Product Inquiry

INFAC Co., Ltd., INFAC EPM Co., Ltd., INFAC Elecs Co., Ltd., and INFAC EAP Co., Ltd. (collectively, the “Company”) have established the following Privacy Policy in accordance with the Personal Information Protection Act to protect users’ personal information and rights and to handle users’ concerns and complaints regarding personal information in an appropriate and efficient manner. If the Company amends this Privacy Policy, the amendments will be announced through a notice on the website.

1. Purposes of Collecting and Using Personal Information

1.1 The Company collects the following personal information for product inquiries, consultations, online recruitment, and other related purposes. Additional personal information may be collected with your consent in addition to the items listed below.

• Online recruitment: Name in Korean, Chinese characters, and English; date of birth; gender; email address; password; address; mobile phone number; telephone number; military service information; educational background; personal statement; foreign language proficiency; certifications and licenses; employment history; family information; veterans’ benefits eligibility; disability status; and other related information
• Product inquiries and consultations: Name in Korean, Chinese characters, and English; email address; company information; and other related information
• Certain personal information may be generated and collected automatically while using internet services, including IP address, cookies, MAC address, service usage records, access records, and records of improper use.

```

1.2 The Company uses the collected personal information for the following purposes.

• Online recruitment - Processing recruitment procedures, modifying job applications, checking application results, contacting applicants, and verifying applicant qualifications - Storing and using applicant information in a database for future recruitment opportunities
• Product inquiries and consultations: Receiving and responding to product inquiries and consultation requests
• Providing information about the Company’s services, events, promotional activities, and other marketing activities, including surveys, promotions, advertisements, emails, and joint promotional activities with business partners

2. Retention and Use Period of Personal Information

2.1 Personal information will be retained for three years or until the purpose for which the personal information was collected or provided has been fulfilled, after which it will be destroyed without undue delay.

2.2 Notwithstanding the foregoing, personal information may be retained for a longer period where retention is required under applicable laws, including the Commercial Act, or where the data subject has separately consented to such retention.

3. Provision of Personal Information to Third Parties

3.1 In principle, the Company does not provide users’ personal information to external third parties. However, exceptions may apply in the following circumstances.

• Where the user has provided prior consent
• Where disclosure is required by applicable laws or requested by an investigative authority in accordance with legally prescribed procedures and methods for investigative purposes

4. Access to and Correction of Personal Information

4.1 You may access your registered personal information at any time and may correct any personal information other than your user ID, resident registration number, and name. To access or correct your personal information, you may use the “Edit Personal Information” menu or contact the person responsible for personal information management by telephone or email. The Company will take the necessary action upon receiving your request.

4.2 If you request the correction of inaccurate personal information, the Company will not use the relevant personal information until the correction has been completed.

4.3 A user or the user’s legal representative, in the case of a child under 14 years of age, may withdraw consent to the collection, use, or provision of personal information at any time.

4.4 A user may request access to, provision of, or correction of errors in his or her personal information. A legal representative may exercise the same rights in relation to the personal information of a child under 14 years of age.

4.5 If a user or legal representative withdraws consent, the Company will, in principle, destroy the relevant personal information without undue delay. However, if the Company is required to retain the information under applicable laws, the information will be handled in accordance with the “Retention and Use Period of Personal Information” section of this Privacy Policy, and measures will be taken to ensure that the information is accessed or used only when strictly necessary.

5. Withdrawal of Consent to the Collection, Use, and Provision of Personal Information

5.1 You may withdraw at any time the consent you provided for the collection, use, or provision of your personal information, including consent provided during membership registration. You may withdraw your consent by following the procedures set forth in the membership terms and conditions or by contacting the website administrator by telephone or email. Upon receiving your request, the Company will promptly take the necessary measures, including deleting the relevant personal information.

5.2 In the case of a child under 14 years of age, the child’s legal representative has the right to access or correct the child’s personal information and to withdraw consent to its collection and use.

6. Procedures and Methods for Destroying Personal Information

6.1 Unless the Company is required to retain personal information under applicable laws, the Company will destroy the relevant personal information without undue delay after the purpose of its collection and use has been fulfilled.

• Destruction procedure: Personal information entered by a user will be transferred to a separate database after the purpose of collection has been fulfilled, or stored in a separate filing cabinet in the case of paper records. The information will be retained for a specified period in accordance with internal policies and applicable laws and regulations, as described in the retention and use period section, and will subsequently be destroyed. Personal information transferred to a separate database will not be used for any purpose other than retention unless otherwise required by law.
• Destruction method: Personal information stored in electronic file format will be permanently deleted using technical methods that prevent the information from being restored or reproduced.

7. Outsourcing of Personal Information Processing

7.1 The Company may outsource the collection, processing, or management of personal information to third parties to improve its services.

• If the Company outsources the collection, processing, or management of personal information, the Company will notify you of the relevant details in advance.
• If the Company outsources the collection, processing, or management of personal information, the Company will specify through an outsourcing agreement or similar document the service provider’s obligation to comply with personal information protection instructions, maintain confidentiality, prohibit unauthorized provision to third parties, and assume responsibility in the event of an incident. The relevant agreement will be retained in written or electronic form.

8. Installation and Operation of Automatic Personal Information Collection Devices and Methods of Refusal

8.1 The Company uses cookies, which store and retrieve users’ usage information, to provide individualized services. The Company uses cookies and similar technologies to analyze website access frequency and visit duration, identify and analyze users’ areas of interest, determine participation in events and the number of visits, conduct targeted marketing, and provide personalized services.

8.2 A cookie is a small amount of information sent by the server operating a website to a user’s web browser. Cookies may be stored on the hard drive of the user’s computer.

8.3 Users have the right to choose whether to allow cookies. Users may configure their web browser settings to allow all cookies, receive a notification whenever a cookie is stored, or refuse the storage of all cookies.

8.4 Users may refuse cookies by changing the settings or options in their web browser. Users may allow all cookies, receive a notification whenever a cookie is stored, or refuse the storage of all cookies. However, if a user refuses the storage of cookies, certain services that require login may be unavailable or difficult to use.

```

Supplementary Provision
This Privacy Policy shall take effect on January 1, 2014.