한국마그네슘산업

Article 1. General Provisions

1. 1. “Personal Information” means any information that can identify a living individual, including but not limited to name, resident registration number, or video images (including cases where such information alone cannot identify an individual but can easily be combined with other data to do so).
2. 2. “Data Subject” refers to the individual to whom the processed personal information pertains (i.e., the website user).
3. 3. The Company publicly discloses this Privacy Policy on the homepage (www.koreamg.kr) to ensure users can easily access it at any time. Any amendments will be announced via website notices or individual notifications.

Article 2. Items of Personal Information Collected and Collection Methods

The Company does not process sensitive information or unique identification information that may infringe on personal privacy without legal basis or user consent.

1. The Company collects the following personal information for handling customer inquiries:

2. In the process of using website services, the following data may be automatically collected: IP address, cookies, access logs, and service usage records.

Article 3. Purpose of Collecting and Using Personal Information

The Company uses the collected personal information for the following purposes:

Article 4. Retention and Destruction of Personal Information

Personal information collected by the Company will be retained or destroyed as follows:

a. Retained Items: Customer inquiry data
b. Retention Period: Until the purpose of use is achieved
c. Upon Expiration: Destroyed immediately

1. If retention beyond the stated period is necessary, user consent will be obtained.
2. Where retention is required by law, the Company may keep personal data as prescribed by the relevant statutes.

Article 5. Procedures and Methods of Destruction

1. When the purpose of processing is achieved or the retention period expires, the Company promptly destroys the information unless otherwise required by law.
2. Personal information stored in electronic form is deleted using technical methods that make recovery impossible. Printed documents are shredded using mechanical means.

Article 6. Provision of Personal Information to Third Parties

The Company uses personal information within the scope described in Article 3 and does not provide or disclose it to third parties except in the following cases:

a. When separate consent is obtained from the data subject
b. When required by law or by a legitimate request from investigative authorities
c. When necessary to protect the life, body, or property of the data subject or a third party in emergencies

Article 7. Entrustment of Collected Personal Information

The Company does not outsource the handling of personal information without user consent. If outsourcing becomes necessary, the details and recipients of the entrusted tasks will be posted on the website.

Article 8. Rights of Users and Legal Representatives

Users may request access, correction, deletion, or suspension of their personal data. However, the Company may refuse or limit requests that conflict with legal obligations or the rights of others.

a. Requests can be made via written form, email, or fax.
b. The Company will respond within 10 days, or provide reasons for delay within 5 days.
c. Verification of identity (e.g., ID card, digital signature) may be required for such requests.

Article 9. Withdrawal of Consent

Users may withdraw their consent to the collection and use of personal information at any time by contacting the Personal Information Protection Officer. Upon withdrawal, the data will be deleted promptly, and users will be notified of the result.

Article 10. Technical and Managerial Safeguards

The Company implements the following measures to prevent loss, theft, leakage, alteration, or damage of personal data:

• Technical: Secure storage, encryption, antivirus software, intrusion prevention systems
• Managerial: Limited access, staff training, strict handover procedures
• Physical: Locked storage rooms, access control in data centers

Article 11. Personal Information Protection Officer and Complaint Services

The Company designates the following personnel responsible for data protection and handling user inquiries:

Personal Information Protection Officer
Name: -
Department: -
Position: -
TEL: +82-55-587-5780
E-mail: -

Data Protection Manager
Name: -
Department/Position: -
TEL: +82-55-587-5780
E-mail: -

For external inquiries regarding privacy violations, please contact the following agencies:

- Personal Information Dispute Mediation Committee: 02-405-5150 (www.kopico.or.kr)
- Personal Information Infringement Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office Cybercrime Division: 02-3480-3571 (cybercid@spo.go.kr)
- National Police Agency Cyber Bureau: 1566-0112 (cyberbureau.police.go.kr)

Article 12. Supplementary Provisions

Any addition, deletion, or revision to this Privacy Policy will be notified in advance through the official website of Korea Magnesium Industry.

Established: September 17, 2025
Last Revised: September 17, 2025