CFI - A Daifuku Company

Pursuant to Article 30 of the Personal Information Protection Act, Clean Factomation, Inc. (hereinafter referred to as “the Company”) shall protect the personal information of the principal agent of the information, and it shall establish, disclose the following Personal Information Handling Policy to ensure its ability to resolve relevant issues swiftly and seamlessly.

Article 1 (Purpose of Handling Personal Information)
The Company shall handle personal information for the following purposes. Personal information handled by the Company shall not be used for any purpose other than those specified under the following provisions. If the Company is required to modify the purpose of using personal information, it shall take all necessary measures, including the acquisition of consent from the entities who originally provided the personal information, in compliance with Article 18 of the Personal Information Protection Act.

※ Official website recruitment application and management

The Company handles personal information to confirm a candidate’s intention to apply for a position at the Company, and manage personal introduction letters, and other documents submitted for applications.

Article 2 (Handling and Retention Period for Personal Information)
① The Company shall handle personal information for the period in compliance with relevant laws and regulations, handle personal information for the period agreed upon by the principal agent of the information, and handle as well as retain personal information within its designated usage period.
② The handling and retention period for personal information are as follows:

- Recruitment application management : Retain for a period of one year from the date of the final application window.

Article 3 (Rights, Obligations, and Execution Methods of the Principal Agent of Information)
① The principal agent of information may exercise his/her rights pertaining to the protection of personal information for the following items at any point in time.
1. Request access to personal information
2. Request corrections when errors, etc. are detected
3. Request to delete information
4. Request suspension of information handling

② Exercising rights pursuant to paragraph may be done in writing, by phone, e-mail, fax, etc. Once it receives a request, the Company shall take necessary actions without delay.
③ If the principal agent of personal information requests the Company to correct errors, etc. or delete information, the Company shall not use or provide said personal information item until the correction or deletion is complete.
④ Exercising rights pursuant to paragraph may be done through the legal representative, or a proxy (agent) of the principal agent of information. In such a case, the principal agent of the information shall submit a power of attorney form using annexed template no. 11 of the Enforcement Regulations of the Personal Information Protection Act.
⑤ The principal agent of information shall not violate the private information of another principal agent of information being processed by the Company or another entity’s personal information and private life in violation of relevant laws, including the Personal Information Protection Act.

Article 4 (Personal Information Items Handled by the Company)
The Company collects personal information with the user"s consent within the minimum scope for providing the service, and all collected personal information is used only for the purpose of the notice.

① Basic Information: Name, date of birth, gender, e-mail, mobile phone number, address

② Academic Background: school name, period of study, major, area

③ Work Experience: career classification, company Name, employment period, position / title, type of occupation

④ Working Conditions: work type, hope salary, working area, type of work, hope working area, hope type of work

Article 5 (Disposal of Personal Information)

① Once the retention period of personal information expires, the Company attains the purpose of collecting the personal information, or the personal information has otherwise fulfilled its purpose, the Company shall dispose of the personal information without delay.

② If the Company cites other laws to retain personal information after the personal information retention period agreed-upon with its principal agent expires, or the Company has attained the purpose of collecting the information, the Company shall transfer the corresponding personal information to a separate database (DB) or store the information at a different storage location.

③ Personal information shall be disposed of using the following procedures and methods:

1. Disposal Procedure
The Company shall identify personal information subject to disposal, acquire the approval of the person-in-charge of personal information at the Company, then dispose the personal information.

2. Disposal Method
The Company shall dispose of personal information recorded and stored in an electronic file format using unrecoverable methods. The Company shall shred or burn personal information recorded and stored on paper documents

Article 6 (Safety Measures for Personal Information)
TThe Company shall take the following measures to secure the safety of personal information.

1. Managerial measures: Establish and execute an internal management system, and offer regular employee training, etc.

2. Technical measures: Manage access authority to the personal information handling system, install an access control system, install security programs.

3. Physical measures: Restrict access to the computer room, data storage room, etc.

Article 7 (Person-in-Charge of Personal Information)
① The Company shall designate a person-in-charge of personal information as follows who is responsible for managing all affairs pertaining to the handling of personal information, addressing complaints over the handling of personal information from the principals of personal information, and providing relief for any damages caused.

■ Department in charge of the protection of personal information
Department : Personnel Affairs Team
Person-in-Charge: Team Manager, Personnel Affairs Team
Contact Information : Tel : 031-8015-7833,Email : sclim@cfinc.co.kr, Fax : 031-8003-1821

② The principal agent of information can contact the person-in-charge of personal information or the department-in-charge for any inquiries, complaints, damage relief, etc. pertaining to the protection of personal information arising over the course of using the Company’s services (or businesses). In such a case, the Company shall respond to or handle the inquiry from the principal agent of information without delay.

Article 8 (Requesting Access to Personal Information)

Pursuant to Article 35 of the Personal Information Protection Act, the principal agent of information may request the following departments

to provide access to his/her personal information. Once the Company receives such a request, it shall do its best to process the access request as quickly as possible.

■ Filing a request to access personal information Department-in=charge
Department: Personnel Affairs Team
Contact Information: Tel : 031-8015-7837,Email : shlee1@cfinc.co.kr, Fax : 031-8003-1821

Article 9 (Remedy for Infringements on Rights and Interests)

The principal agent of information may make an inquiry regarding remedies for infringements on rights and interests of personal information to the following organizations.

[The following organizations are independent entities without any ties to the Company. Please contact these organizations if you find the handling of complaints or remedies for violations against personal information offered by the Company itself unsatisfactory, or if you require more specific assistance.]

▶ Reporting Center for Violations against Personal Information Rights (operated by the Korea Internet and Security Agency)
- Jurisdiction : Report violations against personal information rights, request counseling
- Website : privacy.kisa.or.kr
- Phone No. : (No area code required) 118
- Address : 3F, Reporting Center for Violations against Personal Information Rights, 9, Jinheung-gil, Naju-si, Jeollanam-do (58324)

▶ Personal Information Dispute Mediation Committee
- Tasks : Application for mediation regarding personal information, collective dispute mediations (civil remedies)
- Website : www.kopico.go.kr
- Phone No. : (No area code required) 1833-6972
- Address: 4F, Government Complex in Seoul, 209, Sejong-daero, Jongno-gu, Seoul (03171)

▶ Cyber Investigation Unit at the Supreme Prosecutor’s Office: 02-3480-3573 (www.spo.go.kr)

▶ Cyber Bureau at the National Police Agency: 182 (http://cyberbureau.police.go.kr)

Article 10(Amendments to the Personal Information Handling Policy)

① This Personal Information Handling Policy shall be enforced on March 1, 2018.

② The outgoing version of the Personal Information Handling Policy is available below.

- May 27, 2013 ~ February 28, 2018(Click)