Privacy Policy

We prioritize user privacy as a top value in our business.

ADENA SOFTWARE CO., LTD. (hereinafter referred to as "the Company") complies with the laws related to the protection of personal information, such as the " Act on Promotion of Information and Communications Network Utilization and Information Protection" and the "Personal Information Protection Act," in the Republic of Korea, and takes measures to protect the personal information of users.

The Company makes this Privacy Policy available on the first page of its website to ensure that users can easily access and review it at any time.

This Privacy Policy may be amended in accordance with relevant laws and the Company's internal policies. Changes will be made available through version management to ensure easy understanding of the amendments. The Company is established in the Republic of Korea, and this Privacy Policy is prepared based on the laws of the Republic of Korea.

Table of Contents

1. Categories and Collection Methods of Personal Information

2. Purposes of Collection and Use of Personal Information

3. Retention and Use Period of Personal Information

4. Sharing and Provision of Personal Information

5. Rights, Obligations, and Methods of Exercising Rights of Data Subjects

6. Procedure and Method of Personal Information Destruction

7. Handling of Personal Information Outsourcing

8. Installation/Operation and Refusal of Automatic Collection Devices for Personal Information

9. Technical/Administrative Measures for Protection of Personal Information

10. Personal Information Management Officer and Contact

11. Remedies for Privacy Rights Violations

12. Obligation to Notify Changes in the Privacy Policy

1. Categories and Collection Methods of Personal Information

The Company processes the following categories of personal information:

1.1 Personal Information Categories

1.1.1 Customer inquiries: Name or corporate name, email, country, phone number

1.1.2 Automatically generated information during service usage or business processing: Service usage records, access logs, cookies, IP address, device information, records of misuse

1.1.3 Job application: Name, nationality, address, phone number, email, job category, position, experience, skills

1.2 Collection Methods

1.2.1 Users input information directly through the inquiry function on the website.

1.2.2 Users provide information directly through the resume submission function on the website.

2. Purposes of Collection and Use of Personal Information

The Company utilizes the collected personal information for the following purposes. All information provided by users will only be used for purposes consistent with those listed below, and any changes to the purposes will require prior consent.

2.1 Customer Inquiries

Personal information is processed for the purpose of responding to customer inquiries.

2.2 Service Provision

Personal information is processed for the purpose of providing services, sending contracts/bills, offering content, providing customized services, and more.

2.3 Recruitment

Personal information is processed for identification of applicants, conducting recruitment procedures, confirming acceptance, notifying progress of recruitment, and verifying qualifications.

2.4. Marketing and Advertising

Personal information is used for providing tailored services, service notifications and recommendations, statistical analysis for service improvement and new service development, and advertising based on statistical characteristics.

3. Retention and Use Period of Personal Information

3.1. Upon achieving the purposes of collecting and using personal information, the Company promptly destroys the information. However, if there is a legal requirement for retention, the Company retains user information for a certain period as specified by relevant laws. The following retention periods apply:

3.1.1. Records related to contracts or subscription withdrawal: 5 years

3.1.2. Records related to payment of fees and supply of goods, etc.: 5 years

3.1.3. Records related to consumer complaints or dispute resolution: 3 years

3.1.4. Records related to fraudulent use, etc.: 5 years

3.2. Personal information collected on job application forms is retained for up to 6 months from the announcement of successful candidates for recruitment purposes, after which it is promptly destroyed.

4. Sharing and Provision of Personal Information

The Company processes users' personal information within the scope provided in "2. Purposes of Collection and Use of Personal Information," and will not disclose personal information to third parties beyond that scope without users' prior consent. However, exceptions apply in the following cases:

4.1 When the user has given prior consent for disclosure

4.2 When required by law or when investigative agencies request information according to legal procedures and methods for investigation purposes

4.3 In cases where the user or legal representative is unable to express intent or consent due to reasons such as being in an urgent life-threatening situation, and it is deemed necessary to protect the urgent life, body, property interests of the user or a third party

5. Rights, Obligations, and Methods of Exercising Rights of Data Subjects

Users can exercise the following rights as data subjects:

5.1. Users can exercise rights such as accessing personal information, correcting errors, deleting, and requesting the suspension of processing from the Company.

5.2. Users can exercise their right to access personal information through written, electronic mail, facsimile transmission (FAX), etc., in accordance with the format specified in Annex 8 of the "Guidelines for Processing Personal Information." The Company will promptly take action upon receipt.

5.3. Users can exercise their rights through legal representatives or authorized agents. In this case, a power of attorney in accordance with Annex 11 of the "Guidelines for Processing Personal Information" must be submitted.

5.4. The Company verifies whether the requester or the legal representative is the user themselves or a legitimate representative when requests for access, correction, or deletion of personal information are made.

5.5. If a user or legal representative requests correction of personal information errors, the Company will not use or provide the information until correction or deletion is completed. The Company will also promptly notify third parties of incorrect personal information to facilitate correction.

5.6. Deleted personal information requested by the user or legal representative will be processed in accordance with the retention period specified in "3. Retention and Use Period of Personal Information," and will not be accessed or used for other purposes.

5.7. In the case of requests for personal information access and processing suspension, the user's rights may be restricted under Article 35, Paragraph 4, and Article 37, Paragraph 2 of the "Personal Information Protection Act."

5.8. In the case where personal information is specified as the target of collection by other laws, the user or legal representative cannot request its deletion.

6. Procedure and Method of Personal Information Destruction

When personal information is no longer necessary due to the expiration of the retention period or the achievement of processing purposes, the Company promptly destroys the relevant information. The procedure and methods for personal information destruction are as follows:

6.1 Destruction Procedure: The Company selects personal information for destruction and obtains approval from the Company's Privacy Officer before destruction.

6.2 Destruction Methods: Electronic files containing personal information are destroyed to prevent reproduction, while paper documents containing personal information are shredded or incinerated.

7. Handling of Personal Information Outsourcing

The Company outsources personal information for the purpose of enhancing services. The Company has established necessary provisions to ensure that personal information is securely managed in accordance with relevant laws. The outsourcing agencies and their tasks are as follows:

Contractor	Task	Duration
Amazon Web Service	System infrastructure setup and data storage	Until the end of the outsourcing contract

7.1. When entering into an outsourcing contract, the Company specifies matters related to personal information processing prohibition beyond the purpose of the outsourcing, technical and managerial protective measures, restrictions on re-outsourcing, management and supervision of subcontractors, liability for damages, etc. in documents such as contracts, in accordance with Article 26 of the "Personal Information Protection Act."

7.2. In case of changes in the content of the outsourced tasks or subcontractors, the Company will promptly disclose such changes through this Privacy Policy.

8. Installation/Operation and Refusal of Automatic Collection Devices for Personal Information

Cookies are small pieces of information transmitted by websites to a user's web browser (e.g., Internet Explorer).

Purpose of Using Cookies: Cookies store user preferences and settings to provide a faster web experience and support convenient usage. This enables users to access services more easily.

Installation/Operation and Refusal of Cookies: Users have the option to control the installation of cookies. Users can either allow all cookies, confirm each time cookies are saved, or refuse all cookies. However, refusing cookies may make it difficult to provide certain services.

9. Technical/Administrative Measures for Protection of Personal Information

The Company has implemented technical, administrative, and physical measures to ensure the security of personal information and prevent loss, theft, leakage, alteration, or damage during the processing of personal information.

9.1 Administrative Measures: Establishment and implementation of internal management plans, minimization of personnel handling personal information, provision of personal information protection education

9.2 Technical Measures: Access control of personal information processing systems, access control, encryption of important information such as passwords, installation of security programs, etc. /p>

9.3 Physical Measures: Access control to computer rooms and document storage rooms, etc.

10. Personal Information Management Officer and Contact

10.1 The Company designates the following department and Personal Information Protection Officer to protect personal information and handle complaints related to personal information.

Personal Information Protection Officer

- Name: Gwanpyo Do

- Affiliation: Adena Software Co., Ltd.

- Position: Director

- Email: privacy@adenasoft.com

10.2. Users can contact the Personal Information Protection Officer for any inquiries related to personal information protection while using the service. The Company will respond promptly and adequately to user inquiries.

10.3. Despite the Company's implementation of advanced security measures, the Company is not responsible for incidents involving loss, alteration, or damage to information caused by risks on the network such as hacking that use advanced technology.

10.4. In cases where the Company is legally obligated to provide personal information, regardless of the contents of this Privacy Policy, the Company may provide such information according to a court order.

11. Remedies for Privacy Rights Violations

If users are not satisfied with the Company's handling of personal information complaints or the results of damage relief, or if they require more detailed assistance, they can contact the following organizations, which are separate from the Company.

① Personal Information Infringement Report Center (Operated by Korea Internet & Security Agency, KISA) - Duties: Reporting personal information infringements, applying for consultation - Website: privacy.kisa.or.kr - Phone: 118 (no area code needed)

② Personal Information Dispute Mediation Committee - Duties: Filing personal information dispute resolution applications, group dispute mediation (civil settlement) - Website: https://www.kopico.go.kr - Phone: 1833-6972 (no area code needed)

③ Cyber Investigation Department, Supreme Prosecutors' Office - Website: www.spo.go.kr - Phone: 1301 (no area code needed)

④ Cyber Investigation Division, National Police Agency - Website: ecrm.cyber.go.kr - Phone: 182 (no area code needed)

12. Obligation to Notify Changes in the Privacy Policy

This Privacy Policy is effective from the date of implementation. Any changes to this Privacy Policy will be notified and disclosed continuously on the website, including the timing of changes and implementation, as well as the revised contents.

Effective Date: August 17, 2023