• ①ZADUSOFT processes and retains personal information within the retention/use period stipulated by law or the retention/use period consented to by the data subject.
• ②The processing and retention period for each type of personal information is as follows.

Users may exercise the following rights as data subjects.

• ①Data subjects may exercise rights such as requesting access, correction, deletion, or suspension of processing of personal information against ZADUSOFT at any time.
• ②Rights may be exercised by written document, email, or facsimile (FAX) in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and ZADUSOFT will take action without delay.
• ③Rights may be exercised through a legal representative or an authorized agent. In this case, a power of attorney in the form of Attached Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
• ④Requests for access to or suspension of processing of personal information may be restricted pursuant to Article 35(5) and Article 37(2) of the Personal Information Protection Act.
• ⑤If other laws specify the personal information as a subject of collection, deletion cannot be requested.
• ⑥ZADUSOFT will verify whether the person making a request for access, correction, deletion, or suspension of processing is the data subject or a legitimate agent.

ZADUSOFT processes the following personal information items.

In principle, ZADUSOFT destroys personal information without delay once the processing purpose has been achieved.

ZADUSOFT oversees all personal information processing tasks and has designated a Personal Information Protection Officer as follows, to handle data subject complaints and provide remedies.

Data subjects may contact the Privacy Officer or the responsible department regarding any personal information protection inquiries, complaints, or remedies arising from the use of the service. ZADUSOFT will respond to and handle all inquiries without delay.

• ①This Privacy Policy is effective from the date of enforcement. If there are additions, deletions, or corrections to the content due to changes in law or policy, notice will be given through announcements at least 7 days before the changes take effect.

In accordance with Article 29 of the Personal Information Protection Act, ZADUSOFT implements the following technical, administrative, and physical measures to ensure security.