Daewoong Pharmaceutical Indonesia (hereinafter referred to as the “Company”) establishes and discloses this Personal Information Processing Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to handle related complaints promptly and smoothly.

Article 1 (Purpose of Processing Personal Information)
‍
The Company processes personal information for the following purposes. The processed personal information is not used for purposes other than the following, and if the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Membership registration and management on the website
To confirm the intention to sign up, provide membership services, verify identity, maintain and manage membership, confirm identity for limited authentication systems, prevent unauthorized use, confirm consent from legal representatives when processing the personal information of children under 14, provide notifications and handle complaints.

2. Provision of goods or services
To deliver products, provide services, send contracts and invoices, provide customized content and services, verify identity and age, process payments and settlements, and collect receivables.

3. Complaint handling
To verify the identity of complainants, check the complaint details, contact for fact-finding and notifications, and inform results.

Article 2 (Processing and Retention Period of Personal Information)
‍
1. The Company retains and processes personal information within the period agreed upon by the data subject or as prescribed by law.
‍
2. Each category of personal information is processed and retained as follows:

Website membership: Until withdrawal from the company/organization site
However, in the following cases, until the relevant reason ends:

1. During investigations or legal proceedings due to violations of related laws
2. If obligations from service use (e.g., debts) remain, until they are resolved

Provision of goods or services: Until service and payment settlement is completed
However, in the following cases, until the end of the applicable retention period:

Under the Consumer Protection Act in E-commerce:
‍
1. Records on advertisements: 6 months
- Records on contracts, cancellations, payments, and deliveries: 5 years
- Records on consumer complaints and dispute handling: 3 years
‍
2. Under the Protection of Communications Secrets Act:
- Telecommunications records: 1 year
- Internet logs and access data: 3 months

Article 5 (Rights of Users and Legal Representatives)
‍
1. Data subjects may exercise the following rights at any time:
- Request access to personal information
- Request correction of errors
- Request deletion
- Request suspension of processing

2. These rights may be exercised via written request, phone, email, or fax. The Company will respond promptly.
3. While a correction or deletion request is pending, the Company will not use or provide the personal data.
4. Legal representatives or agents may exercise rights with a power of attorney (Form No. 11 under the Enforcement Rules of the Act).
5. Data subjects must not infringe on their own or others’ personal information or privacy rights.

Article 6 (Personal Information Items Processed)

1. Website membership
- Required: Name, date of birth, ID, password, address, phone number, gender, email
- Optional: Marital status, interests

2. Goods or services
- Required: Same as above + payment info (credit card number, bank account, etc.)
- Optional: Interests, purchase history

3. Automatically collected info during service use:
- IP address, cookies, MAC address, service usage logs, visit records, misuse history

Article 7 (Destruction of Personal Information)
1. The Company destroys personal information without delay when the retention period has ended or processing purposes are fulfilled.
2. If data must be retained due to other laws, it will be stored in a separate DB or location.
3. Destruction procedures and methods:
- Procedure: Select data for destruction, obtain approval, then destroy
- Method: Electronic files are deleted with low-level format; paper records are shredded or incinerated

Article 8 (Measures to Ensure Security of Personal Information)
1. Administrative: Internal management plans, regular staff training2.
Technical: Access control, encryption, security programs3.
Physical: Restricted access to server and data rooms

Article 9 (Cookies)

1. The Company uses cookies to provide customized services.
2. Cookies are small data files sent from a server to a user's browser and may be stored on the user’s hard drive.
- Purpose: Analyze visit patterns, search keywords, secure connections
- Refusal: Users can reject cookies via browser settings (Tools > Internet Options > Privacy)
- Note: Refusal may affect customized services

Article 10 (Personal Information Protection Officer)
‍
1. The Company designates a personal information protection officer responsible for overall privacy management.
- Contact
Team : Indonesia Business Team (Daewoong Pharmaceutical)
Name : Yuna Hur
E-mail : dpi.info@daewoong.co.kr
‍
2. Users may contact this officer regarding all personal information inquiries or complaints. The Company will respond promptly.

Article 11 (Requests for Access)
‍
‍Users may request access to their personal data under Article 35 of the Act through the department below:
- Contact
Team : Indonesia Business Team (Daewoong Pharmaceutical)
Name : Yuna Hur
E-mail : dpi.info@daewoong.co.kr

Article 12 (Remedies for Rights Infringement)

‍If your personal information rights are violated, contact the following institutions:
- Personal Information Infringement Center (KISA)
Website: privacy.kisa.or.kr | Tel: 118
Address: 3F, 9 Jinheung-gil, Naju-si, Jeollanam-do 58324, Korea
- Personal Information Dispute Mediation Committee
Website: www.kopico.go.kr | Tel: 1833-6972
Address: 4F, Government Seoul Building, 209 Sejong-daero, Jongno-gu, Seoul
- Supreme Prosecutors’ Office Cybercrime Division: 02-3480-3573 | www.spo.go.kr
- Cyber Bureau, Korean National Police Agency: Call 182 | cyberbureau.police.go.kr

‍Article 13 (Enforcement and Revisions)
‍This Personal Information Processing Policy is effective as of June 30, 2025.