Privacy Policy

Panmnesia Inc. (hereinafter the “Company”) lawfully processes and safely manages personal information in compliance with the 「Personal Information Protection Act」 and other applicable laws and regulations. In accordance with Article 30 of the 「Personal Information Protection Act」, the Company establishes and discloses this Privacy Policy to inform job applicants and individuals who make inquiries through the website (hereinafter “Data Subjects”) of the procedures and standards for processing personal information and to ensure that related grievances are promptly and appropriately addressed.

1. Purpose of Processing Personal Information, Collected Information, and Retention Period

The Company does not use personal information for any purposes other than those originally specified. If the purpose of use changes, the Company will obtain separate consent in accordance with Article 18 of the Personal Information Protection Act or take necessary measures as required under Articles 15(3) and 17(4) of the same Act.

1. The Company processes and retains personal information only for the period required by law or for the period agreed by the Data Subjects.

2. The categories of personal information processed by the Company, along with the purposes of use and retention periods, are as follows.

Job Applicants

Categories of Personal Information Collected and UsedPurpose of Collection and UseRetention Period

(Required) Name, phone number, email, application form, position applied for, affiliated institution (school or company), GPA, academic transcript, preferred work location (Optional) Date of birth, address, educational background, photo, video, qualifications, work experience, portfolio, career description, expected salary, previous salary, referrer, application route, and any other unstructured information uploaded directly by the applicant or through attachments that can identify the individual

Delivery of notices, recruitment process management, response to related inquiries, management of the talent poolFor three (3) years after application submission, unless the Data Subject requests deletion, in which case the information will be promptly destroyed.

Website Inquirers

Categories of Personal Information Collected and UsedPurpose of Collection and UseRetention Period

Name, email, company, job title, inquiry details, areas of interest

Responding to inquiries and managing inquiry historyFor three (3) years after receipt of the inquiry, unless the Data Subject requests deletion, in which case the information will be promptly destroyed.

3. In accordance with the 「Personal Information Protection Act」, the Company may process personal information without the consent of the Data Subject under the following circumstances:

Legal Basis for Processing Categories of Personal Information
Where it is necessary to achieve the Company’s legitimate interests and such interests clearly override the rights of the Data Subject (Article 15(1)(6) of the 「Personal Information Protection Act」)Video footage recorded by the Company’s video surveillance devices

2. Procedures and Methods for Destroying Personal Information

1. 1. The Company will promptly delete personal information when becomes unnecessary, such as when the retention period ends or the purpose for collecting it has been achieved.

2. 2. If the personal information must be retained to comply with applicable laws, despite the expiration of retention period agreed by the Data Subject or the achievement of the processing purpose, the Company will transfer the relevant personal information to a separate database or store it in a different location for secure retention.

3. 3. The Company will monitor the personal information that needs deletion and delete it under the approval of the Company’s Chief Privacy Officer.

4. 4. Personal information stored in electronic format will be securely and permanently deleted, and personal information recorded on paper will be shredded.


3. Personal Information Security Measures

The Company takes the following measures to ensure the security of personal information:

1. Physical measures: Access control to personal information through granting, modifying, or revoking permissions to PCs and files that process personal information.

2. Technical measures: Management of access rights to personal information processing systems, maintenance and inspection of access logs, and installation of security programs.

3. Administrative measures: Establishment and implementation of internal management plans, regular employee training, and other organizational measures.


4. Rights, Obligations, and Exercise of Data Subjects

1. Data Subjects may exercise their rights related to the protection of personal information, including the right to access, correct or delete personal information, suspend its processing, or withdraw consent, in accordance with applicable laws and regulations.

2. The exercise of such rights may be made to the Company via written request, telephone, email, fax, or online channels, in accordance with Article 41(1) of the 「Enforcement Decree of the Personal Information Protection Act」, and the Company will take action without delay.

3. The rights in Paragraph 1 may also be exercised through a legal representative of the Data Subject. In this case, a power of attorney must be submitted to the Company in accordance with [Annex 11] of the 「Public Notice on Personal Information Processing Method.」

4. The Data Subject’s right to request access to or suspension of the processing of personal information may be limited pursuant to Articles 35(4) and 37(2) of the 「Personal Information Protection Act」.

5. The Data Subject may not request the deletion of their personal information, if its retention is required under applicable laws or regulations.

6. The Company will verify whether the individual exercising these rights is the Data Subject or a duly authorized representative.

7. The Company will promptly take action in accordance with applicable laws and regulations regarding the exercise of Data Subject rights.


5. Chief Privacy Officer

1. The Company designates the following Chief Privacy Officer and responsible department to protect Data Subjects’ personal information and to handle complaints and remedies related to the processing of personal information.

Chief Privacy OfficerWoojin Choi (Primary), Sangwon Lee (Deputy)
Responsible DepartmentNext-Generation Silicon and Research Campus
Contact+82 42-822-5575

2. 2. Data Subjects may submit requests to access their personal information, pursuant to Article 35 of the 「Personal Information Protection Act」, to the department designated in Paragraph 1.

3. 3. Data Subjects may contact the Chief Privacy Officer or the designated department(s) regarding inquiries, complaints, or requests for remedies related to personal information protection.


6. Installation and Operation of Video Information Processing Devices

The Company installs and operates video information processing devices as follows:

1. Legal basis and purpose of installation: To prevent crime, ensure facility safety, and prevent fire.

2. Number, location, and coverage of devices:

Next-Generation Silicon and Research Campus: 6 devices installed (covering building entrances and surrounding areas)

Human Resource Development Institution: 16 devices installed (covering building entrances and surrounding areas)

Advanced Product Engineering Campus: 1 device installed (covering office entrance)

3. Responsible officers, departments, and access rights to video information:

Next-Generation Silicon and Research Campus: Director Sangwon Lee

Human Resourece Development Institution: Director Sangwon Lee

Advanced Product Engineering Campus: CTO Woojin Choi

4. Recording time, retention period, storage location, and processing method:

Recording time: 24 hours

Retention period: Up to 30 days from recording (may be shortened depending on storage capacity)

5. Storage locations:

Next-Generation Silicon and Research Campus: 22th floor

Human Resourece Development Institution: 4th floor

Advanced Product Engineering Campus: 10th floor

6. Method and place of reviewing video information: Requests must be made to the officer responsible.

7. Access requests by Data Subjects: Requests for access or confirmation of personal video information must be submitted using the Personal Video Information Access/Existence Request Form. Access is granted only if the requester is the individual recorded or if access is clearly necessary to protect the individual's life, body, or property.

8. Technical, administrative, and physical measures to protect video information: The Company implements internal management plans, access control and restriction, secure storage and transmission technologies, recordkeeping to prevent tampering, and secure storage facilities with locking mechanisms to ensure the safety of personal video information.


7. Installation, Operation, and Refusal of Automatic Data Collection Tools

1. The Company uses “cookies,” which are small text files stored on a visitor's hard drive by the server operating the Company's website. Cookies are used to store and retrieve visitor information as needed to support website operation.

2. Visitors have the right to choose whether to allow the use of cookies. Browser settings may be adjusted to permit or block cookies.

Managing cookies in web browsers

Chrome: Select the ⋮ icon at the top right > New Incognito Window (shortcut: Ctrl+Shift+N)

Edge: Select the … icon at the top right > New InPrivate Window (shortcut: Ctrl+Shift+N)

Managing cookies in mobile browsers

Chrome: Select the ⋮ icon at the top right > New Incognito Tab

Safari: Device Settings > Safari > Advanced > Block All Cookies

Samsung Internet: Tap the “Tabs” icon at the bottom > Enable Secret Mode > Start

3. The Company uses Google Analytics, a service provided by Google, Inc. (“Google”), to analyze visitors' use of its website. The Company transmits visitor's IP addresses to Google servers in the United States after removing the last octet of the IP address to de-identify the data. Google processes the information on behalf of the Company for the sole purpose of analyzing website usage, and in this process does not handle any personally identifiable information. Visitors who do not wish their data to be processed by Google may download and install the add-on for their web browser available at: https://tools.google.com/dlpage/gaoptout. For more information on how Google processes data, please visit: https://www.google.com/analytics/learn/privacy.html


8. Remedies for Infringement of Rights

1. Data Subjects may seek dispute resolution or consultation from the Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Center of the Korea Internet & Security Agency (KISA) in order to obtain relief for personal information infringements. For other reports or consultations regarding personal information infringement, please contact the institutions below:

Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)

Personal Information Infringement Report Center (KISA): 118 (privacy.kisa.or.kr)

Supreme Prosecutors' Office: 1301 (www.spo.go.kr)

Korean National Police Agency: 182 (ecrm.cyber.go.kr))

2. A person whose rights or interests have been infringed upon by a disposition or omission made by the head of a public institution in response to a request under the provisions of Articles 35 (Access to Personal Information), Article 36 (Correction/Deletion of Personal Information), and Article 37 (Suspension of Processing Personal Information) of the Personal Information Protection Act may apply for an administrative appeal in accordance with the Administrative Appeals Act.

Central Administrative Appeals Commission: 110 (www.simpan.go.kr)


9. Amendments to this Privacy Policy

This Privacy Policy is effective as of October 16, 2025. The Policy may be amended as necessary, and any amendments will be disclosed in accordance with applicable laws and regulations.