logo

COBI ART ENC(hereinafter referred to as 'the Company') has established and disclosed the following privacy policy in accordance with the Personal Information Protection Act to protect the personal information of data subjects and to address related concerns quickly and efficiently.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. The processed personal information will not be used for any purposes other than those specified, and if the purpose of use is changed, prior consent will be obtained.

a. Provision of goods or services and consultation services

Personal information is processed for the purpose of providing content, etc.

Article 2 (Processing and Retention Period of Personal Information)

The Company processes and retains personal information within the period of retention and use as prescribed by law, or within the period of retention and use consented to by the data subject at the time of collection of personal information.

1. Business Application: Upon the end of the annual business period.

2. Volunteer Application: Upon the end of the annual business period.

Article 3 (Provision of Personal Information to Third Parties)

The Company only provides personal information to third parties in cases where there is consent from the data subject, or in accordance with special provisions of the law, as specified in Articles 17 and 18 of the Personal Information Protection Act.

Article 4 (Entrustment of Personal Information Processing)

The Company entrusts the following personal information processing tasks to ensure smooth handling of personal information.

- Subcontractor (Data Processor): Soluway

- Content of the entrusted tasks: Website system operation and maintenance

Article 5 (Rights, Obligations, and Methods of Exercise by Data Subjects and Legal Representatives)

As a data subject, users can exercise the following rights.

1. The data subject may exercise the following privacy-related rights with the Company at any time.

(1) Request for access to personal information

(2) Request for correction in case of errors or inaccuracies

(3) Request for deletion

(4) Request for suspension of processing

2. The exercise of rights under Paragraph 1 can be done in writing, via email, facsimile (FAX), etc., in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act. The Company will take action without delay in response to such requests.

3. If the data subject requests correction or deletion of personal information due to errors or inaccuracies, the Company will not use or provide the relevant personal information until the correction or deletion is completed.

4. The rights under Paragraph 1 can be exercised through a legal representative or an authorized agent, such as a person with delegated authority. In this case, a power of attorney in accordance with the form prescribed in Appendix 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

5. The request for access to personal information and suspension of processing may be limited in accordance with Article 35, Paragraph 5 and Article 37, Paragraph 2 of the Personal Information Protection Act.

6. The request for correction or deletion of personal information cannot be made if the personal information is explicitly specified as a subject of collection under other laws..

7. The Company verifies whether the person making the request for access, correction, deletion, or suspension of processing is the data subject or a legitimate representative.

Article 6 (Personal Information Items Processed)

The Company processes the following personal information items..

Provision of goods and services

1. Business Application: Organization/Institution name, organization address, name and title, phone number (office, mobile), email address

2. Volunteer Application: Name, age, phone number, affiliation (school and organization), email address, work experience

3. The following personal information items may be automatically generated and collected during the use of internet services: IP address, cookies, MAC address, service usage records, visit history, records of improper usage, etc.

Article 7 (Destruction of Personal Information)

The company processes the following personal information items.

Provision of goods and services

1. The company will destroy personal information without delay when it is no longer necessary for the purpose of processing, such as when the purpose of processing has been achieved.

2. If the retention period for personal information consented by the data subject has expired or the purpose of processing has been achieved, but the information must be retained according to other laws, the personal information will be transferred to a separate database (DB) or stored in a different location.

3. The procedures and methods for the destruction of personal information are as follows.

(1) Destruction Procedure: The company establishes a personal information destruction plan and destroys the personal information that needs to be destroyed. The company selects the personal information for which the destruction reason has occurred and destroys it with the approval of the Personal Information Protection Officer of Synic Solution Co., Ltd.

(2) Destruction Method: The company destroys electronic files in a way that the records cannot be restored, and personal information recorded or stored on paper documents is destroyed by shredding or incineration.

Article 8 (Measures to Ensure the Security of Personal Information)

The company takes the following measures to ensure the security of personal information.

1. Administrative Measures : Establishment and implementation of internal management plans, regular employee training, etc.

2. Technical Measures : Access control management for personal information processing systems, operation of personal information access record management systems, encryption of unique identification information, installation of security programs.

3. Physical Measures : Access control for data storage rooms

Article 9 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

In accordance with Article 29 of the Personal Information Protection Act, the company takes the following technical, administrative, and physical measures necessary to ensure security.

1. The company uses 'cookies' to store and retrieve usage information in order to provide users with personalized services.

2. A cookie is a small amount of information sent by the server (HTTP) to the user's computer browser, which is used in operating the website, and it may be stored on the user's PC hard disk.

1) Purpose of cookie use: It is used to understand the user's visit and usage patterns of each service and website, popular search terms, security access status, etc., in order to provide the user with optimized information.

2) Installation, operation, and rejection of cookies: You can refuse the storage of cookies by adjusting the options in the Privacy menu under Tools → Internet Options → Privacy in your web browser.

3) If you refuse the storage of cookies, you may experience difficulties in using personalized services.

Article 10 (Personal Information Protection Officer)

1. The company is responsible for overseeing the personal information processing tasks and has designated a Personal Information Protection Officer as outlined below to handle complaints and provide remedies for data subjects related to personal information processing.

▶ Personal Information Protection Officer: ***

- Tel: +82-31-766-2154

2. Data subjects can contact the Personal Information Protection Officer and the relevant department for any inquiries, complaints, or remedies related to personal information protection that arise while using the company's services (or business). The company will respond to and address the data subject's inquiries without delay.

Article 11 (Request for Access to Personal Information)

Data subjects may request access to their personal information under Article 35 of the Personal Information Protection Act through the Personal Information Protection Department. The company will make efforts to ensure that the data subject's request for access to personal information is processed promptly.

In addition to the department responsible for receiving and processing access requests mentioned in Paragraph 1, data subjects may also request access to personal information through the 'Personal Information Protection Comprehensive Support Portal' website (www.privacy.go.kr) of the Ministry of the Interior and Safety.

▶ Ministry of the Interior and Safety Personal Information Protection Comprehensive Support Portal → Personal Information Civil Complaints → Request for Access to Personal Information (Real-name authentication required through Public I-PIN)

Article 12 (Remedies for Infringement of Rights and Interests)

Data subjects may contact the following organizations for remedies, consultations, and inquiries regarding personal information infringement.

※ The following organizations are separate from the company. If you are not satisfied with the company's personal information complaint handling or remedy results, or if you require more detailed assistance, please contact them.

□ Personal Information Infringement Reporting Center (operated by the Korea Internet & Security Agency)

- Responsibilities: Reporting personal information infringements, requesting consultations

- Website : privacy.kisa.or.kr

- Tel : 118

- Address : (05717) 135, Jungdae-ro, Songpa-gu, Seoul, Personal Information Infringement Reporting Center, Korea Internet & Security Agency

□ Personal Information Dispute Mediation Committee

- Responsibilities : Application for personal information dispute mediation, collective dispute mediation (civil resolution)

- Website : www.kopico.go.kr

- Tel : 1833-6972

- Address : (03171) 4th Floor, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul, Republic of Korea

□ Cyber Crime Investigation Division, Prosecutors' Offic>

- Responsibilities : Inquiry and Reporting on Criminal Cases Related to Personal Data Breach

- Website : www.spo.go.kr

- Tel : 02-3480-3573

□ Cyber Safety Bureau, Prosecutors' Office

- Responsibilities : Personal Information Cyber Crime Report and Consultation Center

- Website : cyberbureau.police.go.kr

- Tel : 182

Article 13 (Installation and Operation of Video Information Processing Devices)

The company does not install or operate video information processing devices.

Article 14 (Changes to the Privacy Policy)

This Privacy Policy is effective as of September 25, 2025.