AIMTOG Co., Ltd. (the "Company") establishes and discloses this Privacy Policy pursuant to Article 30 of the Personal Information Protection Act, in order to protect the personal information of data subjects and to address related concerns promptly and effectively.

Article 1 (Purposes of Processing Personal Information)
The Company processes personal information for the purposes set out below. Personal information is not used for any purpose other than these. Should the purpose of use change, the Company will take the necessary measures — including obtaining separate consent — in accordance with Article 18 of the Personal Information Protection Act.
1. Inquiries: confirming the substance of an inquiry, contacting and notifying the inquirer for fact-finding, and communicating the outcome.
2. Job applications: administering the hiring process, contacting applicants, and communicating hiring decisions.

Article 2 (Categories of Personal Information Processed)
The Company processes the following categories of personal information.
1. Inquiries
- Required: name, job title, company name, email address, phone number, and the contents of the inquiry.
2. Job applications
- Required: personal information contained in submitted materials such as a resume and cover letter (name, phone number, email address, education, and work history).
3. The following may be generated and collected automatically in the course of using our online services.
- IP address, cookies, MAC address, service usage records, and visit logs.

Article 3 (Processing and Retention Periods)
① The Company processes and retains personal information within the retention and use period required by law, or within the retention and use period consented to by the data subject at the time of collection.
② The retention period for each purpose is as follows.
1. Inquiries: retained for three years after the inquiry has been received and resolved, or destroyed without delay once the purpose has been fulfilled.
2. Job applications: destroyed without delay once the hiring process concludes. Where the applicant consents, the information may be retained for one year for inclusion in our talent pool.

Article 4 (Procedures and Methods for Destroying Personal Information)
① When personal information becomes unnecessary — because the retention period has elapsed, the processing purpose has been fulfilled, or for similar reasons — the Company destroys it without delay.
② The procedures and methods for destruction are as follows.
1. Procedure: The Company identifies the personal information for which grounds for destruction have arisen and destroys it with the approval of the Company's Privacy Officer.
2. Method: Personal information recorded and stored in electronic form is destroyed so that the records cannot be recovered. Personal information recorded on paper is shredded or incinerated.

Article 5 (Provision of Personal Information to Third Parties)
The Company processes personal information only within the scope specified in Article 1 (Purposes of Processing Personal Information), and provides personal information to third parties only where the data subject has given consent or where Articles 17 and 18 of the Personal Information Protection Act otherwise apply, such as under a specific provision of law. (The Company does not currently provide personal information to any third party.)

Article 6 (Outsourcing of Personal Information Processing)
To deliver its services, the Company outsources the following work to an external specialist.
- Contractor: HKDComms Co., Ltd.
- Scope of work: website and system management

Article 7 (Rights and Obligations of Data Subjects and How to Exercise Them)
① Data subjects may exercise their rights against the Company at any time, including the right to access, correct, or delete their personal information, or to request that its processing be suspended.
② These rights may be exercised in writing, by email, or by similar means, and the Company will act on such requests without delay.
③ Where a data subject requests the correction or deletion of an error in their personal information, the Company will neither use nor provide that personal information until the correction or deletion is complete.

Article 8 (Measures to Ensure the Security of Personal Information)
The Company takes the following measures to ensure the security of personal information.
1. Administrative measures: establishing and implementing an internal management plan, and providing regular employee training.
2. Technical measures: managing access privileges to the personal information processing system and related systems, and installing security software.
3. Physical measures: controlling access to areas such as document storage rooms.

Article 9 (Privacy Officer)
① The Company has designated the following Privacy Officer to take overall responsibility for personal information processing and to handle data subjects' complaints and requests for remedy in connection with that processing.

[Privacy Officer and Responsible Department]
- Name / Department: Gi-taek Jung, Managing Director / Corporate Strategy Division
- Phone: +82-2-3443-1411
- Email: ktjung@aimtog.co.kr

② Data subjects may direct any inquiry, complaint, or request for remedy relating to personal information protection that arises in the course of using the Company's services to the Privacy Officer or the responsible department.

Article 10 (Remedies for Infringement of Rights)
Data subjects may contact the organizations listed below for remedy, counseling, or other assistance regarding infringement of personal information. (These organizations are separate from the Company. If you are not satisfied with the Company's handling of your complaint or its remedy, or if you need further assistance, please contact them.)
Personal Information Infringement Report Center (operated by the Korea Internet & Security Agency)
· Responsibilities: reporting personal information infringement and requesting counseling
· Website: privacy.kisa.or.kr
· Phone: 118 (no area code required)
· Address: 3rd Floor, 9 Jinheung-gil, Naju-si, Jeollanam-do 58324, Republic of Korea
Personal Information Dispute Mediation Committee
· Responsibilities: applications for personal information dispute mediation and collective dispute mediation (civil resolution)
· Website: www.kopico.go.kr
· Phone: 1833-6972 (no area code required)
· Address: 12th Floor, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul 03171, Republic of Korea
Cybercrime Investigation Unit, Supreme Prosecutors' Office
· +82-2-3480-3573 (www.spo.go.kr)
National Police Agency Cyber Bureau
· 182 (https://cyberbureau.police.go.kr)

Article 11 (Changes to This Privacy Policy)
This Privacy Policy takes effect on July 1, 2026.