Personal Information Protection Policy of Studio N (Ver 1.6)

1. Purpose of Personal Information Processing

​

The Company processes personal information for the following purposes.

The personal information processed will not be used for any purpose other than the following purposes, and we will take necessary measures such as obtaining separate consent if the purpose of use is changed.

​

A. Recruitment

- Recruitment progress, confirmation of qualification, communicate with applicants, preferntial treatment for person with disabilities under Act On The Employment Promotion And Vocational Rehabilitation Of Persons With Disabilities

​

B. Consultation/Report to Company Ethics Center

- Securing smooth communication channels such as replying to consultation/report processing results

​

2. Personal Information Processed

​

The Company collects and uses personal information with the consent of the data subject to the minimum extent necessary to provide the services.

​

A. Recruitment

- Name, password for confirmation, email address, telephone number, date of birth, gender, nationality, education background (school name, date of admission/graduation, major, detailed information on major, grades, graduation status), work experience (company name, duty, job title, department name, period of employment), military service information, veteran status (if applicable), qualifications/languages (type of qualifications, grades, scores, date of acquisition), additional submission (if applicable)

- disability status (if applicable)

​

B. Consultation/Report to Company Ethics Center

- Name, telephone number, email address, Password for confirmation (only collected for anonymous submission)

​

In addition, the following information may be automatically generated and collected during the course of service use or business processing.

- Browser type and OS, visit history (IP address, access time), cookies

​

3. Period of Processing and Retention of Personal Information

​

Personal information is processed within the retention period that has been agreed upon when the personal information was collected. The period of processing and retention of personal information is as follows.

​

A. Recruitment

- 5 years (Personal information is deleted immeidately if a job applicant requests data deletion)

​

B. Consultation/Report to Company Ethics Center

- 6 months after processing received inquiries (unprocessed inquiries are stored for up to 3 years)

​

4. Procedure and Method of Destroying Personal Information

​

In principle, personal information is destroyed without delay once the purpose of personal information processing is achieved. The procedure and method of destroying the personal information of the Company are as follows.

​

A. Destruction procedure

- In principle, personal information shall be destroyed without delay when personal information becomes unnecessary, such as the expiration of the personal information retention period or the achievement of the purpose of processing.

- If the personal information retention period agreed to by the data subject has expired or the purpose of processing has been achieved, but the laws and regulations impose duties to retain information for a certain period, personal information is transferred to a separate database (DB) or stored in a different storage location.

​

B. Destruction method

- Personal information printed on paper is destroyed by shredding or incineration.

- Personal information stored in electronic file format will be deleted using technical methods which cannot reproduce the record.

​

5. Provision of Personal Information to Third Parties

​

The Company shall process the personal information only to the extent specified in the purpose of processing the personal information, and does not provide the personal information to third parties except with the consent of the data subject or in accordance with special provisions of the law.

​

In some cases, applicants may be offered employment for work at a company that is in special relationship with the company (subsidiaries, affiliates, etc.). In such cases, the Company will always contact the applicant in advance and seek consent before transferring the application to the company.

​

6. Entrustment of Personal Information Processing

​

The Company entrusts following personal information processing to outside companies for business processing.

When entering into entrustment contracts, we specify in contracts the prohibition of processing personal information other than for the purpose of performing entrusted operation, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the entrusted company, and responsibilities such as compensation for damages, and supervise the entrusted company's safe processing of personal information. In addition, if the entrusted company re-entrust our personal information, the Company's consent is obtained. If the contents of the entrusted operations or the entrusted company change, we will disclose it through this Privacy Policy without delay.

​

7. Measures to Ensure Personal Information Safety

​

The Company takes the following measures to ensure the safety of personal information.

​

A. Administrative measures

- Establishment and implementation of internal personal information management plan, operation of a separate organization that only deals with the protection of personal information, regular employee training

​

B. Technical measures

- Management of access rights to personal information processing systems, installation of access control systems, encryption of key personal information, installation and update of security programs

​

C. Physical measures

- Access control to server rooms, data storage rooms, etc.

​

8. Installation· Operation and Refusal of Automated Personal Information Collection Devices

​

The Company uses 'Cookies' to store and use usage information to provide services and convenience to users. Cookies are very small-sized files that the server(http) used to operate the website sends to the data subject's browser and are stored on the PC or mobile phone.

​

A. Allow/block Cookies in web browser

- Chrome: Web browser Settings > Privacy and security > Clear browsing data

- Microsoft Edge : Web browser Settigns > Cookies and site permissions > Manage and delete cookies and site data

​

B. Allow/block Cookies in mobile browser

- Chrome: Mobile browser Settings > Privacy and security > Clear browsing data

- Safari: Settings > Safari > Advanced > Block All Cookies

- Samsung Internet: Settings > Personal Browsing Data > Delete Browsing Data

​

9. Rights and Obligations of Data Subjects & Legal Representatives and Exercising Those Rights

​

The data subject may exercise the right to access, correct, delete, suspend the processing or withdraw consent of personal information at any time against the Company. The rights can be exercised through telephone, writing, or e-mail, and the Company will take action without delay. However, the exercise of rights may be restricted if there are restrictions under other laws and regulations.

​

The exercise of rights may be carried out through an agent such as a legal representative of the data subject or a delegated person. In this case, the agent shall submit a power of attorney of the data subject, in the form Appendix No.11 of the "Notification of the Protection Commission". The Company verifies whether the person excercising the right is the data subject or a legitimate representative.

​

10. Chief Privacy Officer

​

The Company has designated the following person as the Chief Privacy Officer to be in overall charge of personal information and to handle data subject complaints and damages related to personal information.

The data subject may contact the Chief Privacy Officer for all personal information protection-related inquiries, complaints, damage relief, and other related matters arising from the use of the Company's services. The data subject may also request access to personal information. The Company will respond to and process inquiries from data subjects without delay.

​

11. Consult on the Privacy Infringements

​

The data subject may request dispute resolution or consultation to the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency, and the Personal Information Infringement Report Center to receive relief from personal information infringement. In addition, please contact the following organisations for reporting and consultation on other personal information infringement.

​

- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972 without area code)

- Personal Information Infringement Report Centre (privacy.kisa.or.kr / 118 without area code)

- National Police Agency (ecrm.police.go.kr / 182 without area code)

​

The Company guarantees the data subject's right to self-determination of personal information and strives to provide consultation and damage relief due to personal information infringement.

If you need to report or consult, please contact the Chief Privacy Officer.

​

12. Change of Privacy Policy

​

This Privacy Policy is effective from November 7, 2025.

Pevious Privacy Policy is available via "View Previous Notices" above.