Privacy Policy

Note: This English text is provided as a courtesy translation only. In the event of any discrepancy between this English version and the Korean version, the Korean version shall prevail.

MIT Co., Ltd. (the "Company") complies with the Personal Information Protection Act and other relevant laws of the Republic of Korea, and establishes and discloses this Privacy Policy to value and protect the personal information of users. This website (https://www.mit21.co.kr) is a brochure-type website intended for company introduction, and does not operate membership registration, login, payment, newsletters, or any active web form through which users directly input and submit information.

Article 1 (General Provisions and Purpose)

The Company complies with relevant laws concerning the protection of personal information, including the Personal Information Protection Act. Through this Privacy Policy, the Company informs users of the purposes and methods for which personal information provided by users or automatically collected is used, and of the measures taken to protect personal information. The Company discloses this Privacy Policy on the website's main page or a separate linked page so that users may easily access it at any time.

Article 2 (Items of Personal Information Collected and Collection Methods)

The Company collects the following personal information. This website does not operate an active web form through which users directly input and submit personal information; inquiries are made by telephone or email.

1. Information Collected Automatically (generated and collected during use of the website)

• Access IP address
• Date/time of access and service usage records
• Browser type and operating system (OS) information

2. Information Voluntarily Provided by Users When Making Inquiries

When a user contacts the Company by telephone or email, the following information voluntarily provided by the user may be collected.

• Name
• Contact information (telephone number or email address)
• Content of the inquiry

3. Collection Methods

• Automatically generated and collected while the user visits and uses the website
• Voluntarily provided by the user when making an inquiry by telephone or email

Note: The Company uses meta tags for site ownership verification by the Naver and Google search engines; however, these do not function to collect personal information. The Company also does not use any separate web analytics tools such as Google Analytics (GA).

Article 3 (Purpose of Collection and Use of Personal Information)

The Company uses the collected personal information for the following purposes. Should the purpose change, the Company will take necessary measures, such as obtaining separate consent in accordance with the Personal Information Protection Act.

• Responding to and handling user inquiries
• Stable operation and security of the website
• Preventing fraudulent use and responding to abnormal access

Article 4 (Retention and Use Period of Personal Information)

When the purpose of collection and use of personal information has been achieved, the Company destroys such information without delay. However, where retention is required under relevant laws, the Company retains the personal information for the period prescribed by such laws.

• Information collected for responding to inquiries: destroyed without delay upon completion of the inquiry handling
• Automatically collected information (access IP, access records, etc.): destroyed without delay upon achievement of the collection and use purpose
• Where retention is required under relevant laws: retained for the period prescribed by such laws

Note: Where retention is required under relevant laws, the period prescribed therein applies, and the Company does not retain personal information beyond such period.

Article 5 (Provision of Personal Information to Third Parties)

The Company does not provide users' personal information to third parties beyond the scope disclosed in this Policy. The following cases are exceptions:

• Where the user has given prior consent
• Where there is a legal basis under the law, or where an investigative agency lawfully requests it for investigative purposes in accordance with the procedures and methods prescribed by law

Article 6 (Outsourcing of Personal Information Processing)

The Company currently does not outsource the processing of users' personal information to any external party. Should outsourcing of personal information processing arise in the future, the Company will disclose the outsourced party (trustee) and the content of the outsourced work in advance through this Privacy Policy, and will stipulate necessary matters in accordance with the Personal Information Protection Act so that personal information is managed securely.

Article 7 (Procedures and Methods for Destruction of Personal Information)

In principle, the Company destroys personal information without delay once the purpose of its collection and use has been achieved. The destruction procedures and methods are as follows.

1. Destruction Procedure

Personal information for which the purpose has been achieved is destroyed without delay, except where retention is required under relevant laws.

2. Destruction Method

• Personal information stored in electronic file form: deleted using technical methods that make recovery and reproduction impossible
• Personal information recorded and stored in paper documents: shredded or incinerated

Article 8 (Rights and Obligations of Data Subjects and Legal Representatives, and Method of Exercise)

Users (data subjects) may exercise the following rights regarding their personal information against the Company at any time.

• Request to access personal information
• Request to correct personal information in case of errors
• Request to delete personal information
• Request to suspend processing of personal information

The above rights may be exercised by contacting the Personal Information Protection Officer set forth in Article 10 below in writing, by telephone, or by email, and the Company will take necessary measures without delay in accordance with relevant laws. Where a user requests correction of an error in personal information, the Company will not use or provide the relevant personal information until the correction is completed.

Article 9 (Operation and Refusal of Cookies)

The Company does not use cookies to collect personal information or to identify users.

1. Language Setting

• The website is displayed in Korean by default. When a user selects English (ENG) or Chinese (CHN), the language is applied only through the address (URL) parameter "lang=en" or "lang=zh" while browsing, and is not stored in a cookie. When the browser is closed and the website is visited again, it starts in Korean.

2. Installation, Operation, and Refusal of Cookies

Users have the right to choose whether to allow cookies. Through the web browser settings, users may allow all cookies, confirm each time a cookie is stored, or refuse the storage of all cookies.

Note: The language-setting cookie ("mit_lang") previously used by this website is no longer in use, and any such cookie remaining in your browser is automatically deleted when you visit the website.

Article 10 (Personal Information Protection Officer)

The Company designates a Personal Information Protection Officer as set forth below to take overall responsibility for personal information processing and to handle users' inquiries, complaints, and remedy of damages related to personal information processing.

Users may direct any inquiries, complaints, or requests for remedy of damages related to personal information protection arising from their use of the Company's services to the Personal Information Protection Officer, and the Company will respond to and handle such inquiries without delay.

Article 11 (Measures to Ensure the Security of Personal Information)

The Company takes the following measures to ensure the security of personal information.

• Administrative measures: minimization of access rights to personal information and management of personnel handling it
• Technical measures: access control for personal information processing systems and management of access records
• Physical measures: access control for materials and documents in which personal information is stored

Article 12 (Methods of Remedy for Infringement of Rights)

Users may contact the following organizations for relief and consultation regarding damage caused by personal information infringement. These organizations are separate from the Company; please contact them if you are not satisfied with the Company's own handling of personal information complaints and remedy of damages, or if you require more detailed assistance.

Article 13 (Amendment of the Privacy Policy and Duty of Notification)

This Privacy Policy may be subject to additions, deletions, and amendments in accordance with amendments to relevant laws or changes in Company policy. When revising this Privacy Policy, the Company will announce the revisions through the website at least 7 days prior to the effective date. However, where changes materially affect users' rights, the Company will provide notice at least 30 days in advance.

· Effective date of this Privacy Policy: July 3, 2026