Terms and Conditions for HANPASS Card Service

Article 1. Purpose

These Terms and Conditions are intended to stipulate, upon the use of the HANPASS Card service and other related services (hereinafter collectively referred to as “Service”) provided by HANPASS Co., Ltd (hereinafter collectively referred to as “Company”), rights, duties, responsibilities, and other necessary matters between the Company and its subscribers (hereinafter collectively referred to as “Subscriber”)

Article 2. Definition

(1) The term “HANPASS Card” (hereinafter collectively referred to as “Card”) herein refers to a payment scheme embedded with an IC chip and control program, certified by the Company according to the technical specifications defined by the Company.
(2) The term “HANPASS Pay” herein refers to a membership account assigned to the Subscriber when they sign up on the mobile app launched by the Company.
(3) The term “HANPASS Pay Points” refers to a prepaid electronic payment instrument that the Subscriber may directly refill the membership account assigned by the Company or earn from eligible purchase or campaign to redeem for a number of benefits.
Other terms not separately defined in these Terms and Conditions shall be as set forth in the appliable laws, regulations, and the Company’s “Terms and Conditions for Electronic Financial Transactions.

Article 3. Issuance

(1) Subscriber, who has enrolled for the Company’s HANPASS Pay service and is seventeen [17] or older, is eligible to apply for the Card.
(2) When the Subscriber files a card application, the Company reviews their application with credit screening or other procedures according to its own criteria, and then makes a decision to issue the Card to the Subscriber upon approval. If the Subscriber does not satisfy the requirements, the application may be denied, or the Card may be issued but with some restrictions.
(3) The Card issuer is the Company, which outsources works related to issuance and delivery of the Card to BC Card Co., Ltd. (hereinafter referred to as “BC Card”).
(4) Card applied by the Subscriber is served as a transit card as a default.

Article 4. Annual Fee & Other Fees

(1) Company may collect card issuance fee, annual fee, reissuance fee, foreign transaction fee, and other service fees (hereinafter collectively referred to as “Fees”) from the Subscriber. Fees may be variably charged depending on type of the Card and individual Subscribers.
(2) Company shall notify the specific details of the Fees on the Company’s mobile app, including breakdown and amounts, and acquire the prior consent of the Subscriber.
(3) If the Subscriber refuses to pay the Fees, the Service may be limited.
(4) If the Subscriber has paid the annual fee but cancels their subscription within one (1) year from the commencement date, the Company shall refund to the Subscriber’s account the HANPASS Pay Points equivalent to the annual fee minus administrative costs calculated pro-data basis.

Article 5. Use of Card

(1) According to the type of the Card they are using, the Subscriber may make a payment for goods or services at domestic affiliated stores (i.e. companies or sole proprietors entering into a separate franchise contract; sometimes referred to as “affiliate(s)”).
(2) The payment made as set forth in the previous Paragraph shall be up to an amount equal to the current account balance, from which the Card draws the HANPASS Pay Points, the prepaid electronic payment instrument of the Company. If the Subscriber does not have enough Points, the payment may be declined; however, the Subscriber may set to automatically refill the account from the designated bank account to pay the remaining amount.
(3) The maximum transaction limit may be set by the Company to the extent of the issuance limits of the electronic payment instrument as stipulated in the Electronic Financial Transactions Act; the spending limit may be varied for each Subscriber according to ages (whether the Subscriber is a minor), its policy, and other requirements.
(4) When they make a payment, the Subscriber shall present the Card to the store and provide on a purchase receipt the same signature as that on the Card, unless otherwise the store does not require signatures and has the other authentication systems for e-commerce or mail-order sales, or the card issuer and the affiliated stores bear damages potentially incurred as the Subscriber does not provide Card and signature.
(5) If the Subscriber cancels the Card purchase or the pending transaction, BC Card collects the amount equivalent to the canceled transaction from the store, and then the Company refunds the money to the Subscriber’s account within the next business day.

Article 6. Transit Card

(1) When the Subscriber files a card application, the Card is issued with a transit card function. Subscriber may refill the transit card via the Company’s mobile app.
(2) Subscriber can refill the transit card up to KRW 500,000. Maximum refill amount may be separately set to the extent of the maximum limit based on the Company’s policy, which shall be notified to the Subscriber via the Company’s mobile app or website.
(3) No interest shall be accrued on the amount refilled to the transit card.
(4) Company may limit the refill of the Subscriber if any of the following events occurs:
1. when the maximum refill amount is exceeded for the transit card; or
2. when refill is not available due to other technical or institutional causes.
(5) Maximum validity period of transit card balance may be five (5) years from the date the transit card was last refilled or used by the Subscriber, under the provisions of the Commercial Act.
(6) If the Subscriber requests a refund of the transit card balance, it may be refunded in accordance with the “Terms of Service” owned by the affiliate, to online or offline providers (e.g. railway station, CVS, or ATM) as designated by the affiliate, provided that the Subscriber may be charged a predetermined refund fee.
(7) Subscriber may check the transit card balance on the Company’s mobile app, and transaction history on public transportation may be checked on the affiliate’s website.
(8) Although if the Card has been canceled or expired, the transit card function will be survived and the Subscriber can use up the transit card balance.

Article 7. Card Management

(1) Subscriber shall sign in a signature panel on the back of the Card by themselves as soon as the Card is delivered, and shall not allow any third party (including a spouse and family members) to use their Card.

Article 8. Expiration Date, Renewal & Reissuance

(1) The expiration date is printed on the Card.
(2) Company will inform the Subscriber, upon sixty (60) days prior notice, that their Card will be expired in sixty (60) days and they reserve a right to challenge within twenty (20) days of the receipt of this notice. If the Subscriber does not make any complaint, the Company may renew their Card with the new expiration date designated, or refuse to reissue if the Subscriber fails to satisfy certain requirements.
(3) Subscriber shall not use the Card that has been expired or become invalid due to renewal, replacement or reissuance; such a Card shall be immediately discarded not so as to be abused.
(4) Notwithstanding this Clause, in a case where the partnership agreement entered into by and between the Company and BC Card is terminated, the Company shall notify the Subscriber, upon thirty (30) days prior notice, that this Card can no longer be used as stipulated in these Terms and Conditions under the provisions of Article 13.

Article 9. Freezing and Cancellation

(1) Subscriber’s Card may be paused or frozen by the Company if any of the following events occurs upon prior written notice, or without notice due to urgent and unavoidable reasons; in such a case, the Subscriber shall be notified afterwards:
1. when the Subscriber has filed the card application with false information;
2. when the Subscriber has 5 failed attempts to enter the PIN code;
3. when the bank account linked to the Card has a history of fraud, is suspended by laws and regulations, or would be legally frozen in accordance with the codes of the financial institution or the Company;
4. when fraud (actual or potential) or suspicious transaction is detected by the Company based on the reasonable grounds;
5. when the Subscriber’s HANPASS Pay Wallet is suspended or fraud is reported in connection with their HANPASS Pay, HANPASS app or Card;
6. when the Subscriber cancels their subscription;
7. when the Subscriber is likely to be damaged by cybercrimes, such as hackings;
8. when the suspension is required due to other technical or institutional causes; or
9. when the Subscriber requests for suspension or deactivation.
(2) If the Card is paused or frozen as stipulated in the preceding Paragraph, the Company shall notify the Subscriber of the causes or duration as set forth in Article 13.
(3) Subscriber may request for cancellation of the Card, for example, on the HANPASS app, and the Company shall close down the Card immediately upon the requested; the cancellation may be withheld by the Company for the justifiable reasons, including but not limited to settlement or the investigation by the legitimate investigation agency.
(4) Subscriber’s subscription will survive the card cancellation upon the request; however the Card is automatically canceled if the Subscriber cancels their subscription from the HANPASS Pay.

Article 10. Loss or Theft

(1) When the Subscriber’s Card is lost or stolen, the Subscriber shall report immediately to the HANPASS app or the Customer Center .
- Tel. 02-3409-1540
- E-mail: contact@hanpass.com
(2) If the report is received as set forth in the previous Paragraph, the Company shall promptly pause the Card such that the payment or withdrawal is not available.
(3) If any one of the following events occurs, the Company may have the Subscriber bear all or any of liabilities incurred by such an event, or claim damages against them:
1. when the Subscriber commits fraud intentionally;
2. when the Subscriber has not signed on the Card;
3. when the Subscriber shares their PIN code by willful misconduct or gross negligence;
4. when the Subscriber transfers or assigns the Card to any third party (including family members and cohabitants), provides as a security or mortgage;
5. when the Card data is leaked by negligence of the Subscriber;
6. when the Subscriber intentionally delays report to the Company although their Card has been lost or stolen, without any justifiable reasons;
7. when the Subscriber makes a false report that the Card is lost or stolen; or
8. when a third party uses the transit card after the Subscriber makes a report that the Card is lost or stolen.

Article 11. Dispute on Card Charges

(1) If the Subscriber thinks or believes there are fraudulent charges on the card statement, they can dispute the charge with the procedures set by the Company within fourteen (14) days of the purchase.
(2) When the Subscriber make a complaint, the Company will thoroughly investigate the Subscriber’s dispute together with BC Card and notify the Subscriber of their conclusion within fifteen (15) days under the provisions of Article 13.
(3) If the Subscriber disagree with the Company’s conclusion, they may apply for dispute resolution on electronic financial transaction services, to the Financial Disputes Mediation Committee under the Financial Supervisory Service, as stipulated in “Act on the Establishment, etc. of Financial Services Commission”, or alternatively, to the Consumers Dispute Settlement Commission under the Korea Consumer Agency, as stipulated in “Framework Act on Consumers”.
(4) Either the Subscriber or the Company shall take responsibility based on the decision handed down the arbitrators in the dispute resolution as set forth in the preceding Paragraph, unless otherwise either the Subscriber or the Company raises an objection against the decision and files a lawsuit in court.

Article 12. Other Services

(1) Company may provide the value-added services (VAS) to the Subscriber for a fixed period; however, the VAS may be changed or altered even prior to the expiration, if any one of the following events occurs,
1. when such change or alteration is unavoidable due to suspension, bankruptcy or insolvency of the Company or VAS providers, force majeure, natural disasters, rapid changes in the financial environment, or any other situations beyond the Company’s reasonable control;
2. when the VAS-related agreement is terminated or altered due to reasons not attributable to the Company; or
3. when the VAS is changed or altered to facilitate the benefits or alleviate the burden of the Subscriber.
(2) If any one of the events occurs as set forth in the preceding Paragraph, the Company shall notify the Subscriber immediately under the provisions of Article 13.

Article 13. Notice

(1) Company may send a required notice to the Subscriber via mail, e-mail, call, SMS (text messages), or push notification.
(2) Company may post a notice on the HANPASS app or its website if the notice is made for indefinite Subscribers.

Article 14. Credit Information

(1) Company and BC Card shall strictly control the credit information of the Subscriber, acquired in connection with this Contract, as set forth in the applicable laws and regulations; they may provide or be provided any third party, including but not limited to credit information agency or affiliates need to know, with the credit information to the extend agreed by the Subscriber.
(2) If the dispute arises between the affiliate and the Subscriber and affiliate requests for the Subscriber’s information, the Company and BC Card may provide the affiliate with the information on the Subscriber and transaction upon the Subscriber’s prior consent.
(3) If the Company is requested to submit the information on the Subscriber and transaction from courts, investigative agencies, supervisory agencies or other qualified persons, they shall comply with the relevant laws.

Article 15. Amendment

These Terms and Conditions may be altered or amended as set forth in the Company’s “Terms and Conditions for Electronic Financial Transactions.”

Article 16. Breach

Either the Company or the Subscriber shall be liable for damages caused by their violation or breach of these Terms and Conditions.

Article 17. Miscellaneous

Other matters not stipulated in the Terms and Conditions and interpretation shall be governed by the Company’s “Terms and Conditions for Electronic Financial Transactions”, operating policies, related laws and commercial practices.

Addendum

These Terms and Conditions shall be effective from October 4, 2021.

PERSONAL INFORMATION PROCESSING POLICY

HANPASS Co., Ltd. (hereinafter referred to as 'Hanpass', https://www.hanpass.com) has established the following policy for the processing of personal information pursuant to Article 30 of the Personal Information Protection Act and Article 27-2 of the Act on Promotion of Information and Communications Network Utilization and Information Protection. This policy is meticulously designed to safeguard the privacy and rights of customers and to ensure the efficient resolution of any grievances concerning personal information. This Personal Information Processing Policy is subject to modification at any time due to amendments in relevant legislation, government directives, or internal policies. In the event of modifications to this policy, such changes will be promulgated on the Company's website.

This Personal Information Processing Policy applies to all services provided by the Company and encompasses the following elements:

1. Collection and Processing of Personal Information.
2. Duration of Personal Information Processing and Retention.
3. Disclosure Concerning the Sources of Collected Personal Information.
4. Delegation of Personal Information Processing.
5. Disclosure of Personal Information to Third Parties.
6. Rights and Obligations of Customers and the Methods for Exercising These Rights.
7. Categories of Personal Information Processed.
8. Destruction of Personal Information.
9. Measures to Ensure the Security of Personal Information.
10. Amendments to the Personal Information Processing Policy.
11. Remedies for Infringement of Rights.
12. Responsible Officer/Personnel and Department of Personal Information Protection.

Article 1 (Objectives for the Collection and Processing of Personal Information)

① Hanpass processes the collected personal information for purposes that include membership registration and management, the promotion and provision of goods and services, and facilitating non-face-to-face transactions. In the event of a change in the intended purposes, prior consent will be obtained from the data subjects. Post membership withdrawal, the information shall be retained and utilized solely for investigating incidents pertinent to the objectives of Article 1, resolving disputes, managing complaints, and complying with statutory obligations.
② Regarding the use of Hanpass services, the authorization for access and transaction directives related to personal and credit information, along with the specific items processed, are delineated as follows:

Contents of Service	Items Processed
Membership Registration (Individual).	Name, Real Name Verification Number, Copy of Real Name Verification Certificate, Date of Birth, Gender, Nationality, Address, Contact Information (Mobile Phone Number, Email), Referrer (Optional)
Provision of Virtual Account Deposit Method.	Name, Real Name Verification Number, Account Number/Financial Institution, Account Holder's Real Name Verification
Unique Identifier Information: - Real Name Registration. - Domestic and Foreign National Real Name Verification. - Mobile Phone Identity Verification. - Authorized Certificate Identity Verification. - Simplified Email Verification. - Account Verification.	Name, Resident Registration Number, Mobile Phone Number (Optional), Legal Representative's Name/Resident Registration Number, Email Resident Registration Number (Alien Registration Number), Name or Date of Birth, Name, Gender, Date of Birth, Name, Gender, Domestic/Foreign National Status, Mobile Phone Number Resident Registration Number (Alien Registration Number), Name Date of Birth, Name, Gender, Email Bank, Account Number, Account Holder
Open Banking Service of Korea Financial Telecommunications & Clearings Institute: - Balance Inquiry. - Transaction History Inquiry. - Account Real Name Inquiry. - Withdrawal Transfer. - ARS Withdrawal Transfer Consent and Notification of Termination.	Name, Gender, Date of Birth, Domestic/Foreign National Status, Mobile Phone Number, Email Address, Account Number/Financial Institution Name, Linked Information (CI) Detailed information about the Open Banking Service can be found at the following website: (Open Banking of KFTC: https://www.open-platform.or.kr/main)
Notification of Overseas Remittance and Transaction Progress via SMS.	• Sender Information (Purpose of Remittance, Source of Funds, Relationship with Recipient) • Recipient Information (Name, Real Name Number, Address, Contact Information, Nationality, Date of Birth, Mobile Phone Number, Remittance Amount, Remittance Date, Purpose of Remittance, Source of Funds, Occupation, Gender, Date of Issuance of Identification, Issuing Authority of Identification, Place of Birth, Recipient Information (Recipient Financial Institution Name and Branch, Name, Date of Birth, Gender, Nationality, Account Number, Address, Phone Number, Relationship, BIC Code, Province Code, Regency Code, CUP Card Number, bKash Number))
Information Automatically Generated During Service Use.	• Service Usage Records (Service Usage Channel, Deposit and Withdrawal Records, Overseas Remittance-Related Records, Member Information Modification Records, Complaint Handling, Misuse Records, Usage Logs) • Suspicious Transaction Investigation Cooperation (IP Address, Access Country) • Device Information Used (Model Name, Unique Device Identifier (IMEI, SSAID), OS Version, Advertising Identifier)
Provision of Hanpass Card Services.	CI, Name (in Korean and English), Mobile Phone Number, Driver's License Number, Alien Registration Number, Card Delivery Address, Date of Birth, Gender, 16-digit Hanpass Card Number, Verification of Identification Authenticity
Express Bus Reservation Services	Kumho Express Co., Ltd., Dongbu Express Co., Ltd., Dongyang Express Co., Ltd., Samhwa Express Co., Ltd., Kumho Sogrisan Express Co., Ltd., Joongang Express Co., Ltd., Cheonil Express Co., Ltd., Hanil Express Co., Ltd., Daewon Express Co., Ltd., Korea Wide Gyeongbuk, Chungnam Express Co., Ltd. Korea Express Bus Transport Business Association, Tmoney
Job search service (applying for jobs through resumes)	Name, Photo, Gender, Date of Birth, Nationality, Visa Information, Email, Contact Information, Address, Education, Work Experience, Language Proficiency (Korean, English), Self-Introduction (Detailed, One-Line Introduction)
Administrative Consultation Service (SOS Hanpass)	Name, Nickname, Photo, Phone Number, Email, Consultation Details, Attachment (Optional)
KTX Reservation	Phone number, reservation details (number of passengers / train service / boarding date and time)
Customer Service	Inquiry details and personal information necessary for consultation

※ The JB Loan Service is designed as a connection (call) to Jeonbuk Bank's service within the company’s app. All information entered by users is directly collected and processed by Jeonbuk Bank, and the company neither accesses nor stores any of this information.

※ When using Jeonbuk Bank's loan comparison service, Jeonbuk Bank's Privacy Policy applies. For more details, please refer to Jeonbuk Bank's website or the relevant service screen.

Article 2 (Duration of Personal Information Processing and Retention)

① Any and all personal information that have been collected shall be retained and utilized from the date of consent for the collection and use of such information until the expiration of the consent period for the provision and inquiry of credit information pertaining to the customer. Post the expiration of the consent period for the provision and inquiry of credit information, the information shall only be used for the purpose of investigating financial incidents, resolving disputes, addressing complaints, and fulfilling statutory duties.

② The personal information which is collected for the purposes of member registration and management shall be retained and utilized from the customer's date of membership registration until the date of membership withdrawal. Following the date of membership withdrawal, the information will only be retained and used to investigate incidents relevant to the objectives outlined in Article 1, to resolve disputes, to manage complaints, and to comply with legal mandates.

③ Procedures for Withdrawing Consent for Personal Information Processing and Transaction Directives
Customers may revoke their consent for the collection and utilization of personal information. Nevertheless, this may result in the non-provision of certain essential services, such as overseas remittances and Hanpass cards. The procedure for withdrawal can be initiated through the "Membership Withdrawal" feature within the Hanpass application. Should customers experience difficulties during this process, comprehensive assistance is available through the customer service center at 02-3409-1540. ④ Personal information associated with non-face-to-face (online) transactions shall be retained and utilized for the duration stipulated by Article 12 of the Enforcement Decree of the Electronic Financial Transactions Act.

⑤ Applicable Legislation
• Personal information concerning service usage (service access logs): 3 months, as per the Protection of Communications Secrets Act.
• Records related to advertising/display: 6 months, in accordance with the Act on Consumer Protection in Electronic Commerce, etc.
• Records pertaining to contracts or subscription withdrawals: 5 years, under the Act on Consumer Protection in Electronic Commerce, etc.
• Records concerning payment and the provision of goods: 5 years, as dictated by the Act on Consumer Protection in Electronic Commerce, etc.
• Records regarding consumer complaints or dispute resolution: 3 years, as per the Act on Consumer Protection in Electronic Commerce, etc.
• Records of electronic financial transactions and fraudulent transactions: 5 years, under the Electronic Financial Transactions Act.
• Records of domestic financial transactions for payment and receipt: 5 years, according to the Foreign Exchange Transactions Act.
• Information related to the duty of customer verification: 5 years, based on Article 4 of the Act on Reporting and Use of Certain Financial Transaction Information and Article 7 of its Enforcement Decree.

Article 3 (Disclosure of Personal Information Collection Sources and Related Notifications)

① In case Hanpass processes personal information that has been collected from individuals other than the data subject, it shall, barring a legitimate reason, notify the data subject within three days following the receipt of the data subject's request. This notification will include the source of the collected information, the purpose of its processing, and the data subject's right to request the cessation of the processing of their personal information.

② In case Hanpass declines a data subject's request pursuant to Paragraph 1, based on the stipulations of each clause of Article 20, Clause 2 of the Personal Information Protection Act, and absent a legitimate reason, it will inform the data subject of the rationale and reasons for this refusal within three days from the date of the data subject's request.

Article 4 (Delegation of Personal Information Processing)

The delegation of personal information tasks means assigning some tasks to subcontractors with expertise in their respective fields to provide smooth services to members. Personal information is processed only within the scope of the delegation under the company's responsibility. The company carefully reviews whether subcontractors processing personal information have sufficient capabilities to protect members' personal information. The company delegates the following tasks and provides only the minimum necessary personal information required for the tasks. Additionally, if the content of the delegated tasks or the subcontractor changes, this is disclosed through the personal information processing policy.

Subcontractor Name	Delegated Tasks	Retention and Disposal
Coocon Co., Ltd	ARS withdrawal consent authentication for prepaid electronic payment services, account holder validity check, withdrawal request relay, data transmission relay for cash receipt issuance, check card withdrawal network relay.	Immediately deleted upon completion of the purpose
Danal Co., Ltd., Galaxia Money Tree Co., Ltd.	Mobile carrier billing services agency for prepaid electronic payment services, convenience store settlement agency.	Immediately deleted upon completion of the purpose
BC Card Co., Ltd	Domestic and international (VISA, MASTER) transaction authorization intermediation, domestic and international (VISA, MASTER) payment settlement and payment agency, fraud prevention, cash receipt reporting agency, overseas customer complaint handling.	Immediately deleted upon completion of the purpose
KORAIL (R+ Rail Plus)	Hanpass transportation card specialty issuance number and management, card issuance date, creation date, expiration date, transaction authorization intermediation, merchant payment settlement, fraud prevention, customer complaint handling.	Immediately deleted upon completion of the purpose
As Top Co., Ltd.	Telephone guidance for Hanpass members, especially those who have not been issued a card, to facilitate smooth use of Hanpass.	Immediately deleted upon completion of the purpose
Airbiz NT Co., Ltd.	Card application, issuance, and delivery services for card applicants.	Immediately deleted upon completion of the purpose
Hanpass Lending Co., Ltd.	Rental service reception, guidance, consultation, complaint handling, verification of product delivery information, provision of promotions, event prizes.	Immediately deleted upon completion of the purpose
Hanpass Glogis Co., Ltd.	Service reception, guidance, consultation, complaint handling, verification of product delivery information, provision of promotions, event prizes.	Immediately deleted upon completion of the purpose
The Cheat Co., Ltd.	Providing services for checking and verifying suspected fraudulent transactions	Immediately deleted upon completion of the purpose

Article 5 (Provision of Personal Information to Third Parties)

① HANPASS, as a matter of principle, processes customers' personal information within the scope of the purposes specified in Article 1 and does not process it beyond the original scope or provide it to third parties without the customer's prior consent. However, in the following cases, except when there is a risk of unjust harm to the interests of the customer or third parties, personal information may be used for purposes other than those originally intended or provided to third parties. The details related to the provision of information to third parties will be separately guided and consent obtained during the service use process:

1. If the customer has previously consented to the provision and disclosure to third parties.
2. If there are specific provisions in other laws.
3. If the customer or their legal representative is in a state where they cannot express their will, or if it is impossible to obtain prior consent due to reasons such as an unknown address, and it is deemed necessary to protect the urgent life, physical integrity, or property interests of the customer or third parties.
4. If it is necessary for the purposes of statistical compilation and academic research and the personal information is provided in a form that does not allow identification of specific individuals.
5. If the company provides personal information that has been unavoidably collected in compliance with legal obligations, within the scope of the collection purpose.

② Status of Provision of Information to Third Parties

Purpose of Provision	Entities Provided	Items Provided	Retention Period
(Mandatory) Overseas Remittance Service • Registration of Withdrawal Account	Domestic Financial Institutions (Domestic Banks and Securities Companies)	Name, Real Name Verification Number, Account Number/Financial Institution Name	Until the withdrawal of service use (deletion of registered account) or until membership withdrawal.
(Mandatory) Overseas Remittance Payment Request	Overseas Remittance Intermediary Financial Companies and Banks or Financial Companies in the Country where Payment Occurs	• Sender Information: Name, Real Name Verification Number, Address, Telephone Number, Remittance Amount, Remittance Date and Time • Recipient Information: Name, Address, Telephone Number, Recipient Account Number or Card Number/Recipient Financial Institution Name	In accordance with Article 2.
(Optional) Open Banking Service** • Provision of Open Banking Service • Consent to Withdrawal and Transaction Information Provision via ARS • Registration and Notification of Termination of Withdrawal Transfer Account	Korea Financial Telecommunications & Clearings Institute	Name, Gender, Date of Birth, Domestic/Foreign National Status, Mobile Carrier, Mobile Phone Number, Email Address, Account Number/Financial Institution Name	Until the purpose of providing withdrawal transfer services and confirming withdrawal consent is achieved (or according to the retention period stipulated by relevant laws).
(Mandatory) Request for Information Provision for Anti-Money Laundering in Case of Small Overseas Remittances	Receiving Financial Companies, Financial Intelligence Unit	• Sender's Name • Sender's Account Number • Sender's Address or Resident Registration Number (For foreigners, Passport Number or Alien Registration Number) • Recipient's Name and Account Number • Records of Unusual Transactions	Until transaction verification is complete (in accordance with the regulations on anti-money laundering and the prohibition of financing for public threats, or relevant laws).
(Mandatory) Hanpass Card Service Brokerage	BC Card Co., Ltd.	Hanpass Prepaid (Debit) Electronic Payment Instrument Business Progress: Member's CI, Name, Mobile Phone Number, Date of Birth, Gender, Delivery Address, 16-digit Hanpass Card Number	Until the provided purpose is achieved.
(Mandatory) Hanpass Card Delivery, Member and Card Mapping	BC Card Co., Ltd. and Card manufacture and delivery agencies commissioned by BC Card Co., Ltd.	Delivery Address, Name, Mobile Phone Number, Address, Date of Birth, Gender, 16-digit Hanpass Card Number	Until the provided purpose is achieved.
(Optional) Provision of Hanpass Transportation Card Service	KORAIL	Issuance of Vouchers, Charging, and Merchant Settlement Agency	Until the provided purpose is achieved.
(Optional) Provision of Gifting, Mobility, Subscription Services	Hanpass International Co., Ltd.	Name, Mobile Phone Number, Scheduled Payment Information	Until the provided purpose is achieved.지
(Mandatory) Hanpass Service Telephone and Consultation Duties, Monitoring Tasks, etc.	KSJOB INC.	• Sender Information: Name, Real Name Verification Number, Address, Telephone Number, Remittance Amount, Remittance Date and Time • Recipient Information: Name, Address, Telephone Number, Recipient Account Number or Card Number/Recipient Financial Institution Name • Hanpass Card Member's CI, Name, Mobile Phone Number, Date of Birth, Gender, Delivery Address, 16-digit Hanpass Card Number	Until the provided purpose is achieved.
(Mandatory) Account Validity Verification, ARS Withdrawal Consent, Cash Receipt Issuance Brokerage, Deposits and Transfers Related to Electronic Financial Services	Coocon Co., Ltd.	- Account Holder's Name, Account Number, Mobile Phone Number, Date of Birth	Until the provided purpose is achieved.
(Optional) Hanpass Wallet Charging Service	Danal Co., Ltd.	• Name, Mobile Phone Information (Mobile Phone Number, Mobile Carrier, Device Model) • Collection Agency Number	Until the provided purpose is achieved.
(Optional) Hanpass Wallet Charging Service	Galaxia Money Tree Co., Ltd.	• Name, Mobile Phone Information (Mobile Phone Number, Mobile Carrier, Device Model) • Collection Agency Number	Until the provided purpose is achieved.
(Optional) Hanpass Logistics Service • Receipt, Confirmation, Guidance, Consultation, and Complaint Handling of Logistics Services • Verification of Product Delivery Information, Provision of Promotions, Event Prizes	Hanpass Glogis Co., Ltd.	- Name, Mobile Phone Information, Logistics Use/Product Information, Delivery Address	Until the provided purpose is achieved.
(Optional) Hanpass Live Service • Guidance and Consultation on Partner Company Products or Services, Complaint Handling • Verification of Product Delivery Information, Provision of Promotions, Event Prizes	Seller	- Name, Mobile Phone Information, Purchased Product Information, Delivery Address	Until the provided purpose is achieved.
(Optional) Hanpass Rental Service • Receipt, Guidance, Consultation, and Complaint Handling of Services • Verification of Product Delivery Information, Provision of Promotions, Event Prizes	Hanpass Lending Co., Ltd.	- Name, Gender, Date of Birth, (Mobile) Telephone Number, Contact Information, Address, Installation Address, Email, Transaction Financial Institution Name, Account Number, Card Issuer Name, Card Number, Card Expiry Date, Domestic Birth Registration Location, Alternate Key (MyPin, SafeKey, SirenKey, etc.)	Until the provided purpose is achieved.
(Required) HANPASS Card Service Intermediary	KT	Member's personal identification information in the course of HANPASS (debit) electronic prepayment means business Passport number, customer name, customer classification, country code, gender	Until the purpose provided is fulfilled.
(Required) Overseas Remittance Service • Withdrawal account registration Consent to withdraw funds via ARS and consent to provide transaction information	Shinhan Bank, Jeju Bank, Jeonbuk Bank	Account number/ financial institution name, date of birth	Until the purpose of providing the withdrawal service and verifying the withdrawal consent is achieved (or the retention period in accordance with relevant laws and regulations).
(Required) HANPASS Wallet Foreign Currency Recharge Service	ILK Korea Co., Ltd.	Name, mobile phone number, card number, email, address	Until the purpose provided is fulfilled.
(Required) Hanpass Membership Registration • Identity Verification Service via Facial Recognition	Argos Identity Korea Co., Ltd.	A copy of a real-name verification document	Destroy immediately after use
Express Bus Reservation Services	Kumho Express Co., Ltd., Dongbu Express Co., Ltd., Dongyang Express Co., Ltd., Samhwa Express Co., Ltd., Kumho Sogrisan Express Co., Ltd., Joongang Express Co., Ltd., Cheonil Express Co., Ltd., Hanil Express Co., Ltd., Daewon Express Co., Ltd., Korea Wide Gyeongbuk, Chungnam Express Co., Ltd., Korea Express Bus Transport Business Association, Tmoney	Name, contact details (mobile phone number, email), boarding information (departure/destination, boarding date and time, number of passengers, seat number)	Immediately destroyed after the purpose is achieved (except where retention is required by law)
Job search service (applying for jobs through resumes)	Hooper Co., Ltd. (JobFloi) MediaWill Co., Ltd. (Online Flea Market) Other Companies Applied by Foreign Members	Name, Photo, Gender, Date of Birth, Nationality, Visa Information, Email, Contact Information, Address, Education, Work Experience, Language Proficiency (Korean, English), Self-Introduction (Detailed, One-Line Introduction)	Until the purpose provided is fulfilled.
Administrative Consultation Service (SOS Hanpass)	Jo Jun-hwan, Administrative Agent (World One Administrative Office) Hong I-hyun, Administrative Agent (World One Administrative Office) Park Hoon-dong, Administrative Agent (Daum Plus Administrative Office) Jung Min-seok, Administrative Agent (Global Administrative Office) Han Sang-ho, Administrative Agent (Police Human Resources Development Institute) Yoon Hyung-chul, Administrative Agent (OnePass Administrative Corporation) Kim Kyung-ho, Administrative Agent (OnePass Administrative Corporation) Yeo Ji-hye, Administrative Agent (OnePass Administrative Corporation) Park Joon-yong, Administrative Agent (OnePass Administrative Corporation) Hyun Byung-sun, Administrative Agent	Name, Nickname, Photo, Phone Number, Email, Consultation Details, Attachment (Optional)	Until the purpose provided is fulfilled.

③ Note: The company only provides a simple connection (call) function to the external service listed below and does not collect, store, or provide customers' personal information to any third party in the process of using the service
- JB Loan Service

Article 6 (Provision and Transfer of Personal Information to Third Parties Abroad)

① Hanpass transfers and provides personal information to third parties abroad only within the scope of prior consent obtained from customers.

Recipient	Country	Time & Method of Transfer	Information Transferred	Purpose	Retention & Usage Period
Overseas Remittance Partner Companies - Refer to the list of partner companies (link)	Varies by recipient	Upon request for an outbound international remittance via API and dedicated network	(Sender & Recipient Information) Name, Address, Bank, Account Number, Phone Number, Remittance Purpose, Sender's Date of Birth, Identification Information & ID Number	International Remittance	Up to 5 years after the completion of the financial transaction (Records of electronic financial transactions)

② The above provision is based on Article 28-8(1)(1) of the Personal Information Protection Act (Consent of the Data Subject).

③ As the transfer of personal information is essential for providing international remittance services, refusal to consent will result in the inability to use such services. If you do not wish to proceed with the transfer, you may either withdraw your membership or contact customer service for further assistance.

Article 7 (Rights and Obligations of Customers and Their Exercise)

① Customers are entitled to request access to their own personal information, as well as that of minors under the age of 14 (applicable solely to legal representatives), which is processed by the Company.

② Upon accessing their personal information, customers may petition the Company to correct or delete any data that is inaccurate or cannot be verified. Nonetheless, such deletion requests are not permissible if other statutory regulations mandate the collection of said personal information.

③ Customers may demand that the Company cease the processing of their personal information. However, under the following circumstances, the Company may notify the customer of the rationale and decline the cessation request:
1. If adherence to specific legal provisions or obligations necessitates continuation of processing.
2. If ceasing the processing poses a risk of unjust harm to another person’s life, physical integrity, property, or other interests.
3. If failure to process the personal information would significantly impede the execution of a contract with the customer, particularly in instances where the customer has not explicitly indicated a desire to terminate the contract.

④ For users or children under the age of 14 (applicable only to legal representatives) to consult or amend their personal information, they are required to click 'Change Personal Information' (or 'Modify Member Information', etc.), and after completing the identity verification process, they may directly view, correct, or terminate their membership.

⑤ The Company handles personal information that has been terminated or deleted at the request of the user or legal representative in accordance with the provisions specified in the "Duration of Collection and Use of Personal Information" by the company. This ensures that the information is not accessible or utilized for any purposes beyond those stipulated.

Article 8 (Categories of Personal Information Processed)

The Company collects and processes both essential and optional information required for the establishment, maintenance, execution, and management of non-face-to-face transactions, as well as for the provision of goods and services, as follows: 1. Essential Information
- Personal Identification Information: Includes name, Resident Registration Number (Real Name Verification Number), identification cards (for foreigners, this includes Alien Registration Number and Passport Combination Resident Number), unique identifiers, deposit account details, nationality, professional group, address, email, mobile phone number, and other contact information.
- Non-face-to-face Financial Transaction Information: Encompasses service type, transaction terms, transaction date and time, amounts, and other details pertinent to transaction setup and history.

2. Information Collected Pursuant to the Electronic Financial Transactions Act (Applicable Solely to Non-face-to-face Transactions)
- Beyond personal identification information, this includes data listed on the transaction application form or furnished by the customer, such as login ID, contact details, residential and workplace addresses (only essential items are recorded).
- Information that is automatically captured during the usage of services (e.g., operating system type, browser version, IP address, logs) is utilized exclusively for the purpose of investigative cooperation in cases involving users of suspicious transactions.

3. Matters Concerning the Processing of Biometric Information
① Purpose of Collecting and Using Biometric Information
Hanpass collects and uses biometric information for identity verification services, dispute resolution, handling of civil complaints, and compliance with legal obligations through the comparison of the user's ID photo and a facial photo taken by the user.
② Items of Biometric Information Collected and Used
Facial Information (Original): A facial image taken by the user with a camera.
Feature Information: Similarity value between the face photo on the real-name verification document and the facial photo taken by the user.
③ Retention and Use Period of Biometric Information
Facial Information (Original): 5 years from the date of collection.
④ Provision of Biometric Information to Third Parties
The user's real-name verification document copy and facial information (original) image will be provided to Argos Identity Korea Co., Ltd., the facial recognition identity verification service solution provider. Argos Identity Korea Co., Ltd. will immediately destroy the information after the identity verification service is used.

4. Methods of Collection
- Through website (Web), application (App), paper forms, fax, telephone, consultation boards, email, and service applications.
- Via data collection tools.
- Through queries submitted to customer service.

Article 9 (Destruction of Personal Information)

① When the retention period for personal information has concluded, the Company is obligated to destroy such information within five business days from the end date of said period, unless a circumstance arises such as the fulfillment of the processing purpose, cessation of the service, or termination of the business, rendering the personal information redundant.
② Personal information recorded in printouts or documents is destroyed through shredding or incineration. Conversely, personal information in electronic file format is irrevocably erased using methods that render restoration impossible.

1. Destruction Procedure:
Information input by users is transferred to a dedicated database (or stored as separate documents in the case of paper) post-achievement of the intended purpose, where it is retained for a specified period in accordance with internal policies and relevant legal provisions, or it is destroyed immediately. Personal information relocated to the database will not be employed for any other purposes unless mandated by law.

2. Destruction Deadline
Personal information of users will be destroyed within five days from the conclusion of the retention period, or within five days from the date on which it is deemed that processing of the personal information is no longer necessary due to the achievement of the processing goal, discontinuation of the relevant service, or cessation of the business.

3. Destruction Method
Information in electronic file format is obliterated using technical methods that inhibit any possibility of record recreation. Personal information printed on paper is disposed of by either shredding with a shredder or by incineration.

Article 10 (Measures to Ensure the Security of Personal Information)

In compliance with Article 29 of the Personal Information Protection Act, the Company has implemented the following technical, administrative, and physical measures to ensure the robust security of personal information:

① Minimization and Training of Personnel Handling Personal Information
We have designated specific employees to handle personal information, restricting and minimizing the number of such personnel to bolster the management and protection of personal information.

② Regular Self-Audits
To fortify the security measures related to the handling of personal information, we conduct comprehensive self-audits on a quarterly basis.

③ Restricted Access to Personal Information Processing Systems
We have established necessary controls over access to the Company’s personal information processing database systems by regulating the assignment, modification, and revocation of access privileges. Additionally, we deploy intrusion prevention systems to manage and restrict unauthorized external access.

④ Establishment and Implementation of Internal Management Plans
We have formulated and are executing internal management plans aimed at the secure processing of personal information, ensuring adherence to best practices and regulatory standards.

⑤ Encryption of Personal Information
Personal information, including passwords of users, is encrypted and stored under strict management, ensuring that only the individual concerned can access their data. To safeguard critical data, we employ additional security features, such as encryption of files and transmission data, along with the use of file locking mechanisms.

⑥ Technical Measures Against Hacking and Other Cyber Threats
To mitigate risks of personal information leakage and damage from hacking, computer viruses, and other cyber threats, we have installed and regularly update and inspect security software. The Company’s systems are positioned in zones with controlled external access, where they are monitored and protected through both technical and physical means.

Article 11 (Amendment of the Personal Information Processing Policy)

Should there be any amendments to the Company’s Personal Information Processing Policy, we will consistently disclose both the timeline and the details of such changes. The amendments will be presented in a manner that allows for easy comparison of the pre- and post-change states, enabling customers to readily ascertain the modifications.

Article 12 (Relief Measures for Infringement of Rights)

In case any of the customers require to report or to receive any consultation in relation with personal information infringement, please inquire to the following authorities:
Personal Information Dispute Mediation Committee (www.kopico.go.kr/02-405-5150)
Korea Internet & Security Agency's Personal Information Infringement Report Center (http://privacy.kisa.or.kr / (without regional code)118)
Advanced Criminal Investigation Division, Supreme Prosecutors' Office (www.spo.go.kr / 02-3480-2000)
Cyber Terrorism Response Center, National Police Agency (www.ctrc.go.kr / (without regional code)182)

Article 13 (Responsible and Department In Charge of Personal Information Protection)

The company endeavors to safeguard customers' personal information and, for the purpose of addressing grievances related to such information, has duly appointed responsible departments and a designated individual as the Personal Information Protection Responsible.

Classification	Personal Information Protection Responsible
Affiliation/Post	Information Security Team/ Team Chief
Full Name	OH, YEONG-IK.
Contact	privacy@hanpass.com

Enforcement Date of Personal Information Processing Policy: March, 25, 2025.

오픈뱅킹공동업무 금융정보조회 약관

제1조 (약관의 적용)

오픈뱅킹공동업무를 기반으로 이용기관이 제공하는 서비스를 통해 본인의 금융정보를 확인하고자 하는 개인(이하 “사용자”라 한다)과 한패스㈜(이하 “회사”)에 대하여 본 약관을 적용합니다.

제2조 (용어의 정의)

① “오픈뱅킹공동업무”란 이용기관이 핀테크 서비스를 원활하게 제공할 수 있도록 금융권 및 전자금융업권에서 공동으로 구축하여 운영하는 표준화된 오픈API 플랫폼에 대한 제반 업무를 말합니다.
② “이용기관”이란 금융결제원과 오픈뱅킹공동업무 이용계약을 체결하고 이용승인을 받은 기업을 말합니다.
③ “금융정보조회”란 사용자가 이용기관 서비스를 통해 제5조에 명시하는 본인의 금융정보조회 요청 시 회사가 금융정보를 제공하는 업무를 말합니다.
④ “오픈뱅킹중계센터”란 오픈뱅킹공동업무 시스템을 구축하고 운영하며, 회사와 이용기관을 서로 중계하는 곳으로 금융결제원이 운영합니다.

제3조 (금융정보조회 신청)

① 사용자는 본인의 금융정보를 조회하기 위해서는 이용기관 또는 오픈뱅킹중계센터가 제공하는 웹페이지 또는 앱에서 금융정보조회 신청을 하며, 관련 정보는 회사로 전달됩니다.
② 사용자는 회사가 오픈뱅킹중계센터를 통해 이용기관에게 금융정보를 제공할 수 있도록 금융정보조회 신청 시 「신용정보의 이용 및 보호에 관한 법률」 제32조 제1항에 따라 회원 단위로 서면(전자서명이 있는 전자문서 포함), ARS, 통화녹취 등에 의하여 동의를 하여야 합니다.
③ 사용자는 자신의 정보를 보호받고 관리하기 위해 금융정보제공 동의를 1년 단위로 재동의하여야 합니다.
④ 회사는 「개인정보보호법」 및 「신용정보의 이용 및 보호에 관한 법률」 등에서 정한 바에 따라 사용자의 정보를 관리하여야 하며, 이에 대한 세부적인 내용은 회사의 개인정보처리(취급) 방침에 정한 바에 의합니다. 회사는 개인정보처리(취급) 방침에 대한 세부내용을 홈페이지에 게시하여 사용자가 확인할 수 있도록 합니다.

제4조 (금융정보조회 이용시간)

금융정보조회 이용시간은 연중무휴로 00시10분부터 23시50분까지로 합니다.

제5조 (금융정보 종류)

회사에서 제공하는 금융정보의 종류는 다음 각 호와 같습니다.
1. 선불목록조회 : 사용자 본인이 보유한 선불전자지급수단의 권면 식별자(한패스페이머니 등) 및 상태정보(신청/가입일자 등) 실시간 조회
2. 선불연계정보조회 : 사용자 본인이 보유한 선불전자지급수단의 충전을 위해 연결된 계좌 정보(추심이체 출금동의를 받은 은행명/계좌번호, 충전 기준정보 등) 실시간 조회
3. 선불잔액조회 : 사용자 본인이 보유한 선불전자지급수단 보유 잔액의 구분별(사용자 충전금액, 회사 적립금액, 소멸예정금액 등) 정보 실시간 조회
4. 선불거래내역조회 : 사용자 본인이 보유한 선불전자지급수단의 거래 정보(건별 거래금액, 거래 후 잔액, 거래 상대정보 등) 실시간 조회

제6조 (금융정보제공)

사용자가 이용기관 서비스를 통해 회사로 금융정보조회를 요청하는 경우에는 회사는 별도의 통지 없이 사용자의 금융정보 내역을 오픈뱅킹중계센터로 통지하며, 오픈뱅킹중계센터는 사용자일련번호를 기반으로 이용기관에 사용자의 금융정보를 제공합니다.

제7조 (금융정보조회 중단)

① 회사는 오픈뱅킹공동업무 관련 시스템의 장애 및 유지보수 등 부득이한 사유가 발생한 경우 금융정보조회를 중단할 수 있습니다.
② 제1항에 따라 금융정보조회를 중단하는 경우 회사는 사전에 공지합니다. 다만, 불가피하게 사전 공지를 할 수 없는 경우 회사는 이를 사후 공지할 수 있습니다.

제8조 (금융정보조회 해지)

① 사용자는 금융정보조회 해지를 이용기관 또는 오픈뱅킹중계센터에서 제공하는 웹페이지 또는 앱에서 신청하여야 합니다.
② 회사는 사용자가 다음 각 호에 해당할 때에는 상당한 기간을 정하여 사용자에게 최고하고 그 기간 내에 해당 사유가 해소되지 않는 경우 금융정보조회를 해지할 수 있습니다. 다만, 해당 사유가 해소되는 것이 불가능한 상황이거나 관련 법규에서 별도로 정하는 경우에는 최고하지 아니할 수 있습니다.
1. 사용자가 타인의 정보를 도용하거나 허위내용을 등록한 경우
2. 1년 이상 이용기관으로부터 조회요청이 없는 경우
③ 제2항에 따라 금융정보조회를 해지하는 경우 회사는 사전에 통지하며, 사용자는 이의를 신청할 수 있습니다.

제9조 (면책 사항)

본 약관의 면책 사항에 대해서는 회사의 전자금융거래에 관한 약관을 준용합니다.

제10조 (관할 법원)

본 약관에 따른 금융정보조회와 관련하여 회사와 사용자 사이에 분쟁이 발생하는 경우 관할법원은 민사소송법에서 정하는 바에 따릅니다.

제11조 (약관의 변경)

회사가 본 약관을 변경하고자 하는 경우에는 전자금융거래에 관한 약관의 약관 변경 조항을 준용합니다.

제12조 (다른 약관과의 관계)

① 금융정보조회에는 본 약관 외에도 전자금융거래에 관한 약관이 적용되며, 규정된 내용이 서로 다를 경우 본 약관의 규정이 우선합니다.
② 본 약관과 전자금융거래에 관한 약관에 정하지 않은 사항에 대하여는 다른 약정이 없으면 「전자금융거래법」, 「신용정보의 이용 및 보호에 관한 법률」 등 관계법령을 적용합니다.

부 칙 <제정>

본 약관은 2021년 7월 15일부터 시행합니다.

General Terms and Conditions of Platform Service

Article 1 (Purpose)

The purpose of this General Terms and Conditions is to define the rights, obligations, responsibilities and other required matters between the Company and members in relation to the use of pertinent service provided by HANPASS CO., LTD. (hereinafter referred to as “the Company”).

Article 2 (Definitions)

The definitions of terminologies used in this General Terms and Conditions are shown as follows.
(1) The term of service means all services provided through the web-site (‘www.hanpass.com’) operated by the Company and application (hereinafter referred to as “Hanpass App”) regardless of the terminal (PC, mobile phone and other various wired and wireless devices included) used by the users
(2) The term of user means member and non-member receiving the service provided by the Company in accordance with this General Terms and Conditions by connecting to the homepage of the Company and others
(3) The term of member means the customer that uses the service provided by the Company after entering into the service contract with the Company in accordance with this General Terms and Conditions.
(4) The term of non-member means the customer that uses the service provided by the Company without entering into the service contract in accordance with this General Terms and Conditions, and some of the services provided by the Company may be available to use by non-member, but for some contents, the use may be restricted. In addition, non-member is not applicable for this General Terms and Conditions in principle, but it may be sanctioned for any act barred based on the pertinent laws and regulations.
(5) The term of ID means the e-mail address and so forth that member prescribes and the Company approves for the identification of member and service use.
(6) The term of password means the combination of character or numbers determined by each member for confirming the member consistent to ID and protecting the secret.

Article 3 (Posting and Revision of General Terms and Conditions)

(1) The Company shall post the contents of this General Terms and Conditions in the initial screen of the service for members to easily find out.
(2) The Company shall comply with the 「Act on the Regulation of Terms and Conditions」, 「Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc.」, 「Framework Act of Consumer Protection」, 「Telecommunications Business Act」 and other pertinent laws and regulations, and may revise this General Terms and Conditions within the scope not to violate the foregoing.
(3) In the event this General Terms and Conditions is revised, the date of application and cause of revision shall be specified to notify at least 7 days prior to the application day of the revised General Terms and Conditions to the previous day of the application in accordance with the method of Paragraph 1 together with the current General Terms and Conditions. However, in the event any content of the General Terms and Conditions is modified disadvantageous to users, it shall have the advance reserve period of at least 30 days for the notification.
(4) In the event a member fails to expressly indicate its intent of refusal even after clear notification or notice with the meaning to consider as having the intent of consent if no indication of intent made within 30 days to the member while the Company making the notification or notice for the revised General Terms and Conditions in accordance with the previous Paragraph, the member is deemed as consent to the revised General Terms and Conditions.
(5) In the event a member does not agree to the application of the revised General Terms and Conditions, the Company shall not apply the contents of the revised General Terms and Conditions, and in this case, the member may terminate the service contract. However, in the event there is any special circumstance not to apply the existing General Terms and Conditions, the Company may terminate the service contract with members.
(6) Unless otherwise having separately specified description, the commencement of new service also is applied with this General Terms and Conditions.

Article 4 (Establishment of Service Contract)

(1) The service contract shall be made for membership application by the person intending to be a member (hereinafter referred to as the “applicant of subscription”) by agreeing to the contents of this General Terms and Conditions and the Company accepting the application to establish the same.
(2) In the event the service application is made through the linkage with the external service, such as, KakaoTalk, Facebook or the like, the service contract shall be established by notifying it to the applicant for subscription through e-mail or others by the Company as agreeing to the method to press the confirmation button or consent box by the subscription applicant for various categories that are required for service provision by the Company, such as, this General Terms and Conditions, personal information processing policy and so on.

Article 5 (Application for Service)

(1) The Company shall accept the service use for the application of the applicant of subscription in principle. However, the Company may not consent or terminate the service contract at a later time regarding the application applicable to any of the followings.
1. In the event an applicant of subscription has been disqualified from the membership before under this General Terms and Conditions. However, it shall be an exception in the event the consent of the Company for re-subscription for member is obtained.
2. In the event it is not a real name or a name of someone else is used
3. In the event any false information is recorded or in the event a required information that the Company requires is not recorded
4. In the event a child of less than 14 years of age fails to obtain the consent of legal representative (parent, etc.)
5. In the event the consent is impossible due to the fault of the applicant of subscription or in the event the application is made in violation of pertinent matters defined otherwise
(2) For the application following Paragraph 1, the Company may request for real name confirmation and certification of identity through the specialized institution in accordance with the class of membership.
(3) In the event it is difficult to shall be the normal service for there is any technical or work issues or having no availability of service-related facility, the Company may reserve the consent on the applicant of subscription.
(4) In the event the Company does not approve or reserve the application for membership subscription of the applicant of subscription in accordance with Paragraph 1 or Paragraph 3, the Company shall inform the same to the applicant of subscription in principle.
(5) The period of establishing the service contract shall have the Company to accept the application to subscribe the membership of the applicant of subscription and it is set for the time to reach to the member.
(6) The Company shall classify the member for each grade in accordance with the service time, service frequency and so forth, and the service menu and others shall be classified to have the different class in the service use of member.

Article 6 (Modification of Member Information)

(1) A member may access and revise the personal information at any time through the personal information management screen. However, any revision of real name, ID and others required for service management shall be impossible.
(2) In the event there is any modification on the matter recorded at the time of subscription application, the member shall inform the modified matter by the method of revising the member information and others regarding the Company immediately. Regarding the adverse interest arising from neglecting to modify the member information by the member, the Company shall not bear any responsibility.

Article 7 (Protection of Personal Information)

The Company shall place effort to protect the personal information of members in accordance with the matters set forth under the pertinent laws and regulations. For the protection, use and others of personal information, the pertinent laws and regulations and the personal information processing policy of the Company shall be applied. However, in a site linked other than the official site of the Company shall not apply the personal information processing policy of the Company.

Article 8 (Obligations in Management of ID and Password of Member)

(1) The management responsibility on ID and password of member shall be on the member and it shall not be allowed for a third party to use.
(2) In the event The Company is concerned of the member ID disclosing the personal information or deviating from the anti-social or social norm, or concerned to erroneous identity as the Company or operator of the Company, the use of applicable ID may be restricted.
(3) In the event the ID and password is misused or perceives a third party to use, the member shall notify the same to the Company immediately and follow the guideline of the Company.
(4) In the event the applicable member failing to notify the fact to the Company or having the adverse interest for not following the guideline of the Company even for the notified case under Paragraph 3, the Company shall not bear any responsibility.

Article 9 (Notice to Members)

(1) In the event the Company notifies to the members, it may be made to the e-mail address designated in advance with the Company and member agreed in advance unless otherwise having a separate provision in this General Terms and Conditions.
(2) In the event of notice on entire members, the Company may post it on the bulletin board of the Company for 7 days or longer to substitute to the notice of Paragraph 1.

Article 10 (Obligations of the Company)

(1) The Company shall be refrained from any act barred by the pertinent laws and regulations and this General Terms and Conditions or against the social norm, the Company shall make the effort for providing the continuous and stable service.
(2) The Company shall be equipped with the security system for protecting the personal information (including the credit information) for a member to safely use the service, and the personal information processing policy shall be notified and complied with.
(3) The Company shall be equipped with the personnel and system required for appropriately process the complaint of members or damage relief request arising in relation to the service use.
(4) The Company shall dispose the matter in the event the opinion or discontent raised from the members in relation to the service use is acknowledged as justifiable. For any opinion or discontent raised by the member, the bulletin board may be used or used e-mail or the like to deliver the disposition schedule and result to the member.

Article 11 (Obligations of Members)

(1) A member shall not engage in any of the following conducts.
1. Input of false contents at the time of application or modification
2. Contents of resume registered in the personnel information is recorded differently from the fact or prepare in exaggeration
3. Misuse of someone else’s information
4. Arrears of service charges
5. Modification of information posted by the Company
6. Remittance or posting of information (computer program and others) other than the information determined by the Company
7. Infringement on intellectual property rights, such as, copyright, of the Company and a third party
8. Any act of damaging the honor of the Company and a third party or interfere with the work affairs
9. Any act of disclosing or posting the lewd or violent message, online, voice and information against any social norm to the service
10. Any act of using the service for the purpose of profit without the consent of the Company
11. Other illegal or unjust act
(2) A member shall bear all responsibilities from the conduct of Paragraph 1 by itself, and in the event the member is raised with an issue of defamation or the like from the third party with the cause of data registered by the member, the data shall be deleted first and may notify the member at a later time.
(3) Members shall comply with the precaution, matters notified by the Company and others in relation to the pertinent laws and regulations, provisions of this General Terms and Conditions, service guideline and service-related matters, and shall be refrained from any act interfering with the works of the Company.

Article 12 (Contents of Service)

The Company shall provide the members with the following services.

Service	Operating Entity	Service Details	Others
Job Search	Hanpass International Co., Ltd.	Job application through resumes	Use of location information (Guidance on nearby job information through map view)
Administrative Consultation	Hanpass International Co., Ltd.	Administrative consultation and civil complaint processing for foreigners	Use of location information (Guidance on nearby administrative offices in administrative services)

Article 13 (Authority on Contents)

(1) All rights including the intellectual property rights regarding the contents provided to user shall be reverted to the Company.
(2) The authority on contents provided in the service shall be shown as follows.
1. The Company and/or supplier for the Company shall hold all rights including the intellectual property rights on the contents regardless or registration
2. User may not use the contents to copy, edit, correct, modify, or generate or use for other method of derivative materials without the advance consent of the Company, and may not permit or authority such a right to a third party.
(3) The Company may modify and transfer the posting section of the posted materials for the cause of integration between the policy of service or service operated by the Company.
(4) User agree to allocate or present the advertisement, promotion data, or other contents, data or product for the purpose of promotion to user as part of the service of the Company.
(5) The contents provided to the service and authority for contents shall be shown as follows.
1. Contents provided in the service or available to access through the service use or part of service use shall have full responsibilities and rights to the Company. In the contents, it may include advertisement, promotion material and document, and other sponsoring contents.
2. Contents may be protected in accordance with the ownership or intellectual property right of a third party. User shall not permit the license on the contents to correct, lease, sell, distribute or generate the derivative materials based on the foregoing for all or part of contents.
3. User may be exposed to the risk to encounter certain rude contents or cause unpleasant or inappropriate action by using the service, and in relation to such an exposure, it is understood that the risk following the service use shall be on the user exclusively.
(6) All contents acquired by download, installation or any other method through the service use shall be provided “as is” by the Company and the risk following thereto shall be accepted by users. The Company shall not be held liable for damage on the mobile phone or data loss of software, computer system or other device or software of device for the mobile phone arising from download and/or use of such contents or caused as the result.
(7) The service may include the hyperlink that is linked to the contents resource and service (“external resources”) of a third party including the different web sites. The Company shall not be held liable to any content (including advertisement, product and other data) indicated and/or available to use or shall be to user in such an external resource, without the control over the foregoing, and it shall not be held liable for any damage or loss caused by the user as a result or due to the contents (including the trust of user on possible use, applicability or completeness of contents) indicated and/or available to use or shall be to user in such an external resource.
(8) User shall not remove, conceal or revise the indication of ownership, signal, trademark, service indication, trademark, logo or other indication or modify in different method of ownership of the Company or third party as related to the service, attached or included with the service (including copyright and trademark indication).

Article 14 (Service Hours)

(1) The Company shall provide service for all year long and 24 hours a day in principle. However, for some of services provided in accordance with the contents and characteristics, the time available to use may be designated separately. In this case, the Company shall notify in advance regarding the separate time to use unless otherwise for inevitable situations.
(2) In the event there is any repair and inspection, replacement and breakdown, communication disconnection or equivalent reason for operation of information communication facility, such as, computer, provision of service may temporarily be suspended. In this case, the Company notifies members by the method set forth under Article 9 of this General Terms and Conditions. However, in the event there is no inevitable cause not to be notified in advance, it may make the notification at a later time.
(3) In the event it is required for the provision of service, the Company may implement regular inspection and the time of regular inspection shall follow the matters notified on the service provision screen.
(4) In the event of discontinuation of monetary term or service, or change of technical specifications, the Company may modify the contents of the monetary term or service to be provided by the contract to be executed in the future.

Article 15 (Service Charges)

(1) The Company shall provide the personnel information registration service of the resume and subscription of individual member for free. However, any additional service, such as, option for effective exposure for the resume of specific individual member to any corporate member and others may be provided for fees.
(2) In the event the Company intends to shall be the fee-based service, the Company shall notify for the applicable service charges.
(3) The Company may correct, suspend or modify as required in the policy and operation of the Company for all or part of the service provided for free, and no separate compensation may be made to a member unless otherwise having a special provision in the pertinent laws and regulations.

Article 16 (Modification of Service)

(1) In the event there is a significant reason, the Company may modify all or part of services provided in accordance with the need on operation or technology.
(2) In the event there is any modification in the service contents, method of use, ad time of use, it shall post the cause of modification, contents of service to be modified, date of provision and so forth, on the initial screen of the applicable service.
(3) The Company may correct, suspend or modify as required for the policy and operation of the Company for all or part of the service provided for free, and on this matter, no separate compensation is made to the member unless otherwise having a special provision in the pertinent laws and regulations.

Article 17 (Provision of Information and Posting of Advertisement)

(1) The Company may shall be members by the method of e-mail and others or notification of various information acknowledged as required from the service use of members. However, a member may refuse to receive for any e-mail at any time with the exception of transaction related information, response to customer inquiry and others following the pertinent laws and regulations.
(2) The Company may post the advertisement on the service screen, homepage, e-mail and others in relation to the service operation. Any member receiving an e-mail posted with the advertisement may refuse to receive to the Company.
(3) User shall not take any measure of modification, correction or restriction of any posted material or other information in relation to the service provided by the Company.

Article 18 (Cancellation, Termination, Dormant and Others of Contract)

(1) A member may apply to terminate the service contract at any time through the personal information management screen and others, and the Company process it in accordance with the matters set forth under the pertinent laws and regulations and others. However, for the case of corporate member, it may withdraw after transferring the authority to the ID of person in charge from the ID management menu.
(2) In the event the normal service is not provided due to the responsible cause of the Company, the member may apply to terminate the service contract through the customer center. In this case, any member using the fee-based service may be entitled to the right of refund by the method of deducting the service charges by calculating on daily basis to deduct from the entire amount up to the date of application for termination.
(3) In the event a member terminates the service contract, the Company process all data of members in accordance with the matters set forth by the pertinent laws and regulations and personal information processing policy. However, the materials posted by a member is not automatically deleted that any member that wants to delete shall delete it voluntarily prior to the withdrawal.
(4) In the event a member is applicable to any of the following causes, the Company may restrict or suspend the member qualification.
1. In the event the false contents are registered at the time of applying for subscription
2. In the event of non-payment of proceeds, failing to perform the obligations of member related to the service use
3. In the event it is considered as threatening the normal service operation, such as, interfering with the service use of other persons, abusing the information and so on
4. In the event of committing any act barred by pertinent laws and regulations or this General Terms and Conditions, or against the social norm in using the service
5. In the event it is an act applicable to any of the followings that may interfere with the sound operation or work affairs of service
A. In the event the honor and credibility of the Company is damaged by specifying or distributing the false fact or fact unclear of genuineness in relation to the service operation
B. In the event the operation is interfered with due to insulting, threat or lewd language or behavior to the Company or its officers and employees in the process of service use
C. In the event of interfering with the affairs of the Company by habitually cancelling the service without justifiable cause
D. Other case of disrupting the transaction order of service
E. In the event the operation of user following this General Terms and Conditions is breached
(5) In the event the same conduct is repeated twice or more after the Company restricts and suspends the member qualification, and the cause is not corrected within 30 days, the Company may disqualify the membership.
(6) In the event the member has no login record for the recent year, the Company may convert the account of the member into the dormant account or delete the account.

Article 19 (Restriction of Use, Etc.)

(1) In the event a member breaches the obligation under this General Terms and Conditions or interferes with the normal operation of the service, it may engage in service use restriction measure of warning, temporary suspension, suspension of perpetual use, and so forth depending on its severity.
(2) Notwithstanding the previous Paragraph, in the event the Company misuses the approval of name of someone else by the member (name, e-mail, etc.), the perpetual service suspension may be made immediately in the event the pertinent laws and regulations, such as, the Copyright Act and so forth, to provide the illegal program or engage in operation disruption, illegal communication and hacking, distribution of malicious program, act in excess of connection authority and so forth. When rendering the measure of perpetual service suspension following this Paragraph, various benefits acquired through the service use shall be extinguished automatically and the Company shall not separately compensate it.
(3) In the event the Company does not login for 6 months or longer continuously, the service use may be restricted for the efficiency of operation and protection of member information.
(4) Within the scope of restricting the use under this Article, the Company shall follow the internal operation policy for the conditions and detailed contents of the restriction.
(5) In the event the service use is restricted or the contract is terminated in accordance with this Article, the Company shall notify the members by the method set forth under Article 9 of this General Terms and Conditions.
(6) A member may petition for objection in accordance with the procedure set forth by the Company regarding the service restriction following this Article. At this time, in the event the objection is acknowledged as justifiable, the Company may resume the use of service immediately.

Article 20 (Restriction on Responsibility)

(1) In the event the service is unable to provide due to the natural disaster or applicable force majeure, the Company shall be exempted from the responsibility on the service provision.
(2) The Company shall not bear any responsibility on the service disability from the fault of the member.
(3) The Company shall bear no liabilities at all regarding the contents of information, data and fact for reliability and accuracy posted in relation to the service by members.
(4) The Company shall be exempted with the responsibility for the case of transaction and exchange with the service as a medium between the members or member and third party.
(5) The Company shall not bear any responsibility unless otherwise having a special provision in the pertinent laws and regulations in relation to the service use provided for free.

Article 21 (Applicable Law and Jurisdiction of Adjudication)

(1) This General Terms and Conditions shall have the laws of the Republic of Korea as the applicable law.
(2) In the event there is any dispute between the Company and member, the Seoul Central District Court shall be the court with the jurisdiction over the trial.

SUPPLEMENTARY RULE

Article 1 (Date of Implementation) This General Terms and Conditions shall be implemented from February 21, 2025.

General Terms and Conditions for Location-based Service

Article 1 (Purpose)

The purpose of this General Terms and Conditions is to define the rights, obligations, responsibilities and other necessary matters between the subject body of personal location information (hereinafter referred to as “the customer”) that uses the location-based service and the Company regarding the location-based service provided by HANPASS CO., LTD. (hereinafter referred to as “the Company”).

Article 2 (Validity and Modification of General Terms and Conditions)

(1) This personal information Terms and Conditions shall be effective by the customer consenting to this General Terms and Conditions and registering as the customer of the location-based service in accordance with the procedure set forth by the Company.
(2) The Company may revise the General Terms and Conditions for the purpose of reflecting the modified matters of laws or location-based service.
(3) In the event this General Terms and Conditions is modified, the Company shall be deemed as agreed to the General Terms and Conditions in the event the modified matter is posted on the homepage of the Company or notify through e-mail and in the event the intent of refusal is not indicated or the customer uses the service continuously after 7 days from the implementation day of the revised General Terms and Conditions.
(4) However, in the event the revised contents have grave modification of the Company right, it shall be informed through the method specified under Paragraph 3 at least 30 days in advance.

Article 3 (Rules Beside General Terms and Conditions)

Matters not specified on the General Terms and Conditions shall follow the provisions of the Act on Protection, Use, Etc. of Location Information, Personal Information Protection Act, Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc., Framework Act on Electronic Commerce, Telecommunications Business Act and other pertinent laws and regulations, General Terms and Conditions of the Company, personal information processing policy and instruction separately set forth by the Company.

Article 4 (Contents of Service)

The Company shall be the location-based service by using the current location information of the Company as collected from the location information business (telecommunication company).

Article 5 (Service Charges)

The location-based service provided by the Company shall be provided for free to the customer that uses the service of the Company. However, the data communication charge occurring when using the wireless service shall be separately charged and it shall follow the policies of each mobile telecommunication company where the customer subscribed.

Article 6 (Restriction and Suspension of Service Use)

(1) In the event the location-based service is unable to maintain on the ground of pertinent situations, such as the policy modification or modification of pertinent laws and regulations, all or part of the location-based service may be modified, restricted or suspended.
(2) In the event of the followings, the Company may restrict or suspend the service use of the customer.
1. In the event the customer interferes with the service operation of the Company with intentional or gross negligence
2. In the event it is inevitable due to inspection, repairing or work on service facility
3. In the event a key telecommunications service provider defined under the Telecommunications Business Act suspends the electric telecommunication service
4. When there is an interference with the service use due to the national emergency crisis, disability of facility or overflowing of service use
5. In the event it is acknowledged as inappropriate for the Company to continue the service provision due to other material causes
(3) In the event the Company restricts or suspends the service use under Paragraph 1 and Paragraph 2, the cause and restriction period shall be notified in advance through the homepage or use the e-mail to notify.

Article 7 (Rights of Subject Body of Personal Location Information)

(1) The customer may reserve all or part of the consent on collection, use and provision of personal location information at any time.
(2) The customer may withdraw all or part of the consent on collection, use and provision of personal location information at any time. In this case, the Company shall dispose the confirmation date for the fact of collection, use, provision of the individual location information and location information of the scope withdrawn without delay.
(3) The customer may request the temporary suspension of collection, use and provision of location information, and in this case, the Company shall not reject it and prepare the technical means to satisfy the foregoing.
(4) The customer may request for access or notification on the following data to the Company, and in the event there is any error in the applicable data, it may request for correction. In this case, the request shall not be rejected without the justifiable cause.
1. Confirmation data of the fact of collection, use and provision of the location information for the customer
2. Reason and contents regarding the personal location information of the customer provided to a third party under the provision of the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc. or other pertinent laws and regulations
(5) The customer may request the Company for exercising the right through the customer center of the Company.

Article 8 (Use or Provision of Personal Location Information)

(1) In the event the location-based service is provided by using the personal location information, the Company shall notify it on the General Terms and Conditions to obtain the consent.
(2) The Company shall not provide the personal location information to any third party without the consent of the customer, and in the event it is provided to the third party, it shall be notified to the customer for the person to be provided and purpose of provision and obtain the consent in advance.
(3) In the event the personal location information is provided to a third party designated by the customer, the Company shall notify immediately with the person to be provided, date of provision and purpose of provision to the Company for each time by the communication terminal collecting the personal location information.

Service(Operating Entity)	Recipient	Purpose of Provision	Location Information Provided
Job Search (HanpassInternational Co., Ltd.)	Naver Corporation	Guidance on nearby job information through map view in job services	Job Address, Latitude, Longitude
Administrative Consultation (HanpassInternational Co., Ltd.)	Naver Corporation	Guidance on nearby administrative offices in administrative services	Administrative Office Address, Latitude, Longitude

(4) However, in the following cases, it shall be notified vis the communication terminal, e-mail address, posting online and others as specified and designated by the customer.
1. In the event applicable telecommunication terminal collecting the personal location information is not equipped with the receiving function of text, voice or video
2. In the event the request is made previously to notify via communication terminal e-mail address, posting on online, or others beside the communication terminal that collected the personal location information of the customer
(5) Based on Article 16 (2) of the Act on the Promotion, Use, Etc. of Location Information, the Company shall automatically record and preserve the confirmation data of collection, use and provision of personal location information and the applicable data shall be kept for 6 months.

Article 9 (Purpose of Possession and Period of Possession of Personal Location Information)

The Company shall possess the personal location information as follows for providing the location-based service.
(1) During the minimal period required for providing the location-based service following Article 4 of this General Terms and Conditions, the personal location information shall be held and used.
(2) The Company shall dispose the personal location information from the most location-based service after the disposable or temporary use. However, upon request, in the event of the service storing the location information together with the data generated by the use of specific application function, such as, location information attachment function, the personal location information shall be stored during the period to store the data that is generated by the use of applicable function.
(3) Notwithstanding Paragraphs 1 and 2, in the event there is a justifiable cause to hold in accordance with the Act on the Promotion, Use, Etc. of Location Information or other pertinent laws and regulations, it shall be followed.

Article 10 (Exception to the Application)

Any child of less than 14 years of age shall not be the subject of subscription of the membership of the Company. Therefore, the Company shall not be held liable for any civil complaint or the like related to the location-based service regarding the users of less than 14 years of age.

Article 11 (Damage Compensation)

In the event any damage is inflicted from any conduct in violation of Article 15 and Article 26 of the Act on the Promotion, Use, Etc. of Location Information, the customer may request for damage compensation to the Company. The Company shall not be exempted for liabilities in the event it could not prove that it does not commit an intentional or negligent act.

Article 12 (Exemption)

(1) In the event it is any of the following cases that the Company is unable to shall be the location-based service, it shall not bear the liability for the loss inflicted to the customer thereof.
1. In the event it is under the natural disaster or a force majeure situation applicable thereto
2. In the event there is any intentional service interference of a third party that entered into the service affiliation contract with the Company for providing the location-based service
3. In the event there is any disability in using the location-based service due to the fault of the customer
4. In the event it is attributable to the cause without the intentional or negligent act of the Company except sub-paragraph 1 through 3
(2) The Company does not guarantee the location-based service and the reliability and accuracy of information, data and fact posted on the location-based service, and regarding the damages of the Company arising thereof, it shall not bear the responsibility.

Article 13 (Dispute Resolution and Others)

(1) The Company shall duly cooperate to the Company for the dispute resolution related to the location information.
(2) In the event the dispute is not resolved in the consultation of the previous Paragraph, the Company and the customer may apply for the establishment to the Korea Communication Commission under the provision of Article 28 of the Act on the Promotion, Use, Etc. of Location Information or apply for the arbitration to the Personal Information Dispute Resolution Commission under the provision of Article 43 of the Personal Information Protection Act.

Article 14 (Information on Responsible Person of Location Information)

The Company designates any person who may appropriately manage and protect the location information and may have the practical responsibility to flawlessly dispose the customer complains as the responsible person of location information and the responsible person of location information is the head of the department that shall be the location-based service and its name and contact are shown as follows.

Name: Jeongsang Kim, Director
TEL: 02-3409-1540, privacy@hanpass.com
Inquiry on customer support: 02-3409-1545, contact@hanpass.com

SUPPLEMENTARY RULE

Article 1 (Date of Implementation) This General Terms and Conditions shall be implemented from February 25, 2025.