DINE Inc. 'WWW.DINE.CO,KR', "DINE" has the following treatment policies to protect users' personal information, rights, and interests, and handle users' grievances In accordance with the Personal Information Protection Act

DINE Inc. ("DINE") will notify you through the website notice (or individual notice) when revising the personal information processing policy.

This policy will take effect on September 1, 2018

1. Purpose of processing personal information (www.dine.co.kr. hereinafter referred to as "Dine") processes personal information for the following purposes: The processed personal information will not be used for purposes other than the following, and we will seek prior consent if the purpose of use is changed.

A. Use of marketing and advertising

Process personal information for the purpose of developing new services (products) and providing customized services.

B. Others

We process personal information for the purpose of applying for product inquiries or promotional materials.

2. Privacy File Status

1. Personal information file name: Application for product/product inquiries, promotional materials

• - Collection method: Written form
• - Evidence of possession: Confirmation of information of the applicant's information
• - Retention period: 1 year
• - Related Acts and subordinate statutes: Records of collection, processing, use, etc. of credit information: Three years

3. Processing and Retention Period of Personal Information

① DINE Inc. processes and holds personal information within the period of retention and use of personal information or the period of collection of personal information from the information subject under the Act.

② Each personal information processing and retention period is as follows.

4. Matters concerning the provision of personal information to third parties

① Dine Inc. ('www.dine.co.kr' hereinafter referred to as "DINE") provides personal information to third parties only if it falls under Articles 17 and 18 of the Personal Information Protection Act, such as consent of the information subject and special provisions of the Act.

② Dine Inc. (www.dine.co.kr) provides personal information to third parties as follows: (At this time, Dine Inc. does not provide personal information to third parties.)

• - Person receiving personal information: Home Page Korea Co., Ltd.
• - Purpose of using personal information of the recipient: Processing and maintenance of information on the Dine Inc. website
• - Possession of the recipient.Period of use: Until the end of the entrustment contract.

5. Consignment of personal information processing

① Dine Inc. ("DINE") entrusts personal information processing services as follows for smooth personal information processing.

• - Consignee : Home Page Korea Co., Ltd.
• - Details of entrusted affairs: Processing and maintenance of information on the Dine Inc. website
• - Consignment period: Until the end of the consignment contract

② Dine Inc. (www.dine.co.kr., hereinafter referred to as "DINE") specifies matters concerning the prohibition of processing personal information, technical and management protection measures, re-entrustment restrictions, management and damage compensation, etc.

③ If the details of the entrusted work or the trustee is changed, we will disclose it through this personal information processing policy without delay.

6. The rights and obligations of the information entity and its legal representatives, and the user of the exercise method, may exercise the following rights as a personal information entity:

① Information subject has the right to access, correct, delete, request suspension of processing, and etc. personal information from Dine Inc. that may be exercised at any time.

② The exercise of rights under paragraph 1 is a corporation.The recognized meritorious services may be made in writing, e-mail, FAX, etc. pursuant to Article 41, paragraph 1, of the Enforcement Decree of the Personal Information Protection Act, and this shall be the case.We will take action on this without delay.

③ The exercise of rights under paragraph 1 may be conducted through an agent, such as a legal representative of the information subject or a delegated person. In such cases, a power of attorney under attached Form 11 of the Enforcement Rules of the Personal Information Protection Act shall be submitted.

④ The right of the information subject may be restricted pursuant to Articles 35, paragraph 5, and 37, paragraph 2, of the Personal Information Protection Act.

⑤ A request for correction and deletion of personal information shall not be requested if the personal information is specified as a target for collection in other Acts and subordinate statutes.

⑥When requesting perusal, correction or deletion, and suspension of processing according to the right of the information subject, Dine Inc. shall verify whether the person who made the request is himself/herself or a legitimate agent.

7. Create items for processing privacy

① Dine Inc. (www.dine.co.kr, hereinafter referred to as "DINE") processes the following personal information items.

8. Destruction of personal information.In principle, 'DINE' destroys the personal information without delay if the purpose of processing personal information is achieved. The procedure, deadline, and method of destruction are as follows.

- Destruction procedure

The information entered by the user is transferred to a separate DB after achieving the purpose (in the case of paper), stored for a certain period of time or destroyed immediately in accordance with internal policies and other related laws. At this time, personal information transferred to DB will not be used for any other purpose except by law.

- Destroyed

If the personal information of the user expires, he/she shall destroy the personal information within five days from the date on which the personal information is deemed unnecessary, such as achieving the purpose of processing personal information, abolishing the relevant service, or termination of business.

- Destruction method

Information in the form of electronic files uses technical methods that cannot be played back. Personal information printed on paper is shredded with a shredder or destroyed by incineration.

9. Matters concerning the installation, operation, and rejection of automatic personal information collection devices;

① To provide individual customized services, Dine Inc. uses 'cookie' that stores usage information and calls in frequently. ② Cookies are a small amount of information sent by the server (http) used to run the website to the user's computer browser and can also be stored on the user's PC computer's hard disk. A. Purpose of use of cookies: It is used to provide optimized information to users by identifying the type of visit and use, popular search terms, security access, etc. for each service and website visited by users. B. Installation and Rejection of Cookies: You can refuse to save cookies using Tools >Internet Options >Set Options on the Privacy menu. C. Refusing to save cookies may cause difficulty in using customized services.

10. Creating a person in charge of privacy

② Dine Inc. (www.dine.co.kr., hereinafter referred to as "DINE") is responsible for handling personal information and designates a person in charge of personal information protection as follows for handling complaints and damage relief of information subjects related to personal information processing.

▶ Personal information protection manager

• Name: Lee Byung-soo
• Position: Team member
• Position: Deputy
• Contact point: 031-488-6242, leo@dine.co.kr,
• ※ Connects to the department in charge of personal information protection.

▶ Department in charge of personal information protection

• Department name: Marketing team
• Managers: Lee Byung-soo, Kim Ah-reum
• Contact Us: 031-488-6242, 031-488-6245
• ③ The information entity may contact the person in charge and the department in charge of personal information protection for all inquiries, complaints, and damage relief arising from using the services (or business) of Dine Inc. (www.dine.co.kr)

11. Changing Privacy Policy

①This personal information processing policy shall apply from the effective date, and if there is any addition, deletion, or correction of the details of changes under Acts and subordinate statutes and policies, it shall be notified seven days prior to the enforcement of the change.

12. Security measures for personal information. In accordance with Article 29 of the Personal Information Protection Act, Dine Inc. ('Dine') takes technical, managerial, and physical measures necessary to ensure safety as follows:

1. Conduct regular self-audit

In order to secure stability related to personal information handling, self-audit is conducted regularly (once a quarter).

2.Formulation and implementation of an internal management plan

An internal management plan is established and implemented for the safe processing of personal information.

3. Technical countermeasures against hacking, etc.

Dine Inc. ('Dine') installs security programs, updates and inspects periodically to prevent personal information leakage and damage caused by hacking or computer viruses, and installs systems in areas with restricted access from the outside, and monitors and blocks technically and physically.

4. Storage of access records and prevention of forgery

Records of access to the personal information processing system are kept and managed for at least six months, and security functions are used to prevent forgery, theft, and loss of access records.