‘Hansol Papertech Co., Ltd' (The Company) recognizes that your private information is important and complies with" the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc." and "the Personal Information Protection Act". The Company explains how the Company uses private information that you provide for which objectives and the actions taken for protecting privacy in this policy. When the Company revises this policy, it will notify the fact and relevant details through the notice board at the company’s website (or individually).

The Company's privacy policy includes the followings.

• 01. Objectives to collect and use private information
• 02.Collected private information
• 03. Period to keep and use private information
• 04. Method and procedure to destruct private information
• 05. Private information provision
• 06. Entrustment of private information management
• 07. Authorities of users and their legal agents and how to exert the authorities
• 08. Installation, operation, and rejection of the tool to automatically collect private information
• 09. Technological and managerial measures for private information protection
• 10. Customer service of private information

01.Objectives to collect and use private information

The Company uses collected private information for the following objectives and do not use for others than the defined objectives as below.

Feedback on inquiry

-Voice of customer : collecting complaints and opinions for improvement

02. Collected private information

The company collects the following private information to provide consultation and other services for you.

• -Information: Name, E-mail, phone number, company name, name of CEO (company), address, industry, mainly using paper type, purchase amount
• -How to collect: webpage(Voice of customer)

03.Period to keep and use private information

The Company retains and uses your private information until you withdraw the consent to collect and use private information. When you withdraw the consent or the objectives to use private information are accomplished, the information is deleted without delay.

04. Method and procedure to destruct private information

The Company destructs the concerned private information without delay when the objectives to collect and use private information are accomplished. The method and procedure to destruct private information as below.

1)Procedure to destruct

The information that you provided is moved to a separate DB (a separate document box in case of paper) after the objectives are accomplished and kept for a certain period of time and destructed depending on the reasons for protecting information described in the internal regulations and other relevant laws (referring to the period to keep and use). The private information moved to a separate DB is not used for other purposes than keeping unless there are legal needs. In the case where private information is provided for the third party or an entrusted company, the Company will force them to destruct the information.

2)Method to destruct

The document with private information is shredded by a shredder or incinerated. The one saved in an electronic file is deleted by a technological method that records cannot be reproduced.

05. Private information provision

In principle, the Company does not disclose your private information to others. However, the following cases are exceptional.

• - When you agree to information disclosure in advance
• - By regulations in laws or when investigation authorities request by the procedures and methods defined in relevant laws for investigation

06. Entrustment of private information management

The Company entrusts dealing with private information to another company as below and take necessary measures for private information to be safely managed based on relevant laws in this case. Also, the entrusted private information is limited to minimal information necessary to provide the company's services smoothly. The Company entrusts managing private information to an outsourced company as below.

• - Outsourced company : Hansol PNS Co., LTd.
• - Entrusted business  : System operation, management, and maintenance
• - Period to keep and use private information : Until the period to provide the service ends or you request entrustment of private information management
• The Company notifies that we take proper measures to protect your private information through the entrustment contract. Also, the Company notifies the followings to you when moving your private information due to transfer of business.
• Fact that your private information will be moved
• Name, address, phone number, and other contact information of those who receive your private information
• The measures and procedures for you to take when you do not like that your private information is moved

07. Authorities of users and their legal agents and how to exert the authorities

The Company accepts your request for viewing and modifying your private information and withdrawing the consent without delay. Therefore, you are able to view or modify your registered information and request withdrawal to consent any time. Or, if you contact the person in charge of private information management via a letter, phone call, or e-mail, the Company will take measures promptly. When you request correcting an error of private information, the concerned information is not used or provided until it is completely corrected. Also, in the case where incorrect information is already provided for the third party, the Company will make the third party correct the information by letting it know the result of correction in advance. The private information canceled or deleted by your request is dealt depending on "The period to keep and use private information" notified when collecting the information and it cannot be viewed or used for other purposes. However, the request can be restricted or rejected in the case of the followings and the Company notifies the fact to you swiftly.

When a special regulation is stipulated in relevant laws or it is unavoidable to comply with legal obligations

• -When there is concern of damaging others "Lives or bodies or unfairly violating others" properties and interests
• -When you do not clearly reveal your willingness to terminate the contract even in the case where the contract cannot be performed and that is, the agreed services cannot be provided due to private information related issue

08. Installation, operation, and rejection of the tool to automatically collect private information

The Company does not run the tool to automatically collect private information such as Cookies when you use an online service.

09. Technological and managerial measures for private information protection

• - The Company is seeking the following technological measures to secure safety for private information not to be lost, stolen, changed, or damaged.
• - Your private information is thoroughly protected by managing access authorities and password and file and transmitted data are encrypted so that crucial data is protected through a special security function.
• - Automatically updated vaccine is used to prevent damage from a computer virus and the system to detect and prevent invasion is used to prevent damage by hacking.
• The Company takes managerial measures for protecting your private information.
• A minimized number of employees deal with private information and the Company highlights importance of complying with this privacy policy through regular and ad-hoc security related education programs.
• The company makes all executives and employees and contracted employees to submit the security agreement to prevent manmade information leakage in advance. Also, we monitor whether the employees comply with this privacy policy well and takes necessary internal procedures to correct or improve the details of privacy policy when it is identified that the employees violate the policy.

10. Customer service of private information

The Company designates the manager and the person in charge of private information as below to protect your private information and handle your complaints about private information.

• - Yun-kab Nam, the manager of private information management(HR Management Team/Team leader 061-380-0311)
• - l-beu Moon, the person in charge of private information management(HR Management Team /Assistant manager 061-380-0315)

You can file a complaint related to private information to the manager or assistant manager in charge of private information management. The Company will swiftly give substantial answers. Please contact the following institutions for reporting or consulting about private information violation cases.

• - Personal Information Infringement Report Center : Tel. 118 / URL: http://www.privacy.kisa.or.kr
• - Personal Information Dispute Mediation Committee : Tel. 1833-6972 / URL: http://www.kopico.go.kr
• - High-tech and Financial Crimes Investigation Center in Supreme Prosecutors Office : Tel. 1301 / URL: http://www.spo.go.kr
• - Cyber Bureau : Tel. 182 / URL: http:// ecrm.cyber.go.kr

Date of Revision: January 2, 2023