1. Purpose of collection and use of personal information

• - Personal information shall be used for handling job applications and selection process, providing information related to recruitment process, managing resources for potential future recruitment, and identifying candidates.

2. Items of personal information collected, and collection method

• - Items of information collected when joining as a member : E-mail, name (Korean and English)cell phone number, and date of birth.
• - Items of information collected when applying for a job : (Required personal information) Nationality, address, telephone number, academic background, major and grades, the company, position, and region the candidate is applying for, foreign language qualifications, military service status, experience of staying or training activities in overseas, social activities, linguistic abilities and awards, and letter of self-introduction. (Required sensitive information) Patriots and veterans-related information, disability-related information and medical examination results.

3. Period for processing and retaining personal information

In principle, the Company shall destruct a candidate’s personal information without delay when the purpose for collecting and using the personal information is fulfilled or when the candidate withdraws consent to the provision of personal information. Provided, that the following information shall be retained for the specified period for the following reasons with the data subject’s consent.

1. (1) Personal information provided when joining as a member
   - Period for retaining personal information : Until membership is canceled. Provided, that where the data subject has not logged in for more than a year, membership shall be cancelled and information shall be deleted after informing the subject data.
2. (2) Personal information of a candidate who has been hired
   - Period for retaining personal information : 3 years after retirement. Provided, that personal information shall be retained for the specified period if consent is obtained at the time of retirement.
   - Reason for retaining personal information : Personnel management and provision of benefits during the employee’s term of office.
3. (3) Personal information of a candidate who has not been hired
   - Period for retaining personal information : 6 months (Provided, that personal information shall be deleted within 14 days if requested by the candidate.)
   - Reason for retaining personal information : Storage of recruitment documents in accordance with Fair Hiring Procedure Act.

4. Destruction procedures and methods of personal information

In principle, once the purpose for collecting and using personal information is fulfilled, the Company shall destroy the information without delay. Provided, that the Company shall not do so if such information should be retained according to the laws. The destruction method shall be as follows:

• - Personal information printed on paper: To be shredded using a shredder or incinerated
• - Personal information stored in the form of electronic files: To be deleted using a technology that prevents reproduction of records.

5. Matters related to provision of personal information to a third party

Under no circumstances the Company shall provide personal information to any third party unless consent is obtained from the candidate or such provision is required by law. Personal information shall be provided to a third party after obtaining consent from the candidate in following cases:

• - Recipient : Korea Medical Institute (KMI), Affiliated companies of CJ Group
• - Items of personal information provided : Name and date of birth, Candidate’s biographical data, qualifications, and recruitment results
• - Purpose of providing personal information : Pre-recruitment medical examination, Selection of affiliated company that candidate wishes to apply for and management of resources for potential future recruitment
• - Period for retaining personal information : To be destroyed as soon as purpose of providing information is fulfilled., Recruitment period

※ CJ Corporation, CJ CheilJedang, CJ Foodville, CJ Freshway, CJ Logistics, CJ Olive Young, CJ ENM, CJ OliveNetworks, CJ CGV, CJ 4DPLEX, CJ Bioscience, CJ Wellcare, CJ Feed & Care, and CJ Telenix.

6. Matters related to entrusting the processing of personal information

With the candidates’ consent, the Company shall entrust the processing of personal information as follows, and the necessary measures to manage personal information securely are prescribed in entrustment contract in accordance with the relevant laws.

• Company entrusted : CJ OliveNetworks
• Type of business : IT company
• Purpose of using personal information : Entrustment of system operation for providing services
• Personal information provided : Entire personal information collected
• Period for retaining and using personal information : Until the purpose of obtaining personal information is fulfilled or entrustment contract is terminated

7. Rights of candidates to access or correct personal information or to withdraw consent to provision of personal information, etc., and how to exercise such rights.

Candidates may access or correct their personal information or withdraw their consent to provision of their personal information until the final submission of application. If you want to access or correct your personal information or withdraw your consent to provision of your personal information, please contact 02-726-8951 or junseok.park@cj.net, and your request will be processed without delay after confirming identification. If you request a correction of any error in your personal information, such personal information shall not be used or provided until the correction is completed. In case any incorrect personal information has been provided to a third party, the corrected personal information shall be notified to the third party later to prevent misunderstanding.

Access to personal information may be limited in following cases:

• - Where access is prohibited or limited by laws
• - Where access may cause damage to the life or body of a third party or unjustified infringement of property and other interests of a third party.

8. Matters related to privacy officer

To protect candidates’ personal information and handle grievances related to personal information, the Company has designated a privacy officer and a personal information management department. For any inquiries regarding personal information, please contact the privacy officer or the personal information management department that will respond to your inquiries in a prompt and sincere manner.

• - Privacy officer: Head of HR, CJ Corporation
• - Personal information management department: HR, CJ Corporation
• - Tel: 02-726-8951 (Weekdays 9-11 a.m. and 1-5:30 p.m.)
• - E-mail : junseok.park@cj.net

For any reports or counselling regarding infringement of personal information, etc. please contact the following agencies.

• (1) (1) Personal Information Dispute Mediation Committee (http://kopico.or.kr/)
• (2) Korea Internet & Security Agency (https://www.kisa.or.kr/)
• (3) Korea National Police Agency (http://cyberbureau.police.go.kr/)

9. Personal information collected by cookies

Cookies are small pieces of data transmitted by a website to candidates’ computer browser. The Company is not using cookies that frequently look for or store candidates’ information.

10. Measures to ensure safety of personal information

All the information provided by candidates are being managed safely by our security system such as firewall, etc. Additionally, as an administrative measure to protect users’ personal information, the Company grants differential authority for accessing personal information and provides continuous security training by limiting the number of people who process users’ personal information to a minimum. Also, the Company keeps log records by designating users of the system that processes personal information.

11. Matters related to modification in Privacy Policy

In the event that the Privacy Policy is modified including addition/deletion in accordance with changes in the laws/policies or security technologies, the Company will notify the reason for modification, revised contents, etc. via its website at least 7 days before implementing the modified Privacy Policy.

12. Protection of personal information of children under 14 years old

With respect to job applications, CJ Group restricts member registration of children under 14 years old.