Article 1 Consent to Collection of Personal Information and Collection Method
<MONA INC> (“URL” hereinafter “Website”) shall establish a procedure for allowing
customers to click the button “Agree” to the terms of use, collection of personal
information, and details of personal information used. Customers shall be deemed to
have agreed to the collection and use of their personal information by clicking the
“Agree” button.
Article 2 Personal Information Items Collected and Purpose of Using Personal
Information
“Personal Information” means information on living persons and refers to their names,
resident registration numbers, or any other information that identifies such persons.
(Even if such information alone cannot identify a certain person, such information that
can be easily combined with other information and be used to identify such a person.)
The Website has the following purposes for collecting and using customers’ personal
information:
Personal information
- Time of collection: Contact for Inquiry
- Mandatory collection items: e-mails, mobile numbers, telephone numbers, names,
company names, job titles.
- Purpose of using personal information: customer consulting for the use of services, and
contact for inquiry
- Retention period: Retained for one (1) year since submission of the inquiries.
Article 3 Collection of Personal Information via Cookies
The Website may install and operate cookies that store and frequently retrieve
customers’ information. A cookie means a small amount of text files that a website sends
to users’ computer browsers (Internet Explorer, and others)
1) Purposes of using cookies
- Providing differentiated information, depending on individuals’ interests
- Analyzing the access frequency or staying time of users, identifying users’ tastes and
interests, and using them for target marketing and as a measure for service
improvement
- Tracing the information on items purchased and items to which users pay attention,
and providing tailor-made services
2) Operation of cookies and rejection of cookies. Cookies are stored at the hard disk of
users’ computers. Cookies identify users’ computers but do not personally identify users.
In addition, customers may accept or reject all cookies, or go through checks whenever
cookies are stored by changing settings on their web browser.
However, if customers refuse to store cookies, they may not use some services that
require them.
3) Method for changing settings to reject cookies
A. Internet Explorer
Directly change settings by clicking Tools > Internet Options > Personal Information tab
on the upper menu of a web browser
B. Chrome

Directly change settings by clicking Menu icon on the upper right bar of a web browser
>Settings > Advanced Settings on the bottom of the screen > Contents Setting button on
Personal Information section > Cookies section
Article 4 Periods of Retaining and Using Personal Information and Destruction of
Personal Information
1) Customers’ personal information shall be destroyed without any delay after the
purposes of collection and use of their personal information have been fulfilled. 2) The
Website shall destroy personal information in the following manner.
A. Destruction procedure-The information entered for inquiries shall be transferred to a
separate database (in case of information on paper, a separate filing cabinet), stored for
a certain period of time in accordance with internal guidelines and other relevant
statutes, and then destroyed.
- The above personal information shall not be used for any purposes other than for the
purposes stipulated by law.
B. Destruction methods-Personal information printed out on paper shall be destroyed by
shredding or burning. - Personal information in electronic file format shall be entirely
destroyed by technological methods so that they may not be restored or regenerated.
Article 5 Provision of Personal Information for Third Parties
1) The Website shall neither use customers’ personal information nor provide such
information for other persons, companies, and institutions beyond the scope of Article 1
above (Personal Information Items Collected and Purpose of Using Personal
Information).
2) The following cases are exceptions.
A. When customers’ personal information is required by relevant institutions for
investigative purposes in accordance with relevant statutes
B. When customers’ personal information is provided in a form that cannot identify
certain individuals for advertisers, suppliers, or research organizations to compile
statistics or conduct academic or market research
C. When customers’ personal information is requested in accordance with pre-
determined procedures under other relevant statutes even if personal information is
provided in accordance with the foregoing, we do our best to ensure that such
information is not indiscriminately provided against the original purpose of collection and
use of such information.
Article 6 Outsourcing of Personal Information Processing
The Website outsources the processing of users’ personal information to outside
professional organizations as follows for the smooth conduct of businesses, such as
provision of better services and customers’ convenience.
- Establishing and maintaining computer systems: Hosting companies imweb

※ The information shared with outsourcing companies shall be limited to the minimum
information required to fulfill the original purpose of outsourcing. In addition, optional
personal information is provided for outsourcing companies at the request of customers

for services.
※ The list of outsourcing companies may be subject to change, depending on changed
services and contractual periods. Any change in this list shall be announced in advance
via notices. Customers participating in short-term events shall be individually notified of
such events.

Article 7 Measures for Ensuring the Security of Personal Information
The Website shall take technological/administrative/physical measures required for
ensuring the security of personal information in accordance with Article 29 of the
Personal Information Protection Act.
1. Encryption of personal information
Users’ personal information, including passwords, is stored and managed and is only
known to the users who own that information. Important data is secured with separate
features, such as the encryption and locking of files and transmitted data.
2. Technological measures against hacking
The Website shall install, regularly update, and check security programs to ensure that
personal information is not leaked and damaged due to hacking or computer viruses. It
shall also install systems in areas to which access from the outside is controlled, as well
as technologically/physically inspect and block such areas.
Article 8 Protection of Personal Information of Children under Fourteen Years of Age
The Website deems the protection of children’s personal information in online
environments to be also important. It does not allow children under fourteen years of age
who require the consent of their legal counsel to submit inquiries. If such children submit
inquiries in the Website, or provide their personal information due to the theft of their
names and information or abuse of systems, then their legal counsels may exercise all
rights.
Article 9 Chief Privacy Officer
The Website appoints the following chief privacy officer who is responsible for the
handling of personal information and the handling of customers’ complaints regarding
personal information and damage reliefs.
▶ Chief Privacy Officer
- Name: Chang, Ikwhang
- Job grade: President
- Contact point: +82-2-6949-1134
Article 10 Modification of the Guideline on Personal Information Processing
This guideline on personal information processing shall take effect on its effective date.
Any addition of change under statutes and this guideline, and deletion and correction of
anything in this guideline shall be announced via notices seven (7) days prior to the
effectuation of such addition, deletion, or correction.