PRIVACY POLICY

DLG Law Corporation ("DLG," "we," "us," or "our") may collect, store, use, and/or share ("process") your personal information. Accordingly, we establish and present the following privacy policy describing how we process and protect your personal information and handle any relevant grievance promptly and amicably, subject to applicable laws. Please carefully read and review this privacy policy which will help you understand your privacy rights and the choices available to you.

1. Your Information We Collect or Receive

We collect and process your personal information for the following purposes and retain such information for the duration specified below:

Client Information

• Items Collected: Name, contact details (address, telephone number, email, etc.), employment information (company name, position/title), and legal consultation details
• Purpose of Processing: Providing legal services and information related to client matters, facilitating communication, and managing client relationships
• Retention Period: Until the purpose of processing is fulfilled or you withdraw consent

Applicants (Legal Professionals, Administrative Staff, Interns, etc.)

• Items Collected: Name, contact details (address, telephone number, email, etc.), educational background, employment history, and any other information provided by the applicant
• Purpose of Processing:
  • Job Applicants: Evaluation of qualifications for recruitment, notification of hiring decisions, management of HR matters following employment, and conduct of future recruitment outreach
  • Intern Applicants: Evaluation of qualifications for internship approval, establishment and management of internship relationships, and assessment for potential full-time employment
• Retention Period: Until the purpose of processing is fulfilled or you withdraw consent

Employee Information

• Items Collected: Name, resident registration number (or equivalent identification number), contact details (address, telephone number, email, etc.), photograph, and other HR-related information necessary for maintaining the employment relationship
• Purpose of Processing: Execution and administration of employment contracts, HR management, including payroll and employee benefits, and preparation of employee rosters
• Retention Period: Until the purpose of processing is fulfilled or you withdraw consent

2. Provision of Personal Information to Third Parties

We do not provide your personal information to third parties without your consent, unless permitted under the special provisions of the Personal Information Protection Act of the Republic of Korea or other applicable laws.

3. Outsourcing of Processing of Personal Information

To support our operations, we engage third-party service providers to perform certain personal information processing tasks on our behalf as follows:

Outsourced Processor	Outsourced Tasks
Stibee Co., Ltd.	Distribution and delivery of newsletters
Café24 Corp.	Website hosting, technical support, and maintenance

4. You and Your Legal Representatives' Rights, Obligations, and Exercise Methods Thereof

1. You may, at any time, exercise the right to access, correct, delete, or request the suspension of the processing of your personal information.
2. You may exercise the above right by your agents, such as your legal representative or a delegate, in which case you will be required to submit to us a power of attorney that confirms such delegation.
3. Requests may be made in writing, via email, or through other appropriate means. We will take action without undue delay; provided that, the exercise of certain rights may be restricted under applicable laws such as the Personal Information Protection Act of the Republic of Korea.

5. Destruction of Personal Information

1. We will, without undue delay, destroy your personal information when it is no longer needed, such as upon the expiration of the personal information retention period, or achievement of the purpose of processing.
2. If we need to preserve your personal information beyond the agreed retention period due to legal obligations, we will store your personal information and isolate it from further processing by separately storing it in a dedicated database or physical location.
3. We take the following destruction procedures and methods:
   • Destruction Procedures: We will select the personal information for which the reason for destruction has arisen and destroy the personal information with the approval of our Chief Privacy Officer.
   • Destruction Methods: Electronic files are permanently deleted using technical methods that render the information irrecoverable. Paper documents are shredded or incinerated.

6. Safety Measures for Personal Information

We have implemented the following security measures designated to ensure the security of your personal information:

• Administrative Measures: Establishment and implementation of internal management policies, and regular staff training
• Technical Measures: Technical countermeasures against hacking, encryption of personal information, access control for personal information processing systems, retention of access logs, and safeguards against alteration or forgery
• Physical Measures: Restricted access to server rooms and data storage rooms

7. Chief Privacy Officer and Contact Information

We have designated a Chief Privacy Officer responsible for managing personal information processing and handling your grievances and damage relief, as follows:

You may inquire about all personal information protection-related inquiries, handling grievances, or damage relief arising from using our services to our Chief Privacy Officer or the following department in charge:

You may contact the following organizations for relief from personal information infringement and other reports and consultations on personal information infringement:

• Personal Information Dispute Mediation Committee: +82-1833-6972 (without area code) / www.kopico.go.kr
• Personal Information Infringement Reporting Center: +82-118 (without area code) / privacy.kisa.or.kr
• Supreme Public Prosecutors' Office: +82-1301 (without area code) / www.spo.go.kr
• National Police Agency: +82-182 (without area code) / ecrm.cyber.go.kr

Effective Date: July 30, 2024