The privacy policy is implemented by AtomyAZA to ensure the protection of members' personal information. It includes provisions regarding the purpose of collecting personal information, and policy measures to guarantee the fundamental privacy, confidentiality, and communication rights of AtomyAZA members in efforts to prevent human rights violations resulting from information leaks.
In accordance with Article 30 of the Personal Information Protection Act, AtomyAZA has established and disclosed this privacy policy to protect the personal information of information subjects and to handle related complaints in a prompt and efficient manner. Through this privacy policy, AtomyAZA informs members about the purposes and methods of utilizing the personal information they provide, as well as the measures taken to protect personal information.
If there are any changes or revisions to AtomyAZA's privacy policy, appropriate notifications will be provided through website announcements (or individual notices). We encourage you to regularly visit the AtomyAZA website to stay updated on any changes.

Article 1 Collection and Purpose of Use of Personal Information

AtomyAZA utilizes the collected personal information for the following purposes. The personal information being processed will not be used for any purposes other than those stated below, and in the event of a change in the purpose of use, necessary measures will be taken in accordance with Article 18 of the Personal Information Protection Act, including obtaining separate consent.

Article 2 Methods of Personal Information Collection

1. AtomyAZA collects personal information through the following methods:
   1. 1.Verification of identity through the registration and consultation process on the website, mobile phones, digital devices, and the application of this service.
   2. 2.Collection through providing benefits information within AtomyAZA, and inputting shipping information for non-members' product delivery.
   3. 3.Provision from entrusted business partners or affiliated companies handling personal information.
   4. 4.Collection of generated information through service usage record statistics.
   5. 5.When using the services provided by AtomyAZA through accounts from other companies (Naver, Apple, Google, Facebook, etc.), data for user identification and personal information obtained with the user's consent will only be received from the respective company and processed within the agreed-upon purpose.

Article 3 Retention and Use Period of Personal Information

During the provision of services by AtomyAZA, the member's personal information will be continuously retained by AtomyAZA and used for the purpose of providing services. However, when the purpose of collection or provision has been achieved, or when the member requests withdrawal or termination of membership in accordance with Article 7 of AtomyAZA's Terms of Service, or when the member's qualification is terminated due to grounds for disqualification, the member's information will be deleted using irreversible technical methods and processed in a manner that prevents any access or use for any purpose. However, if there is a need to retain certain data for a certain period due to the verification of rights and obligations related to transactions under relevant laws such as the Commercial Act, the data will be retained for that specific period.

※ Personal information records processed to comply with obligations stipulated in other laws may be retained for the period necessary to demonstrate such responsibility.

Article 4 Provision and Sharing of Personal Information

AtomyAZA uses members' personal information within the scope notified in the 'Collection and Purpose of Personal Information' and generally does not exceed this scope or provide members' personal information to third parties without their consent. However, exceptions may apply in the following cases

1. 1.When members have given prior consent to disclosure or provision to third parties.
2. 2.When required by law or when there is a request from law enforcement or supervisory authorities in accordance with the procedures and methods prescribed by law for investigation purposes.
3. 3.When it is needed for fee settlement related to service provision.
4. 4.When necessary for statistical compilation, market research, etc., provided that the information is processed and provided in a form that cannot identify specific individuals."

Article 5 Outsourcing of Personal Data Processing and Provision of Subcontractors

In order to improve services, AtomyAZA may entrust the collection, handling, and management of members' personal information to outsourcing companies for processing. We strictly regulate the subcontractors in accordance with relevant laws to ensure the secure management of personal information in outsourcing contracts.

1. 1.AtomyAZA has entrusted the following tasks to the subcontractor for smooth business operations:
   Subcontractor: Atomy Corporation
   Outsourced task: Member SSL authentication and login
2. 2.AtomyAZA provides personal information to the following subcontractors within a limited scope.

1. 3.AtomyAZA, when entering into a subcontracting agreement, explicitly specifies in the contract or other relevant documents the matters related to the prohibition of personal information processing beyond the purpose of subcontracted tasks, technical and administrative safeguards, restrictions on re-subcontracting, management and supervision of the subcontractor, liability for damages, in accordance with Article 25 of the Personal Information Protection Act. AtomyAZA also supervises whether the subcontractor handles personal information securely.
2. 4.In the event of any changes in the content of the subcontracted tasks or the subcontractor, AtomyAZA will promptly disclose such changes through this privacy policy.

Article 6 Rights and Obligations of Members and the Methods of Exercising Them

1. 1.Members have the following rights regarding personal information protection in accordance with relevant laws, such as the Personal Information Protection Act:
   1. A.Right to access personal information
   2. B.Right to correct or delete personal information
   3. C.Right to suspend the processing of personal information
2. 2.Methods for exercising the rights of accessing, correcting or deleting, and suspending the processing of personal information:
   1. A.Email: help@atomyaza.com
   2. B.Phone: 1544-8844 (Customer Center)
   3. C.1:1 Inquiry: Submitting inquiries through the customer center board on the shopping mall website
3. 3.If a member requests the correction of their personal information due to an error, AtomyAZA will not use or provide the information until the correction is completed.
4. 4.If incorrect personal information has already been provided to a third party, AtomyAZA will promptly notify the third party of the correction results and take necessary measures to rectify the information.

Article 7 Withdrawal of Consent for the Collection, Use, and Provision of Personal Information

1. 1.Members have the right to withdraw their consent at any time regarding the collection, use, and provision of personal information through membership registration and other processes. Members can directly withdraw their consent for the collection, use, and provision of personal information through the website's membership withdrawal menu. Additionally, members can contact the personal information management officer or designated staff to request immediate measures for membership withdrawal. If there are actions taken, such as the withdrawal of consent and the disposal of personal information, AtomyAZA will promptly notify members without delay.
2. 2.AtomyAZA takes necessary measures to ensure that the withdrawal of consent (membership withdrawal) for the collection of personal information is easier than the method used for collecting personal information.
3. 3.If a request is made to withdraw consent (membership withdrawal) for the collection of personal information, it may take a certain amount of time to withdraw the already provided member information. During this period, the information will not be used for marketing purposes. AtomyAZA makes every effort to promptly process the request to protect the valuable information of its members.”

Article 8 Procedure and Method for Personal Information Disposal

1. 1.AtomyAZA promptly disposes of collected personal information once the purpose of its use has been achieved, in accordance with the retention and use period.
   The disposal procedure, timing, and method are as follows:
   1. A.Disposal Procedure and Timing:
      1. a)Personal information entered by members for service use is disposed of without delay once the purpose of use, such as service termination, is achieved, based on internal regulations and other relevant laws and regulations related to the protection of information (refer to Article 3 for the retention and use period of personal information). Generally, if there are no information protection reasons, personal information managed in electronic file format is deleted immediately upon service termination.
      2. b)Members' personal information is disposed of without delay within 5 days from the expiration of the retention period.
   2. B.Disposal Method:
      1. a)Personal information printed on paper is shredded or incinerated using a shredder or dissolved with chemicals.
      2. b)Personal information stored in electronic file format is deleted using technical methods that prevent the recovery of records.

Article 9 Technical and Administrative Measures

1. 1.Technical Measures:
   AtomyAZA implements the following technical measures to ensure the security of members' personal information and prevent its loss, theft, leakage, alteration, or damage.
   1. A.Members' personal information is protected by passwords, and important data is safeguarded using encryption or file locking functions (lock) through separate security measures.
   2. B.AtomyAZA employs antivirus programs to prevent damage caused by computer viruses. The antivirus programs are regularly updated, and in the event of a sudden virus outbreak, immediate provision of the corresponding vaccine prevents the infringement of personal information.
   3. C.AtomyAZA adopts secure devices (SSL or SET) using encryption algorithms to safely transmit personal information over networks.
   4. D.To prepare for external intrusion such as hacking, AtomyAZA utilizes intrusion detection systems and vulnerability analysis systems for each server, ensuring comprehensive security.
2. 2.Administrative Measures
   1. A.AtomyAZA restricts access to members' personal information to a minimum number of personnel. Regular internal training and external outsourced training are provided to employees who handle personal information to acquire new security technologies and fulfill obligations regarding personal information protection.
   2. B.At the time of employment, AtomyAZA establishes internal procedures to prevent information leaks caused by individuals by having all employees sign a security oath. These procedures also include monitoring compliance with the implementation of the personal information processing policy and the handling of employees' adherence to it.
   3. C.The handover process of personal information-related tasks among personnel is conducted rigorously under secure conditions. Clear responsibilities for personal information incidents are defined both during and after employees' employment.
   4. D.AtomyAZA does not assume responsibility for incidents resulting from user errors or the inherent risks associated with the internet. Each individual member is responsible for appropriately managing their own ID and password to protect their personal information.
   5. E.In the event of data loss, leakage, alteration, or damage to personal information caused by internal administrator errors or technical management incidents, AtomyAZA promptly notifies the affected members and takes appropriate measures."

Article 10 Personal Information Management Officer

AtomyAZA has appointed a Personal Information Protection Officer (management and operations) who is responsible for overseeing the handling of personal information and handling complaints and remedies related to personal information processing. If you have any inquiries, complaints, or requests regarding personal information protection-related matters that arise while using the services (or business) of AtomyAZA, you may contact the Personal Information Protection Officer or the respective department. AtomyAZA strives to provide prompt and sufficient responses to inquiries from information subjects.

Article 11 Remedies for Privacy Rights Violations

Information subjects can contact the following organizations for inquiries regarding personal information violations. These organizations are separate from the company, and if you need to report or consult on personal information breaches, please contact the organizations below:

1. Personal Information Infringement Report Center and Dispute Resolution Committee (Operated by Korea Internet & Security Agency)
   1. Responsibilities: Reporting personal information breaches, requesting consultations, applying for dispute resolution
      Website: privacy.kisa.or.kr
      Phone: 118 (no area code needed)
2. Personal Information Infringement Report Center
   1. Cyber Investigation Department, Supreme Prosecutors' Office (www.spo.go.kr / 1301 without area code)
   2. Cyber Safety Bureau, National Police Agency (cyberbureau.police.go.kr / 182 without area code)
3. For other consultations related to personal information breaches or damages, you can contact the Personal Information Infringement Report Center within the Korea Internet & Security Agency (KISA) at http://privacy.kisa.or.kr or call 118.

Article 12 Installation/Operation and Rejection of Automatic Collection Devices for Personal Information

1. 1.What is cookie?
   1. A.The company uses 'cookies' to store and retrieve user information for providing personalized and customized services.
   2. B.Cookie is a very small text file that is sent by the web server to the user's browser and stored on the user's hard drive. When the user visits the website again, the website server reads the contents of the cookie stored on the user's hard drive to maintain user preferences and provide personalized services.
   3. C.Cookies do not collect personally identifiable information automatically or actively. Users can refuse or delete the storage of such cookies at any time.
2. 2.Company’s purpose of using cookies:
   To remember the login IDs for the websites visited by users on AtomyAZA.
3. 3.Installation/Operation and Refusal of Cookies:
   1. A.Users have the option to choose whether to allow cookie installation. Therefore, users can choose to allow all cookies, receive confirmation for each cookie, or refuse the storage of all cookies by adjusting the options in their web browsers.
   2. B.However, if users refuse to store cookies, it may cause difficulties in accessing certain services on AtomyAZA that require login.
   3. C.The method to specify the permission for cookie installation (in the case of Internet Explorer) is as follows:
      1. a)Select "Tools" from the menu and choose "Internet Options."
      2. b)Click on the "Privacy" tab.
      3. c)Set the desired "Privacy Level" for handling personal information.

Article 13 Changes to the Privacy Policy

1. 1.This privacy policy is effective from 01,08, 2023.