- Table of Contents - ■ Purpose of Personal Information Processing, Collection Items, Retention, and Usage Period ■ Processing of Personal Information of Children Under the Age of 14 ■ Provision of Personal Information to Third Parties ■ Entrustment of Personal Information Processing ■ Procedures and Methods for Destroying Personal Information ■ Rights and Obligations of Data Subjects and Their Legal Representatives, and How to Exercise Them ■ Measures to Ensure the Security of Personal Information ■ Installation, Operation, and Rejection of Automatic Information Collection Devices ■ Personal Information Protection Officer and Request for Access to Personal Information ■ Remedies for Rights Infringement ■ Changes to the Privacy Policy ■ Purpose of Personal Information Processing, Collection Items, Retention, and Usage Period MetaImmuneTech Co., Ltd. processes the personal information of data subjects as follows: ■ Provision of Personal Information to Third Parties MetaImmuneTech Co., Ltd. processes personal information within the scope specified for its intended purposes. Personal information is provided to third parties only with the consent of the data subject or in cases where it is required by law, in accordance with Articles 17 and 18 of the Personal Information Protection Act. Outside these circumstances, the company does not provide personal information to third parties. ■ Entrustment of Personal Information Processing MetaImmuneTech Co., Ltd. may delegate certain personal information processing tasks to ensure efficient handling. In such cases, the company will disclose details of the entrustment promptly through this Privacy Policy. ■ Procedures and Methods for Destroying Personal Information MetaImmuneTech Co., Ltd. promptly destroys personal information when its retention period has expired or the purpose of processing has been fulfilled. If the retention period agreed upon by the data subject has expired or the purpose of processing has been achieved, but preservation is required by other laws, the information is transferred to a separate database (DB) or stored in a different location. The procedures and methods for destroying personal information are as follows: 1. Destruction Procedure Personal information subject to destruction is identified, and with the approval of the Personal Information Protection Officer, it is destroyed. 2. Destruction Method Electronically recorded and stored personal information is destroyed in a way that prevents recovery. ■ Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them Data subjects have the right to request access, correction, deletion, or suspension of processing of their personal information at any time. Requests can be made via written documents, email, or fax as per Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and MetaImmuneTech will respond promptly. Rights can also be exercised through a legal representative or an authorized agent, in which case, a power of attorney must be submitted in the form outlined in “Notice on Processing Methods for Personal Information (No. 2020-7), Appendix Form No. 11.ˮ Requests for access or suspension of processing may be restricted under Articles 35(4) and 37(2) of the Personal Information Protection Act. Requests for correction or deletion may not be accepted if other laws mandate the collection of the relevant personal information. MetaImmuneTech verifies the identity of the requester or their legal representative to ensure the legitimacy of the requests. ■ Measures to Ensure the Security of Personal Information MetaImmuneTech Co., Ltd. takes the following measures to ensure the security of personal information: 1. Administrative Measures : Establishing and implementing internal management plans, assigning dedicated personnel, and conducting regular staff training. 2. Technical Measures : Managing access rights to personal information processing systems, installing access control systems, encrypting personal information, and implementing/updating security programs. 3. Physical Measures : Controlling access to computer rooms, data storage facilities, etc. ■ Automatic Collection of Personal Information and Its Rejection MetaImmuneTech Co., Ltd. does not use cookies or other automated data collection devices to provide personalized services. ■ Personal Information Protection Officer and Request for Access MetaImmuneTech Co., Ltd. designates a Personal Information Protection Officer who is responsible for overseeing the processing of personal information and addressing grievances and damages related to personal information processing. Data subjects may request access to their personal information under Article 35 of the Personal Information Protection Act through the department below. MetaImmuneTech Co., Ltd. will endeavor to process these requests promptly. Data subjects may also address any inquiries, complaints, or requests for remedies related to personal information protection to the Personal Information Protection Officer or the relevant department. MetaImmuneTech will respond without delay. ■ Remedies for Rights Infringement MetaImmuneTech Co., Ltd. is committed to protecting the right of individuals to self-determination regarding their personal information. The company strives to address inquiries and provide remedies for personal information breaches. If you require assistance or wish to report a breach, please contact the following department: 1. Grievance Handling Department Name : Mamagement support Team 2. Contact Person : Jinhui Cho 3. Phone : 044-417-6382 Data subjects may also seek dispute resolution or counseling related to personal information breaches by contacting the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center at the Korea Internet & Security Agency (KISA), or other organizations listed below: 1. Personal Information Dispute Mediation Committee : 1833-6972 (www.kopico.go.kr) 2. Personal Information Infringement Report Center : 118 (privacy.kisa.or.kr) 3. Supreme Prosecutors' Office : 1301 (www.spo.go.kr) 4. Cyber Bureau, National Police Agency : 182 (ecrm.cyber.go.kr) Under Articles 35 (Access to Personal Information), 36 (Correction and Deletion of Personal Information), and 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act, individuals who believe their rights or interests have been infringed by a decision or omission of a public institution may file an administrative appeal in accordance with the Administrative Appeals Act. 1. Central Administrative Appeals Commission : 110 (www.simpan.go.kr) ■ Changes to the Privacy Policy This Privacy Policy will take effect from December 12, 2023. Previous versions of the Privacy Policy can be accessed below.