RAILS ON BRIDGES:
Rail Structure Interaction with MIDAS Civil

1. Collection of Personal Information Purpose of Processing Personal Information

a. Information Processed

The minimum amount of personal information required for the provision of the service is being collected. In the process of the sign-up for membership or the use of the service, the Company is collecting the minimum amount of personal information required to provide the service through a separate application or program as follows:

Processing Personal Information

[To sign up for membership and use the service]

Required: email, ID, password, name, mobile number, country, company name, position, service use history

[To verify one's identity]

Name, email, mobile number, encrypted user verification value (CI), duplicate information (DI)

[To send inquiries and use Customer Center]

Required: name, company name, country, mobile number, company email, department, position, contents of inquiries

b. Method of Collection

When collecting the personal information, the Company makes sure to inform the user in advance and request for the user’s approval. The personal information is being collected in the following ways:

• When the user consents to the collection of his/her personal information and directly fills in such information in the process of signing up for membership and using the service
• When the personal information is provided through partnership services or from other entities;
• When the information such as web page, email, fax and telephone number is collected in the course of counseling through customer center; and
• When participating in events on/offline.

The personal information to be collected from the user in using the service is as follows:

• • Data including device information in the process of using PC web, mobile web/application (OS, screen size, device ID, mobile phone model, device model), IP address, cookie, access time, history of unjust usage, service use history may be automated created and collected

2. Use of Personal Information

The Company uses the personal information for the following purposes including managing membership, providing and improving customized services, calculating fees incurred for the services, developing new services, and providing information for service-related events and promotion; provided, however, that the Company shall not use the member’s personal information if the member has expressed his/her intention that he/she does not want to provide the information for service-related events and promotion. The Company shall not be held liable for any disadvantage that may arise to the member as a result thereof.

• To identify the member and confirm his/her intention to join the membership; to check the member’s identification and age; and to prevent unjust usage
• To develop new services and provide multiple services; to handle inquiries and complaints; and to deliver notification
• To send and deliver contents and invoices for paid services
• To calculate and collect fees for paid services
• To prevent and restrict any act that may disrupt smooth operation of the service (including account stealing and unjust usage)
• To suggest customized contents based on demographic characteristic, the user’s interest, preference and tendency and to utilize them in marketing activities
• To provide voice recognition and one-to-one services
• To compile statistics on service use history and access frequency; and to establish service environment in terms of privacy protection and use it to improve service qualities.
• To introduce the Company’s existing and new services (products) by utilizing email information for the members who have consented to the use of events and promotional information when signing up for membership; and to deliver related events and promotional information and provide opportunities to participate

3. Destruction of Personal Information

The personal information shall be destroyed upon achievement of the purposes of collecting and using it, and the procedures and methods for destruction is as follows.
The personal information stored in the form of an electronic file will be deleted so that such information shall not be restored and reproduced. Other records, print-outs, written documents will be shredded and incinerated; provided, however, that the data that will be stored for a certain period of time in accordance with internal policy are as follows:

Records to be Retained	Grounds of Retention	Period of Retention
Records on agreement and withdrawal	Act on the Consumer Protection in	5 years
Records on payment and product supplies, etc.	Electronic Commerce, etc.	5 years
Records on consumer complaints or dispute handling		3 years
Records on marks/advertisement		6 months
Books and evidential documents on all transactions as specified in tax law	Framework Act on National Taxes	5 years
Books and evidential documents on all transactions as specified in tax law	Framework Act on National Taxes	5 years
Records on electronic financial transactions	Electronic Financial Transactions Act	5 years
Records on log-in history in connection with the use of the service	Protection of Communications Secrets Act	3 months