Privacy Policy

1. General

• ① 'Ajinomoto Genexine' or'Company' hereinafter has the following policy to protect users' personal information and rights/interests in accordance with the relevant laws and regulations, such as the Act on the Promotion of Information and Communication Network Utilization and Information Protection and the Act on the Protection of Personal Information and to efficiently handle user's predicaments related to personal information.
• ② If the Company revises its privacy policy, it will announce the relevant information through website notices (or individual notices).
• ③ This policy will take effect from January 1, 2019.

2. Purpose of processing personal information

The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following purposes, and if there is a change to the purpose of use, prior consent will be asked for.

• ① Identification and real name authentication to use the service.
• ② Customer inquiry processing: contact/notification forcustomer identification, inquiry confirmation, fact checking, and notification of the processing results, etc.

3. Personal information processing time and retention period

• ① In principle, the Company retains and uses the collected personal information until the purpose of collecting and using personal information is fulfilled, and when the purpose of collecting and using personal information is fulfilled, the information will be destroyed without delay.
• ② However, if it is obligated to preserve it in accordance with the provisions of related laws, such as the Commercial Act, the Company keeps the customer's personal information. In this case, the Company will use the information it retains solely for that purpose of storage, and the retention period is as follows.
  • 1) The Company's commercial ledgers, important documents related to the business, information related toslips, etc.: 10 years for Important documents / 5 years for slips (Commercial Law)
  • 2) Legers related to every transaction and information related to evidentiary documents: 5 years (National Tax Basic Law, Corporate Tax Law)
  • 3) Records related to contract or withdrawal of subscription, etc. and records related to payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
  • 4) Records related to consumer complaints or dispute settlement: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
  • 5) Legers and tax invoices or receipts issued: 5 years (Value-Added Tax Act)
  • 6) Service usage record, access log, access IP information in accordance with the Communication Secret Protection Act: 3 months

4. Matters concerning the provision of personal information to a third party

• ① In principle, the Company does not provide the collected personal information to a third party, except for the following cases:
  • 1) When consent has been obtained from the subject of information (information regarding the person receiving the personal information, purpose of use, item, retention period, rejection of consent, and disadvantages, etc. shall be provided separately).
  • 2) When there are special regulations in the law or it is inevitable to comply with legal obligations.
  • 3) When it is inevitable to carry out matters under the jurisdiction as prescribed by laws and regulations of public institutions.
  • 4) When the subject of information or his/her legal representative is in such a state that he/she is not able to express his/her intention or when prior consent cannot be obtained due to unknown address, etc., if it is clearly deemed necessary for the immediate benefit in terms of life, body, or property of the subject of information or a third party.
  • 5) Other cases falling under Article 18 (2) of the Personal Information Protection Act.

5. Rights and obligations of the subject of information and its legal representative, and how to exercise them

Users can exercise the following rights as the subject of personal information.

• ① The subject of information may exercise his/her right to view, correct, delete, and request for suspension of processing of personal information overthe Company at any time.
• ② The rights pursuant to Paragraph 1 can be exercised over the Company through writing, e-mail, fax, etc. in accordance with Article 41 (2) of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.
• ③ The rights pursuant to Paragraph 1 can be exercised through a proxy, such as the legal representative of the subject of information or a person who has been delegated. In this case, you must submit a power of attorney in accordance with the form provided in Attachment No. 11 of the Enforcement Decree of the Personal Information Protection Act.
• ④ The rights of the subject of information for a request to view personal information orto suspend its processing may be restricted according to Article 35 (5) and Article 37 (2) of the Personal Information Protection Act.
• ⑤ Requests for correction or deletion of personal information cannot be accepted if the personal information is specified as being subject to collection by other laws.
• ⑥ Upon the receipt of a request for viewing, correcting/deleting, or suspending processing according to the rights of the subject of information, the Company will verify whether the person who made such request asviewing, etc., is the said person or a legitimate agent.

6. Personal information items subject to processing

• ① The Company processes the following personal information items:
  • 1) Provision of product-related service :company name, name, title, Telephone number, E-mail, inquiry details
  • 2) Cyber complaint reporting site: Name, title, complaint details
  • 3) Service application: company name, department, name, contact information
  • 4) In the process of using the service, the following information may be automatically generated and collected.(IP address, cookies, visit time and date, service use record)

7. Destruction of personal information

• ① In principle, when the purpose of processing personal information is fulfilled, the Company will destroy the corresponding personal information without delay.
• ② The procedure and method of destroying personal information are as follows:
  • 1) Destruction procedure: The Company selects the personal information for which the reason for destruction occurs and destroys the personal information file without delay under the responsibility of the personal information protection officerfrom the date when it is recognized that the processing of the personal information is unnecessary.
  • 2) Destruction method
    * Personal information in the form of electronic files will be permanently deleted by a technical method that makes reproduction of the record impossible.
    * Personal information in the form of records, printed matters, and written materials will be shredded with a shredder or destroyed by incineration.
    * If the personal information is required to be preserved by other laws and regulations, it will be stored and managed separately from other personal information.

8. Matters concerning the installation/operation and rejection of automatic personal information collection devices

• ① The Company uses ‘cookies’ that store the use information and retrieve it from time to time in order to provide customized services for each user.
• ② Cookies are a small amount of information sent to the user's computer browser by the server (http) used to operate the website and may be stored on the hard disk of the user's PC computer.
  • 1) Purpose of use of cookies: It is used to provide optimized information to users by identifying each service visited by the user, the patterns of visits and usage of web sites, popular search terms, secure access status, etc.
  • 2) Installation/operationand rejection of cookies: You can refuse to store cookies by setting options in the Tools>Internet Options>Personal Information menu at the top of the web browser.
  • 3) If you refuse to store cookies, you may experience difficulties in using customized services.

9. Changes to the personal information processing policy

• ① This personal information processing policy is applied from the effective date, and if there is addition, deletion, or correction in accordance with the changes in laws and policies, it will be notified through notices at least seven days before the enforcement of the change.

10. Measures to ensure the safety of personal information

In accordance with Article 29 of the Personal Information Protection Act, the Company takes technical, administrative, and physical measures necessary to ensure safety as follows:

• ① Administrative measures: Establishment and implementation of an internal management plan for personal information protection, employee training
• ② Technical measures: Necessary measures in compliance with relevant laws and regulations, such as management of access rights to personal information processing systems, etc., encryption of unique identification information, etc., and installation of security programs
• ③ Physical measures: Access control in the computer room, data storage room, etc.

11. Personal information protection officer and matters concerning handling of personal information-related complaints

• ① In order to protect personal information and handle complaints related to personal information, the Company has a personal information protection officer to manage personal information, and also operates a window where you can submit opinions and complaints related to personal information.
  - Name : Yu, Sang-yeol
  - Email : sangyeol_yu@ajinomoto.com
  - Telephone : +82-32-210-2701
• ② If you have any inquiries or complaints related to personal information, please contact the personal information protection officer below, and we will respond to and process it without delay.

※The organizations listed below are independent agencies not affiliated with the Company; if you are not satisfied with the handling of the complaint about personal information by the Company or the damage relief results, or if you need more specific help, please contact the following organizations.

▶Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
- Relevant duties :Report of personal information infringement, request for consultation
- Homepage : privacy.kisa.or.kr
- Telephone : (Without area code ) 118
- Address : (58324) 3rd Floor, Personal Information Infringement Report Center, 9, Jinheung-gil (301-2, Bitgaram-dong), Naju-si, Jeollanam-do, South Korea
▶Personal Information Dispute Mediation Committee
- Relevant duties : Application of personal information dispute mediation, collective dispute mediation (civil settlement)
- Homepage : www.kopico.go.kr
- Telephone : (Without area code) 1833-6972
- Address : (03171) 4th Floor, Seoul Government Complex,209, Sejong-daero, Jongno-gu, Seoul, South Korea
▶Cyber Crime Investigation Division, Supreme Prosecutors' Office
- Relevant duties :Inquiries and reports on criminal cases related to personal information infringement
- Homepage : www.spo.go.kr
- Telephone : 1301
(National Police Agency Cyber Bureau) 182 (http://cyberbureau.police.go.kr)


Revision date and version of the personal information handling policy : November 17, 2020, ver. 2
Establishment date of the personal information handling policy : January 1, 2019