1. Items and method of personal information collection

A. Essential items

Short-term accessors- (HQ/Branch) Name, cell phone number, affiliated company, video clip from CCTV, Vehicle number - (Yeosu Complex) Name, cell phone number, affiliated company, video clip from CCTV, Vehicle number, location information, photo, date of birth

Employee - (HQ/Branch) Name, cell phone number, affiliated company, video clip from CCTV, Vehicle number - (Yeosu Complex) Name, cell phone number, affiliated company, video clip from CCTV, Vehicle number, location information, photo, date of birth

Shipping Driver - Name, address, date of birth, gender, cell phone number, affiliated company, vehicle registration number, vehicle ownership, biometric data (fingerprint), location information, video clip from CCTV

Homepage(E-MAIL US) User - General Information : Name, cell phone number, E-mail

B. Method of collection

Via website, written document, GPS, CCTV, cookie, Visitor management system, Mobile Employee ID

2. Purpose of personal information management

The ‘company’ manages personal information for the following purposes: approval and registration of entrance access to restricted areas, protection and observance of law related to nationally secured facilities, protection and observance of law related to Security of International Vessels and Port Facilities, revisit or entrance management, entrance control in accordance with the company’s security regulations, operation record management, security management, verification of work performance, fulfillment of contract, and linkage of the company’s operation system for related work execution.

3. Personal information management & period of information held

the Company destructs personal information of users without delay when: the purpose of its collection and use has been achieved; the legal or management needs are satisfied; or users request: Provided that, if it is required to retain the information by relevant laws and regulations, the Company will retain member information for certain period as designated by relevant laws and regulations. The information to be retained as required by relevant laws and regulations are as follows: - Record regarding contract or withdrawal of subscription: 5 years (The Act on Consumer Protection in Electronic Commerce) - Record on payment and supply of goods: 5 years (The Act on Consumer Protection in Electronic Commerce) - Record on consumer complaint or dispute treatment: 3 years (The Act on Consumer Protection in Electronic Commerce) - Record on sign/advertisement: 6 months(The Act on Consumer Protection in Electronic Commerce) - Other data for checking communication facts: 1 year (The Protection of Communications Secrets Act) - Log record of users such as internet/data detecting the place of user connection: 3 months(The Protection of Communications Secrets Act)

4. Entrustment of personal information management

The ‘company’ entrusts tasks in relation to personal information management as listed below. In case of entrustment contract, according to its relevant legislations, the ‘company’ makes necessary actions to assure that personal information is safely managed. Entrusted information is limited to minimum extent necessary for the tasks.

5. Disclosure of personal information to third party

The Company discloses personal information of “Subject of Information” (as defined in Personal Information Protection Act) after obtaining consent of such Subject of information to third party as set forth below. Such personal information shall be managed only for the Purpose.

In the event of an emergency situation that may cause disasters, infectious diseases, imminent danger to life or body, or imminent substantial property loss, the company may provide personal information to relevant authorities without the consent of the data subject.

6 .Procedure and method of personal information destruction

A. Procedure of destructionThe ‘company’ will destruct personal information immediately when it becomes unnecessary by termination of retention period or achievement of purpose. However, if the personal information has to be stored continuously to comply with company’s internal policies or other laws, it will be moved to separate data base or different location of the storage.

B. Method of destruction For the personal information in electronic file format, technical methods that prevent repair or regeneration of the record will be used. Printed personal information copies will be destroyed by paper shredder or incineration.

7. Subject’s right?duty and mean of exertion

A. The subject of information can exert the following rights to the ‘company’ anytime. However, it can be limited according to Paragraph 3 in Article 35, Paragraph 1 in Article 36, and Paragraph 2 in Article 37 as per the Personal Information Protection Act. ① Reading request for personal information ② Suspension request for personal information management ③ Revision or deletion request for personal information

B. Mean of exertion is as in the following:① Exertion of right is available through written document and e-mail in a separate format, to which the ‘company’ will take steps with no delay. ② If revision or deletion of personal information is requested, the ‘company’ will not use or provide the personal information until the request is complete. ③ If subject of information wishes to exert the right through legal representative or delegated substitute, power of attorney should be submitted.

8. Provisions on the Installation, Operation, and Rejection of Automatic Personal Information Collection Devices

A. The 'company' uses 'cookies' to store and periodically retrieve usage information in order to provide customized services to users. Cookies are small pieces of information sent by the server operating the website to the user's computer browser and are also stored on the hard disk of the user's PC. -Personal information processed by cookies: Web site access time, access IP, access log (browser information, access URL information). - Purpose of using cookies: Cookies are used to understand the visit and usage patterns of each service and website visited by the user in order to provide optimized information to the user. - Installation, operation, and refusal of cookies: You can refuse to store cookies by setting options in the Internet Options > Privacy menu at the top of the web browser. - If you refuse to store cookies, you may experience difficulties in using customized services.

10. Chief Privacy Officer

11. Officer of Personal Information Security

12. Manager of Personal Information Security

Addendum

Enforcement Date : Apr. 25, 2024