproduce the record.

9. Measures to ensure the safety of personal information
In accordance with Article 29 of the Personal Information Protection Act, ('FLUV') is taking the following technical/administrative and physical measures necessary to ensure safety.
① Minimization of Personal Information Handling Staff and Training We are implementing measures to manage personal information by designating and limiting staff handling personal information to the person in charge.
② Regular self-audit We conduct regular self-audit (once a quarter) to secure stability related to handling of personal information.
③ Establishment and implementation of internal management plan The internal management plan is established and implemented for safe handling of personal information.
④ Encryption of personal information User's personal information is stored and managed with an encrypted password, so only the user can know it. there is.
⑤ Technical measures against hacking ('FLUV') installs security programs to prevent leakage and damage of personal information caused by hacking or computer viruses, etc. A system is installed in the area, and it is technically/physically monitored and blocked.
⑥ Restriction on access to personal information We are taking necessary measures to control access to personal information by granting, changing, and canceling access rights to the database system that processes personal information, and using an intrusion prevention system to access unauthorized access from outside are controlling.
⑦ Storage of access records and prevention of forgery The records of access to the personal information processing system are kept and managed for at least 6 months, and security functions are used to prevent forgery, theft, or loss of access records.
⑧ Matters concerning the installation, operation and refusal of automatic personal information collection devices Exodus ENT Co., Ltd. ('FLUV') does not use "cookies", etc. that frequently store and find users' information.

10. Created by the person in charge of personal information protection
① Exodus ENT Co., Ltd. ('FLUV ' hereinafter referred to as 'Frup') is responsible for handling personal information, and for handling complaints and damage relief from information subjects related to personal information processing, personal information as follows We are designating a person in charge of protection.
▶ Person in charge of personal information protection
Name: Han Seong-ho
Position: Han Seong-ho
Title: Director
Contact : 02-6959-5225, admin@fluv.kr,
※ You will be connected to the department in charge of personal information protection.
▶ Department in charge of personal information protection
Department Name: Security Team
Contact Person :Park Boo-young
Contact : 02-6959-5225, admin@fluv.kr,
② The information subject may inquire about all personal information protection related inquiries, complaint handling, damage relief, etc. that occurred while using the service (or business) of Exodus ENT Co., Ltd. ('FLUV') to the person in charge of personal information protection and the department in charge . Exodus ENT Co., Ltd. ('FLUV') will answer and handle inquiries from information subjects without delay.
③ In addition to the department for receiving and processing requests for access in Paragraph 1, the information subject may also request access to personal information through the ‘Comprehensive Personal Information Protection Portal’ website (personal information protection portal) of the Ministry of Public Administration and Security.

▶ Ministry of Public Administration and Security's Personal Information Protection Comprehensive Support Portal → Personal Information Complaints → Request for Personal Information Access, etc. (I-PIN is required for identification)

11. Requests for access to personal information The following organizations are separate from the , and are responsible for the results of their own personal information complaint handling and damage relief by . If you are not satisfied or need further assistance, please contact us.

▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
- Responsibilities: Report personal information infringement, apply for counseling
- Website: privacy.kisa.or.kr- Phone: (without area code) 118
- Address: (138-950) Korea Internet & Security Agency Personal Information Infringement Report Center, 135, Jung-daero, Songpa-gu, Seoul
▶ Personal Information Dispute Mediation Committee (operated by the Korea Internet & Security Agency)
- Responsibilities: Personal information dispute mediation application, collective dispute mediation (civil resolution)
- Website: privacy.kisa.or.kr- Phone: (without area code) 118
- Address : (138-950) Korea Internet & Security Agency Personal Information Infringement Report Center, 135, Jung-daero, Songpa-gu, Seoul
▶ Supreme Public Prosecutor's Office Cyber Crime Investigation Team: 02-3480-3573 (High Prosecutor's Office)
▶ National Police Agency Cyber Crime Investigation Team: 1566-0112 (www.netan.go.kr)

12. Changes to the personal information processing policy is effective from the effective date, and if there are additions, deletions, or corrections of changes according to laws and regulations, we will notify you through a notice 7 days before the implementation of the changes.