Recruitment Platform for U.S. Forces Korea Veterans (hereinafter referred to as the “Recruitment Platform”) establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to safeguard users’ personal information and to ensure the prompt and efficient handling of any related inquiries or complaints.

The Recruitment Platform processes personal information for the following purposes. Collected and processed personal data will not be used for purposes other than those specified below. In cases where the purpose of use is changed, the Platform will obtain separate consent and take all necessary measures in accordance with Article 15 of the Personal Information Protection Act.

• ① The recruitment platform processes and retains personal data only within the retention and usage period permitted under applicable laws or the period consented to by members at the time of data collection.
• ② The specific processing and retention periods for each category of personal data are as follows:
  • 1. Membership registration and account management: Until the account is deleted
  • 2. In the case of ongoing investigations or legal proceedings due to violations of applicable laws: Until the respective investigation or proceeding is concluded
  • 3. Records related to misuse or fraudulent activities under internal company policies: Up to 5 years

• ① The recruitment platform provides personal data to third parties only when falling within the scope of Article 17 and Article 18 of the Personal Information Protection Act, such as when explicit member consent has been obtained or when special provisions exist under applicable laws. Personal data will not be processed beyond its originally intended purpose or disclosed to third parties without prior consent from the data subject.

• ① To ensure the smooth handling of personal data processing tasks, the recruitment platform entrusts the following operations:
• • 1. Data Processor (Entrusted Party): DaruSoft Co., Ltd.
  • 2. Scope of Delegated Tasks: Operation and maintenance of the recruitment platform

• ① Members may exercise their rights with respect to the recruitment platform at any time, including requests to access, correct, delete, or suspend the processing of personal data.
• ② Such rights may be exercised via written request, email, or fax in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act. The platform will respond without undue delay.
• ③ Rights may also be exercised through a legal representative or authorized proxy by submitting a power of attorney in the format prescribed under Form No. 11 of the Enforcement Rules of the Personal Information Protection Act.
• ④ Requests for access or suspension may be limited under Article 35(5) and Article 37(2) of the Personal Information Protection Act.
• ⑤ Requests for correction or deletion cannot be accepted if the relevant personal data must be retained by law.
• ⑥ When responding to a request for access, correction, deletion, or suspension, the platform verifies that the requester is either the data subject themselves or an authorized representative.

Personal data is, in principle, destroyed without delay once the purpose of collection and use has been fulfilled. The destruction process is as follows:

• ① Destruction Procedure:
  • 1. Information entered during sign-up or other activities is transferred to a separate database (DB) once the intended purpose is achieved. It is then retained for a limited time in accordance with internal policies or legal requirements before being permanently destroyed.
  • 2. The data retained in a separate DB will not be used for any purpose other than legal obligations.
• ② Destruction Methods:
  • 1. Personal data printed on paper is destroyed through shredding or incineration.
  • 2. Personal data stored in electronic file formats is deleted using technical methods that prevent recovery or reconstruction.

• ① Data Encryption

Member data is safeguarded with password protection. Files and related datasets are encrypted or secured using file-locking features and additional security measures.

• ② Personal Data Handling Staff Training

Personnel authorized to handle personal data are kept to the minimum necessary, and they undergo regular training on the adoption of emerging security technologies as well as compliance with data protection obligations. In addition, internal audit procedures are enforced to ensure the integrity and maintenance of security controls.

• ③ Account and Password Management

The recruitment platform makes every effort to secure member accounts. However, the platform shall not be held liable for issues arising from member negligence, such as password leaks, or inherent risks associated with internet usage.