Rebiogen Co., Ltd. (hereinafter referred to as the “Company”) establishes and discloses the following personal information handling policy to protect the personal information of data subjects and to handle related grievances promptly and efficiently, in accordance with the Personal Information Protection Act, Article 30.

The Company will notify any revisions to the personal information handling policy via its website announcements (or individual notices).

This policy will take effect in October 2024.

Purpose of Processing Personal Information

The Company processes personal information for the following purposes. The processed personal information will not be used for purposes other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be implemented.

○ Customer Inquiries
Personal information is processed for the purpose of identity verification and inquiry management.

Retention and Use Period of Personal Information

The Company processes and retains personal information within the period agreed upon by the data subject at the time of collection or as required by applicable laws and regulations.

○ Customer Inquiries: Retention and use period: 3 year from the date of consent for collection and use.
Information collected: Name, Company (Client) Name, Email, Phone Number

Rights and Duties of Data Subjects and Methods for Exercising Them

1.Data subjects may exercise the following rights related to personal information protection with the Company at any time:

• Request access to personal information
• Request correction if there are errors
• Request deletion
• Request suspension of processing

2.The exercise of rights under Paragraph 1 can be done through written form, telephone, email, or fax by completing the request for personal information (access, correction, deletion, or suspension of processing).

3.If the data subject requests correction or deletion of errors in their personal information, the Company will not use or provide the personal information until the correction or deletion is completed.

4.The rights under Paragraph 1 can also be exercised by a legal representative or an authorized representative of the data subject. In such cases, a power of attorney must be submitted.

5.Data subjects must not infringe on the privacy or personal information of themselves or others by violating the Personal Information Protection Act or other applicable laws and regulations.

Items of Personal Information Processed

○ Customer Inquiries
Collected Items: Name, Company (Client) Name, Email, Phone Number
Collection Method: Website (Contact Us)
During the use of internet services, the following personal information may be automatically generated and collected: IP address, cookies, MAC address, service usage records, visit records.

Destruction of Personal Information

1.The Company will destroy personal information without delay when the retention period has expired or the purpose of processing has been achieved.

2.If the retention period agreed upon by the data subject has expired or the purpose of processing has been achieved, but the personal information must be retained due to other legal obligations, the personal information will be moved to a separate database (DB) or stored in a different location.

3.The procedure and method of destroying personal information are as follows:

• Destruction Procedure: The Company will destroy personal information according to its internal policies and related laws once the retention period has expired or the purpose of processing has been achieved. Personal information transferred to a separate DB will not be used for any purpose other than as required by law.
• Destruction Method: Personal information stored in electronic file format will be destroyed in a way that makes recovery impossible, and printed personal information will be destroyed by shredding or incineration.

Provision of Personal Information

The Company does not provide personal information to external parties in principle. However, the following exceptions may apply:

○ When the user has given prior consent

Outsourcing of Personal Information Processing

The Company does not outsource the processing of personal information without the user’s consent. If such outsourcing becomes necessary in the future, the Company will notify the user of the outsourcing details and obtain prior consent if necessary.

Installation, Operation, and Refusal of Automatic Data Collection Devices

The Company uses cookies that store and retrieve user information from time to time. Cookies are small text files sent to your browser by the server used to operate the Company’s website and are stored on your computer’s hard disk. The Company uses cookies for the following purposes:

○ Purpose of Using Cookies: To analyze the frequency of access and visit times of members and non-members, identify user preferences and interests, and provide personalized services through targeted marketing.

○ Cookie Settings and Refusal: You have the option to accept or refuse the installation of cookies. You can set options in your web browser to allow all cookies, verify every time cookies are stored, or refuse to store all cookies.

• Example of Cookie Settings (for Internet Explorer): Tools > Internet Options > Privacy. Please note that refusing to install cookies may result in difficulties in providing some services.

Personal Information Protection Officer

1.The Company has designated the following Personal Information Protection Officer to oversee personal information processing, handle complaints, and provide remedies related to personal information:

Personal Information Protection Officer

• Name : Jun Lee
• Telephone : +82-31-376-2204
• Email : info@rebiogen.co.kr

You may report any personal information protection-related issues arising from the use of the Company’s services to the Personal Information Protection Officer. The Company will provide prompt and sufficient responses to such issues.

Contact Information for Reporting or Consultation Regarding Personal Information Infringement

If you require further assistance regarding personal information infringement, you may contact the following agencies:

1. Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)
2. Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
3. Supreme Prosecutors’ Office (www.spo.go.kr / 1301)

 Korean National Police Agency (ecrm.cyber.go.kr / 182)