Chapter 1: General Provisions

Article 1 (Purpose)

1. The purpose of these Terms and Conditions is to stipulate the terms and conditions of use and procedures of all services provided by the Abilists Service (hereinafter referred to as "Service"), the rights, obligations, responsibilities and other necessary matters of users and Abilists.

Article 2 (Effect and change of terms and conditions)

1. If you agree to the terms and conditions of the Abilists Services, these Terms and Conditions will take precedence over the act of providing the Abilists Services and your use of the Services.
2. The Abilists Service may change these terms and conditions without prior notice, and the changed terms and conditions will be notified within the Abilists site or notified to members through e-mail, and will take effect upon notification.
   If the user does not agree to the changed terms, the user cannot use the Abilists, and continued use is considered as consent to the change of the terms.

Article 3 (Rules other than the terms and conditions)

1. Matters not specified in these terms and conditions are subject to the provisions of the Basic Telecommunications Act, the Telecommunications Business Act, the Deliberation Regulations of the Information and Communication Ethics Committee, the Information and Communication Ethics Code, the Program Protection Act and other related laws.

Article 4 (Definition of Terms)

The definitions of terms used in this agreement are as follows.

1. User : A person who receives the services provided by the Abilists service in accordance with these terms and conditions from the installed Abilists.
2. Registering : Installing the ROOT.war file provided by the Abilists site, agreeing to these terms and conditions, and completing the service use contract.
3. Member : A person who has a partner ID by providing personal information to the Abilists API and can use the services provided by the Abilists service.
4. Password : A combination of letters and numbers selected by the user himself to check whether the user and member ID match in the installed Abilists and to protect his/her confidentiality in communication.
5. Delete : The act of a user deleting Abilists and terminating the use contract.

Chapter 2 Provision and use of services

Article 5 (Establishment of use contract)

1. The use contract is established when the applicant installs the ROOT.war file provided by Abilists online and agrees to the terms of use, and the application for use is completed.
2. The Abilists Service can cancel the license for use in the following cases.
   1. ① When applying using another person's name
   2. ② When the contents of the application for use contract are falsely entered or applied
   3. ③ When you interfere with other people's use of the Abilists service or steal the information
   4. ④ In the event that the Abilists Service is prohibited by these Terms and Conditions
   5. ⑤ When the application requirements set by other Abilists service are insufficient

Article 6 (Consent to the use of member information)

1. Members' personal information is protected by the Act on the Protection of Personal Information of Public Organizations.
2. Member information of the installed Abilists service is used, managed, and protected as follows.
   1. ① Use of personal information : The Abilists Service does not disclose or distribute the member's personal information collected in connection with the provision of the service to a third party without the consent of the person.
      However, if there is a request from a state agency according to laws such as the Framework Act on Telecommunications, if there is a request for investigation of a crime, or if there is a request from the Information and Communication Ethics Committee, or if there is a request in accordance with the procedures stipulated in other relevant laws, This is not the case if you disclose personal information you provided to the Abilists Service by yourself.
   2. ② Management of personal information : In order to protect and manage your personal information, you may modify/delete your personal information from time to time in the personal information management of the service.
   3. ③ Protection of personal information : Only you can view/modify/delete your personal information, and it is managed entirely by your ID and password.
      Therefore, do not give out your ID and password to others, and be sure to log out at the end of the job.
3. When a member applies for use in accordance with these terms and conditions, it is deemed to agree that the installed Abilists Service collects and uses the member information described in the application form.

Article 7 (User's information security)

1. From the moment the applicant completes the subscription process for the installed Abilists service, you are responsible for maintaining the confidentiality of the information entered, and the member is responsible for all consequences of using the member's ID and password.
2. Members are responsible for all management of ID and password, and if they discover that the member's ID or password has been used illegally, they must immediately report it to the Abilists Service (Administrator). All responsibility for failure to report is the responsibility of the member. The Abilists Site is not responsible for any damage or loss resulting from the use of information about you by a third party by not terminating.

Article 8 (Stop service)

1. The Abilists Service may arbitrarily restrict or suspend the use of the service if the user violates the terms of this agreement.

Article 9 (Service change and termination)

1. The Abilists Service is not responsible for the profits or losses you expect from using the service or for damages caused by data obtained through the service, and regarding the contents of the information, data, facts, reliability, accuracy, etc. Is not responsible. In addition, we are not responsible for any damages.

Article 10 (Post copyright)

1. You have the right to the content of any posts you post.
2. The Abilists Service reserves the right to edit and move posted content without prior notice, and according to the bulletin board operating principle, the administrator can delete it without prior notice.
3. 3. You are solely responsible for any civil or criminal liability arising from your postings infringing on the copyrights of others.

Chapter 3 Duties and responsibilities

Article 11 (Obligations of Abilists Service)

1. Abilists Service does not disclose or distribute members' personal information to others without their consent. However, this is not the case if there is a request from the relevant state agency, etc. in accordance with related laws such as telecommunications related laws.

Article 12(Member's obligations)

1. When registering as a member, you must accurately fill in the required information. In addition, the information about you that has already been provided must be maintained and updated to be accurate, and members must not allow their ID and password to be used by a third party.
2. Members may not perform any commercial activities using the service without prior consent of the Abilities service.
3. Required information according to the license to use must be accurately filled out. Administrators should not allow third parties to use their ID and password for the Abilities API.

Chapter 4 Etc

Article 13 (No transfer)

1. Members cannot transfer or donate the right to use the service or other status in the contract.

Article 14 (Compensation for damages)

1. Abilist's service is not responsible for any damage to the member in relation to the service provided free of charge.

Article 15 (Disclaimer)

1. The Abilities Service does not approve, disagree, or modify opinions expressed by members or third parties. Abilities are not responsible for any gains or damages incurred by members depending on the information contained in the service. We are not responsible for any financial transactions, and we are not responsible for the profits expected by members in relation to the use of the service.

Article 16 (Jurisdiction)

1. The law of the Republic of Korea applies to disputes regarding the use of services between the Abilities Service and users, and any lawsuit arising out of this dispute is brought to the court of the Republic of Korea.

I. SERVICES PERSONAL INFORMATION DATA PROCESSING TERMS

Abilists treats all Services Personal Information in accordance with the terms of Sections I and III of this Policy and Your order for Services.

In the event of any conflict between the terms of this Services Privacy Policy and any privacy terms incorporated into Your order for Services, including an Abilists Data Processing Agreement, the relevant privacy terms of Your order for Services shall take precedence.

1. Performance of the Services

Abilists may process Services Personal Information for the processing activities necessary to perform the Services, including for testing and applying new product or system versions, patches, updates and upgrades, and resolving bugs and other issues You have reported to Abilists.

2. Customer instructions

You are the controller of the Services Personal Information processed by Abilists to perform the Services. Abilists will process your Services Personal Information as specified in Your Services order and Your documented additional written instructions to the extent necessary for Abilists to (i) comply with its processor obligations under applicable data protection law or (ii) assist You to comply with Your controller obligations under applicable data protection law relevant to Your use of the Services. Abilists will promptly inform You if, in our reasonable opinion, Your instruction infringes applicable data protection law. Additional fees may apply.

3. Rights of individuals

You control access to Your Services Personal Information by Your end users, and Your end users should direct any requests related to their Services Personal Information to You. To the extent such access is not available to You, Abilists will provide reasonable assistance with requests from individuals to access, delete or erase, restrict, rectify, receive and transmit, block access to or object to processing of Services Personal Information on Abilists systems(API).

4. Security and confidentiality

Abilists has implemented and will maintain technical and organizational measures designed to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Services Personal Information. These measures, which are generally aligned with the ISO/IEC 27001:2013 standard, govern all areas of security applicable to the Services, including physical access, system access, data access, transmission, input, security oversight, and enforcement.

Abilists employees are required to maintain the confidentiality of personal information. Employees' obligations include written confidentiality agreements, regular training on information protection, and compliance with company policies concerning protection of confidential information.

Including regarding data retention and deletion, available for review.

5. Incident Management and data breach notification.

Abilists promptly evaluates and responds to incidents that create suspicion of or indicate unauthorized access to or handling of Services Personal Information.

If Abilists becomes aware and determines that an incident involving Services Personal Information qualifies as a breach of security leading to the misappropriation or accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Services Personal Information transmitted, stored or otherwise processed on Abilists systems(API) that compromises the security, confidentiality or integrity of such Services Personal Information, Abilists will report such breach to You without undue delay.

As information regarding the breach is collected or otherwise reasonably becomes available to Abilists and to the extent permitted by law, Abilists will provide You with additional relevant information concerning the breach reasonably known or available to Abilists.

6. Subprocessors

To the extent Abilists engages third party subprocessors to have access to Services Personal Information in order to assist in the provision of Services, such subprocessors shall be subject to the same level of data protection and security as Abilists under the terms of Your order for Services. Abilists is responsible for its subprocessors’ compliance with the terms of Your order for Services.

Abilists maintains lists of Abilists Affiliates and subprocessors that may process Services Personal Information. Additional information is available to You via Abilists Help (http://www.abilists.com/home/help)

7. Cross-border data transfers

Abilists may transfer, access and store Services Personal Data globally as necessary to perform the Services.

To the extent such global access involves a transfer of Services Personal Information originating from the European Economic Area and the United Kingdom (“EEA”) and/or Switzerland to Abilists affiliates or third party subprocessors located in countries outside the EEA or Switzerland that have not received a binding adequacy decision by the European Commission or by a competent national EEA data protection authority, such transfers are subject to binding and appropriate transfer mechanisms that provide an adequate level of protection in compliance with applicable data protection law, such as EU Model Clauses.

8. Deletion or return of Services Personal Information

Except as otherwise specified in an order for services or required by law, upon termination of services or at your request, Abilists will delete your production customer data located on Abilists computers in a manner designed to ensure that they cannot reasonably be accessed or read, unless there is a legal obligation imposed on Abilists preventing it from deleting all or part of the data. You may consult with your Abilists services contact for additional information on data deletion prior to service completion.

II. SYSTEMS OPERATIONS DATA PROCESSING TERMS

1. Responsibility and purposes for processing personal information

Abilists Corporation and its affiliated entities are responsible for processing personal information that may be incidentally contained in Systems Operations Data in accordance with Sections II and III of this Policy. Please select a region and country to view the registered address and contact details of the Abilists entity or entities located in each country.

We may collect or generate Systems Operations Data for the following purposes:

• a) to help keep our Services secure, including for security monitoring and identity management;
• b) to investigate and prevent potential fraud or illegal activities involving our systems and networks, including to prevent cyber-attacks and to detect bots;
• c) to administer our back-up disaster recovery plans and policies;
• d) to confirm compliance with licensing and other terms of use (license compliance monitoring);
• e) for research and development purposes, including to analyze, develop, improve and optimize our Services;
• f) to comply with applicable laws and regulations and to operate our business, including to comply with legally mandated reporting, disclosure or other legal process requests, for mergers and acquisitions, finance and accounting, archiving and insurance purposes, legal and business consulting and in the context of dispute resolution.

For personal information contained in Systems Operations Data collected in the EU, our legal basis for processing such information is our legitimate interest in performing, maintaining and securing our products and services and operating our business in an efficient and appropriate manner. Personal information may also be processed based on our legal obligations or legitimate interest to comply with such legal obligations.

2. Sharing personal information

Personal information contained in Systems Operations Data may be shared throughout Abilists's global organization. A list of Abilists entities is available as indicated above.

We may also share such personal information with the following third parties:

• third-party service providers (for example IT service providers, lawyers and auditors) in order for those service providers to perform business functions on behalf of Abilists;
• relevant third parties in the event of a reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings);
• as required by law, such as to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to government requests, including public and government authorities outside your country of residence, for national security and/or law enforcement purposes.

When third parties are given access to personal information contained in Systems Operations Data, we will take the appropriate contractual, technical and organisational measures to ensure, for example, that personal information is only processed to the extent that such processing is necessary, consistent with this Privacy Policy and in accordance with applicable law.

3. Cross-border data transfers

If personal information contained in Systems Operations Data is transferred to an Abilists recipient in a country that does not provide an adequate level of protection for personal information, Abilists will take measures designed to adequately protect information about Users, such as ensuring that such transfers are subject to the terms of the EU Model Clauses.

4. Security

Abilists has implemented appropriate technical, physical and organisational measures in accordance with the Abilists Corporate Security Practices designed to protect personal information against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorised disclosure or access as well as all other forms of unlawful processing (including, but not limited to, unnecessary collection) or further processing.

5. User choices

To the extent provided under applicable laws, Users may request to access, correct, update or delete personal information contained in Systems Operations Data in certain cases, or otherwise exercise their choices with regard to their personal information by filling out an inquiry form.

III. COMMUNICATIONS AND NOTIFICATIONS TO CUSTOMERS AND USERS

1. Legal requirements.

Abilists may be required to provide access to Services Personal Information and to personal information contained in Systems Operations Data as required by law, such as to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, protect Your or a User’s safety or the safety of others, investigate fraud, or respond to government requests, including public and government authorities outside Your or a User’s country of residence, for national security and/or law enforcement purposes.

Abilists will promptly inform You of requests to provide access to Services Personal Information, unless otherwise required by law.

2. Global Data Protection Officer

Abilists has appointed a Data Protection Officer. If You or a User believe that personal information has been used in a way that is not consistent with this Privacy Policy, or if You or a User have further questions, comments or suggestions related to Abilists’s handling of Services Personal Information or personal information contained in Systems Operations Data, please contact the Data Protection Officer by filling out an inquiry form.

Written inquiries to the Data Protection Officer may be addressed to:

3. Dispute resolution or filing a complaint

If You or a User have any complaints regarding our compliance with our privacy and security practices, please contact us first. We will investigate and attempt to resolve any complaints and disputes regarding our privacy practices.

Users that have an unresolved privacy or data use concern that we have not addressed satisfactorily, can contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

Under certain conditions, specified on the Privacy Shield website, Users may invoke binding arbitration when other dispute resolution procedures have been exhausted. Users also have the right to file a complaint with a competent data protection authority if they are a resident of a European Union member state.

4. Changes to this Services Privacy Policy

This Privacy Policy was last updated on March 7, 2019. However, the Services Privacy Policy can change over time, for example to comply with legal requirements or to meet changing business needs. The most up-to-date version can be found on this website. In cases of material changes, we will also inform you in another appropriate way (for example via a pop-up notice or statement of changes on our website) prior to the changes becoming effective.