iREA

Privacy Policy

< IREA System Industry Co., Ltd. >(' ireatek.com'hereinafter ' Company'.) has established the following processing policy to protect users' personal information and rights in accordance with the Personal Information Protection Act and to smoothly handle users' complaints related to personal information.

IREA System Industry Co., Ltd. will announce through website notices (or individual notices) when revising the privacy policy.

1. Purpose of Personal Information Processing

Company processes personal information for the following purposes. Processed personal information will not be used for purposes other than the following, and prior consent will be sought when the purpose of use changes.

a. Personal information is processed for the purpose of Quote inquiry, online consultation reservation, A/S inquiry etc.

2. Personal Information File Status

1. Personal information file name: IREA System Industry Co., Ltd. Personal Information
- - Personal information items: Company name, contact person name, contact information, email, phone number, inquiry content
- - Collection method: Homepage
- - Retention basis: Personal Information Protection Act
- - Retention period: 3 years
- - Related laws: Records on consumer complaints or dispute handling: 3 years

3. Personal Information Processing and Retention Period

① IREA System Industry Co., Ltd. processes and retains personal information within the personal information retention and use period specified by law or agreed upon when collecting personal information from data subjects.
② The processing and retention period for each personal information is as follows.
- 1. Quote inquiry, online consultation reservation, A/S inquiry
  - Personal information related to Quote inquiry, online consultation reservation, A/S inquiry is retained and used for the above purpose from the date of consent for collection and use until < 3 years>.
  - -Retention basis: Personal Information Protection Act
  - -Related laws: Records on consumer complaints or dispute handling: 3 years
  - -Exceptions:

4. Matters Concerning Third-Party Provision of Personal Information

① Company provides personal information to third parties only when the data subject consents or when there are special provisions in laws corresponding to Articles 17 and 18 of the Personal Information Protection Act.
② Company provides personal information to third parties as follows.
- - - Personal information recipient: IREA System Industry Co., Ltd.
  - - Recipient's purpose of using personal information: Company name, contact person name, contact information, email, phone number, inquiry content
  - - Recipient's retention and use period: 3 years

5. Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them

Users can exercise the following rights as personal information subjects.

① Data subjects can exercise rights such as personal information access, correction, deletion, and processing suspension requests against Company at any time.
② Rights exercise under paragraph 1 can be made to Company in writing, by email, or by facsimile transmission (FAX) in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and Company will take action without delay.
③ Rights exercise under paragraph 1 can be made through legal representatives or agents who have received delegation. In this case, a power of attorney in accordance with Form 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
④ Personal information access and processing suspension requests may be restricted in accordance with Article 35, Paragraph 5 and Article 37, Paragraph 2 of the Personal Information Protection Act.
⑤ Personal information correction and deletion requests cannot be made when the personal information is specified as a collection target in other laws.
⑥ Company verifies whether the person who made the access request, correction/deletion request, or processing suspension request is the person themselves or a legitimate representative.

6. Items of Personal Information Processed

① Company processes the following personal information items.
- Quote inquiry, online consultation reservation, A/S inquiry
  - - Required items: Name, email, phone number, inquiry content
  - - Optional items: Phone number, cookies

7. Personal Information Destruction

Company destroys personal information without delay when the purpose of personal information processing is achieved. The procedure, deadline, and method of destruction are as follows.

-Destruction procedure
Information entered by users is moved to a separate DB after achieving the purpose (separate documents in case of paper) and stored for a certain period according to internal policies and other related laws, or destroyed immediately. At this time, personal information moved to the DB is not used for other purposes unless required by law.
-Destruction deadline
When the retention period of personal information has elapsed, personal information is destroyed within 5 days from the end of the retention period, and when personal information becomes unnecessary due to achievement of the purpose of personal information processing, discontinuation of the service, or termination of business, personal information is destroyed within 5 days from the date when personal information processing is deemed unnecessary.
-Destruction method
Information in electronic file format is destroyed using technical methods that cannot reproduce records.

8. Installation, Operation, and Refusal of Personal Information Automatic Collection Devices

① Company uses 'cookies' that store and retrieve user information from time to time to provide individual customized services.
② Cookies are small amounts of information sent by the server (http) that operates the website to the user's computer browser and are sometimes stored on the hard disk of the user's PC computer.
- a. Purpose of using cookies: Used to understand the visit and usage patterns of each service and website visited by users, popular search terms, secure connection status, etc., to provide optimized information to users.
- b. Installation, operation, and refusal of cookies: You can refuse cookie storage through the option settings in the Tools>Internet Options>Privacy menu at the top of the web browser.
- c. If you refuse cookie storage, you may experience difficulties using customized services.

9. Personal Information Protection Officer

① Company has designated a personal information protection officer as follows to oversee personal information processing work and handle data subjects' complaints and relief related to personal information processing.
- ▶ Personal Information Protection Officer
  - Person in charge: CEO Kim Kyung-sik
  - Contact: 055-266-2588, irea@ireatek.com
② Data subjects can contact the personal information protection officer and the responsible department regarding all personal information protection-related inquiries, complaints, and relief that occur while using the services (or business) of Company. Company will respond to and process data subjects' inquiries without delay.

10. Personal Information Processing Policy Changes

①This privacy policy applies from the effective date, and when there are additions, deletions, and corrections of changes according to laws and policies, notices will be made through announcements from 7 days before the implementation of changes.

11. Personal Information Security Measures

Company implements the following technical/administrative and physical measures necessary for security in accordance with Article 29 of the Personal Information Protection Act.

1. Minimization and education of personal information handling staff
We implement measures to manage personal information by designating and limiting staff who handle personal information to the minimum.
2. Personal information encryption
Users' personal information and passwords are encrypted and stored and managed, so only the user knows them, and important data uses separate security functions such as encrypting files and transmission data or using file locking functions.

13. Personal Information Access Request

① Data subjects can request personal information access in accordance with Article 35 of the Personal Information Protection Act to the department below. Company will strive to promptly process data subjects' personal information access requests.
- ▶ Personal Information Access Request Reception and Processing Department
  - Person in charge: Manager Park Ga-young
  - Contact: 055-266-2588, irea@ireatek.co.kr
② In addition to the access request reception and processing department in paragraph 1, data subjects can also request personal information access through the Ministry of Public Administration and Security's 'Personal Information Protection Comprehensive Support Portal' website (www.privacy.go.kr).
▶ Ministry of Public Administration and Security Personal Information Protection Comprehensive Support Portal → Personal Information Civil Complaints → Personal Information Access Request (I-PIN is required for identity verification)

○ This policy takes effect from September 22, 2025.