< Rabbitbio Co., Ltd. >(hereinafter referred to as "Rabbitbio") establishes and discloses a personal information processing policy as follows to protect the personal information of the data subject and to handle related grievances quickly and smoothly pursuant to Article 30 of the Personal Information Protection Act.

○ This privacy policy will take effect from August 1, 2023.


Article 1 (Purpose of processing personal information)

"Rabbitbio" processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. Home page management
We process personal information for the purpose of preventing fraudulent use of services, handling complaints, and inquiring customers.


Article 2 (Period for processing and holding personal information)

① "Rabbitbio" processes and retains personal information within the period of personal information retention and use under the Act or within the period of personal information retention and use agreed upon when collecting personal information from the data subject.
② The processing and retention period of each personal information is as follows.

1. <Registration and management of homepage>
Collect personal information related to <Homepage Membership Registration and Management>.Held for the above purpose of use from the date of consent for use to <3 years>. It's used.
Possession basis: Information collection
Related Acts: Records of consumer complaints or dispute settlement: 3 years


Article 3 (items of personal information to be processed)

① 'Rabbitbio' handles the following personal information items.

1. < Register and manage membership on the homepage >
Required items: name, email, company name
Optional: Mobile phone number


Article 4 (Procedure and Method of Destruction of Personal Information)

① "Rabbitbio" destroys the personal information without delay when personal information becomes unnecessary, such as the passage of the personal information retention period and the achievement of the purpose of processing.
② If the personal information period agreed by the data subject has elapsed or the purpose of processing has been achieved, the personal information shall be transferred to a separate database (DB) or stored differently.
③ The procedure and method of destroying personal information are as follows.

1. Revocation procedure
"Rabbitbio" selects personal information that has caused the reason for destruction and destroys personal information with the approval of "Rabbitbio"'s personal information protection manager.

2. How to destroy it
Information in the form of electronic files uses a technical method in which records cannot be reproduced.


Article 5 (Matters concerning the rights and obligations of the information subject and legal representative and the method of exercising the rights and obligations thereof)

① The information subject may exercise the right to 'Rabbitbio' at any time, such as requesting for personal information access, correction, deletion, and suspension of processing.
② The exercise of rights under paragraph (1) may be carried out in writing, e-mail, fax, etc. in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and "Rabbitbio" will take action without delay.
③ The exercise of rights under paragraph (1) may be conducted through a legal representative of the information subject or an agent, such as a person delegated.In this case, "Notification of the method of processing personal information (No. 2020-7)" You have to submit a power of attorney according to attached Form 11.
④ The rights of the data subject may be restricted pursuant to Articles 35 (4) and 37 (2) of the Personal Information Protection Act.
⑤ Requests for correction and deletion of personal information cannot be requested if other laws specify that the personal information is subject to collection.
⑥ "Rabbitbio" checks whether it is you or a legitimate agent who made a request for access according to the right of the information subject, a request for correction and deletion, or a request for suspension of processing.


Article 6 (Matters concerning measures to ensure the safety of personal information)

"Rabbitbio" is taking the following measures to ensure the safety of personal information.

1. Restriction of access to personal information
We take necessary measures to control access to personal information by granting, changing, and canceling access to the database system that processes personal information, and use the intrusion prevention system to control unauthorized access from outside.

2. Storage of access records and prevention of forgery
Records of access to the personal information processing system are kept and managed for at least one year, but if personal information is added to more than 50,000 data subjects, or unique identification or sensitive information is processed, it is kept and managed for at least two years. In addition, we use security features to prevent forgery, theft, and loss of access records.


Article 7 (Matters concerning the installation and operation of devices that automatically collect personal information and their refusal)

① In order to provide individual customized services to users, "Rabbitbio" uses "cookie" that stores usage information and calls it from time to time.
② Cookies are a small amount of information sent by the server (http) used to run the website to the user's computer browser and are also stored on the user's hard disk within the user's PC computer.
A. Purpose of use of cookies: It is used to provide optimized information to users by identifying the type of visit and use of each service and website visited by users, popular search terms, security access, etc.
B. Installation, operation, and rejection of cookies: You can refuse to save cookies by setting options on the Tools > Internet Options > Privacy menu at the top of your web browser.
C. Refusing to save cookies may cause difficulties in using customized services.


Article 8 (Matters concerning collection, use, provision, refusal, etc. of behavioral information)

Matters concerning the collection, use, provision, refusal, etc. of behavioral information
"Rabbitbio" does not collect, use, or provide behavioral information for online customized advertisements.


Article 9 (Criteria for determining additional use and provision)

"Rabbitbio" may additionally use and provide personal information without the consent of the data subject in consideration of the matters under Article 14-2 of the Enforcement Decree of the Personal Information Protection Act pursuant to Articles 15 (3) and 17 (4) of the Personal Information Protection Act. Accordingly, the following matters were considered in order for "Rabbitbio" to provide additional use and provision without the consent of the information subject.

▶ Whether the purpose of additionally using and providing personal information is related to the original purpose of collection
▶ Whether there is a possibility of predicting additional use or provision in light of the circumstances in which personal information has been collected or the processing practices
▶ Whether the additional use or provision of personal information unfairly infringes on the interests of the data subject
▶ Whether measures necessary for securing safety, such as pseudonym processing or encryption, have been taken

※ Criteria for determining considerations for additional use and provision shall be prepared and disclosed autonomously by business operators/organizations


Article 10 (Matters concerning the person in charge of personal information protection)

① Rabit Bio is in charge of personal information processing, The person in charge of personal information protection is designated as follows for the handling of complaints and damage relief of the information subject related to the processing of personal information.

▶ Personal Information Protection Officer
Name: Kim Young-tae
Position: Researcher
Contact point: 055-785-2889, rb@rabbitbio.com
※ You are connected to the department in charge of privacy.


Article 11 (Method of remedy for infringement of rights and interests of information subjects)

n order to receive relief for personal information infringement, the information subject may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Reporting Center, etc. In addition, please contact the institution below for reports and counseling on other personal information infringement.

1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr )
2. Personal Information Infringement Reporting Center: (without country number) 118 (privacy.kisa.or.kr )
3. Supreme Prosecutors' Office: (without national number) 1301 (www.spo.go.kr )
4. National Police Agency: (without country number) 182 (ecrm.cyber.go.kr )

A person who has been infringed on rights or interests due to a disposition or omission made by the head of a public institution in response to a request under Articles 35 (access of personal information), 36 (correction and deletion of personal information), and 37 (stopping processing of personal information, etc.) may request an administrative trial.
※ For more information on administrative trials, please refer to the website of the Central Administrative Appeals Committee (www.simpan.go.kr ).


Article 12 (Change of Personal Information Processing Policy)

① This privacy policy will take effect from August 1, 2023.