Asung Pratec Co., Ltd. (hereinafter referred to as the "Company") establishes and discloses the following personal information processing guidelines in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to ensure prompt and smooth handling of related complaints.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those specified below, and if the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

• 1. Providing responses to customer inquiries on the website and managing inquiry records.

Article 2 (Processing and Retention Period of Personal Information)

① The Company processes and retains personal information within the retention and use period prescribed by law or within the retention and use period agreed upon by the data subject at the time of collection.

② The processing and retention period is as follows:

• 1. Within one (1) year from the date of receipt of a customer inquiry on the website.

Article 3 (Provision of Personal Information to Third Parties) – Not Applicable

Article 4 (Outsourcing of Personal Information Processing) – Not Applicable

Article 5 (Rights and Obligations of Data Subjects and Methods of Exercise)

① Data subjects may exercise the following personal information protection rights against the Company at any time:

• 1. Request to access personal information
• 2. Request for correction in case of errors, etc.
• 3. Request for deletion
• 4. Request to suspend processing

②The rights under Paragraph 1 may be exercised through written request, telephone, or email to the Company, and the Company will take prompt action without delay.

③If a data subject requests correction or deletion of errors in personal information, the Company will not use or provide the relevant personal information until the correction or deletion is completed.

④The rights under Paragraph 1 may be exercised through the legal representative of the data subject or an authorized agent.

⑤Data subjects must not infringe on their own or others' personal information or privacy processed by the Company in violation of the Personal Information Protection Act or other related laws.