Klien Inc. Privacy Policy

<Klien Inc.> ("http://www.klien.ai/", hereinafter "Klien Website") establishes and discloses the following Privacy Policy pursuant to Article 30 of the Personal Information Protection Act to protect the personal data of data subjects and to promptly and smoothly handle related complaints.

Article 1 (Purpose of Processing Personal Information)

Klien Inc. processes personal information for the following purposes. The personal information processed will not be used for any purpose other than those stated below. If the purpose of use changes, Klien Inc. will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

• Membership registration and management: to confirm the intent to register as a member.
• Provision of goods or services: to provide content and customized services.

Article 2 (Processing and Retention Period of Personal Information)

Klien Inc. processes and retains personal information within the period required by law or the period agreed upon when collecting personal information from the data subject.

• For membership registration and management: retained and used based on the date of consent; basis: Personal Information Protection Act.
• For provision of goods or services: retained and used based on the date of consent; basis: Personal Information Protection Act.

Article 3 (Provision to Third Parties)

Klien Inc. provides personal information to third parties only within the scope specified in Article 1 and only when the data subject has consented or when there is a special provision of law under Articles 17 and 18 of the Personal Information Protection Act.

Provided to: Contracted partners (physical information, service usage records) — retention period: 3 years.

Article 4 (Entrustment of Personal Information Processing)

Klien Inc. entrusts personal information processing for smooth business operations. Entrusted parties are bound by contract to prohibit processing beyond the entrusted purpose, implement technical and managerial protective measures, limit re-entrustment, and accept supervision and liability. Entrustment period: 3 years.

Article 5 (Rights and Obligations of Data Subjects and Their Legal Representatives)

Data subjects may exercise their rights to access, correct, delete, or suspend processing of personal information at any time. Requests may be made in writing or via email, and Klien Inc. will take prompt action.

Article 6 (Items of Personal Information Processed)

• Membership registration and management: Login ID, gender, date of birth, name, physical information, service usage records.
• Provision of goods or services: Login ID, gender, date of birth, name, physical information, service usage records, access logs.

Article 7 (Destruction of Personal Information)

When the retention period has expired or the purpose of processing has been achieved, Klien Inc. destroys the personal information without delay. Electronic files are destroyed using methods that make data recovery impossible.

Article 8 (Measures to Ensure Security of Personal Information)

• Regular self-audits (quarterly).
• Access control for databases and intrusion prevention systems to block unauthorized external access.

Article 9 (Installation, Operation and Rejection of Automatic Personal Information Collection Devices)

Klien Inc. uses cookies to store and retrieve usage information to provide personalized services. Cookies are small pieces of information sent by the server to the user’s browser and may be stored on the user’s hard drive.

Purpose: to analyze visits and usage patterns, popular search terms, security connections, etc., and to offer optimized information.

Users can refuse cookies via browser settings; however, refusing cookies may limit the use of some personalized services.

Article 10 (Personal Information Protection Officer)

Klien Inc. designates the following personal information protection officer to be responsible for overall personal information processing and to handle complaints and remedies:

Article 11 (Request for Access to Personal Information)

Data subjects may request access to their personal information under Article 35 of the Personal Information Protection Act. Klien Inc. will make efforts to promptly process such requests.

Contact for requests — Department: Operations Team / Person in charge: Jo Myung-gwang / Contact: +82-2-6952-7356, klien@klien.ai

Article 12 (Remedies for Rights Infringement)

Data subjects may file for dispute resolution or consultation with the following agencies concerning damage caused by personal information infringement:

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center (KISA): 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
• Korean National Police Agency: 182 (ecrm.cyber.go.kr)

Those who have suffered infringement due to an administrative disposition or omission may file for administrative litigation in accordance with the Administrative Appeals Act. For details, refer to the Central Administrative Appeals Commission (www.simpan.go.kr).

Article 13 (Changes to the Privacy Policy)

This Privacy Policy is effective from January 1, 2021.