<Prestige Biologics Co., Ltd.> (‘http://www.prestigebiologics.com’), hereinafter referred to as (‘Prestige Biologics’) protects users’ personal information, rights and interests in accordance with the Personal Information Protection Act. In order to handle users’ complaints related to personal information, the following handling policy is enacted.

Prestige Biologics will notify through website (or individually) if any revision of privacy policy has been made.

○ This policy is effective from January 1, 2020.

1. Purpose of handling personal information
Prestige Biologics handles personal information for the following purposes. The submitted personal information will not be used for purposes other than the following, and prior consent will be sought if the purpose of use is changed.
A. Website Membership Registration and Management
According to the implementation of the limited identity verification system, Personal information is used for the purpose of identification, prevention of fraudulent use of services, various notifications and handling of complaints.

2. Personal Information File Status
1. Personal Information File Name: Handling of Personal Information
Personal Information Items: Email, Name, Access Log
Method of Cookie Collection: Website
Grounds for collecting personal information: Retention and handling of personal information for the purpose of answering inquiries.
Retention Period: 3 years
Relevant Laws: Records related to resolution of consumer complaints or disputes: 3 years

3. Handling and Retention Period of Personal Information
① Prestige Biologics uses and handles personal information agreed upon collection within the period of retention and use in accordance with laws and regulations.
② The handling and retention period of Personal Information are as follows:
1. <Website Membership Registration and Management>
Personal information related to <Website Membership Registration and Management> is retained and used for the above purpose from the date of consent of collection until three (3) years.
Grounds for retention: Retention and handling of personal information is conducted to answer inquiries.
Relevant Laws: Records related to resolution of consumer complaints or disputes: 3 years
Reason for Exception: In case of customer’s request

4. As subjects of personal information data collection, Users and Legal Representatives may exercise the following rights and obligations.
① The subject of personal data collection (user) may exercise the right to view, correct, delete and suspend the handling of personal information submitted to Prestige Biologics Co., Ltd.
② The exercise of rights under paragraph (1) can be made in writing, e-mail, or fax to Prestige Biologics Co., Ltd. Pursuant to Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and Prestige Biologics Co., Ltd. will take action without delay.
③ The exercise of rights under paragraph (1) may be done through an agent such as a legal representative of the subject of personal data collection or a person who has been delegated. In this case, a power of attorney must be submitted in accordance with Form 11 of the Enforcement Regulations of the Personal Information Protection Act.
④ Pursuant to Articles 35 (5) and 37 (2) of the Personal Information Protection Act, the rights of the users may be restricted in terms of requesting suspension of personal information access and handling.
⑤ A request for correction and deletion of personal information cannot be made if it is specified in other laws and regulations.
⑥ Prestige Biologics Co., Ltd. confirms whether the person who made the request, such as a request for access, correction/deletion, or request for suspension of handling is the User or the Legal Representative.

5. Writing of Items in handling Personal Information
1. Prestige Biologics handles the following personal information:
1 <Website membership registration and management>
Required items: Email, Name, Access Log, Cookie

6. Destruction of collected Personal Information
Prestige Biologics, in principle, destroys the personal information without delay when the purpose of handling personal information is achieved. The procedures, deadlines and methods of destruction are as follows:
– Procedure of destruction
The information entered by the user is transferred to a separate DB (a separate document in the case of paper) after the purpose has been attained, and is stored for a certain period or immediately destroyed in accordance with the internal policies and other related laws.
– Deadline
The user’s personal information shall be destroyed within five days from the end of holding period, when the personal information becomes unnecessary such as achieving the purpose of handling the personal information, the abolishment of services, or termination of business.
– Destruction method
Information in the form of electronic files uses a technical method that does not allow for reproduction of the record.

7. Matters concerning the installation, operation and rejection of the automatic Personal Information
① Prestige Biologics uses ‘cookies’ that store and retrieve usage information from time to time to provide individually customized services.
② Cookies are a small amount of information sent by the server (http) used to operate the website to the user’s computer browser and are also stored on the hard disk of the user’s PC computer.
A. Purpose of using cookies: It is used to provide optimized information to users by identifying the type of visit and use of each service and website visited by users, popular search terms, security access, etc.
B. Installation, operation and rejection of cookies: You can refuse to save cookies by setting options in the Tools > Internet Options > Privacy Menu at the top of your web browser.
C. Refusing to save cookies can cause difficulties in using customized services.

8. Person in charge of Personal Information Protection
① Prestige Biologics is responsible for overall handling of personal information and complaints related to personal information handling, for processing complaints and remedy damages.
▶ Person in charge of Personal Information Protection
● Name: Lee Seong-Yoon
● Position: Deputy Director
● Contact Information: 043-232-1552, info_pbl@prestigebio.com
※ You will be connected to the department in charge of personal information protection.
② The subject of personal information collection can contact the person and the department in charge of personal information protection, handling complaints, and resolution of damages caused by using the service (or business) of Prestige Biologics. Prestige Biologics will respond and process inquiries from users without delay.

9. Changes to the Privacy Policy
① This personal information processing policy will take effect from the date of effectivity, and if there is any addition, deletion, or correction of changes in accordance with laws and policies, a notification will be made seven (7) days before the implementation of the change.

10. Measures to securely manage Users’ Personal Information
In accordance with Article 29 of the Personal Information Protection Act, Prestige Biologics takes the following technical, administrative and physical measures necessary to securely manage Users’ Personal Information.
① Minimization and Training of Personnel handling Personal Information
Prestige Biologics is implementing measures to manage Personal Information by designating employees who handle personal information and minimizing their number by limiting those in charge.
② Restricting access to Personal Information
Prestige Biologics takes necessary measures to control access to personal information by granting, changing and canceling access rights to the database system that processes personal information, and use an intrusion prevention system to control unauthorized access from outside.