Article 7. Technical/administrative measures to protect personal information
(1) When processing personal information, the company may take reasonable safety measures to prevent personal information from being lost, stolen, leaked, altered or damaged. The Company may take the following technical measures for this purpose:
① Members’ personal information is protected by passwords and encrypted information. Despite these safety measures, there is still a high possibility that a member's password or personal information will be leaked to others when a member accesses the Internet in a public place or through other means. Therefore, the most important thing is to protect members' personal information as thoroughly as possible. Therefore, all members must also be careful to ensure that their personal information is not leaked or provided to others, and must be responsible for managing their personal information. The company is not responsible for any problems caused by the member's negligence or the risks of using the Internet.
② In principle, members’ personal information is protected by passwords and encrypted information. Files and transmitted data are encrypted, and important data is protected through separate security functions.
③ The company uses anti-virus software and regularly updates the software to prevent damage caused by computer viruses.
④ The company operates an intrusion detection system and intrusion prevention system 24 hours a day to prevent members' personal information from being leaked or damaged due to hacking, computer viruses, or other infringements.
(2) The company recognizes the importance of protecting personal information and limits the number of employees who process personal information to the number of people who absolutely need it. The Chief Privacy Officer (CPO) regularly educates/trains staff to protect members' personal data. In addition, the company regularly checks whether the relevant employees comply with the provisions of this personal information handling policy, and if any violations are found, the company orders the relevant employees to correct/improve the violations or take other necessary measures.