1. Purpose of processing personal information, collection items, retention and use period.

① The company processes personal information of information subjects as follws

② The company collects and uses the minimun amount of personal information necessary to provide services, and does not use it for purposes other than the intended purpose. No processing. Purpose of processing, otems collected, If the retention/use period, etc. changes, necessary measures, such as obtaining consent, will be taken

2. Entrustment of processing of personal information

① The company processes personal information to provide services and operate smoothly. The work is entrusted as follows.

② The company is entrusted Perform consignment work upon signing a contract Prohibition of processing of personal information for purposes other than the intended purpose, matters regarding technical and administrative protection measures for personal information, The purpose and scope of the entrusted work, restrictions on re-entrustment, safety measures, and responsibilities such as management and supervision of the consignee and compensation for damages are specified in documents such as contracts.

③ The company regularly chechs and supervises whether the trustee is handling personal information safely

④ If there is a change in the entrusted person or the details of the entrusted work, the changed information is disclosed without delay through this personal information processing policy.

3. Destruction of personal information

① The company processes and elapses the retention period of personal information consented to by the information subject. When personal information becomes unnecessary due to achievement of purpose, termination of service, etc, the personal informations is destroyed whithout delay.

② If personal information must continue to be preserved in accordance with laws and regulations despite the expiration of the personal information retention period agreed to by the information subject or the purpose of processing has been achieved, the minimum amount of personal information will be transferred to a separate database or stored safely in a different storage location, Preserve. The retained personal information will not be used for any purpose other than the purpose of processing, except as requird by law.

③ The personal information destruction procedure is as follows.

- The company destroys personal information (or personal information files) that must be destroyed. Make a plan and destroy it. The company selects the personal information for which there is a reason for destruction, and It will be destryed with the approval of the person in charge of protection.

④ The method of destroying personal information is as follows.

- records, prints, Written and other recording media : shredded or incinerated

- electronic file Personal information in the form of : Permanently deleted in a way that cannot be restored

4. Rights and Excercises of information Subjects method.

① The information subject has the right to request access, correction, deletion, suspension of processing, withrawal of consent, etc. of personal information (hereinafter referred to as "requesr for access, etc. ")

※ Viewing personal information about children under 14 years of age Requests such as viewing of personal information of minors over the age 14 may be made directly by the minor or through a legal representative.

② Rights can be excercised through writing, phone, e-mail, internet, etc.

③ Rights may be excercised through an agent, such as the information subject's legal representative or a person authorized to do so. In this case, you must submit a power of attorney.

④ Among requests to view or suspend processing of personal information If it falls under a reason prescribed by law, it may be restricted or denied.

⑤ Among requests for correction and deletion of personal information, deletion cannot be requested if the personal information is specified as a collection target in the law.

⑥ The company must ensure that the person who made the request for viewing, etc. in accordance with the rights of the information subject is the person himself or a legitimate agent. Check if it is recognized.

⑦ If the information subject requests correction of an error in personal information, the personal information will not be used or provided until the correction is completed. In addtion, if incorrect personal information has already been provided to a third party or trustee, wo will notify you of the result of the correction without delay and take action to ensure that the correction is made.

⑧ The information subject may view personal information Requests such as such may be made to the departments below. The company responds without delay to requests such as viewing personal information from the information subject. Answer and process.

▶ Department for receiving and processing requests for viewing personal information, etc

- Department/Name : Information Strategy Team Assistant Manager Kim Yeon-taek

- Contact : <02-760-6515>, < yeontaek@lotte.net >

5. Ensuring the safety of personal information Matters concerning action

① The company is taking the following measures to ensure the safety of personal information.

- Management measures: Establishment and implementation of an internal management plan, minimization of designation and training of personal information handlers. Conduct regular self-audits

- Technical measures: Access rights management and access control for personal information processing systems, etc. System installation, encryption of personal information , security program installation

- Physical measures: In the computer room and document storage area Access control, such as locks, and access control for unauthorized persons

6. Matters regarding automatic personal information collection devices

① The company uses 'cookies' to store usage information and retrieve it from time to time in order to provide individualized services to information subjects.

- Use of Cookies purpose : Used to provide optimized information to users by identifying visit and usage patterns, popular search terms, and secure access for each service and website visited by the user.

② Cookies are a small amount of information that the server (http) used to run the website sends to the information subject 's computer browser and are sometimes stored on the information subject 's computer hard disk.

③ You can refuse to store cookies through option settings in the Tools>Internet Options>Personal Information menu at the top of your web browser. However, if you refuse to store cookies, you may have difficulty using customized services.

7. Personal information protection officer and grievance handling department

① The company is responsible for the overall management of personal information processing, and has designated a personal information protection manager as follows to handle complaints and provide relief for damage from information subjects related to personal information processing.

② While using the company’s services, the information subject may make requests regarding complaints handling and damage relief related to personal information protection to the departments below. The company responds and processes requests from information subjects without delay.

▶ Personal information Protection-related customer consultation / reporting and Grievance Department

- Department/Name : Information Strategy Team Assistant Manager Kim Yeon-taek

- Contact : <02-760-6515>, < yeontaek@lotte.net >

8. Rights and interests of information subjects Remedies for Infringement

① The information subject is the company’s personal information generated while using the company’s services. Contact the government agencies below regarding infringement, reporting, dispute resolution consultation, etc. You can do it.

- Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.privacy.go.kr)

- Personal Information Infringement Reporting Center: (without area code) 118 (privacy.kisa.or.kr)

- Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)

- National Police Agency: (without area code) 182 (ecrm.police.go.kr)

9. Matters regarding changes to personal information processing policy

① This personal information processing policy was revised on September 1, 2024 and is subject to laws, policies or If content is added, deleted or modified due to changes in security technology, the changed personal information processing policy must be changed at least 7 days prior to implementation. We will notify you of the reason and contents..