Article 1. Reason for Collection of Personal Information; Types of Personal Information Subject to Collection

The following sets forth the types of personal information collected by the Firm which fall under the Firm’s privacy policy, together with the reasons for collecting such information

[Personal Information – General]

• Types of Personal Information Collected by the Firm : Personal information specified in the resume or cover letter of lawyers, employees, and applicants for internship position, such as name, picture, address, phone number, date of birth, gender, e-mail address, educational background, work experience, and military service status
• Reason for Collection of Personal Information : To confirm the identity, education and experience of the applicant; to make hiring decision and provide notice of decision; and to use as reference in making hiring decision
• Retention Period : Period of time necessary to make the hiring decision

[Personal Information – Clients]

• Types of Personal Information Collected by the Firm : Name, contact number, e-mail address, company name, position and title within the company
• Reason for Collection of Personal Information : To handle the matters referred by clients; to make necessary contacts to clients in handling the matters related to clients; to send newsletters and other publications produced and published by the Firm, and to provide other information as may be necessary
• Retention Period : Period of time necessary to achieve the purposes above or until the consent of clients is withdrawn

[Personal Information – Employees]

• Types of Personal Information Collected by the Firm : Name, resident registration number, contact number, address, e-mail address, military service, educational background, work experience, account number, and family relations
• Reason for Collection of Personal Information : For human resources purposes, such as hiring, compensation and benefits, extension of employment agreement, processing of mandatory insurance, education, issuance of certificates, among other things
• Retention Period : Three years from the date of termination of employment

Article 2. Providing Personal Information to Third Parties

The Firm shall manage the relevant personal information only within the scope expressly set forth in Article 1 above.

Without the express prior consent of the relevant persons providing the personal information, the Firm (i) shall not use the personal information beyond the original intended scope and (ii) shall not provide such personal information to any third party.

However, the Firm may provide the personal information hereunder to a third party if the PIPA or any other applicable law contains any express provision permitting such sharing of information.

Article 3. Delegation of Management of Personal Information

Without the consent of the persons supplying personal information, the Firm shall not delegate the management of personal information to a third party.

If it is necessary to delegate the management of personal information at any time, the Firm shall publish the relevant details on this section of the Firm’s website, such as the party to whom the Firm will delegate the management function, the duration of delegation and the terms and conditions of the delegation.

Article 4. Rights and Obligations of Persons Supplying Personal Information, and the Exercise Thereof

• ① Persons supplying personal information to the Firm may exercise privacy-related rights pursuant to the PIPA and other applicable laws, such as requesting the Firm to allow inspection of the personal information, or to revise, delete, or cease retention of the personal information.
• ② The exercise of rights referred to in Paragraph (1) above may be performed through a legal representative or an attorney-in-fact of the person supplying the personal information; provided that a power of attorney must be submitted in accordance with the Working Rules promulgated pursuant to the PIPA.
• ③ The Firm will promptly implement measures in accordance with the PIPA and other applicable laws and regulations in connection with the exercise of rights by persons supplying personal information to the Firm.

Article 5. Measures to Secure the Safety of Personal Information

In accordance with Article 29 of the PIPA, the following measures are currently being implemented by the Firm:

• ① Establishment and implementation of an internal administration plan and regular training of the Firm’s attorneys and employees concerning the protection of personal information
• ② Controlling and restricting access to the personal information database, and installation of security software
• ③ Data processing center. Restricting physical access to data storage facilities

Article 6. Destruction of Personal Information

• ① If the need for collecting a particular bit of personal information by the Firm has been met, such that the personal information is no longer needed by the Firm, the Firm shall promptly destroy the personal information.
• ② If the personal information is recorded on any printed material or written document, the personal information shall be destroyed by way of shredding. If the personal information is stored electronically, then the personal information shall be deleted permanently such that it is impossible to restore the deleted information.

Article 7. Contact Persons

Persons supplying personal information may contact the following persons in connection with any query relating to management of personal information, any complaints or any redress, among other things.

Primary Responsible Person

• Name : You Jung LEE
• Contact Information : +82-2-3019-5457, yjlee@onelawpartners.com

Working-Level Contact Person

• Name : Gun Woo LEE
• Contact Information : +82-2-3019-5492, gwlee@onelawpartners.com

Article 8. Changes in Privacy Policy

The Firm’s privacy policy set forth herein is subject to change, in accordance with applicable laws and regulations or the Firm’s internal regulations. In case of any change to the Firm’s privacy policy, the Firm will publish the relevant details in accordance with the applicable laws and regulations.