Provision of services

<CK&B Co., Ltd.> ('Hidden Tag') provides the following services through the Hidden Tag app.

1. ‘Hidden Tag’ authenticity verification service: Authenticity verification service through the scanning function of Hidden Tag app
2. App Push advertisement and notification service: advertisement and notification message transmission service using the push function of a smartphone. Hidden Tag app users can use the service at the same time as they agree to the Hidden Tag terms and conditions, and <CK&B> will start the service.

Provision of information and posting of advertisements

1. By agreeing to the Hidden Tag Terms of Use, the Hidden Tag app user agrees to the advertisements displayed when using the service and to the App Push advertisements and notifications.
2. <CK&B Co., Ltd.> provides customized advertisements using not only the search contents of Hidden Tag app users, but also standard log information such as language and device information, IP address, browser type, operating system and request date and time. The material collected for this advertisement is used temporarily and is not stored. For more information on this, please refer to the 'Privacy Policy'.
3. It is entirely a problem between Hidden Tag app users and advertisers that Hidden Tag app users communicate or make transactions by using advertisements posted on the service or by participating in advertisers' promotional activities through the service.
4. In the event of a dispute or other problem between the Hidden Tag app user and the advertiser, the 'member' and the advertiser must directly resolve, and the company is not responsible for this.

Point Policy

1. What is hidden tag point?
   It is issued due to product purchase or specific event and is used for payment within Hidden Tag APP.
2. Hidden tag point accumulation
   When scanning hidden tag products, it is accumulated for each product purchased in the ‘My Product' section.
3. Hidden tag point expiration
   Points can be used for 12 months from the date of accrual.
   Points automatically expire if the expiration date has passed.

Hidden Tag Privacy Policy

Hidden Tag establishes and discloses the following personal information processing guidelines in order to protect the personal information on the subject of information and to deal with related grievances quickly and smoothly in accordance with Article 30 of the Personal Information Protection Act.

1. Purpose of processing personal information

   Hidden Tag processes personal information for the following purposes. The personal information being processed is not used for purposes other than the following purposes, and if the purpose of use is changed, we will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

   1. Service membership registration and management
      Confirmation of intention to create an account as a member, identification and authentication according to the provision of membership services, maintenance and management of membership qualifications, identification according to enforcement of the limited identification system, prevention of illegal use of services, and consent of the legal representative when processing personal information of children under 14 years of age Personal information is processed for the purpose of confirmation, various notices and notices, and grievance handling.
   2. Provision of goods or services
      Personal information for the purpose of providing services, authenticating and related information, authentication status, point accumulation, delivery of goods, sending contracts and invoices, providing contents, providing customized services, self-certification, age verification, payment and settlement of charges, and debt collection.
   3. Grievance handling
      Personal information is processed for the purpose of confirming the identity of the complainant, confirming the complaints, contacting and notifying for fact-finding, and notifying the results of processing.

2. processing and retention period of personal information

   1. Hidden Tag processes and retains personal information within the period of retention and use of personal information in accordance with the laws or within the period of retention and use of personal information agreed upon collecting personal information from the information subject.
   2. Each personal information processing and retention period is as follows.
      1. Service member subscription and management: Until service withdrawal
         However, in the case of any of the following reasons, until the end of the reason
         1. If an investigation or investigation in violation of related laws is in progress, until the end of the investigation or investigation
         2. In the case of the remaining bond/debt relationship due to the use of the service, until the settlement of the bond/debt relationship
      2. Provision of goods or services: Until the completion of the supply of goods and services and payment and settlement of fees
         However, in the case of the following reasons, until the end of the period
         1. Records on transactions such as indications, advertisements, contract details and implementation in accordance with the 「Consumer Protection Act in Electronic Commerce, etc.」
            1. Records on display and advertisement: 6 months
            2. Records of contract or subscription withdrawal, payment, and supply of goods: 5 years
            3. Records on consumer complaints or dispute settlement: 3 years
         2. Storage of communication confirmation data pursuant to Article 41 of the 「Communication Secret Protection Act」
            1. Subscriber telecommunication date and time, start/end time, other party's subscriber number, frequency of use, source station location tracking data: 1 year
            2. Computer communication, Internet log record data, access point tracking data: 3 months

3. providing personal information to a third party

   1. HiddenTag processes personal information of the information subject only within the range specified in Article 1 (purpose of processing personal information), and only if it falls under Article 17 of the Personal Information Protection Act, such as consent of the information subject and special provisions of the law, provides personal information to third parties.
   2. HiddenTag provides personal information to a third party when there is an essential request as follows.
      1. Person receiving personal information: Investigation agency
      2. Purpose of using personal information of the recipient: Cooperation in investigation
      3. Provided personal information items: ID, nickname, authentication location information, provided photo, email
      4. Retention and use period of the recipient: Until processing is completed

4. consignment of personal information processing

   1. HiddenTag entrusts the following personal information processing tasks for smooth personal information processing.
      1. Operation of telephone consultation center
      2. Entrusted person (trustee): CK&B service department
      3. Contents of entrusted work: Telephone consultation response, department and staff guidance, etc.
   2. When entering into a consignment contract, Hidden Tag provides information on responsibilities such as prohibition of processing of personal information other than the purpose of performing consignment tasks, technical and administrative protection measures, restrictions on re-consignment, management and supervision of the consignee, and compensation for damages according to Article 25 of the Personal Information Protection Act. It is specified in documents such as contracts and supervises whether the trustee handles personal information safely.
   3. If the contents of the consignment business or the consignee change, we will disclose it through this personal information processing policy without delay.

5. rights and duties of information subject and method of exercise

   1. The information subject may exercise the following rights related to personal information protection at any time with respect to the hidden tag.
      1. Request to view personal information
      2. Request for correction in case of errors
      3. Request for deletion
      4. Request to stop processing
   2. The exercise of rights pursuant to Paragraph 1 can be done in writing, telephone, e-mail, fax, etc. for HiddenTag, and HiddenTag will take action without delay.
   3. If the information subject requests correction or deletion of personal information errors, Hidden Tag will not use or provide the personal information until the correction or deletion is completed.
   4. The exercise of rights pursuant to Paragraph 1 can be done through an agent such as the legal representative of the information subject or a person who has been delegated. In this case, you must submit a power of attorney in accordance with the form of Attachment 11 of the Enforcement Regulations of the Personal Information Protection Act.
   5. The information subject must not infringe on the personal information and privacy of the information subject or others processed by HiddenTag in violation of related laws such as the Personal Information Protection Act.

6. Personal information items to be processed

   Hidden Tag processes the following personal information items.

   1. Service membership registration and management
      1. Required items: ID(email), password, nickname, date of birth, gender, country
   2. Provision of goods or services
      1. Service use: UUID, GPS, terminal model name
      2. When paying by credit card: Card number (partial), card company name, etc.
      3. For mobile phone number payment: mobile phone number, payment approval number, etc.
      4. Account transfer: account holder name, account number, account bank, etc.
   3. In the process of using the service, the following personal information items may be automatically generated and collected.
      1. Service use record, visit record, bad use record, etc.

7. destruction of personal information

   1. When the personal information becomes unnecessary, such as the expiration of the personal information retention period or the achievement of the processing purpose, the hidden tag destroys the personal information after storing it for up to one year from the date of withdrawal.
   2. If the personal information retention period agreed by the information subject has elapsed or the purpose of processing has been achieved, if personal information must be kept in accordance with other laws and regulations, the personal information may be transferred to a separate database (DB) or the storage location Preserved otherwise.
   3. The procedure and method of destroying personal information are as follows.
      1. Destruction procedure
         Hidden Tag selects personal information that has a reason for destruction, and destroys personal information with the approval of Hidden Tag's personal information protection manager.
      2. Destruction method
         The Hidden Tag deletes personal information recorded and stored in the form of electronic files safely so that the records cannot be reproduced, and personal information recorded and stored on paper documents is shredded or incinerated with a shredder.

8. Measures to ensure the safety of personal information

   HiddenTag takes the following measures to ensure the safety of personal information.

   1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
   2. Technical measures: Management of access rights such as personal information processing system, installation of access control system, encryption of unique identification information, installation of security programs
   3. Physical measures: Access control of computer room, data storage room, etc.

9. Installation, Operation and Refusal of Automatic Personal Information Collection Device

   1. HiddenTag stores usage information and uses UUID (Universally Unique Identifier), the unique ID of the app, in order to provide individual customized services to users.
   2. UUID is safely stored on the server (https) used to operate the service.
      1. Purpose of UUID: It is used to provide optimized information such as activation, point accumulation, and user management.
      2. If you refuse to store UUID, you may experience difficulties in using customized services.

10. Person in charge of personal information protection

    1. HiddenTag is responsible for the handling of personal information, and designates a person in charge of personal information protection as follows for the handling of complaints and relief of damages related to personal information processing.
       • ▷ Personal Information Protection Officer
         Name: ChangHwan Kim
         Position: Technical Director
         Contact: <+82 02-453-8416>, <hiddnetag@cknb.co.kr>, <+82 02-453-8417>
         ※ It is connected to the department in charge of personal information protection.
         
       • ▷ Department in charge of personal information protection
         Department Name: Service Division
         Person in charge: ChangHwan Kim
         Contact: <+82 02-453-8416>, <hiddentag@cknb.co.kr>, <+82 02-453-8417>
    2. The information subject can inquire to the person in charge of personal information protection and the department in charge of all personal information protection related inquiries, complaint handling, damage relief, etc. that occurred while using HiddenTag's service (or business). HiddenTag will respond and handle inquiries from the information subject without delay.

11. Personal Information Access Request

    The information subject may request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the following departments. HiddenTag will endeavor to expedite the request for access to personal information of the information subject.

    • ▷ Personal information request reception and processing department
      Department Name: Service Division
      Person in charge: ChangHwan Kim
      Contact: <+82 02-453-8416>, <hiddentag@cknb.co.kr> <+82 02-453-8417>

12. Remedy for infringement of rights and interests

    1. The information subject may inquire about the following organizations for remedy for damages and counseling for personal information infringement.
    2. <The following organizations are separate from HiddenTag, and if you are not satisfied with HiddenTag's own personal information complaint handling and damage relief results, or if you need more detailed help, please contact us.>
       • ▷ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
         Responsibility: Report of personal information infringement, request for consultation
         Homepage: privacy.kisa.or.kr
         Phone: (without area code) 118
         Address: (58324) Personal Information Infringement Report Center on the 3rd floor, 9 Jinheung-gil, Naju-si, Jeollanam-do (301-2 Bitgaram-dong)
       • ▷ Personal Information Dispute Mediation Committee
         Jurisdiction: Personal information dispute mediation application, collective dispute mediation (civil settlement)
         Homepage: www.kopico.go.kr
         Phone: (without area code) 1833-6972
         Address: (03171) 4th floor of Seoul Government Complex, 209 Sejong-daero, Jongno-gu, Seoul
       • ▷ Supreme Prosecutors' Office Cyber Crime Investigation Division: +82 02-3480-3573 (www.spo.go.kr)
       • ▷ National Police Agency Cyber Security Bureau: 182 (http://cyberbureau.police.go.kr)

13. change of personal information processing policy

    1. This privacy policy will be applied from 06. 12. 2023