SAMSUNG ELECTRO-MECHANICS

Article 1 (Purpose of Processing Personal Data)

SEM processes personal data for the following business purposes. If the purpose of processing is changed, necessary measures will be implemented, as required under applicable local law, such as obtaining a separate consent under Article 18 of the Personal Information Protection Act. Note that any references to consent are only to the extent, and in the manner, required by applicable local law.

Article 2 (Items of Personal Data Processed)

① SEM processes the following items of personal data:

Article 3 (Processing of Personal Data and Period of Retention)

1. ① SEM processes and retains personal data within the personal data retention and use period under laws or the personal data retention and use period agreed when collecting personal data from data subjects.
2. ② The period for processing and retaining personal information is as follows:
   1. 1. Ethical Management/Security Reporting/Compliance Management Reporting/Product Inquiries/Technical Inquiries/Certificates/Recruitment Inquiries/Corporate Data/IR/Partnership Inquiries: The personal data will be retained for one year and then destroyed. However, personal data for which the retention and use period has expired may be preserved without being destroyed if it is required to be preserved under other laws or where a separate consent has been obtained.
   2. 2. Newsletter: Personal data processing and retention period is until the application for newsletter opt-out. However, in cases where personal information is required to be preserved under other laws or separate consent has been obtained, it may be preserved without being destroyed even after the period of retention and use has elapsed.

Article 4 (Destruction of Personal Data)

1. ① When personal data is no longer needed due to the expiration of the personal data retention period, achievement of the purpose of processing, etc., SEM shall promptly destroy the relevant personal data without delay.
2. ② If SEM is required to preserve personal data in accordance with other laws and regulations even when after the personal data retention period agreed by the data subject has elapsed or the purpose of processing has been achieved, SEM may transfer the personal data to a separate database or store it in a different storage location.
3. ③ The procedure and method of destroying personal data are as follows:
   1. 1. Destruction procedure
      SEM selects personal data for which reasons for destruction have occurred, and destroys such data with the approval of SEM’s chief privacy officer.
   2. 2. Destruction method
      SEM destroys personal data recorded and stored in electronic file form in such a way that records cannot be reproduced, and destroys personal data recorded and stored in paper document by shredding or incinerating.

Article 5 (Provision of Personal Data to Third Parties)

1. ① SEM processes the personal data of the data subjects only within the scope specified in the Purpose of Personal Data Processing, and provides personal data to third parties only when it falls under Articles 17 and 18 of the Personal Information Protection Act, and otherwise, does not provide the personal data of the data subjects to third parties.

Article 6 (Delegation of Personal Data Processing)

1. ① SEM delegates the processing of personal data as follows for the smooth processing of personal data:

   Article 6 (Delegation of Personal Data Processing)

   No.	Name of Delegatee	Delegated Work	Representative Phone No.
   1	The Uber Creative Co., Ltd.	Operate and maintain website, send newsletters	+82-2-517-5133
   2	Samsung SDS Co., Ltd.	Operate computer system	+82-2-6155-3114

2. ② When executing a delegation agreement, SEM specifies in the contract or other written documents matters concerning the prohibition of processing personal data for purposes other than carrying out the delegated work, technical and managerial protection measures, restrictions on sub-delegation, management and supervision of the delegatee, matters concerning liability such as compensation for damages, etc. pursuant to Article 26 of the Personal Information Protection Act. Furthermore, SEM also supervises whether the delegatee processes personal data safely.
3. ③ Pursuant to Article 26(6) of the Personal Information Protection Act, if the delegatee sub-delegate the processing of SEM’s personal data, the delegate must obtain SEM’s consent.
4. ④ If the content of the delegated work or the delegatee is changed, SEM will immediately notify such change through this Privacy Policy.

Article 7 (Measures to Ensure Security of Personal Data)

1. ① SEM takes the following measures to help ensure the safety of personal data:
   1. 1. Managerial measures
      • - Establishment and implementation of an internal management plan: SEM establishes and implements an internal management plan to ensure the safe processing of personal data.
      • - Minimization and training of personnel handling personal data: SEM manages personal data by designating and minimizing the personnel who handle such data, and provides regular training for the employees who handle personal data.
   2. 2. Technical measures
      • - Restriction on access to personal data: SEM takes necessary measures to control access to personal data by granting, changing, and cancelling access rights to the database system that processes personal data. In addition, SEM uses intrusion prevention system to control unauthorized external access.
      • - Retention of access logs and prevention of forgery and alteration: SEM retains and manages access logs to personal data processing system (web log, summarized data, etc.) in accordance with relevant laws and regulations, and uses security functions to prevent forgery, alteration, theft, and loss of access records.
      • - Encryption of personal data
      • - Technical measures against hacking, etc.: In order to prevent leakage and damage of personal data caused by hacking, computer virus, etc., SEM (i) installs security programs and conducts regular updates and inspections, and (ii) installs systems in areas with controlled external access, and monitors and blocks unauthorized access both technically and physically. Furthermore, SEM not only monitors network traffic but also detects attempts to illegally alter data, etc.
   3. 3. Physical measures
      • - Control of access against unauthorized persons: SEM has designated a separate physical storage place for the personal data system that stores personal data, and has established and implemented the access control procedures for this area.

Article 8 (Matters Concerning Installation, Operation and Refusal of Automatic Personal Data Collection Device)

1. ① SEM uses cookies to store and retrieve usage data from time to time for purposes such as analyzing the service usage status and maintaining user sessions.
2. ② Cookies are small pieces of data that a server (http), used to operate a website, sends to the data subject’s browser. They are stored on the data subject’s computer or mobile devices and are automatically transmitted from the data subject’s browser to the server when accessing the website.
3. ③ Data subjects can allow or block cookies by adjusting the browser setting. However, if data subjects block the cookies, they may experience difficulties in using the service.

   <How to allow block cookies>

   1. 1. Allowing/blocking cookies in web browsers

      • - Chrome: Select the ‘⋮’ icon in the top right corner of the web browser > New Incognito window (Shortcut: Ctrl+Shift+N)
      • - Edge: Select the ‘…’ icon in the top right corner of the web browser > New InPrivate window (Shortcut: Ctrl+Shift+N)

   2. 2. Allowing/blocking cookies in mobile browsers

      • - Chrome: Select the ‘⋮’ icon in the top right corner of the mobile browser > New Incognito tab
      • - Safari: Go to Device Settings > Safari > Advanced > Block All Cookies
      • - Samsung Internet: Select the ‘Tabs’ icon at the bottom of your mobile browser > Turn on Secret Mode > Start

4. ④ SEM processes the following behavioral information on its website:

   Legal Basis	Items collected	Collection method	Purpose of collection	Retention and use period
   Article 15(1)4 of the Personal Information Protection Act (Execution and performance of a contract)	IP address, cookies, service usage records, access records	Automatically collected upon visiting and using the website	Check visit records and security access status, verify user errors through this process, and prevent misuse	See Article 3

Article 9 (Matters Concerning Processing of Behavioral Data and Refusal Thereto)

1. ① When a data subject visits or uses SEM’s website, SEM allows third parties to collect cookies through an automatic collection device for more effective service use. The following behavioral information is collected by third parties from the SEM’s main website.

   Name of collection device	Type of collection device	Collecting entity	Items of behavioral information collected	Purpose of collection
   Google Analytics	Java Script (web page)	Google LLC	Website visit/search history, browser information of the data subject	Statistical analysis of website usage
   NAVER Analytics	Java Script (web page)	Naver Corporation	Website visit/search history, browser information of the data subject	Statistical analysis of website usage

2. ② A data subject may set preference such as allowing or blocking the collection of behavioral information by third parties pursuant to Article 8, Paragraph 3.
3. ③ SEM does not process behavioral data for the purpose of customized online advertisements, etc.

Article 10 (Rights and Obligations of Data Subjects and their Legal Representatives and Method of Exercise Thereof)

1. ① Data subjects (or their legal representative, in case of data subjects under the age of 14) may, at any time, request SEM to provide access to, transmit, correct, delete, suspend the processing of, and withdraw consent to the processing of their personal data (“Exercise of Rights”).
2. ② Data subjects may request Exercise of Rights by means such as in writing, by telephone, e-mail, internet, etc. in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and SEM shall take action without delay.
3. ③ The Exercise of Rights may also be performed through an agent, such as the data subject’s legal representative or delegated agent. In such cases, a power of attorney form as prescribed in Form 11 of the Notification on the Method of Processing Personal Information must be submitted.
4. ④ The rights to request access to or suspension of the processing of personal data may be restricted under Articles 35 (4) and 37 (2) of the Personal Information Protection Act.
5. ⑤ If certain personal data is specified as a subject for collection under other laws and regulations, the data subjects cannot request to delete such data.
6. ⑥ SEM verifies whether the person exercising these rights is the data subject themselves or their legitimate agent.

Article 11 (Exercise of Rights by Data Subjects)

1. ① Data subjects may request Exercise of Rights through the department listed below. SEM will promptly process the data subject’s request for the Exercise of Rights within 10 days from receiving such a request pursuant to the Personal Information Protection Act.

   Classification	Name of Department	Contact Information
   Department responsible for receiving and processing requests for access to personal information	Privacy office	Phone number: +82-31-210-5114 Email: privacy.semco@samsung.com

Article 12 (Chief Privacy Officer)

1. ① SEM has designated the following chief privacy officer as the person responsible for overseeing all matters related to the processing of personal data, and to handle data subjects’ complaints and provide damage relief regarding the processing of their personal information.

   Classification	Manager/Department	Contact Information
   Chief privacy officer	Legal Team Leader	Phone number: +82-31-210-5114 Email: privacy.semco@samsung.com ※ It is connected to the department in charge of personal information protection
   Department in charge of personal information protection	Legal team Privacy office	Phone number: +82-31-210-5114 Email: privacy.semco@samsung.com

2. ② The data subject may contact the chief privacy officer or the department in charge of personal information protection regarding all inquiries, complaint handling, damage relief, etc. related to personal data protection that arise while using SEM’s main website. SEM will respond to and process the data subject’s inquiries without delay.

Article 13 (Remedies for Infringement of Rights)

1. ① A data subject may apply for a dispute resolution, consultation, etc., with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency’s Personal Information Infringement Reporting Center, etc., to seek remedies for personal data infringement. For other reports and consultation regarding personal data infringement, please contact the following organizations:
   • 1. Personal Data Dispute Mediation Committee (www.kopico.go.kr, +82-1833-6972)
   • 2. Personal Data Infringement Report Center (privacy.kisa.or.kr, +82-118)
   • 3. National Police Agency (ecrm.police.go.kr, +82-182)

Article 14 (Change to Privacy Policy)

1. ① This Privacy Policy will take effect as of July 28, 2026. If there are any additions, deletions or modifications to its contents due to changes in laws, policies or security technologies, the amended Privacy Policy will be disclosed on the website, etc.

For Consumers Residing in California

This section supplements the Samsung Electro-Mechanics’ Privacy Policy and applies to consumers who reside in California.

Article 1 (Collection, Use, and Disclosure of Personal data)

The chart below describes the categories of personal data that SEM collects, as well as the categories of third parties to whom we may disclose each category of personal data for our business purposes (as described below). SEM does not “sell” personal information or “share” personal information for cross-context behavioral advertising (as those terms are defined under applicable law). We do not use your sensitive personal data for purposes other than permitted under applicable local law.

1. ① Categories of Sources of Personal Data: SEM may have collected the categories of personal data described above about you from the following categories of sources:
   1. • From you, or your device, for example, through your use of our services; and
   2. • SEM’s affiliated companies which provide services on SEM’s behalf, such as web site operation support.
2. ② Business & Commercial Purposes for Collecting Personal Data: SEM may have collected personal data about you for the following business or commercial purposes (in addition to the purposes listed above in the Samsung Electro-Mechanics’ Privacy Policy):
   1. • Performing services, including providing customer service, verifying customer information, providing analytics services, or providing similar services;
   2. • Auditing, auditing compliance, short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with the business;
   3. • Helping to ensure the security and integrity of the service;
   4. • Debugging to identify and repair errors that impair existing intended functionality;
   5. • Undertaking internal research for technological development and demonstration; and
   6. • Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us.

Article 2 (Data Retention)

SEM takes appropriate steps to ensure that SEM processes and retains personal information about you for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. The criteria typically used to determine our retention periods include: (1) the duration for which the information is used to provide you with a service; (2) whether there is a legal obligation to which we are subject, including as required under law, a contract, or with regard to SEM’s statutory obligations (e.g., tax laws); or (3) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

Article 3 (Consumer Rights)

Subject to certain exceptions, you may have the right to make the following requests with respect to your personal data, at no charge:

1. ① Right to Know: You may have the right to request that SEM disclose personal data that SEM has collected, sold, or shared about you in the past 12 months, including:
   1. • the categories and specific pieces of personal data SEM has collected about you;
   2. • the categories of sources from which SEM collected the personal data;
   3. • the categories of personal data about you that SEM sold or disclosed for a business purpose, and the categories of third parties to whom SEM sold or disclosed that information for a business purpose.
   4. • the business or commercial purpose for which SEM collected or sold the personal data;
2. ② Right to Data Portability: You may have the right to request that personal data that has been collected and maintained about you be transferred to you via a secure method in a commonly used electronic format that allows you to transmit this data to another entity without hinderance.
3. ③ Right to Correct: You may have the right to requestion the correction of inaccurate or incomplete personal data that SEM has collected about you.
4. ④ Right to Delete: You may have the right to request that SEM delete the personal data SEM has collected about you.
5. ⑤ Non-Discrimination: SEM will not discriminate against you for exercising your rights and choices.
6. ⑥ Other California Rights:
   1. • Do Not Track: Some web browsers transmit “do-not-track” signals to websites. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. SEM currently does not take action in response to these signals.

To exercise your rights under applicable local law or if you are an authorized agent submitting a request on behalf of an individual under applicable local law, you may contact us at privacy.semco@samsung.com click here to submit a request through privacy.semco@samsung.com. SEM may require that you or your authorized agent provide us with your e-mail address for verification purposes. When SEM receives your request, SEM will review the information that you or your authorized agent provide and attempt to use it to verify your identity and residency by comparing it against the information SEM has on file. In addition, SEM may request information to demonstrate the agent’s authority to act on your behalf.