Personal Information Processing Policy

LG Magna e-Powertrain Co., Ltd. (hereinafter referred to as the “Company”) protects users’ personal information in accordance with the ‘Personal Information Protection Act’ and the ‘Act on Promotion of Information and Communications Network Utilization and Information Protection’ etc. and the following Personal Information Processing Policy has been established and implemented so that any related grievances may be processed promptly and smoothly.

• Article 1. Purpose of Processing, Collection, and Use of Personal Information
• Article 2. Personal Information Items and the Method of Collection
• Article 3. Processing, Usage, and Retention Period of Personal Information
• Article 4. Provision of Personal Information to Third parties
• Article 5. Consignment of Personal Information Processing
• Article 6. Rights and Obligations of Information Subjects (Users) and Methods of Exercise
• Article 7. Procedure and Method of Destruction of Personal Information
• Article 8. Measures to Ensure the Security of Personal Information
• Article 9. Matters Concerning the Purpose and Rejection of Automatic Collection of Personal Information
• Article 10. Chief Personal Information Protection Manager
• Article 11. Remedies for an Infringement of Rights
• Article 12. Amendments to the Personal Information Processing Policy

---

Article 1. Purpose of Processing, Collection, and Use of Personal Information

The Company processes personal information for the purpose of 1:1 inquiries on the homepage, general inquiries through online channels, and in response to product inquiries and grievances. Personal information shall not be used for any other purpose except for those as specified below, and where the purpose of use changes, the Company shall implement necessary measures in accordance with the Personal Information Protection Act, such as by obtaining additional consent.

---

Article 2. Personal Information Items and the Method of Collection

The Company collects the following personal information from users:

1. Purpose of Personal Information Collection and Items

Purpose	Target	Collected Information
Responding to customer inquiries	Inquiries through the homepage	Required Item : E-mail address Optional Item : None
System security	Homepage visitor	Required Item : Usage record Optional Item : None
System security	Homepage visitor	Required Item : Visit record Optional Item : None
System security	Homepage visitor	Required Item : Access log information Optional Item : None
System security	Homepage visitor	Required Item : IP information Optional Item : None
System security	Homepage visitor	Required Item : Statistical data Optional Item : None

In the process of using online services, usage records, visit records, access log information, IP information, and statistical data are automatically collected for system security purposes. The user may refuse the collection of these items, however, such refusal may make it difficult for the Company to provide services to the user.

※ In principle, the Company restricts the use of its services for minors under the age of 14. Minors under the age of 14 require a legal representative.

2. Method of Collection of Personal Information
Online collection: Collection of information directly entered by users through the homepage.

---

Article 3. Processing, Usage, and Retention Period of Personal Information

The Company processes and retains personal information for the duration of the period of personal information retention and use that was agreed upon when collecting personal information from the information subject. The Company shall destroy the personal information without delay after achieving the purpose of collection and usage of the personal information.

The respective periods of personal information retention/usage are as follows:

Purpose	Homepage 1:1 customer inquiries, general/product inquiries, system security
Retention period	3 months

In addition, where the Company needs to retain the collected personal information for a certain period in accordance with the provisions of relevant legislation, it may retain the personal information for that period.

---

Article 4. Provision of Personal Information to Third parties

When collecting users’ personal information, the Company shall process it only within the scope of the stated purpose and shall not provide it to others, other companies, or other institutions.
However, personal information shall be provided to a third party only where prior consent from the user has been obtained or where it falls under special regulations in the Personal Information Protection Act and other legislations, and where personal information is provided in a form that does not identify a specific individual as necessary for statistical preparation or academic research purposes, separate consent procedure may not be performed.

---

Article 5. Consignment of Personal Information Processing

The Company shall consign the following personal information processing tasks in order to provide a smooth service, and in accordance with Article 26 of the Personal Information Protection Act, the Company shall prohibit the processing of personal information other than for the purpose of performing consigned tasks, technical and administrative protection measures, restrictions on re-consignment, management and supervision, and matters concerning the responsibilities of the trustee, such as compensation for damages, are specified separately in documents such as contracts, and the trustee shall manage and supervise whether it is processed safely.

Consignee (Trustee)	Description of the consigned tasks
Amazon Web Service	Data storage
LGCNS	System development and maintenance, personal information security management

※ Where the details of the above consignee or consigned task are changed, the Company shall reflect such a change through this Personal Information Processing Policy without delay.

---

Article 6. Rights and Obligations of Information Subjects (Users) and Methods of Exercise

Users have the right to request the viewing, correction, deletion and suspension of processing of personal information related to the protection of personal information, and the Company shall handle such a request without delay when requested by the user. The exercise of rights may be conducted in writing, by telephone, or by e-mail, etc., and through an agent such as the user’s legal representative or a person who has been so delegated.

Where a user requests the correction or deletion of any error, etc., in their personal information, the Company shall not use such personal information or provide it to a third party until the correction or deletion is completed.

Users and their legal representatives reserve the right to protect their personal information, as well as the obligation not to infringe on the personal information of others, and shall take care not to leak or cause damage to the personal information of users and legal representatives, such as through postings.
Where a user fails to fulfill the above obligations and violates or damages the personal information of others, said user may be prosecuted according to the relevant laws.

---

Article 7. Procedure and Method of Destruction of Personal Information

The Company destroys personal information without delay where such personal information becomes unnecessary, such as after the expiration of the retention period or the achievement of the purpose of processing, and the procedure and method is as follows:

1. Destruction procedure: Personal information that is to be destroyed is selected and destroyed without delay except where other laws and regulations require the personal information to be retained.
2. Destruction method: Personal information recorded and stored in electronic file format uses a technical method that cannot save a record, and personal information recorded and stored on paper is destroyed by shredding with a shredder or by incineration.

※ Where the personal information retention period agreed by the user has expired or the personal information is required to be retained according to other laws even after the purpose of processing has been achieved, it shall be stored in a different storage location.

---

Article 8. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information:

1. Administrative measures
   • The Company establishes and implements an internal management plan for the safe management of personal information.
   • The Company conducts information security training for personnel authorized to process personal information on a regular basis at least once per year.
   • The Company minimizes and manages the number of people who have access to key personal
2. Technical measures
   • The Company encrypts personal information and alternates management access rights so that only those who require access for work may access it.
   • By operating a service access control system and access record forgery/falsification device, the Company blocks unauthorized access and is prepared against external intrusion such as hacking.
   • A security program is installed to prevent the unauthorized external transmission of personal information.
   • Personal information is safely transmitted through encryption of the transmission interval.
3. Physical measures
   • Access is controlled by operating protected areas such as computer rooms and data storage rooms.

---

Article 9. Matters Concerning the Purpose and Rejection of Automatic Collection of Personal Information

The Company uses ‘cookie’ information to periodically store and retrieve user information to provide a personalized service. Cookies refer to very small text files that the server uses to operate the Company website when it is sent to the user’s browser and is stored on the user’s computer hard disk.
Cookies do not automatically or actively collect personally identifiable information, and users may refuse the storage of or delete these cookies at any time.

1. Purpose of use of cookies, etc.
   In order to provide a better service to customers, Google, Inc. (hereinafter referred to as “Google”) uses Google Analytics, a web analytics service provided by Google, to collect anonymous cookie information (demographic data, etc.) to analyze and evaluate how customers use a company’s service, and its goal is to provide an efficient service by improving and customizing services and products.
   
   The processing of information collected through Google Analytics is governed by the Google Privacy Policy and the Google Analytics Terms of Use:
   1. Google Privacy Policy : https://www.google.com/intl/ko/policies/privacy/
   2. Google Analytics Terms of Use : https://www.google.com/analytics/terms/kr.html
   
   The Company does not collect personally identifiable information through Google Analytics and does not combine the collected information with personally identifiable information obtained through other sources.
   
   
2. How to refuse cookies
   Users reserve the right to reject the use of cookies. Users may opt-out of automated cookie information collection through the following method:
   1. How to reject cookies using the browser
      [ Internet Explorer ]
      – Select [Internet Options] in the [Tools] menu.
      – Select [Advanced] in the [Privacy] tab.
      – ‘Block’ under [How to Reject Cookies]
      [ Chrome ]
      – Select [Settings] from the [More] menu in the top right.
      – Select [Advanced] at the bottom.
      – In [Privacy and Security], select [Content Settings]
      – Select [Cookies] and click ‘Disable’ under [Allow sites to store and read cookie data].
   2. Install the Google Analytics Blocking browser add-on: https://tools.google.com/dlpage/gaoptout

---

Article 10. Chief Personal Information Protection Manager

The Company has appointed a personal information supervisor who shall take responsibility for the overall processing of personal information and handle complaints and damage relief for information subjects as follows: All inquiries, complaints, damage relief, etc., arising from the use of the Company’s services (or business) may be conducted through the personal information protection manager and the Company shall respond to and handle such inquiries without delay.

• Personal Information Protection Manager: Information Security Head of Department
• Personal Information Protection Department: Information Security Department
• TEL: 032-723-1820
• For inquiries: lgmagna.cpo@lgmagna.com

---

Article 11. Remedies for an Infringement of Rights

The user may contact the following organizations for inquiries regarding damage relief of the infringement of personal information and other related inquiries.
The following organizations are separate organizations independent of the Company, and should be contacted for further assistance if you are not fully satisfied with the Company’s handling of complaints or remedies provided.

---

Article 12. Amendments to the Personal Information Processing Policy

This Privacy Policy is effective as of July 1, 2021.