As the privacy policy is revised, it is published as follows.

• Revision of Privacy Policy

  <p>Revision of Privacy Policy</p>

  Privacy Policy v4.2 (2024.07.25~2024.10.29)	Privacy Policy v4.3 (2024.10.30~)	Remark
  ​ Key Privacy Policy General Personal Information Collection Name, Email, Contact, etc ※Check the body of the personal information processing policy for detailed items Purpose of Personal Information Processing Confirmation of the contents of the complaint, notification of the results of the processing, reservation of IR Meeting, etc ※Check the body of the personal information processing policy for detailed items Retention period Hold for 3 months on collection agreement	Key Privacy Policy General Personal Information Collection Informant's name, email, contact information, etc. ※ Check the body of the personal information processing policy for detailed items Purpose of Personal Information Processing Confirmation of reporting center reports, notification of the results of the processing, and handling customer inquiries ※ Check the body of the personal information processing policy for detailed items   Retention period Hold for 3 months on collection agreement However, records regarding complaints or dispute resolution are kept for 3 years.	Major changes to the Privacy Policy
  1. Purpose of the Collection and Use of Personal Information The company processes personal information for the following purposes. Personal information is only used for the following purposes, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent under Article 18 of the Personal Information Protection Act. a. Handling of Civil Affairs - The Company handles personal information for the purposes of verifying civil complaints, notification of handling results, and IR meeting.	1. Purpose of the Collection and Use of Personal Information The company processes personal information for the following purposes. Personal information is only used for the following purposes, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent under Article 18 of the Personal Information Protection Act. a. Customer Inquiry - Personal information is processed for the purpose of handling complaints and notifying results. b. Reporting Center - Personal information is processed for the purpose of receiving operational reports, verifying the facts of reports, and notifying the results of processing.	Describe the purpose of use in detail
  2. Collection Items and Method of Collecting Personal Information The Company collects the following personal information to facilitate the handling of business and the provision of various services. a. Required Collection Items - Name, email address, contact information(visitor for IR meeting), company name(object of report, visitor for IR meeting), department(object of report), id(reporting center), password(reporting center) b. Selected Collection Items - Contact information, company name, department, and position. c. The following information may be automatically generated and collected in the process. - Service usage records, Access Log, IP information d. Collection Method - The Company collects personal information in the following manner. · Website e. Matters concerning the installation and operation of an automatic personal information collection device and its refusal. - In order to provide individually customized services to users, the company stores usage information and uses “cookie” that is frequently retrieved. - Cookies are a small amount of information sent by the server (http) used to run the website to the user’s computer browser and are also stored on the user’s computer hard disk. · Purpose of use of cookies: It is used to provide optimized information to users by identifying the types of visits and uses of each service and website visited by users, popular search terms, security access status, etc. · Installation, operation, and rejection of cookie: Tools at the top of the web browser>Internet Options>Setting options in the Personal Information menu allows you to refuse to save cookies. · Refusing to save cookies can make it difficult to use customized services.	2. Collection Items and Method of Collecting Personal Information The company collects the following personal information for the purpose of customer inquiry, reporting center operations, and service improvement. The company collects the following personal information for the operation of customer inquiries. a. Required Collection Items - Name, email b. Optional Collection Items - Contact information The company collects the following personal information for the operation of the reporting center. a. Required Collection Items - Company name, department, and name of the reporting subject - ID for reporting confirmation, password, (when reporting under a real name) reporter's email b. Optional Collection Items - Reporter's company name, department, name, and phone number (when reporting under a real name) The following information may be generated and collected during the service use process. - Service usage records, Access Log, IP information a. Collection Method - The Company collects personal information in the following manner. · Website b. Matters concerning the installation and operation of an automatic personal information collection device and its refusal. - In order to provide improved services to users, the company stores usage information and uses “cookie” that is frequently retrieved. - Cookies are a small amount of information sent by the server (http) used to run the website to the user’s computer browser and are also stored on the user’s computer hard disk. · Purpose of cookie use: It is used as a basis for providing optimized information to users by identifying the visit and usage patterns, popular search terms, and whether or not the user has accessed each service and website visited. · Installation, operation, and rejection of cookie: Tools at the top of the web browser>Internet Options>Setting options in the Personal Information menu allows you to refuse to save cookies.	1) Separate and list the required and optional input fields by collecting item. 2) Describe the actual purpose of use of collected information during service use
  3. Personal Information Handling and Retention Period The Company handles and retains personal information within the period of retention and the period of use of personal information in accordance with the laws and regulations or within the period of retention and the period of use of personal information for which consent is secured when collecting personal information from the information subject. (1) Retention of information in accordance with the Company's policies: - Retention period: 3 months (consent is secured when collecting information) (2) Retention of information as required under applicable laws and regulations - Retention period: 3 years (ENFORCEMENT DECREE OF THE ACT ON THE CONSUMER PROTECTION IN ELECTRONIC COMMERCE, ETC., Article 6)	3. Personal Information Handling and Retention Period The Company handles and retains personal information within the period of retention and the period of use of personal information in accordance with the laws and regulations or within the period of retention and the period of use of personal information for which consent is secured when collecting personal information from the information subject. a. Customer inquiry operations - Retention Items: Name, email, contact information, inquiry and consultation contents - Basis for retention: Record of consumer complaints or dispute settlement under Article 6 (4) of the Enforcement Decree of the Electronic Commerce Act - Retention period: 3 years b. Reporting center operations - Retention Items: Company name, department, name of the reporting subject, Informant's company name, department, name, phone number, email, ID for reporting confirmation, password - Basis for retention: Details of consent when writing the contents of the reporting center - Retention period: 3 months c. Cookie Information - Retention Items: Computer communications, Internet log records, access location tracking data - Basis for retention: Retention of communication fact confirmation data pursuant to Article 15-2 of the Communication Secrets Protection Act - Retention period: 3 months	Add detailed descriptions of retention items, evidence, and duration for each personal information collection item
  4. Matters Concerning the Provision of Personal Information The Company shall use the personal information of the users within the scope provided under "1. Purpose of the Collection and Use of Personal Information" and shall not use the user's personal information beyond the scope without the prior consent of the users, nor disclose the users’ personal information to the outside as a matter of principle.	4. Matters concerning provision of personal information to third parties The Company shall use the users' personal information within the scope notified in "1. Purpose of Collecting and Using Personal Information", and shall not use it beyond the scope without the prior consent of the users or disclose or provide the users' personal information to the outside world in principle. The company may provide the personal information submitted when receiving whistleblowing reports to the relevant subsidiary for the purpose of handling complaints and delivering reported issues. The detailed information of the personal data provided is as follows Recipient: - Lotte Innovate Company Limited Vietnam - Lotte-HPT High Tech. Vietnam Company Limited - PT. Lotte Innovate Indonesia - EVSIS Company Limited - Caliverse Company Limited - CubeRefund Company Limited Purpose of provision: Receiving Reporting center, checking facts, and handling civil complaints.Items provided: Informant information (company name, department, name, phone number, e-mail), *Only in case of real name report Subject to report (company name, department name, name) Retention and usage period: 3 years	Description of matters related to provision of personal information due to use of reporting center in subsidiary company
  7. Rights, Obligations and Exercise Method of the Information Subject and Legal Representative a. The information subject may, at any time, exercise the personal information protection-related rights as provided under each of the following with regard to the Company. - Demand for a review of personal information - Demand for corrections in the event of errors - Demand for deletion - Demand for the suspension of handling b. The exercise of rights under the provisions of Paragraph a. may be performed in writing, or via phone, email, or facsimile (FAX) to those responsible for personal information protection and management as well as the department in charge or the Company, to which the Company will respond and take actions accordingly without delay. c. If the information subject demands the correction or deletion of any errors in personal information, the Company will not use or provide the personal information until the correction or deletion is made and completed. d. The exercise of rights under the provisions of Paragraph a. may be performed by the legal representative of the information subject or agent authorized for the delegation of the rights, etc. In this event, a power of attorney shall be submitted in line with Form 11 annexed under the Enforcement Rules of the Personal Information Protection Act.	7. Rights, Obligations and Exercise Method of the Information Subject and Legal Representative a. The information subject may, at any time, exercise the personal information protection-related rights as provided under each of the following with regard to the Company. - Demand for a review of personal information - Demand for corrections in the event of errors - Demand for deletion - Demand for the suspension of handling b. The exercise of rights under the provisions of Paragraph a. may be performed in writing, or via phone, email, or facsimile (FAX) to those responsible for personal information protection and management as well as the department in charge or the Company, to which the Company will respond and take actions accordingly without delay. c. If the information subject demands the correction or deletion of any errors in personal information, the Company will not use or provide the personal information until the correction or deletion is made and completed. d. The exercise of rights under the provisions of Paragraph a. may be performed by the legal representative of the information subject or agent authorized for the delegation of the rights, etc. In this event, a power of attorney shall be submitted in line with Form 11 annexed under the Notice on Personal Information Processing Methods.	Updating the law
  10. Matters Concerning Those Responsible for the Personal Information Protection of the Service Users may file a report with the personal information management supervisor or the department in charge regarding any personal information-related complaints that arise while using the Company's services. The Company will promptly and adequately respond to the users’ reports. For filing a report or consultation concerning other infringements of personal information, please contact the following agencies. - Personal Information Infringement Report Center: www.privacy.kisa.or.kr (dial 118 without area code) - Supreme Prosecutors' Office Cyber Investigation Division: www.spo.go.kr (dial 1301 without area code) - National Police Agency Cyber Safety Bureau: cyberbureau.police.go.kr (dial 182 without area code)	10. Matters Concerning Those Responsible for the Personal Information Protection of the Service Users may file a report with the personal information management supervisor or the department in charge regarding any personal information-related complaints that arise while using the Company's services. The Company will promptly and adequately respond to the users’ reports. For filing a report or consultation concerning other infringements of personal information, please contact the following agencies. - Personal Information Infringement Report Center: www.privacy.kisa.or.kr (dial 118 without area code) - Supreme Prosecutors' Office Cyber Investigation Division: www.spo.go.kr (dial 1301 without area code) - National Police Agency Cyber Safety Bureau: https://ecrm.police.go.kr/ (dial 182 without area code)	Change of website address of Cyber Security Agency, National Police Agency
  11. Obligation of Notice In the event of any additions, deletions, or modifications to the current personal information handling policy, the Company will notify them via the “Notice” section on its website from at least 7 days before the revision. However, if there is a significant change in the users’ rights, such as in regard to the collection and use of personal information and provision to a third party, the Company will so notify at least 30 days in advance.	11. Obligation of Notice In the event of any additions, deletions, or modifications to the current personal information handling policy, the Company will notify them via the “Notice” section on its website from at least 7 days before the revision.	Removal of non-mandatory items from the notification obligations