Withagro Co., Ltd. (hereinafter referred to as the “Company”) hereby establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to ensure that any related grievances are addressed in a prompt and efficient manner.
The Company's Privacy Policy is subject to change in line with any updates in the laws and guidelines, as well as the Company's own terms and internal policies, and any modifications will be promptly posted on our website.

Key Personal Information Processed

Personal information

Processing purpose

Retention period

Processing delegation

Privacy officer

1. Purpose of processing personal information The Company processes personal information for the following purposes: The processed personal information is not used for any purpose other than the following, and any modification to the purpose of use will be subject to necessary measures such as obtaining a separate consent in line with Article 18 of the Personal Information Protection Act.

2. Processing and retention period for personal information The Company processes personal information for the following purposes: The processed personal information is not used for any purpose other than the following, and any modification to the purpose of use will be subject to necessary measures such as obtaining a separate consent in line with Article 18 of the Personal Information Protection Act.

3. Items of personal information processed The company processes the following items of personal information:

4. Outsourcing of personal information processing The Company does not engage third parties to process personal information. Should the need arise to engage third parties to process personal information, the Company will do so in accordance with Article 26 of the Act, and promptly disclose the nature of the outsourced tasks and information about the service provider through this Privacy Policy. In addition, prior consent will be obtained if necessary.

5. Procedure and method for the destruction of personal information

• 1 ) The Company will promptly destroy personal information when it is no longer necessary, such as after the expiration of the retention period or once the purpose for processing has been achieved.
• 2 ) In cases where personal information must continue to be retained under other applicable laws and regulations, even after the expiration of consent or the achievement of processing purposes, such information will be transferred to a separate database or stored in a different location.
• 3 ) Personal data is destroyed under the following procedure and method.
• · Destruction procedure : Personal information subject to disposal is carefully selected and undergoes destruction with the approval of the data protection officer.
• · Destruction method : Personal information kept in electronic files will be destroyed in a way that prevents its recovery, while personal information recorded or stored on paper documents will be shredded or incinerated.

6. Rights and obligations of data subjects and their legal representatives

• 1 ) Data subjects and their legal representatives have the right to access, modify, delete, or request the suspension of the processing of their personal information at any time.
• 2 ) Requests to exercise such rights can be made in writing, by phone, or email to the privacy officer, who will respond promptly after identity verification.
• 3 ) These rights may also be exercised through a legal representative or an authorized agent. In such instances, a power of attorney according to the Attached Form 11 of the Public Notice on Personal Information Processing Method (No. 2020-7) must be submitted.
• 4 ) The rights to access and request the suspension of processing personal information may be restricted under Article 35 (4) and Article 37 (2) of the Personal Information Protection Act.
• 5 ) The request to modify and delete personal information will not be accepted if other laws and regulations specify the relevant personal information to be required for collection.
• 6 ) The Company will make sure the person who requests to access, modify, delete, and suspend processing according to the rights of the data subject is indeed the data subject or his/her legitimate representative.

7. Matters on measures to secure the safety of personal information

• The Company takes the following measures to keep personal information secure.
• 1 ) Administrative measures: Establishment and implementation of an internal management plan, operation of a dedicated organization, and periodic training for employees
• 2 ) Technical measures: Management of access rights to personal information processing systems, installation of access control systems, and encryption of personal information
• 3 ) Physical measures: Access control of unauthorized persons in the computer room and data storage room
• 4 ) Policy on providing links to other sites:
  Our website may contain links to external websites or data provided by other companies. Please be aware that we do not have authority over these third-party websites, data, products, or services, and therefore, we cannot be held liable or ensure the usefulness of any products, services, or data obtained therefrom. If you click on a link within our website and are redirected to another website, please note that the privacy policy governing that website is different from ours. Therefore, we encourage you to review the policy of the newly visited website.

8. Information on the installation, operation, and refusal of automatic personal information collection systems

• The Company uses “cookies” for the following purposes: Cookies are small volumes of information sent from the computer browser or mobile application of the user by the server (HTTP) used to run the website. Cookies are stored in the user’s computer hard disk or mobile devices.
• 1 ) Purpose of using cookies : To maintain user preferences and improve services through user behavior analysis
• 2 ) Consequences of refusing to store cookies : It might be difficult to offer users services and information that are tailored to their preferences.
• 3 ) Installation, operation, and rejection of cookies : You have the option to refuse storing cookies using the methods indicated below, depending on your browser or app.
• · How to adjust your cookie settings if you are a Chrome user : View
• · How to adjust your cookie settings if you are a Microsoft Edge user : View
• · How to adjust your cookie settings if you are a Safari user : View

9. Details on the collection and use of behavioral information, as well as options for refusal The Company does not collect, use, or provide behavioral information for personalized online advertising.

10. Details on the data protection officer 1 ) The Company assumes full responsibility for processing personal information and has designated a data protection officer to handle complaints and offer solutions regarding personal data processing.

2 ) While using the Company's services (or business), individuals may contact the data protection officer and the relevant departments to address any inquiries, complaints, or remedies concerning personal information protection. The Company will promptly address inquiries about data subjects with informative responses.

11. The division that handles and processes requests for access to personal information Data subjects are entitled to request access to their personal information under Article 35 of the Personal Information Protection Act from the following departments. The Company will make every effort to ensure that data subjects' requests for access to their personal information are processed in a timely manner.

12. How to remedy the infringements of data subjects' rights

Data subjects may seek dispute resolution or consultation with the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency's Personal Information Infringement Report Center to address issues arising from infringement of personal information. Should you require further assistance with reporting or seeking advice on personal data breaches, kindly reach out to the following agencies.
• 1 )Personal Information Dispute Mediation Committee: (No area code required) 1833-6972 (www.kopico.go.kr)
• 2 )Personal Information Infringement Report Center: (No area code required) 118 (privacy.kisa.or.kr)
• 3 )Supreme Prosecutors' Office: (No area code required) 1301 (www.spo.go.kr)
• 4 )National Police Agency: (No area code required) 182 (ecrm.cyber.go.kr)

Individuals who believe their rights or interests have been infringed upon due to actions or inactions by the head of a public institution concerning requests made under Articles 35 (Access to Personal Information), 36 (Modification and Deletion of Personal Information), and 37 (Suspension of Processing Personal Information) of the Personal Information Protection Act, may file for administrative review as set out in the Administrative Appeals Act.
* For more details on administrative appeals, please visit the website of the Central Administrative Appeals Commission (http://www.simpan.go.kr)

13. Matters concerning any modification to the privacy policy

This Privacy Policy will be effective from Jan. 19, 2024.