1. Purpose of Processing Personal Information

Company processes personal information for the following purposes. The processed personal information will not be used for purposes other than those stated below, and prior consent will be obtained if the purpose of use changes.

• 1. Quotation Inquiry and related purposes.

2. Personal Information File Status

• 1. Personal Information File Name: YGS Co., Ltd. Personal Information
  • Personal Information Items: Company name, contact person, phone number, email, product/grade, inquiry details - Optional: Drawings and specification attachments
  • Collection Method: Website
  • Basis for Retention: Personal Information Protection Act
  • Retention Period: 3 years
  • Relevant Law: Records concerning consumer complaints or dispute resolution: 3 years

3. Processing and Retention Period of Personal Information

• ① YGS Co., Ltd. processes and retains personal information within the retention and use period prescribed by applicable laws or within the period agreed upon when personal information is collected from the data subject.
• ② The processing and retention period for each category of personal information is as follows.
  • 1. Quotation Inquiry
    • Personal information related to Quotation Inquiry is retained and used for the above purposes from the date of consent to collection and use until < 3 years>.
    • Basis for Retention: Personal Information Protection Act
    • Relevant Law: Records concerning consumer complaints or dispute resolution: 3 years
    • Exceptions:

4. Provision of Personal Information to Third Parties

• ① Company provides personal information to third parties only in cases permitted under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or where specifically provided by law.
• ② Company provides personal information to third parties as follows.
  • • Recipient of Personal Information: YGS Co., Ltd.
    • Purpose of Use by Recipient: Company name, contact person, phone number, email, product/grade, inquiry details - Optional: Drawings and specification attachments
    • Retention and Use Period by Recipient: 3 years

5. Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them

Users, as data subjects, may exercise the following rights.

• ① Data subjects may at any time request Company to access, correct, delete, or suspend the processing of their personal information.
• ② Rights under Paragraph 1 may be exercised against Company in writing, by email, fax, or other means in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and Company will take action without delay.
• ③ Rights under Paragraph 1 may also be exercised through a legal representative or authorized agent. In such cases, a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
• ④ Requests to access or suspend the processing of personal information may be restricted pursuant to Article 35(5) and Article 37(2) of the Personal Information Protection Act.
• ⑤ A request to correct or delete personal information cannot be made where other laws expressly require the information to be collected.
• ⑥ Company verifies whether the person making a request for access, correction, deletion, or suspension of processing is the data subject or a duly authorized representative.

6. Categories of Personal Information Processed

• ① Company processes the following categories of personal information.
  • ▶ Quotation Inquiry
    • Required: Company name, contact person, phone number, email, product/grade, inquiry details
    • Optional: Drawings and specification attachments

7. Destruction of Personal Information

Company destroys personal information without delay when the purpose of processing has been achieved. The procedures, deadlines, and methods of destruction are as follows.

• Destruction Procedure
  Information entered by users is transferred to a separate database after the purpose has been fulfilled (or to separate documents in the case of paper records) and is stored for a certain period in accordance with internal policies and applicable laws before being destroyed, or is destroyed immediately. Personal information transferred to a database will not be used for any purpose other than that required by law.
• Destruction Period
  When the retention period for personal information has expired, the information will be destroyed within five days from the expiration date. If personal information becomes unnecessary due to fulfillment of the processing purpose, discontinuation of the relevant service, termination of the business, or other reasons, it will be destroyed within five days from the date on which it is deemed unnecessary.
• Destruction Method
  Information stored in electronic file format is destroyed using technical methods that prevent the records from being restored or reproduced.

8. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

• ① Company uses cookies that store and retrieve usage information in order to provide personalized services.
• ② Cookies are small pieces of information sent by the server operating the website (HTTP) to the user's browser and may be stored on the user's computer hard drive.
  • A. Purpose of Cookies: Cookies are used to identify users’ visit and usage patterns for services and websites, popular search terms, secure connection status, and other information in order to provide optimized information.
  • B. Installation, Operation, and Refusal of Cookies: Users may refuse the storage of cookies by adjusting the options under Tools > Internet Options > Privacy in the web browser.
  • C. Refusing cookies may result in difficulties when using personalized services.

9. Personal Information Protection Officer

• ① Company designates a Personal Information Protection Officer as follows to take overall responsibility for personal information processing and to handle complaints and remedies related to personal information.
  • ▶ Personal Information Protection Officer
    • Person in Charge: Management Support Team, Deputy General Manager Yoon Young-bae
    • Contact: +82-51-832-1984, yyb@ygs.co.kr
• ② Data subjects may contact the Personal Information Protection Officer or the responsible department regarding any privacy-related inquiries, complaints, or requests for remedies that arise while using the services or business operations of Company. Company will respond to and process such inquiries without delay.

10. Changes to the Privacy Policy

• ① This Privacy Policy takes effect from its effective date. If any additions, deletions, or revisions are made due to changes in laws or policies, notice will be provided through website announcements at least seven days before the changes take effect.

11. Measures to Ensure the Security of Personal Information

Company implements the following technical, administrative, and physical measures necessary to ensure the security of personal information in accordance with Article 29 of the Personal Information Protection Act.

• 1. Minimization and Training of Employees Handling Personal Information
  Employees who handle personal information are designated and limited to the minimum number necessary, and appropriate measures are implemented to manage personal information securely.
• 2. Encryption of Personal Information
  Users’ passwords and other personal information are stored and managed in encrypted form so that only the user can access them. Important data is protected through additional security measures such as file encryption, transmission encryption, and file-locking functions.

13. Requests for Access to Personal Information

• ① Data subjects may submit requests to access their personal information under Article 35 of the Personal Information Protection Act to the department below. Company will make every effort to ensure that requests for access to personal information are processed promptly.
  • ▶ Department Responsible for Receiving and Processing Personal Information Access Requests
    • Person in Charge: Management Support Team, Deputy General Manager Yoon Young-bae
    • Contact: +82-51-832-1984, yyb@ygs.co.kr
• ② In addition to the department specified in Paragraph 1, data subjects may also request access to personal information through the Ministry of the Interior and Safety’s Personal Information Protection Comprehensive Support Portal (www.privacy.go.kr).
• ▶ Ministry of the Interior and Safety Personal Information Protection Comprehensive Support Portal → Privacy Complaints → Request to Access Personal Information, etc. (I-PIN is required for identity verification)

○ This policy is effective from September 23, 2026.