'JOY' (AS 'JOY') establishes and discloses personal information processing guidelines as follows to protect the personal information of the data subject and to quickly and smoothly process complaints related thereto in accordance with Article 30 of the Personal Information Protection Act.

purpose of processing personal information

Joy processes personal information for the following purposes: The personal information being processed will not be used for any purpose other than the following purposes, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

• 1. Membership and management of the website
  Personal information is processed for the purpose of confirming the intention to sign up, identifying and authenticating oneself according to the provision of membership services, maintaining and managing membership status, preventing illegal use of services, and processing of personal information.
• 2. Provision of services
  Personal information is processed for the purpose of providing content and customized services.

processing and retention period of personal information

• ① Joy processes and holds personal information within the period of retention and use of personal information under the law or the period of retention and use of personal information agreed to collect personal information from customers.
• ② The processing and retention period of each personal information is as follows.
• 1. Membership and management of the website: Until you leave Joy's website
  However, in the case of the following reasons, until the end of the relevant reason,
• 1) If an investigation or investigation is underway due to violation of relevant laws and regulations, the investigation or investigation shall be completed by the end of the relevant investigation.
• 2. Content Delivery: Until Content Delivery is Completed
  However, if it falls under the following reasons, until the end of the period,
• 1)Storage of communication fact confirmation data pursuant to Article 41 of the Communications Secret Protection Act
  - Date and time of subscriber's telecommunication, start/end time, counterpart's subscriber number, frequency of use, location tracking data of the source station: 1 year
  - Computer communication, Internet log data, destination tracking data: 3 months
  

provision of personal information to third parties

Joy processes the customer's personal information only within the scope specified in "Personal Information Processing Purpose" and provides the personal information to third parties only if it falls under Article 17 of the Personal Information Protection Act, such as customer consent and special provisions of the law.

Customer rights, obligations, and methods of exercise

• ① Customers can exercise the following privacy rights against Joy at any time.
• 1. Request for access to personal information
  2. Request for correction in case of errors, etc.
  3. Deletion request
  4. Request for suspension of processing
• The exercise of rights under paragraph (1) can be done in writing, by phone, e-mail, fax, etc., and Joy will take action without delay.
• ③ If the customer requests correction or deletion of personal information, Joy will not use or provide the personal information until correction or deletion is completed.
• ④ The exercise of rights under paragraph (1) may be made through an agent, such as a legal representative of the customer or a person entrusted. In this case, you must submit a power of attorney in accordance with attached Form 11 of the Enforcement Rules of the Personal Information Protection Act.
• ⑤ Customers shall not infringe on the personal information and privacy of the customers themselves or others handled by Joy in violation of related laws such as the Personal Information Protection Act.

Personal information items to be processed

• Joy is processing the following personal information items:
• 1. Membership and management of the website
• · mandatory items for corporate members : ID, password, name, email, date of birth, gender, company name, representative name, business registration number, business status, business type, company phone number, company address
  · company membership selection : Company Fax Number, Business Registration Certificate
  · mandatory items for general members : ID, password, name, email, mobile phone.
  · general membership selection : -
• 2. The following personal information items may be automatically generated and collected in the process of using the Internet service.
• · IP address, cookies, MAC address, service usage record, visit record, defect usage record, etc.

Destruction of personal information

• ① Joy destroys the personal information without delay when personal information becomes unnecessary, such as the expiration of the personal information retention period or the achievement of the purpose of processing.
• ② If the period of retention of personal information agreed by the customer has elapsed or the purpose of processing has been achieved, the personal information shall be moved to a separate database (DB) or stored in a different storage location.
• ③ The procedure and method for destroying personal information are as follows.
• 1. destruction procedure
  Joy selects personal information where the reason for destruction occurred and destroys personal information with the approval of Joy's personal information protection manager.
  2. method of destruction
  Joy destroys personal information recorded and stored in the form of an electronic file by using a method such as a low level format so that the record cannot be reproduced, and the personal information recorded and stored in paper documents is destroyed by crushing or incineration.

The right to refuse consent to the collection and use of personal information and restrictions on refusal of consent.

• You have the right to refuse to consent to the collection and use of personal information, and if you refuse to consent, you will not be able to register as a member, and you will not be able to use the services provided on this site.

measures to ensure the safety of personal information

• Joy is taking the following steps to ensure the safety of personal information.
• 1. Management Measures: Establishment and implementation of internal management plans, regular employee training, etc.
• 2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, and installation of security programs.
• 3. Physical measures: Access control in computer rooms, data storage rooms, etc.

Personal information protection officer

• ① Joy is in charge of handling personal information and designates a personal information protection manager as follows to handle customer complaints and remedy damage related to personal information processing.
• management team
  - Name : 서민호
  - Phone : +82-31-314-6900
  - E-mail : corpjeong@naver.com
• ② Customers can contact their personal information protection manager for all personal information protection inquiries, complaint handling, damage relief, etc. that occurred while using Joy's service (or business). Joy will respond and process your inquiries without delay.

Access to personal information

• Customers may request the following departments to view personal information under Article 35 of the Personal Information Protection Act. Joy will try to expedite the request for access to personal information from customers.
• management team
  - Name : 서민호
  - Phone : +82-31-314-6900
  - E-mail : corpjeong@naver.com

Remedy for infringement of rights and interests

Customers can contact the following organizations for damage relief and consultation regarding personal information infringement. The institution below is separate from Joy, so please contact us if you are not satisfied with Joy's own personal information complaint handling and damage relief results, or if you need more detailed help.

• Personal Information Infringement Reporting Center (run by the Korea Internet & Security Agency)
  - Responsible business: Report personal information infringement, apply for counseling
  - Homepage : privacy.kisa.or.kr
  - Telephone : +82-118
  - Address : (138-950) 135 Jung-daero, Songpa-gu, Seoul, Korea Internet & Security Agency Personal Information Infringement Reporting Center
• Personal Information Dispute Mediation Committee (run by the Korea Internet & Security Agency)
  - Responsible business : Application for Personal Information Dispute Mediation, Group Dispute Mediation (Civil Resolution)
  - Homepage : privacy.kisa.or.kr
  - Telephone : +82-118
  - Address : (138-950) 135 Jung-daero, Songpa-gu, Seoul, Korea Internet & Security Agency Personal Information Infringement Reporting Center
• Supreme Prosecutors' Office Cybercrime Unit : +82-02-3480-3573 (www.spo.go.kr)
• National Police Agency Cyber Terrorism Response Center : +82-1566-0112 (www.netan.go.kr)