1. 1) The Shilla only collects information directly required to provide services, and the information is collected through fair and appropriate means.
   List of Personal Information Collected
   • - Mandatory items: name, member ID (members only), password (members only), passport number, phone number, address, and e-mail address
   • - Scope of personal information that may be collected in the process of using the service or handling business
   • - Service usage records, access logs, cookies, access IP information
2. 2) The Shilla collects personal information via the following methods.
   • - Membership via website, written forms, phone and fax, one-to-one inquiries, participation in giveaway events
   • - Provided by affiliated companies
   • - Collection of information generated through a log analysis program

The Shilla obtains your consent to the collection of personal information. We provide a process through which you may click the "Accept" or "Do not Accept" buttons related to the Personal Information Handling Policy of The Shilla. If you click "Accept," you will be regarded to have provided consent to the collection of personal information. However, we may collect your personal information without obtaining your consent in the following cases: 1) If necessary for fulfilling the usage agreement of the information and communication service, 2) If necessary for billing fees pertaining to the offering of information & communication service, and 3) If special provisions are stipulated by relevant laws.

1. 1) The Shilla collects or uses your personal information for the following purposes.
   • - Name, ID, password, passport number: To use in the identification process for using the membership service
   • - E-mail address, phone number: To secure a communication channel for conveying notices, verifying your decisions, and handling complaints; to provide latest information such as new services, products or events
   • - Phone number, address: To secure an accurate shipping destination for delivering gifts to event winners
   • - Optional items: To use for providing personalized services
2. 2) The Shilla does not collect sensitive personal information which poses a risk of infringing upon basic rights (race and ethnicity, ideology and beliefs, hometown and legal domicile, political inclination and criminal record, health conditions such as medical history, sexual orientation, etc.)

The Shilla collects or uses personal information for the following purposes.

1. 1) The Shilla uses “cookies,” which store and frequently retrieve information about you.
2. 2) Cookies identify your computer but do not identify you individually. Additionally, you have the right of choice regarding the usage of cookies.
3. 3) The information The Shilla collects via cookies is limited to member IDs, and no other information is collected.
4. 4) Member IDs The Shilla collects via cookies are used for the following purposes.
   • - Provide differentiated information based on members’ areas of interest
   • - Use for targeted marketing by analyzing the access frequency or log-in time of the members
5. 5) Services utilizing cookies are terminated when browsers are closed or when you log out.
6. 6) How to disable cookies
   • - As for disabling cookies, by adjusting options on your web browser, you may always accept cookies, or receive prompts before accepting cookies or always refuse cookies.
   • - The cookies setting (ex. Internet Explorer): Tools on the web browser menu > Internet Options > Personal Information
   • - However, service interruption may occur in the event the cookies are disabled.

The Shilla uses personal information within the scope notified in the Purpose of Collecting and Using Personal Information. We do not use the information beyond the said scope or provide such information to other persons, companies or organizations without your consent.

1. 1) With your consent, The Shilla may contract the services of an outside party to handle your personal information to facilitate work activities. In such case, you will be notified in advance regarding the name of the handling company and the scope of its activities.
2. 2) The followings are allowed as exceptions.
   • - When minimum user information (name, address, and phone number) required for shipping is provided to a shipping company for the purpose of a shipping function.
   • - When requested by investigative authorities according to the procedures and methods set forth for the purpose of investigation pursuant to relevant laws.
   • - When provided in a manner that does not allow identification of an individual for the purpose of statistics compilation/academic research or market surveys
   • - However, notwithstanding that we provide information pursuant to relevant laws or at the request of investigative authorities, we shall notify the person in question, in principle. We may not notify the person in question due to legal grounds
   We will exert utmost efforts to avoid disclosure of information with discretion keeping in line with the original purpose of collecting and using the information

1. 1) In the event The Shilla transfers rights and responsibilities due to a complete or partial business transfer, merger or inheritance, we shall inform you of the fact on the complete or partial business transfer, merger or inheritance and the name (title), address, phone number and other contact information of the successor.
2. 2) A notice of the business transfer shall be announced at least 30 days in advance on the main page of the website of The Shilla or the successor.

For safe usage of your information, The Shilla designates a personal information officer, who is in overall charge of collecting, using, providing and managing personal information of users, checking for illegal or wrongful infringement of personal information by staff members or any third party and receiving and handling your suggestions and complaints related to personal information. The personal information officer who handles your personal information is as follows and will be standing by to answer your inquiries on personal information quickly and sincerely.
【Personal Information Management Officer】
Name: Deok-ki Lee, Department: Strategy Planning Team, Title: Team Leader
Department: Strategy Planning Team
Title: Team Leader
E-mail : deokki.lee@samsung.com
Phone : 82-2-2230-3613
Fax : 82-22230-3606

1. 1) Technical protective measures: When handling your personal information, The Shilla applies the following technical measures to prevent the loss, theft, leak, alteration and damage of such information in order to maintain security.
   • - The Shilla uses vaccine programs to prevent damage caused by computer viruses, and such programs are updated regularly to address problems that may be inflicted by viruses
   • - The Shilla has adopted the latest security system TRUSTNET by www.Secui.com, which enables safe transmission of personal information by using code algorithms and through which transmissions are certified.
   • - The Shilla assures security by using intrusion blocking systems and weakness analysis systems on each server to protect against hacking and outside intrusions.
2. 2) Administrative protective measures: The Shilla authorizes access to your personal information to a minimum number of personnel.
   The Shilla sets forth procedures required for gaining access to and management of personal information of members and conduct regular internal and external training for employees who handle personal information to learn and comply with said procedures.
   The Shilla sets forth guidelines on auditing, including its scope, procedures and methods, for the Personal Information Management Officer to appraise whether staff members are diligently fulfilling their duties pertaining to protection of privacy. In the event any problems are uncovered in the management and operation of personal information or discover that a relevant staff member(s) has violated relevant rules, we will immediately take necessary measures such as correcting or improving the problem or personnel appointment.
3. 3) Other Information for the Protection of Personal Information. Be aware that personal information can be collected and used by other persons via online bulletin boards or e-mail. Accordingly, take special caution when your personal information is revealed when you are online using a public computer. The primary responsibility in safeguarding the user ID and password lies with the user. They should not be used by any third person. If you become aware that your ID and password are being used by a third person, you need to notify the Personal Information Management Officer of The Shilla and follow his/her instructions.

1. 1) Your personal information will be destroyed immediately upon completion of the purpose of collecting or receiving personal information.
   • - If collected for temporary purposes such as a questionnaire survey or an event: When the relevant survey or event is completed
2. 2) Personal information is destroyed via the following means.
   • - Personal information printed on paper is destroyed by shredding on a shredder or incineration.
   • - Personal information stored in electronic files is deleted through technical means that cannot re-produce the deleted records.

1. 1)You may withdraw your consent for the collection, use and provision of personal information given upon member registration at any time. For withdrawal of consent, you may click “Change User Information” on My Page or contact the Personal Information Management Officer in writing or via phone or e-mail. The necessary steps including destruction of personal information will be taken promptly after confirming your identity unless stipulated otherwise by relevant laws.
2. 2) In the event that measures such as the withdrawal of consent and destruction of personal information are taken, such fact will be notified to you promptly.
3. 3) The Shilla will take the necessary steps so that withdrawal of consent for personal information collection can be executed with greater ease compared to the methods for collecting personal information.

1. 1) You may retrieve or revise your personal information registered with The Shilla at any time. If you want to retrieve or revise personal information, you may click “Change User Information” on My Page and retrieve or revise in person or contact the Personal Information Management Officer in writing or via phone or e-mail. The necessary steps will be taken promptly after confirming your identity. In the event that your representative visits The Shilla and requests retrieval or revision, we may request a certificate proving the representative relationship to confirm whether he/she is your true representative. (Not applicable to offline operation sites)
2. 2) In the event that you request a correction to an error regarding your personal information, we shall not provide or use the information until the said correction is made.
3. 3) In the event that incorrect personal information has already been provided to a third party, corrected result shall be notified to the said third party promptly for correction.
4. 4) In the event that measures for correction are taken, such fact will be notified to you promptly.
5. 5) If there is a valid reason to refuse retrieval or revision for all or part of your personal information, The Shilla will notify the fact and the reasons to you promptly.

The Shilla applies the following measures in order to protect the personal information of children under the age of 14.

1. 1) In the case of children under the age of 14, only those with prior consent by their legal representative can join membership and provide personal information.
2. 2) A legal representative of children under the age of 14 may request to retrieve, correct or delete the personal information of the children. In the event that such request is made, The Shilla shall promptly take necessary measures.
3. 3) In the event that a legal representative requests a correction to an error in personal information collected from children under the age of 14, The Shilla shall not use or provide the information until the said correction is made.
4. 4) The Shilla shall not send advertisements or proposals in the form of an e-mail to children indicated to be under the age of 14. We shall not induce them to reveal more information by using games, gifts or events.

1. 1) The Shilla does not transmit advertising content for the purpose of generating profits that runs counter to your explicit refusal to receive such content.
2. 2) In the event that The Shilla transmits advertising content for the purpose of generating profits, we shall take measures to ensure that such transmission of advertising content is in accordance with the Act on Promotion of Information & Communication Network Utilization and Information Protection, etc.

1. 1) The Shilla operates a complaint handling center to facilitate smooth communication with the customers.
   The contact information of the complaint handling center is as follows.
   【Complaint Handling Center】
   • - E-mail: webmaster@shilladfs.com
   • - Phone: 82-2-2239-6000
   • - Fax: 82-2-2230-3606
   • - Zip code: 100-856
   • - Address: 202 Jangchung-dong 2-ga, Jung-gu, Seoul
2. 2) For any other inquiries regarding personal information, you may contact the following institutions.
   [Personal Information Dispute Mediation Committee]
   • - Phone : 82-1336
   • - URL : http://www.1336.or.kr
   [e-Privacy Logo Certification Committee]
   • - Phone : 02-580-0533~4
   [Cyber Terror Response Center of the Korean National Policy Agency]
   • - Phone : 02-392-0330
   • - URL : http://ctrc.go.kr

1. 1) You are advised to enter the most updated personal information to prevent unforeseen mishaps. You shall assume liability for any incidents caused by inaccurate information entered by you. You may lose the rights of membership if you enter false information such as pirating the information of other persons.
2. 2) Along with the right to the protection of your personal information, you assume the obligation to protect yourself and not to infringe upon others' information. Take special caution not to disclose your personal information, including password, and not to infringe the personal information of other persons, including postings.

The current personal information handling policy was stipulated on September 17, 2011. In the event that any details are added, deleted or revised pursuant to relevant laws, government policies or changes in security technology, we shall notify such on the notice section of the website (Shilla Internet News) at least seven days prior to the revision.
Personal Information Handling Policy Version No.:
Personal Information Handling Policy Effective Date: September 17, 2011