DAEYEE Engineering (hereinafter referred to as the "Company") establishes and discloses the following personal information processing guidelines to protect the personal information of data subjects and handle related grievances promptly and smoothly in accordance with Article 30 of the Personal Information Protection Act.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. 1. Providing responses to customer inquiries on the website and managing their status

Article 2 (Processing and Retention Period of Personal Information)

1. 1. The Company processes and retains personal information within the period of retention and use of personal information in accordance with laws or within the period of retention and use of personal information agreed upon when collecting personal information from the data subject.
2. 2. The processing and retention period is as follows:

   - Within 3 years from the date of receipt of website customer inquiries
   

Article 3 (Provision of Personal Information to Third Parties)

1. The Company uses personal information within the pre-notified scope and does not disclose personal information externally or use it beyond this scope without the prior consent of the data subject. However, the following cases are exceptions:
   - When the data subject has given prior consent
   - When there is a request from investigative agencies according to procedures and methods prescribed by laws for investigation purposes or pursuant to legal provisions

Article 4 (Outsourcing of Personal Information Processing)

1. In principle, we do not outsource the processing of personal information without the user's consent. However, the Company may entrust other companies to manage personal information within a limited scope for smooth and enhanced customer service. When entering into outsourcing contracts, we will notify through notices and privacy policy regarding the outsourcing party, outsourcing work content, outsourcing period, outsourcing contract details (compliance with personal information protection laws, prohibition of providing personal information to third parties and liability), and matters concerning safe management of personal information, and obtain prior consent when necessary.

Article 5 (Rights and Obligations of Data Subjects and Methods of Exercise)

1. 1. Data subjects may exercise the following personal information protection-related rights to the Company at any time:

   - Request to view personal information
   - Request for correction in case of errors
   - Request for deletion
   - Request to stop processing

2. 2. Rights under Paragraph 1 may be exercised through written document, telephone, or email to the Company, and the Company will take action without delay.
3. 3. When the data subject requests correction or deletion of errors in personal information, the Company will not use or provide such personal information until the correction or deletion is completed.
4. 4. The rights under Paragraph 1 may be exercised through a legal representative or delegate who has received power of attorney. In this case, a power of attorney according to Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
5. 5. The data subject must not infringe upon the personal information and privacy of themselves or others that the Company processes in violation of relevant laws such as the Personal Information Protection Act.

Article 6 (Personal Information Items Being Processed) The Company processes the following personal information items:

1. 1. Providing responses to customer inquiries on the website and managing their status

   - Required items: Name, Contact information (phone number, email address), Company name

2. 2. The following personal information items may be automatically generated and collected during internet service use:

   - IP address, cookies, MAC address, service usage records, visit records, malicious use records, etc.

Article 7 (Destruction of Personal Information)

1. 1. The Company will destroy personal information without delay when it becomes unnecessary due to the expiration of the personal information retention period or achievement of processing purposes
2. 2. The procedures and methods for destroying personal information are as follows:

   - Destruction procedure
   The Company selects personal information for which destruction reasons have occurred and destroys it with the approval of the Company's personal information protection officer.
   - Destruction method
   Personal information printed on paper is destroyed by shredding or incineration. Personal information stored in electronic file format is deleted using technical methods that prevent record recovery.

Article 8 (Measures to Ensure Safety of Personal Information)

1. The Company takes the following measures to ensure the safety of personal information:
2. 1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
3. 2. Technical measures: Management of access rights to personal information processing systems

Article 9 (Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)

1. 1. The Company uses 'cookies' that store and frequently retrieve usage information to provide individualized customized services to users.
2. 2. Cookies are small pieces of information sent by the server (http) operating the website to users' computer browsers and may be stored on users' PC hard drives.
3. 3. Purpose of using cookies: They are used to provide optimized information to users by understanding visit and usage patterns, popular search terms, secure access status, etc., for each service and website visited by users.
4. 4. Installation, operation, and rejection of cookies: Cookie storage can be rejected through option settings in the Tools > Internet Options > Privacy menu at the top of web browsers.
5. 5. If cookie storage is rejected, there may be difficulties in using customized services.

Article 11 (Remedies for Rights Infringement)

1. Data subjects may inquire about remedies and consultation regarding personal information infringement at the following institutions. (The following institutions are separate from the Company, and if you are not satisfied with the Company's own personal information complaint handling and damage relief results, or need more detailed help, please contact them)
2. 1. Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)

   - Jurisdiction: Report of personal information infringement, consultation request
   - Website: privacy.kisa.or.kr
   - Phone: (without area code) 118
   - Address: Personal Information Infringement Report Center, 3rd Floor, 9 Jinheung-gil, Naju-si, Jeollanam-do (301-2 Bitgaram-dong) 58324
3. 2. Personal Information Dispute Mediation Committee
   

   - Jurisdiction: Personal information dispute mediation application, collective dispute mediation (civil resolution)
   - Website: www.kopico.go.kr
   - Phone: (without area code) 1833-6972
   - Address: 12th Floor, Government Complex-Seoul, 209 Sejong-daero, Jongno-gu, Seoul 03171
4. 3. Supreme Prosecutors' Office Cybercrime Investigation Division: 02-3480-3573 (www.spo.go.kr)
5. 4. Korean National Police Agency Cyber Security Bureau: 182 (cyberbureau.police.go.kr)

Article 12. Changes to Privacy Policy

1. This privacy policy will be effective from January 1, 2025.