1. Purpose of Personal Information Processing

KATEM (“katem.co.kr” hereinafter referred to as “KATEM”) processes personal information for the purposes outlined below. The collected information will not be used for purposes other than those stated, and prior consent will be obtained if the purpose changes.

a. Website Membership Registration and Management

Personal information is processed for verifying membership intent, providing member services, identifying and authenticating users, maintaining membership status, implementing limited identity verification, preventing unauthorized use of services, confirming parental consent for children under 14, issuing notices, handling complaints, and retaining records for dispute resolution.

b. Provision of Goods or Services

Personal information is processed to provide services, deliver content, and verify user identity.

c. Marketing and Advertising

Information is used for developing new services, offering personalized services, providing event or promotional information, demographic-targeted advertising, verifying service effectiveness, tracking access frequency, and generating service usage statistics.

2. Personal Information File Details

• File Name: Purpose of Personal Information Processing
• Information Items: Email, Mobile Number, Password, Login ID, Name, Service Usage Records, Access Logs, Cookies, IP Address
• Collection Method: Website
• Retention Basis: Service Usage
• Retention Period: 3 years
• Relevant Laws: Records of credit information collection/processing/use: 3 years; Consumer complaints or dispute handling records: 3 years; Records of advertising/notification: 6 months

3. Outsourcing of Personal Information Processing

KATEM may outsource personal information processing for smooth operations. Outsourcing agreements explicitly stipulate compliance with the Personal Information Protection Act, including: prohibition of processing beyond the agreed purpose, technical and managerial safeguards, restrictions on re-outsourcing, supervision of the contractor, and compensation obligations. Any changes to outsourced tasks or contractors will be promptly disclosed via this Privacy Policy.

4. Rights and Obligations of Data Subjects and How to Exercise Them

Users may exercise the following rights as data subjects:

• Request access to personal information
• Request correction of errors
• Request deletion
• Request processing suspension

These rights can be exercised via written request, email, or fax. The company will take prompt action. If exercised through a representative, a power of attorney must be submitted.

5. Items of Personal Information Processed

KATEM processes the following personal information:

Website Membership Registration and Management

• Mandatory: Email, Mobile Number, Password, Login ID, Name, Service Usage Records, Access Logs, Cookies, IP Address
• Optional: None

6. Personal Information Destruction

Personal information is destroyed without delay once the processing purpose is achieved, following these procedures:

• Destruction Procedure: Information entered by users is moved to a separate database (or separate paper files) and stored for a designated period in accordance with internal policies and relevant laws, after which it is destroyed.
• Destruction Period: Within 5 days after the retention period ends or purpose is achieved
• Destruction Method: Electronic files are destroyed using irrecoverable technical methods; paper documents are shredded or incinerated

7. Measures to Ensure Security of Personal Information

• Minimization and training of personnel handling personal information
• Implementation of internal management plans
• Encryption of personal information
• Recording access logs and preventing tampering
• Restricting access and blocking unauthorized intrusion

8. Personal Information Protection Officer

KATEM designates the following officer to oversee personal information processing and handle complaints or remedies:

• Officer: Bae Bo-yeon
• Contact: Tel: 055-287-8546, E-Mail: boyoun425@naver.com
• Responsible Department: R&D Center, Contact: Same as above

9. Request for Access to Personal Information

Data subjects may request access to their personal information under Article 35 of the Personal Information Protection Act through the R&D Center (Officer: Bae Bo-yeon) or via the Ministry of the Interior and Safety Privacy Portal (www.privacy.go.kr).

10. Reporting Personal Information Infringement and Dispute Resolution

If dissatisfied with the processing results or needing further assistance, users may contact the following authorities:

• Personal Information Infringement Report Center: privacy.kisa.or.kr, 118
• Personal Information Dispute Mediation Committee: privacy.kisa.or.kr, 118
• Supreme Prosecutors’ Office Cybercrime Division: 02-3480-3573
• Korean National Police Agency Cybercrime Division: 1566-0112

11. Changes to the Privacy Policy

This Privacy Policy is effective from the date of implementation. Any changes to laws or policies will be notified through the Notices at least 7 days prior to implementation.

Supplementary Provisions

This Privacy Policy is effective from September 1, 2025.