Modern Co., Ltd. (hereinafter referred to as the “Company”) establishes and discloses the following Personal Information Processing Guidelines in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to promptly and smoothly handle grievances related thereto.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those listed below, and if the purpose of use changes, the Company plans to take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Website Membership Registration and Management
We process personal information for the purposes of confirming intent to sign up for membership, identifying and authenticating the individual for the provision of membership services, maintaining and managing membership qualifications, verifying identity in accordance with the implementation of the limited identity verification system, preventing fraudulent use of services, confirming whether a legal representative has consented to the processing of personal information of children under the age of 14, providing various notices and notifications, and handling grievances.

2. Provision of goods or services
We process personal information for purposes such as product delivery, service provision, sending of contracts and invoices, provision of content, provision of customized services, identity verification, age verification, payment and settlement of fees, and debt collection.

3. Grievance Handling
We process personal information for purposes such as verifying the identity of the complainant, confirming the details of the complaint, contacting and notifying for fact-finding investigations, and notifying the results of processing.

Article 2 (Processing and Retention Period of Personal Information)

① The Company processes and retains personal information within the retention and usage period stipulated by relevant laws and regulations or within the retention and usage period agreed upon by the data subject at the time of collection.
② The processing and retention periods for each type of personal information are as follows.

1. Website Membership Registration and Management: Until withdrawal from the business/organization website
However, in cases falling under the following reasons, until the relevant reason ceases.
1) In cases where an investigation, inquiry, etc. is in progress due to a violation of relevant laws and regulations, until the completion of such investigation or inquiry
2) If any claims or debts remain arising from the use of the website, until said claims or debts are settled

Article 3 (Provision of Personal Information to Third Parties)

① The Company processes the personal information of data subjects only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases corresponding to Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the data subject or special provisions of the law, and does not provide the personal information of data subjects to third parties otherwise.

Article 4 (Rights of Data Subjects and Legal Representatives and Methods of Exercising Them)

① Data subjects may exercise the following rights related to personal information protection against the Company at any time.
1. Request for access to personal information
2. Request correction in case of errors, etc.
3. Request for deletion
4. Request to Stop Processing
② You may exercise your rights pursuant to Paragraph 1 against the Company in writing, by telephone, email, fax, etc., and the Company will take action without delay.
③ If a data subject requests correction or deletion regarding errors, etc. in their personal information, the Company will not use or provide the relevant personal information until the correction or deletion is completed.
④ The exercise of rights pursuant to Paragraph 1 may be carried out through a representative, such as a legal representative of the data subject or an authorized agent. In this case, you must submit a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act.
⑤ Data subjects shall not infringe upon the personal information and privacy of themselves or others that the company is processing in violation of the Personal Information Protection Act or other relevant laws and regulations.

Article 5 (Items of Personal Information Processed)

The company processes the following personal information items.

1. Website Membership Registration and Management
Required items: Name, phone number, email address, company name, business address, job title
Selectable items: Attachments, Inquiry

2. Provision of goods or services
Required items: Name, phone number, email address, company name, business address, job title
Selectable items: Attachments, Inquiry

Article 6 (Destruction of Personal Information)

① The Company destroys personal information without delay when it becomes unnecessary, such as when the retention period of personal information has expired or the purpose of processing has been achieved.
② In cases where personal information must continue to be preserved pursuant to other laws even after the retention period consented to by the data subject has expired or the purpose of processing has been achieved, the relevant personal information is transferred to a separate database (DB) or stored in a different location.
③ The procedures and methods for the destruction of personal information are as follows.
1. Destruction Procedure
The company selects personal information for which grounds for destruction have arisen and destroys the personal information upon obtaining approval from the company's Chief Privacy Officer.
2. Method of destruction
The Company destroys personal information recorded and stored in the form of electronic files in a way that prevents the records from being reproduced, and destroys personal information recorded and stored in paper documents by shredding or incinerating them.

Article 7 (Measures to Ensure the Safety of Personal Information)

The company is taking the following measures to ensure the safety of personal information.
1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
2. Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
3. Physical measures: Access control for computer rooms, data storage rooms, etc.

Article 8 (Matters concerning the installation, operation, and refusal of automatic personal information collection devices)

① The Company uses ‘cookies’ that store and frequently retrieve usage information to provide individually customized services to users.
② Cookies are a small amount of information sent by the server (http) used to operate the website to the user's computer browser, and are stored on the user's PC or mobile device.
③ Data subjects may configure settings, such as allowing or blocking cookies, through their web browser options. However, refusing to store cookies may cause difficulties in using personalized services.

▶ Allow/Block Cookies in Web Browser
- Chrome: Web browser settings > Privacy and security > Clear browsing history
- Edge: Web browser settings > Cookies and site permissions > Manage and delete cookies and site data

▶ Allow/Block Cookies in Mobile Browsers
- Chrome: Mobile browser settings > Privacy and security > Clear browsing history
- Safari: Mobile Device Settings > Safari > Advanced > Block All Cookies
- Samsung Internet: Mobile Browser Settings > Browsing History > Delete Browsing History

④ The Company identifies visit and usage patterns, popular search terms, and secure connection status regarding each service and website visited by the user during the course of using the service, and collects and uses this information to provide information optimized for the user.

Article 9 (Personal Information Protection Officer)

① The Company assumes overall responsibility for business related to the processing of personal information and designates a Personal Information Protection Officer as follows to handle complaints and provide relief for damages to data subjects regarding the processing of personal information.

▶ Chief Privacy Officer
Name: Choi Eon-sik
Position: Department Head
Contact: <052-295-1913>, <unsic.choi@modernigas.com>, <052-295-1914>
※ You will be connected to the Personal Information Protection Department.

▶ Department responsible for personal information protection
Department Name: Management Support Team
Contact: <052-295-1913>, <unsic.choi@modernigas.com>, <052-295-1914>

② Data subjects may contact the Chief Privacy Officer and the relevant department regarding all inquiries, complaints, and damage relief matters related to personal information protection arising from the use of the Company's services (or business). The Company will respond to and process the data subject's inquiries without delay.

Article 10 (Request for Access to Personal Information)

Data subjects may request access to their personal information pursuant to Article 35 of the Personal Information Protection Act from the department listed below. The Company will endeavor to process data subjects' requests for access to personal information promptly.

▶ Department responsible for receiving and processing requests for access to personal information
Department Name: Management Support Team
Contact: <052-295-1913>, <unsic.choi@modernigas.com>, <052-295-1914>

Article 11 (Methods for Remedying Infringement of Rights and Interests)

Data subjects may contact the following organizations for remedies, consultations, etc. regarding personal information infringement.
1. Personal Information Dispute Mediation Committee: 1833-6972 (without area code) (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (without area code) (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: 1301 (without area code) (www.spo.go.kr)
4. National Police Agency: 182 (without area code) (ecrm.police.go.kr/minwon/main)

Article 12 (Outsourcing of Personal Information Processing)

To ensure the smooth processing of personal information, the Company handles personal information processing directly without outsourcing. If outsourcing occurs in the future, we will disclose it through these Personal Information Processing Guidelines in accordance with relevant laws and regulations.

Article 13 (Changes to Personal Information Processing Guidelines)

These Privacy Policy will be effective from October 1, 2026, and any additions, deletions, or corrections to the content pursuant to statutory law and policy will be notified through announcements starting 7 days prior to the effective date of the changes.