1. Items which will be collected and method of collecting personal information

A. Items of personal information which will be collected
First, the Company is collecting the minimum personal information as necessary article during the first time of registering the membership for membership registration, smooth consultation to customers, and providing all kinds of services.

[Normal member registration] : Name, gender, ID, password, position, department, company, nationality, contact number (address, e-mail address, telephone number)
[Normal registration of membership for foreigners] : Name, gender, ID, password, position, department, company, nationality, contact number (address, e-mail address, telephone number)

Second, below information may be collected by being created automatically in process of using the service or taking care of the business.
-IP Address, cookie, date of visiting, using record of service, record of poor usage

Third, the information stated below may be collected only for a user of belonging service in process of using the additional service by using the ID from the Altibase or customized service when applying toward the event.
- When receiving the agreement for additional collection of the personal information

B. Method of collecting the personal information
The Company shall collect personal information through below methods.
- Website of the Altibase (website, portal of customer support service, education center), telephone, consulting board, e-mail, applying toward the event)
- Providing from cooperating companies
- Collection through the collection tool of information collection

2. Purpose of collecting and using the personal information

A. Conducting the contract and calculating the fee according to service providing
Conducting the contract about providing service and calculating the fee according to service (limits to the education center), providing contents, consulting about service and registration

B. Managing members
Using the membership system service and checking the identification according to the limited identification system, personal identification, preventing the unfair use and unauthorized use by the poor member (a member who was stopped permanently by canceling the contract according to Stopping the Permanent Use from the Article 25 Section 1 and Article 2 of using contract of Altibase), checking a will to register, limiting the number of registration, checking the approval of legal attorney when collecting the personal information of child who is below 14 years old, checking the identification of legal attorney in the future, preserving the record for dispute of meditation, taking care of complaints, sending the notification, and checking the will to withdraw the membership

C. Developing the new service and using it toward advertisement and marketing
Developing the new service and providing the customized service, providing the service and advertising according to the statistical characteristics, checking the effectiveness of service, providing information about advertisement and event, along with an opportunity to participate, understanding the frequency of accessing, statistics about service use of the member

3. Sharing and providing the personal information

The Company shall use the personal information of users within the notified range in "2. Purpose of using and collecting personal information" and it is not used while exceeding the same rage of revealing the personal information of the user without an advanced agreement of the user. However, below contents shall be exempted.
- When users have agreed to reveal the information in advance
- When there is a demand by the investigating institute according to the procedure and method decided by the law enforcement with a purpose of investigating or based on the regulation of law enforcement

4. Handling the trust consignment of the personal information (only belongs to the education service)

The Company is entrusting the personal information as below for improvement of the service and is regulating the necessary content so that the personal information may be managed safely according to the related law enforcement when conducting an entrusting contract.
The Company is entrusting the personal information as below for improvement of the service and is regulating the necessary content so that the personal information may be managed safely according to the related law enforcement when conducting an entrusting contract.

Consigned company	Content of duty entrust	Article of entrusting personal information	Possessing and using period of personal information
Paypal	Paying the lecture fee for education contents	Paid ID from Paypal	It shall not be separately saved since it is a personal information in which the belonging company is already possessing

5. Possessing and using period of the personal information

The personal information of the user shall be disposed immediately when the purpose of collecting and using personal information are achieved. However, the below information shall be preserved for the stated period for below reasons.
A. Reason of sharing the information due to policy of the Company
- Record of unfair use
o Reason of preserving: Preventing the unfair use
o Period of preservation: 1 year

B. Reason of possessing the information due to related law enforcement
When there is a necessity to preserve the information according to regulation of the related law enforcement such as Commercial Law and Electronic Commerce etc. about protecting Consumer, the information about member shall be preserved during certain period in which is decided by the related law enforcement. In this case, the Company shall only use for the preserving the information and the period of preservation is stated as below.
- Record about contract or cancelling the subscription
o Reason of preserving: Law enforcement about Commercial Law etc. to protect consumers
o Period of preserving: 5 years
- Record about supplying payment and goods etc.
o Reason of preserving: Law enforcement about Commercial Law etc. to protect consumers
o Period of preserving: 5 years
- Record about trading of electronic financial transaction
o Reason of preserving: Electronic Financial Transaction Law
o Period of preserving: 5 years
- Record about complaints of consumers or processing the dispute
o Reason of preserving: Law enforcement about Commercial Law etc. to protect consumers
o Period of preserving: 3 years
- Record about checking identification
o Reason of preserving: Law enforcement about acceleration of using communication net work and protecting information
o Period of preserving: 6 months
- Record of visiting the website
o Reason of preserving: Protecting Secret Communication Law
o Period of preserving: 3 months

6. Disposal procedure and method of the personal information

The personal information of the user shall be disposed without a delay when the collection of personal information and purpose of using is achieved. The procedure of disposal of the Company and method are stated below.
A. Procedure of disposal
- The information in which the user has entered to register for the member is moved to the separate DB after achieving the goal (in the case of the paper, it is separate filing cabinet) and then disposed after being preserved for the certain period according to the reason of information preservation (refer to possessing and period of using) according to policy of information protection according to the other related law enforcement(refer to possession and period of using).
- The same personal information is not used toward purpose other than preserving as long as it is not because of the law enforcement.

B. Method of disposal
- The personal information which is entered on the paper shall be crushed through crusher or incineration.
- The personal information which was saved as the electronic file form shall be deleted by using the technical method of disabling the play of the record.

7. Right and its execution method as a user and a legal attorney

- A user or a legal attorney may review or revise the personal information of oneself or a child under 14 who is registered in the Company anytime and refuse the agreement or request the cancellation of registration (withdrawal from the membership) when disagreeing toward the processing of personal information. However, in this case, the using of part or entire service may be difficult.
- In order to review and revise the personal information of a user or a child under 14, click the 'revising personal information' and click the “withdrawal from the membership” for the cancellation of registration (withdrawal from the agreement). It is possible to open, correct, or withdraw after the identification process.
- We will take a step immediately when contacting through writing, call, or e-mail to the person in charge of managing the personal information.
- When the user demands for the correction of error of the personal information, the personal information shall not be used or provided until the correction is completed. Also, when the wrong personal information was already sent to the third person, the correction shall be done by notifying the result of processing the correction to the third person.
- The Company takes care of the cancelled or deleted personal information due to request of the user or legal attorney in a way which is stated in the “5. Processing and using period of personal information”, along with processing in a way to be disable the opening or using for other purposes.

8. Content about the personal information, installing the automatic collection tool, along with management and refusal

A. What is cookie?
- The Company preserves the information of the user to provide the personalized and customized service, along with using ‘cookie’ which is called in regularly.
- Cookie is a very small text file which is send to the browser of the user from the serve which is used to manage the server and it is saved in the hard disk of the user’s computer. When the user visits the web site, the web site server reads the content of cookie which is saved in the hard disk of the user and then maintains the setting configuring, along with being used to provide the customized service.
- Cookie does not collect the information which identifies the individual automatically/actively and the user may refuse or delete the preservation of the cookie anytime.

B. Purpose of using cookie in the Company
The Company uses cookie to provide the recent customized information which includes the advertisement of the user after understanding all services of Altibase that the users has visited, situation of visiting and using the website, popular research vocabulary, security access, editing newspaper, and size of users etc.

C. Installing cookie/Managing and refusal
- The user has a right to choose the installation of the cookie. Therefore, the user may allow all cookies, go through the process whenever saving the cookie, or refuse to save all cookies by selecting the option on the web browser.
- However, when saving cookie is refused, there might be some difficulties in using part of the Altibase service which requires log-in.
- The method of nominating the permission to install the cookie (in case of the Explorer) is stated below.
① Choose the [Internet Option] from the [tool] menu.
② Click the [personal information tab].
③ Select the [level of handling personal information] or [advanced].

9. Technical/management protection measures of the personal information

The Company is considering the technical/management measures stated below to expand the security in order for personal information to not get lost, stolen, exposed, changed, or damaged when handling the personal information of users.

A. Encryption of the password
The ID and password of the member in Altibase is saved and managed after encrypting the password in order for only member to know and the change and checking personal information is only possible for oneself who knows the password.

B. Step to prepare for hacking
The Company is doing its best to prevent the leak or damage of personal information of members due to hacking or computer virus.
The Company is backing up the data often in order to prepare the damage of the personal information and preventing the leak or damage of users’ personal information by using the recent vaccine program, along with enabling to transfer the personal information on network through coded communication.
The Company is controlling the authorized access by using the invasion block system and working hard to obtain all possible technical equipment to expand the security for other system.

C. Minimizing and educating the employee who handles personal information
The employee who handles the personal information of Company are limited to the person in charge and the separate password is being regularly renewed after being created, along with consistently emphasizing the abiding the handling personal information policy of Altibase through education.

D. Managing the organization in charge of protecting the personal information

When the problem is being discovered after checking the conducting content and abiding of handling the personal information policy by the person in charge toward through the organization in charge of protecting the personal information, the Company works hard to revise and correct these immediately.
However, the Company is not responsible for a problem in which the personal information such as ID and password etc. has occurred due to carelessness of the user or problem of the Internet.

10. Contact of person in responsibility of the personal information and person in charge

You may report all complaints related to protection of personal information which occurs during the usage of service in the Company to a person who is in charge of managing the personal information or a department in charge.
The Company shall answer satisfying answer about reported contents from users immediately.

Name : Ha, Chang Joon Department : Information and System Department Tel No.: 02-2082-1044 Position: General Manager E-mail: hachang@altibase.com

When the reporting or consulting about other invasion of personal information is necessary, please ask to institutes below.
- Korea Information Security Agency (www.118.or.kr / 118)
- Korea Online Privacy Association (www.eprivacy.or.kr / 02-580-0533~4)
- Investigation of Technology Crime Department, Supreme Public Prosecutor’s Office (www.spo.go.kr / 02-3480-2000)
- Cyber Terror Response Center, National Police Agency (www.ctrc.go.kr / 02-392-0330)

11. Further Information

The Company notifies that the "policy of handling the personal information of Altibase" are not applied when websites which are linked in the Altibase collect personal information.

12. Duty of Notification

When there are contents to add, delete, or revise the current policy of handling the personal information, they shall be notified through "notification" on website at least before 7 days of revision.
However, when there are major changes of the right of user such as collecting and using the personal information and providing by the third person, it shall be notified at least before 30 days of revision.
- Date of notification: August 1, 2012
- Date of enforcement: August 1, 2012