1. Personal Information to be collected and purpose of use

The SOS Sharing Society will not use personal information collected through membership registration, the customer service center, written forms, bulletin board posts, or project or event participation on the website for any purpose other than the following. If these purposes should change for any reason, we will take necessary measures, such as obtaining consent in accordance with Article 18 of the Personal Information Protection Act.

A. The personal information of users may used for the purpose of confirming participation in campaigns, projects, related activities, and surveys (by e-mail, phone, text, and mail) such as volunteering or educational activities organized by the SOS Sharing Society.

B.The personal information registered by users of the website is used to better provide newsletters, publications, and catalog services to users that consent to receive news, events, and updates related to such services.

C.The personal information of users may be used for the purpose of homepage services, communication services, and TM marketing services for users.

D.E-mail/contact information provided by users during sign up for the SOS Sharing Society website may be used for confirmation of Q&A answers posted to the bulletin board on the Foundation website.

E.Users may selectively be requested to provide personal information when posting to the bulletin board or in the comment section. This personal information shall be used for statistical analysis or for prizes when surveys or events are organized by the SOS Sharing Society. Users may also be selectively requested to provide personal information when receiving emails regarding events, or receiving gifts or other benefits

2. Personal information processing and retention period

When collecting personal information from users, the SOS Sharing Society processes and stores personal information within the regulations for the period of storage and use of personal information prescribed in related laws.

3. Types of personal information processed

The SOS Sharing Society collects the following information of applicants during registration.

• [Required] Name, date of birth, gender, ID, password, e-mail, reason for membership, English name for foreign applicants
• [Optional] English name (for foreign applicants), contact number (home/company phone number), address, document receipt address, document receiving method, occupation

When you sign up as a member of a company or organization, the following items are collected.

• [Required Fields] Membership type, company/organization name, business number, name of person in charge, ID, password, mobile phone number, e-mail
• [Optional] Contact number, address, document receipt address, document receiving method, and reason for registration

When signing up for a donor membership on- or off-line, the following information is collected. In the case of online applicants, information is used for a donor application.

• [Required] Name, date of birth, gender, ID, password, e-mail, reason for registration, English name for foreign applicants
• [Optional] Reason for donor application

If you are a child under the age of 14, additional information from your legal representative is collected.

• When the SOS Sharing Society collects personal information about children under the age of 14, it collects the minimum required personal information with consent from the legal representative.
• Name, date of birth, gender, mobile phone number, and relationship of legal representative

If the sponsor registers for National Tax Service's year-end settlement service, an additional resident registration number will be collected.

• [Required] Resident registration number

Additional personal information collected from users in the process of applying as a sponsor for the SOS Sharing Society, for various campaigns, or for education is as follows.

• If additional personal information is to be collected, the user shall be informed and must first agree to the conditions and policies for the "personal information to be collected, the purpose of collection and use of personal information, and the period of storage of personal information."
• When using the web services of the SOS Sharing Society, membership information of users may be used

The following information may be automatically collected during use of the services or in business processing.

• Information that may be collected: IP Address, Cookies, Date and Time of Visit, Service Usage Record, Defect Usage Record, and LMS Dispatch Record.

4. Provision of personal information to third parties

The SOS Sharing Society processes personal the information of users only within the parameters specified in "1. Personal Information to be collected and purpose of use ", and does not process any other information or provide any information to third parties without prior consent of the user outside of the following conditions:

1) Exclusive consent is obtained from the data subject;

2) In cases in which there are special provisions in other laws;

3) Where the subject or his/her legal representative is unable to express his/her intention or prior consent cannot be obtained due to unknown address or other contact information and is clearly deemed necessary for the urgent benefit of the subject or a third party

4) In the case of processing and providing individual user data in an unidentifiable form for statistical analysis, academic research, or market research;

If the SOS Sharing Society provides personal information to a third party, we will notify the following items to the subject and obtain consent

• Name and contact information of the recipient (in the case of a corporation or organization)
• Purpose of the recipient's use of personal information, items of personal information provided
• Period of retention and use of personal information by the recipient
• The option to refuse consent and any damages that could be incurred due to refusal of consent, and any details pertaining to such damages

5. Entrustment of personal information processing

When the SOS Sharing Society signs a consignment contract to improve the service [Protection of Personal Information] In accordance with Article 26 of the Personal Information Protection Act, the SOS Sharing Society stipulates responsibilities such as prohibition of processing personal information, technical and administrative protection measures, re-commissioning restrictions, management and supervision of the trustee, and damages.

In accordance with Article 26 of the Personal Information Protection Act, the SOS Sharing Society stipulates responsibilities such as prohibition of processing personal information, technical and administrative protection measures, re-commissioning restrictions, management and supervision of the trustee, and damages.

If the details of the entrusted work or the trustee changes, the SOS Sharing Society will disclose it in accordance with this personal information processing policy without delay.

6. The rights/obligations of the subject and the method of exercising those rights

1) The subject (referring to a legal representative if under the age of 14) may view or correct his or her personal information at any time. In order to view, correct, or delete personal information, the subject may click on "My Page > My Member Information" menu on the SOS Sharing Society website. Any requests or changes in accordance with the Enforcement Rule of the Personal Information Protection Act, will be acted upon without delay by the SOS Sharing Society.

2) The subject may withdraw his/her consent to the collection, use, and processing of personal information through membership registration at any time. If the subject wishes to withdraw his or her consent (termination of membership), he or she can withdraw directly by clicking "My Page > My Member Information > Termination of Membership" on the SOS Sharing Society website.

3) Personal information canceled, deleted, or corrected at the request of the subject is processed as specified in Article 3 (the period of personal information retention and use), and is not accessible or available for other purposes.

4) The subject may request the suspension of processing of personal information by the SOS Sharing Society at any time.

However, requests for suspension of processing may be rejected in the following cases.

A.Where access is prohibited or restricted by law

B.Cases in which there is a risk of causing damage to another person's life or body, or unjustly infringing on another person's property or other interests

C.Cases in which it is difficult or impossible to fulfill the obligations set forth in a contract unless personal information is processed, such as not being able to provide an agreed service for the subject, and the subject does not clearly express his or her intention to terminate the contract

5) The SOS Sharing Society can exercise the right to view, correct, delete, or suspend processing according to the rights of the subject through an agent, such as a legal representative of the subject or an entrusted person. In this case, you must request power of attorney under attached Form 11 of the Enforcement Rules of the Personal Information Protection Act.

7. Procedures and methods for destroying personal information

In cases in which the purpose of processing personal information is achieved, the SOS Sharing Society shall destroy the personal information without delay. However, if it is required to be preserved in accordance with other laws, the relevant personal information (or personal information file)shall be preserved separately. The procedure, deadline, and method of destruction are as follows.

1) Revocation procedure

• The information entered by the user shall be destroyed in accordance with the internal policy and relevant laws after the retention period has elapsed or the purpose of processing has been achieved

2) Destruction method

• Electronic form of information: permanently deleted in a way that cannot be restored
• In the case of records, printed materials, written documents, or other recorded media other than electronic files: crushing or incineration

8. Installation/operation of devices that automatically collect personal information and refusal of such devices;

The SOS Sharing Society uses cookies for the following purposes.

1) Purpose of using cookies

Targeted marketing and personalized services are provided by analyzing access frequency and visit time of subjects, identifying their tastes and interests, tracking subject behavior, and identifying the degree of participation in various events and the number of visits

2) How to reject cookie settings

The subject has the option to install cookies, and by setting options in a web browser, he or she may choose to allow all cookies, allow some, or deny all cookies. However, if the subject refuses to install cookies, there may be difficulties in providing services.

3) How to set up

A.Internet Explorer

Click the task bar on the internet screen (tools), select Internet Options, select the Privacy tab, and set whether to allow cookies in Settings.

B.Chrome Browser

From the Settings menu on the right side of the web browser, go to Privacy and Security and choose "Disable Cookies and Site Data" in Site Settings

9. Measures to ensure the safety of personal information

The SOS Sharing Society is taking the following technical measures to prevent loss, theft, leakage, external attacks, forgery, alteration, and hacking of personal information of subjects, and to ensure the best security for its users.

1) Minimize the number of employees who handle personal information and educate them properly on proper handling procedures

We designate employees who may handle personal information, minimize the number of employees in charge of personal information processing, and provide continuous education for employees on the protection of personal information.

2) Establishment and implementation of internal management plan

The SOS Sharing Society has established and shall implement an internal management plan for the safe processing of personal information.

3) Encryption of personal information

Personal information of subjects of data processing is encrypted, stored, and managed in accordance with the standards prescribed by relevant laws and regulations. Protective measures such as encryption are implemented when storing and transmitting important data.

4) Technical countermeasures taken against hacking or other attacks

In order to prevent personal information leakage and damage caused by hacking or computer viruses, the SOS Sharing Society has installed security programs, and periodically updates and inspects security systems. The Society has installed security systems in areas which may be accessed from the outside, and monitors and blocks these areas both technically and physically.

5) Restricting access to personal information

The SOS Sharing Society takes necessary measures to control access to personal information by granting, changing, and canceling access to the database system that processes personal information, and controls unauthorized access from outside sources using an intrusion prevention system.

6) Storage of connection records and prevention of forgery and alteration

We store and manage access records for the personal information processing system to prevent forgery, alteration, theft, and loss of user information.

7) Using locks for document security

Documents and external storage devices containing personal information are stored in a safe place with a lock.

8) Control of access to unauthorized persons

We have established and implemented access control procedures for storing personal information

10. Appointment and access employees in charge of personal information protection

The SOS Sharing Society has designated the following employees to be in charge of personal information protection and to handle inquiries and complaints related to personal information processing of subjects. Users may file a request the following employee in order to view personal information under Article 35 of the Personal Information Protection Act.

11. Infringement of rights and interests of subjects

In order to file a dispute or receive damages for personal information infringement, contact the Internet Security Agency of Korea's Personal Information Infringement Report Center, The Personal Information Dispute Mediation Committee, the Office of the Head Prosecutor’s Cyber Crime Investigation Team, or the National Police Agency's Cyber Safety Bureau.

1) Personal Information Infringement Report Center (operated by the Internet Security Agency of Korea)

• Duties : reporting personal information infringement and applying for counseling
• Homepage : privacy.kisa.or.kr
• Phone : (no country code) 118
• Address : Internet Security Agency of Korea, 9 Jinheung-gil, Naju-si, Jeollanam-do

2) Personal Information Dispute Mediation Committee

• Duties : Request for dispute settlements in cases of personal information infringement, collective dispute settlement (civil resolution)
• Homepage : www.kopico.go.kr
• Phone : 1833-6972
• Address : 4th floor of the Seoul Government Complex, 209, Sejong-daero, Jongno-gu, Seoul

3) Office of the Head Prosecutor’s Cyber Crime Investigation Team: (No country code)1301, cid@spo.go.kr (www.spo.go.kr)

4) National Police Agency Cyber Safety Bureau: (No country code) 182 (cyberbureau.police.go.kr)

12. Changes to personal information processing policies

This personal information processing policy will be applied from October 4, 2022. The previous personal information processing policy can be found below.