Privacy Policy

Privacy Policy Autronic Co., Ltd. (hereinafter referred to as the “Company”) establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act in order to protect the personal information of “data subjects,” meaning persons who can be identified by the processed information and who are the subjects of such information, and to handle related grievances promptly and smoothly.

[Article 1]

Purpose of Processing Personal Information The Company collects and processes personal information for the following purposes. Personal information being processed will not be used for purposes other than those stated below. If the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act. The purposes of processing personal information are as follows. Handling customer email inquiries Records related to contracts, payment settlement, and transaction disputes

[Article 2]

Processing and Retention Period of Personal Information Personal information is retained until customer email inquiries and new supplier proposals are completed. Records related to contracts, payment settlement, and transaction disputes are separately retained in accordance with relevant laws.

[Article 3]

Provision of Personal Information to Third Parties The Company processes personal information collected under this Policy only within the scope specified in Article 1 (Purpose of Processing Personal Information). The Company provides collected personal information to third parties only when applicable under Article 17 of the Personal Information Protection Act, such as with the consent of the data subject or where specially provided by law.

[Article 4]

Method of Consent for Collection and Use of Personal Information When collecting personal information, the Company informs users of the purpose of collection and use, retention period, and related matters in accordance with applicable laws, and obtains consent or provides notice through this Privacy Policy. Users may consent to the Company’s collection and use of personal information under this Privacy Policy by choosing one of the following methods. Clicking a consent button or providing a signature through a separate procedure on the Company website In the case of telephone consultation, receiving direct guidance from the person in charge or confirming the consent details posted in the Privacy Policy on the Company website, and expressing consent verbally by phone

[Article 5]

Rights and Obligations of Data Subjects and Methods of Exercising Rights Data subjects, or their legal representatives in the case of children under the age of 14, may exercise the following rights regarding personal information protection at any time. Request access to personal information Request correction in case of errors Request deletion Request suspension of processing The rights under Paragraph 1 may be exercised in writing, by phone, email, fax, or other means, and the Company will take action without delay. If a data subject requests correction or deletion of personal information errors, the Company will not use or provide the relevant personal information until the correction or deletion is completed. The rights under Paragraph 1 may be exercised through a legal representative or an authorized agent. In such cases, a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted. Data subjects must not infringe upon their own or others’ personal information or privacy processed by the Company in violation of the Personal Information Protection Act and other relevant laws.

[Article 6]

Installation, Operation, and Refusal of Automatic Personal Information Collection Devices The Company may install and operate cookies that store and retrieve customer information through internet services provided on the Company website. Cookies are small text files sent by a web server to a web browser, stored there, and sent back to the server upon additional requests. When users access the website, the Company may read cookie contents stored in the user’s browser and provide services without requiring additional input of information such as name. Users may decide whether to allow or refuse information collection by cookies through browser security settings. Information collected through cookies is limited to name, email address, and contact information, and no other information is collected. Information collected through cookies may be used for the following purposes. Tracking content viewed with interest Analyzing user habits for service improvement Other data use related to website improvement

[Article 7]

Personal Information Items Processed The Company processes the following personal information items. For handling customer inquiries: Name Contact information Company name Email address

[Article 8]

Destruction of Personal Information When personal information becomes unnecessary due to expiration of the retention period or achievement of the processing purpose, the Company destroys the personal information without delay. If personal information must continue to be retained under other laws despite expiration of the retention period agreed by the data subject or achievement of the processing purpose, the Company transfers the personal information to a separate database or stores it in a different location. The procedures and methods for destroying personal information are as follows. Destruction procedure: The Company selects personal information for which a reason for destruction has occurred and destroys it within five days after approval by the Personal Information Protection Officer specified in Article 10 of this Policy. Destruction method: Electronic files are permanently deleted in a way that prevents recovery or reproduction. Records, printed materials, written documents, and other media are shredded or incinerated.

[Article 9]

Measures to Ensure the Security of Personal Information The Company takes the following measures to ensure the security of personal information. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs, etc. Physical measures: Access control for computer rooms, data storage rooms, etc.

[Article 10]

Personal Information Protection Officer The Company designates the following Personal Information Protection Officer to oversee personal information processing and to handle complaints and remedies related to personal information processing. Personal Information Protection Officer Name: Lee Hyung-ho Position: Head of System Development Team Personal Information Protection Team Team: System Development Team Person in charge: IT Administrator Contact: Tel. 052-922-5060 / Fax 052-922-5071 / Email it@autronic.co.kr Data subjects may contact the Personal Information Protection Officer or the responsible department regarding all personal information protection inquiries, complaints, and remedies arising while using the Company’s services or business. The Company will respond to and process such inquiries without delay.

[Article 11]

Request for Access to Personal Information Data subjects may request access to personal information under Article 35 of the Personal Information Protection Act through the department below. The Company will make efforts to ensure that requests for access to personal information are processed promptly. Personal Information Protection Team Team: System Development Team Person in charge: IT Administrator Contact: Tel. 052-922-5060 / Fax 052-922-5071 / Email it@autronic.co.kr

[Article 12]

Remedies for Infringement of Rights Data subjects may contact the following institutions for consultation or remedy regarding personal information infringement. The following institutions are separate from the Company. If you are not satisfied with the Company’s handling of personal information complaints or remedies, or need further assistance, please contact them. Korea Internet & Security Agency Personal Information Infringement Report Center (http://privacy.kisa.or.kr / 118) ePrivacy Certification Committee (www.eprivacy.or.kr / 02-550-9531~2) Supreme Prosecutors’ Office Cybercrime Investigation Division (www.spo.go.kr / 02-3480-2000) Korean National Police Agency Cyber Bureau (http://cyberbureau.police.go.kr / 182) Cyber Police Agency (www.police.go.kr / 182) Personal Information Protection Commission (www.pipc.go.kr / 118)