PRIVACY NOTICE

CARVERKOREA Co., Ltd. (hereinafter referred to as "Company") takes personal information of a customer seriously. The Company places great importance on protecting the privacy of the customers who uses services of the Company (hereinafter referred to as "Services"). The Company complies with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., the Act on the Consumer Protection in Electronic Commerce, etc., and the Personal Information Protection Guideline. Through the Privacy Notice, the Company will inform of the purpose and method to use the personal information provided by the customer and let the customer know what measures the Company takes to protect the personal information.

• 1. Purpose of Processing Personal Information

   

  The Company processes personal information for the following purposes. The personal information being processed is not used for anything other than the following purposes, and the Company will take necessary measures such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act if the purpose of use is changed.
   

  1. 1. Becoming a member on the website and managing membership
  2. The Company processes personal information for the following purposes: checking the customer’s intent to join as a member, identification and certification of a member according to membership services, keeping and managing membership, identification of a member by execution of limited identification system, statistics about use of membership services, prevention of illegal use of services, various notifications and notices, handling complaints, etc.

• 1. 2. Supply of Goods or Services
  2. The Company processes the personal information for the following purposes:  providing services, sending contracts and invoices, providing contents, providing customized services, self-certification, age verification, recovery of claims, etc.

• 1. 3. Handling complaints
  2. The Company processes the personal information for the purpose of confirming the identification of the complainant, checking the complaint, contacting and notifying for the investigation, and notifying the result of handling, etc.

• 2. Period for Processing and Retaining Personal Information

   
  1. 1. The Company processes and retains the personal information within the period for retaining and using the personal information pursuant to laws and regulations or the period for retaining and using the personal information agreed by data subject upon collecting such personal information from him or her.
• 1. 2. In principle, the Company will destroy the information without any delay after the purpose of collecting and using the personal information is achieved. However, the following information will be retained for the period specified below for the following reasons.
     
     ο Items to be retained: login ID and name
     ο Grounds to be retained: to prevent confusion of using the Services
     ο Period to be retained: to be retained for five years

     The periods to process and retain the rest personal information are as follows:

     1. Becoming a member on the website and managing membership: until the member withdraws from the website;
        However, the in the following cases information will be retained for the period until such case is complete: 
        1) If an investigation or inquiry due to a violation of relevant laws is in progress: until such investigation or inquiry is complete;
        2) If claim-obligation relationship remains due to the use of the website: until such claim-obligation relationship is complete.
         
     2. Providing goods or services: until supply of goods and services is complete, and payment and settlement of fees is complete.
        1) Records relating to transactions such as labeling and advertising under the Act on the Consumer Protection in Electronic Commerce, etc., and the contents     and performance of a contact:
        - Records relating to labeling and advertising: six months
        - Records of cancelation of contracts or offers, price settlement, supply of goods, etc.: five years
        - Records of price settlement and supply of goods, etc.: five years
        - Records of handling the customer’s complaints or claims: three years
        
        2) Keeping communication confirmation data pursuant to the Protection of Communications Secrets Act:
        - Subscriber telecommunication date and time, start and end time, counterpart subscriber number, frequency of use, location tracing data of originating base station: one year
        - Computer communication, Internet log data, tracing data of access point: three months
        - Books or supporting documents about transactions: five years (the Framework Act on National Taxes and the Corporate Tax Act)
         

• 3. Items of Personal Information to be Processed
  
  The Company processes the following personal information:

   
  1. 1. Name, date of birth, sex, login ID, and password: to be used in the procedures on confirming the identification according to the use of the services
  2. 2. Email address, contact (cellphone) number delivery of notification; securing of communication channels to ensure seamless communication with customers, such as processing of customer complaints; provision of information about events and new services and products (via DM, SMS, email, etc.); sending prizes and discount coupons.
  3. 3. Bank account information and credit card information pursuant payment methods: payment to purchase of goods
  4. 4. Address: to obtain and ensure accurate destination for delivery of promotional or purchased goods.

• 4. Provision of Personal Information to a Third Party
  
  The Company processes the personal information of the customer to the explicit extent of Article 1 and provides the personal information to a third party, so long as the case falls under Article 17 of the Personal Information Protection Act such as the consent of the customer, special provisions of laws, etc.
  
  
  5. Consignment of Collected Personal Information

  In order to improve the Services, the Company entrusts the personal information as below and stipulates necessary matters so that the personal information can be managed safely when executing a consignment contract according to relevant laws and regulations. When the consignment contract is concluded, the Company will, in accordance with the Personal Information Protection Act, specify in the contract the items of responsibilities such as the prohibition of personal information processing other than the purpose of the consigned work, the technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the consigned party, and compensation for damage. And the Company supervises that the consigned party handles the personal information securely.
  If the content of the consigned work or the consigned party is changed, the Company will disclose it through the Privacy Notice without any delay.

• Consigned Party	Content of the Consigned Work	Period for Retaining and Using the Personal Information
  digitalDigm	Website Operation	Until the customer withdraws from membership or the consigned contract is complete

• 
  6. Rights and Obligations of Data Subject and Methods of Exercising
  
  
  The customer may at any time view or modify his or her personal information registered hereof and request to terminate the subscription. To view or modify the customer’s personal information the customer may do so by changing the personal information; to terminate the subscription, the customer may do so by cancelling the membership.
  The Company processes the personal information that has been revoked or deleted by the request of the customer in accordance with the period of retaining and using the personal information collected by the Company and the period of use, and processes such information that cannot be viewed or used for any other purpose.
   

• 7. Procedures and Methods of Destroying Personal Information

   

  In principle, the Company will destroy the personal information without any delay after the purpose of collecting and using such information is achieved. The procedures and methods of destroying are as follows.

  1. 1. Procedures of destroying
     The information entered by the customer for membership, etc.will be stored during a certain period (q.v. the period of retaining and using) according to the reasons to protect information by the internal policy and other relevant laws and regulations after the purpose is achieved, and then be destroyed. The above personal information shall not be used for any purpose other than those specified unless requested by law.
      
  2. 2. Methods of destroying
     - Personal information stored in an electronic file is deleted using technical methods that prevent the information from being reproduced.
     - Personal information printed on paper is destroyed by a shredder or by incineration.
      

• 8. Chief Privacy Officer and Services of Complaints to Personal Information

  To be fully responsible for the handling of personal information, to handle the complaints of the data object, and to relieve the damage as regards processing of the personal information, the Company has designated a chief privacy officer as below:
   

  ▶ Customer Service Department: CS team
  Contact: 080-332-0855
  E-mail: jykwon@carverkorea.com
   
  ▶ Chief Privacy Officer
  Name: Kim Jeong-taek
  Contact: 080-332-0855
  E-mail: webmaster@caverkorea.com

  The customer may report all personal information-related complaints that occur when using the Services of the Company to the chief privacy officer or the right department. The Company will respond promptly and adequately to the complaint from the customer.
  If the customer needs to report or consult about other privacy infringement, please contact the following organizations:
   

  1. KISA Privacy Center (https://privacy.kisa.or.kr)
  2. Privacy Mark Committee (www.eprivacy.or.kr; 02-580-0533, 02-580-0534)
  3. Supreme Prosecutors’ Office Cybercrime Investigation Center (http://www.spo.go.kr/spo/index.jsp; 02-3480-3600)
  4. National Police Agency Cyber Bureau (cyberbureau.police.go.kr/index.do; 182)
   

• 9. Installation and Operation of Equipment Automatically Collecting Personal Information; Refusal to That

   

  The Company operates “cookies” that store and find the customer’s information from time to time. A cookie is a very small text file sent to the customer’s browser by the server used to run the website, and is stored on the hard disk of the customer’s computer. The Company uses cookies for the following purposes:
  
  ▶ Purpose for using cookies, etc.

  - To provide targeted marketing and personalized service through analyzing frequency of access or time of visit of membersand non-members, understanding and tracing a user's tastes and interests, understanding degree of participation in various events, etc.
  - The customer has the option of installing cookies. As a result, the customer may allow all cookies by setting options in the web browser of the customer, check it whenever a cookie is saved, or refuse to save all cookies.

• 
  ▶ How to refuse the setting of cookies

  Example: to refuse cookie settings, the customer may allow all cookies by setting options in their web browser, check it whenever a cookie is saved, or refuse to save all cookies.
  Example of method to save settings (for Internet Explorer): Tools (at the top of the web browser) > Internet Options > Personal Information
  
  However, if the customer refuses to install cookies, there may be difficulties in providing the Services.

• 10. Other Guidelines of Handling Personal Information

   
  1. 1. Link sites
     The Company may provide links to other companies' websites or materials. In this case, the Company has no control over external sites and materials and cannot be responsible for or guarantee the usefulness of the services or materials provided there.
     If the customer clicks on the linksto other sites included on the website of the Company, please review the policy of the new site since the privacy policy of the site is irrelevant to CARVERKOREA Co., Ltd.
  2. 2. Posts
     The Company values posts of the customer and does its best to protect them from being altered, damaged, or deleted. However, any of the followings are an exception:
     - Spam posts (e.g., specific site ads, etc.)
     - Texts defaming others by spreading false facts for the purpose of slandering others
     - the disclosure of others’ personal details without consent, content that infringes the copyright of the Company or a third party, and any post different from the topic of the bulletin board
     - In order to promote the culture of desirable bulletin board, if the personal details of others are disclosed without consent, the Company can delete certain parts of a post or post them after modifying certain parts to symbols.
     - If it is possible to move to a bulletin board of another topic, the Company will not cause misunderstandings by disclosing the route of the post.
     - In other cases, the Company may delete posts after an explicit or separate warning.
  3. 3. Fundamentally, the author has all rights and responsibilities related to the post. In addition, it is difficult to protect information that is voluntarily disclosed through the post, so please consider before disclosing information.

• 1. 4. Rights and Obligations of the Customer 
     (1) Please enter the latest and most accurate personal information to prevent unexpected accidents. The customer is responsible for any accidents caused by incorrect information entered, and if the customer enters false information such as theft of others’ information, the customer’s membership may be lost.
     (2) The customer has the right to privacy, and the obligation to protect oneself and not to infringe the information of others. Please be careful not to let the personal information of the customer including passwords leak, and do not damage the personal information of others including posts. If the customer fails to fulfill such responsibilities and damages the information and dignity of others, the customer may be punished by the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.
      

• 11. Change of the Privacy Notice

  In case of changes to the Privacy Notice, the Company will notify of the change through a bulletin on the website (or by individual notice). This Privacy Notice will apply from January 8, 2018.