Consulting Inquiry

1. Purpose of Processing Personal Information ①<YMJ Technology Co., Ltd.> (hereinafter referred to as "the Company") collects and processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than those specified below. If the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act. ②The purposes of processing personal information are as follows: 1. Handling customer email inquiries 2. Utilization for marketing and advertising purposes ※ The Company does not collect sensitive information (such as beliefs, political opinions, union or political party affiliation, health, sexual life, etc.) or unique identification information unless permitted by law or with the consent of the data subject. 2. Retention and Use Period of Personal Information ①The Company processes and retains personal information within the retention and use period agreed upon when collecting personal information from the data subject or as stipulated by law. - Records related to contracts or withdrawal of subscriptions: 5 years (Act on Consumer Protection in Electronic Commerce) - Records related to payment and supply of goods, etc.: 5 years (Act on Consumer Protection in Electronic Commerce) - Records related to consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce) - Records related to tax evidence: 5 years (Basic National Tax Act) - Items to be retained: Name, Email, Telephone number, Mobile number, Address 3. Provision of Personal Information to Third Parties ①The Company does not provide users' personal information to external parties without consent. However, exceptions apply in the following cases: 1. When required by law or inevitable to comply with legal obligations 2. When it is impossible to obtain prior consent due to incapacity or unknown address of the data subject and it is deemed necessary for urgent life, physical safety, or property interests of the data subject or a third party 3. When requested by investigative agencies according to legal procedures and methods for investigative purposes ②If there is a change in third-party providers or when provision of personal information beyond the agreed scope is required, the Company will obtain separate consent from users. 4. Rights of Users and Legal Representatives and How to Exercise Them ①As personal information subjects, users and legal representatives have the following rights: 1. Request to access personal information 2. Request correction if there are errors 3. Request deletion 4. Request suspension of processing ②To exercise these rights, users may contact the Company's website, personal information protection officer, or the relevant department in writing, by phone, or via email, and the Company will take action without delay. ③Personal information that is deleted or whose processing is suspended at the user's or legal representative's request is processed according to the retention and use period mentioned in "2. Retention and Use Period of Personal Information" and is not viewed or used for other purposes. 5. Items of Personal Information Processed ①For customer inquiry handling: 1. Name 2. Email 3. Contact number 4. Affiliation 5. Position ②For training application purposes: 1. Name 2. Email 3. Contact number 4. Affiliation 5. Position 6. Destruction of Personal Information The Company shall, in principle, destroy personal information without delay when the purpose of processing has been achieved. The procedures, deadlines, and methods of destruction are as follows: - Destruction procedure Information entered by the user will be transferred to a separate database (or stored in paper form if applicable) after the purpose is achieved and will be stored for a certain period in accordance with internal policies and other relevant laws before being destroyed. Personal information transferred to the database will not be used for any other purpose unless required by law. - Destruction deadline Personal information whose retention period has expired shall be destroyed within five (5) days from the expiration date. Personal information that has become unnecessary (due to the achievement of processing purpose, service termination, or business closure) shall be destroyed within five (5) days from the date it is deemed unnecessary. 7. Installation and Operation of Automatic Personal Information Collection Devices The Company does not use cookies to store or retrieve visitor information on its website (www.ymjt.co.kr). 8. Additional Policies on Personal Information Handling ①Measures for Securing the Safety of Personal Information The Company takes the following administrative, technical, and physical measures to prevent personal information from being lost, stolen, leaked, altered, or damaged. 1. Administrative measures: Establishing, complying with, and supervising internal regulations, conducting regular training, etc. 2. Technical measures: Access control to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs, etc. 3. Physical measures: Access control and monitoring system for computer rooms, data storage rooms, etc. ②Refusal of Unauthorized Email Collection The Company does not allow unauthorized collection of email addresses posted on its website using email collection programs or other technical devices. Violations may be subject to punishment under the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. 9. Personal Information Protection Officer ①The Company designates the following person responsible for handling personal information to oversee the processing of personal information and to handle complaints and relief requests from information subjects. ▶ Personal Information Protection Officer Contact: +82-41-565-1950 Email: richard100@ymjt.co.kr Business hours: (Mon–Fri) 09:00~18:00 (Closed on weekends and public holidays) ②Users may contact the Personal Information Protection Officer and the responsible department for any inquiries, complaints, or requests for damage relief related to personal information protection while using the Company's services. The Company will respond and handle inquiries without delay. 10. Remedies for Infringement of Rights ①In case of disputes or infringements regarding personal information, users may contact the following agencies for resolution or consultation: 1. Personal Information Infringement Report Center (operated by Korea Internet & Security Agency) - Website: privacy.kisa.or.kr - Tel: 118 - Address: (58324) 9 Jinheung-gil, Naju-si, Jeollanam-do, 3rd floor, Personal Information Infringement Report Center 2. Personal Information Dispute Mediation Committee - Website: www.kopico.go.kr - Tel: 1833-6972 - Address: (03171) 209 Sejong-daero, Jongno-gu, Seoul, Government Complex Seoul, 4th floor 3. Supreme Prosecutors' Office Cyber Investigation Department - Tel: 1301 - Website: http://spo.go.kr 4. National Police Agency Cyber Bureau - Tel: 182 - Website: http://cyberbureau.police.go.kr

---