Olive Young collects the following personal information.

1. 1. Personal Information Items Processed without the Information subject’s Consent
2. 2. Personal Information Items Processed with the Information subject’s Consent

   Classification	Collected / Processed Information	Purposes	Retention and Usage Period
   Business Partnership Inquiries	Company/Institution Name, Applicant Name, Email Address, Mobile Number	1) Verification of identity based on partnership application 2) Securing a communication channel 3) Confirmation of partnership inquiries details	Personal information will be retained for 3 months after the partnership review is completed and then deleted

3. 3. Automatically Generated Information during Service Use

   OLIVE YOUNG may collect the following information during the use of its web and app services.

   • Collected / Processed Information

     Service Usage History, History of Visits, IP Address, Cookies

   • Purposes

     Information collected/generated during use of services

   • Retention and Usage Period

     Upon Withdrawal of Consent or Statutory mandatory storage period
     (3 months)

1. 1. OLIVE YOUNG processes and retains personal information within the retention and usage period agreed upon with the information subject or in accordance with relevant laws.
2. 2. The retention and processing period for each type of personal information is as follows.
   1. 1) Business Partnership Inquiries: 3 months after the partnership review is completed and then deleted
   2. 2) Retention of Communication Records Pursuant to the Communications Privacy Act, Article 15(2) - Computer communications, internet log records, and connection trace data: 3 months

OLIVE YOUNG processes the personal information of information subjects only within the scope specified in the purpose of processing personal information. OLIVE YOUNG provides personal information to third parties only with the consent of the information subject, in accordance with specific legal provisions, or as permitted under Articles 17 and 18 of the Personal Information Protection Act and does not provide personal information to third parties beyond these circumstances.

1. 1. OLIVE YOUNG outsources certain tasks related to the handling of personal information on its corporate website to the following service providers. In accordance with applicable laws, essential terms and conditions are stipulated in contract with the entrusted companies to safeguard your personal information.

   Company Name (Service Provider)	Entrusted Services
   CJ Olive Networks	IT system development and operation
   HIVELAB	website management and monitoring

2. 2. When entering into an outsourcing agreement, OLIVE YOUNG specifies in the contract or document any restrictions on the processing of personal information for purposes other than the performance of outsourced tasks, technical and administrative protection measures, restrictions on re-outsourcing, management and supervision of the trustee, and liability for damages, as per Article 26 of the Personal Information Protection Act, and monitors whether the trustee processes personal information safely.
3. 3. In accordance with Article 26(6) of the Personal Information Protection Act, if the trustee re-outsources our personal information processing tasks, OLIVE YOUNG’s consent must be obtained.
4. 4. If there are any changes in the details of the outsourced tasks or the trustee, we will promptly disclose this through this privacy policy.

1. 1. Once the purpose of collection is fulfilled, your personal information is immediately disposed of by Olive Young.
2. 2. If the retention period agreed upon with the information subject has expired, or if the purpose of processing has been achieved, OLIVE YOUNG will transfer the relevant personal information to a separate database (DB) or store it in a different location if continued storage is required by other laws.
3. 3. Your information is disposed of or deleted by the following methods depending on its form.
   1. 1) Personal information stored on paper is shredded or incinerated.
   2. 2) Electronically stored personal information is securely disposed of and is not retrievable.

1. 1. The information subject may exercise their rights, such as requests for access, correction, deletion, suspension of processing, withdrawal of consent, objection to automated decisions, or requests for explanations, with respect to OLIVE YOUNG.
2. 2. The exercise of rights as outlined in paragraph 1 may be conducted through written notice, email, or fax, in accordance with Form No. 8 of the Personal Information Protection Act Enforcement Regulations, and OLIVE YOUNG will take prompt action in response.
3. 3. If the information subject requests the correction or deletion of any errors in their personal information, OLIVE YOUNG will not use or provide the information until the correction or deletion is completed.
4. 4. The exercise of rights as described in paragraph 1 may be performed by the information subject’s legal representative or an authorized person, such as a delegated agent. In such cases, a power of attorney in accordance with Form No. 11 of the Personal Information Protection Act Enforcement Regulations must be submitted, and OLIVE YOUNG will verify that the request is made by the information subject or a legitimate representative.
5. 5. Requests for access to and suspension of processing of personal information may be restricted under Articles 35(4) and 37(2) of the Personal Information Protection Act, and requests for correction and deletion of personal information may not be granted if other laws stipulate that the information must be collected.
6. 6. The information subject may submit requests for access to personal information, as stipulated in Article 35 of the Personal Information Protection Act, to the department specified in Article 10, by written notice, email, fax, or phone, and OLIVE YOUNG will promptly take appropriate measures to provide access or take other actions.

Olive Young establishes the following technical/organizational measures to ensure the security of your personal information and prevent the loss, leakage, theft, and damage of your personal information due to cyberattack.

1. 1. Technical Measures

   - Your personal information is protected by your password. Important personal data and your password are encrypted before storage. - To prevent any damage from computer viruses and intrusion of personal information, vaccine programs are employed and updated on a regular basis. - Encryption algorithms are used to safely transfer your personal data over networks. - To prevent the leakage of your personal information due to cyberattack and to detect illegal intrusion, vulnerability assessments are conducted on a regular basis and intrusion detection systems are installed.

2. 2. Organizational Measures

   - The number of individuals who deal with personal information is limited to a minimum extent and periodic training is provided to the relevant employees. - The authority to access personal data is provided in accordance with the procedures of the personal information processing system and is periodically examined and withdrawn if needed. - Internal procedures are established to conduct inspections on compliance with the Privacy Policy. - Olive Young manages and supervises the entrusted companies that process your personal data.

1. 1. Olive Young uses collected ‘cookies’ to provide a more personalized experience on the website.
2. 2. Cookies are small text files sent to your browser by the web server(http) you visit and stored in the hard disk of your device (such as your desktop, smartphone, tablet PC, etc.) when you use services on Olive Young’s website or mobile app.
3. 3. You have a right to accept or disable cookies. You can accept all cookies, choose to be notified every time a cookie is issued, or disable all cookies. However, if you choose to refuse cookies, there may be difficulties in using customized services.

   ▶ [Allow/Block Cookies in Web Browser]

   • - Chrome: Settings > Privacy and Security > Clear Browsing Data
   • - Microsoft Edge: Settings > Cookies and Site Permissions > Manage and delete cookies and site data

To protect your personal information and deal with any relevant issues, Olive Young has designated an officer to protect your personal information.

• Department

  Information Privacy Center

• Name

  Yoo Ah Young

• Contact

  +82-1522-0882

• Email

  oliveweb@cj.net

Information subjects may submit requests for access to personal information in accordance with Article 35 of the Personal Information Protection Act to the department specified below. OLIVE YOUNG will make every effort to process access requests promptly.

• Department

  CJ OLIVE YOUNG Customer Service Center

• Contact

  +82-1522-0882

• Email

  oliveweb@cj.net

You may be assisted by the following organizations in case you need to consult or report any violation of use of personal information.

• KISA

  (+82) 118
  privacy.kisa.or.kr

• Personal Information Dispute Mediation Committee

  (+82) 1833-6972
  www.kopico.go.kr

• Cyber Crime Investigation, Supreme Prosecutors’ Office

  (+82) 1301
  www.spo.go.kr

• National Police Agency Cyber Bureau

  (+82) 182
  ecrm.cyber.go.kr

OLIVE YOUNG guarantees the data subject’s right to self-determination regarding personal information and strives to offer counseling and remedies in case of personal information infringement. For reporting or consulting needs, please contact the department specified in Article 10.

The privacy policy stated above may be revised in compliance with government policies, applicable laws, and due to the security system update., and we will put out a notification online of all changes such as the addition, removal, or amendment of privacy policy with the reasons