LOTTE ENERGY MATERIALS (hereinafter referred to as the “Company”) collects, uses, and processes personal information in compliance with relevant laws and regulations, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. This personal information processing policy has been prepared based on the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., and applies to all cases where the Company processes personal information.

The Company highly values the personal information provided by information subjects to use our services and does its best to protect their personal information. The Company's personal information processing policy may change due to enactment or revision of laws, changes in government policies, changes in the Company's internal policies, etc., so we post changed matters on the website so that information subjects can easily check them.

1. Purpose of Processing Personal Information

The Company processes personal information for the following purposes. Personal information processed will not be used for purposes other than the following, and if the purpose changes, we will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
① Product Inquiry: Responding to and supporting inquiries related to LIB, R&D, PKG/PCB, Application, and R&D products
- Service Response: Responding to sales inquiries, handling product complaints, preserving records for dispute resolution
- Service Provision: Responding to requests for sample delivery and service provision
② IR Inquiry: Managing investor relations and providing investment-related information such as disclosures, shareholders, and stock prices
③ HR Inquiry (Recruitment): Conducting recruitment procedures and responding to related inquiries
④ Report Submission: Receiving reports related to ethical management, fair trade, and other suggestions for management improvement concerning the Company and its employees
⑤ Visitor Management: Identifying and authenticating visitors, verifying vehicles, checking eligibility for entry, managing visitors, and confirming entry records
⑥ Site Membership Registration: Identifying and authenticating members, providing services

2. Items and Collection Methods of Personal Information Processed and Retention Period

① The Company collects and uses the following personal information items. Personal information is processed only with the consent of the information subject.
A. Personal information items processed without the consent of the information subject

Please swipe the screen left or right to check.

B. Personal Information Items Processed with the Consent of the Data Subject

Please swipe the screen left or right to check.

② The company collects personal information through the following methods:
- When personal information is provided during the inquiry process via email or phone reception
- When the data subject agrees to the collection of personal information and directly inputs the information during the membership registration and service usage process
③ The company does not use the collected personal information for purposes other than those intended. If the purpose of use changes, the company will take necessary measures, such as obtaining separate consent in accordance with relevant laws and regulations.

3. Period of Retention and Use of Personal Information

① The company processes and retains personal information within the period of retention and use of personal information as prescribed by law or within the period of retention and use of personal information agreed upon when collecting personal information from the data subject.
② The periods agreed upon when collecting personal information from the data subject are as follows:
a. Retention period for personal information related to HR (recruitment) inquiries: 6 months after the end of recruitment
b. Retention period for personal information related to ESG inquiries: 1 year
c. Retention period for visitor management records at business locations: 1 year after the end of the visit
d. Retention period for personal information related to SRM system membership registration: Until membership withdrawal or disqualification
e. Retention period for personal information related to EHS system membership registration: 100 days after membership withdrawal, after which it will be destroyed
f. Retention period for personal information related to the use of the patent management system: 1 year from the date of collection
③ Personal information that must be retained for a certain period according to relevant laws is as follows:

Please swipe the screen left or right to check.

④ However, in the following cases, personal information will be retained until the relevant reason is resolved:
a. If an investigation or inquiry related to the violation of relevant laws is in progress, personal information will be retained until the investigation or inquiry is concluded.

4. Entrustment of Personal Information Processing

① The company entrusts the personal information of the data subject as follows to provide smooth services.

Please swipe the screen left or right to check.

② When entering into an entrustment contract, the company specifies in the contract or other documents matters concerning the prohibition of processing personal information for purposes other than the performance of entrusted tasks, technical and managerial protection measures, restrictions on re-entrustment, management and supervision of the trustee, compensation for damages, etc., in accordance with Article 26 of the Personal Information Protection Act, and supervises whether the trustee safely processes personal information.
③ If there are any changes to the entrusted companies or the content of the entrusted tasks, we will notify you through one or more methods such as written notice, email, phone, SMS, website notice, or similar methods.

5. Rights of Data Subjects (Users) and Legal Representatives and Methods of Exercising Those Rights

① Data subjects can exercise their rights to access, correct, delete, suspend processing, and withdraw consent (hereinafter referred to as 'request for access, etc.') of their registered personal information at any time.
② The exercise of rights can be made to the company in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act through written documents, phone calls, mail, or the internet, and the company will take action within 10 days from the date of the request unless there is a justifiable reason.
③ The exercise of rights can also be made through a legal representative of the data subject or a delegated person. In this case, a power of attorney in accordance with Form No. 11 of the Notice on the Methods of Processing Personal Information must be submitted.
④ The rights to request access and suspension of processing of personal information may be restricted under Articles 35, Paragraph 4, and 37, Paragraph 2 of the Personal Information Protection Act.
⑤ If the personal information is specified as a collection target by other laws, the deletion of the personal information cannot be requested.
⑥ The company will verify whether the person making the request for access, correction, deletion, suspension of processing, or objection to automated decisions and explanations is the data subject or a legitimate representative.
⑦ Data subjects should enter their personal information accurately and up-to-date to prevent unexpected accidents. The responsibility for accidents caused by inaccurate information entered by the data subject lies with the data subject, and legal issues may arise if false information, such as the use of another person's information, is entered.
⑧ In principle, the company does not collect personal information from minors. If it is necessary to collect personal information from minors due to business needs, the company will obtain prior consent from the legal representative and destroy the information without delay once the purpose of collection and use is achieved or the retention period agreed upon at the time of collection expires.
⑨ Data subjects can request access to their personal information from the following department. The company will strive to process requests for access to personal information promptly.
▶ Department for Receiving and Processing Requests for Access to Personal Information
Department name: DT team
Contact information: (+)2-707-9720, hwkim_@lotte.net

6. Destruction of Personal Information

① The company, in principle, destroys personal information without delay when the retention period has expired or the processing purpose has been achieved, as follows:
a. Personal information printed on paper: Shredded with a shredder or incinerated
b. Personal information stored in electronic form: Permanently deleted using a method that makes restoration impossible
② If the retention period of personal information agreed upon by the data subject has expired or the processing purpose has been achieved, but the personal information must be preserved in accordance with other laws, the relevant personal information (or personal information files) will be moved to a separate database (DB) or stored in a different location.

7. Measures to Ensure the Security of Personal Information and Technical and Managerial Measures

The company takes the following measures to ensure the security of personal information:
① Managerial Measures: Establishment and implementation of internal management plans, regular employee training
② Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of personal information, masking of personal information, installation of security programs, periodic updates and inspections, storage and prevention of tampering with access records
③ Physical Measures: Storage of documents, auxiliary storage media, etc., containing personal information in a secure location with locking devices

8. Collection of Opinions and Handling of Complaints Related to Personal Information

① Data subjects can apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, etc., to seek remedies for personal information infringement. For other reports or consultations on personal information infringement, please contact the following organizations:
1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
4. National Police Agency: 182 (ecrm.cyber.go.kr)
② The company strives to guarantee the data subject's right to self-determination regarding personal information and to provide consultation and remedies for personal information infringement. If you need to report or consult, please contact the Personal Information Protection Officer and the relevant department specified in Article 9.

9. Personal information protection officer

The Company has the person in charge of customer service, personal information protection officer, and the person in charge of personal information protection to handle matters related to personal information, and receive and respond to complaints from customers who provided personal information.
▶ Personal information protection officer
Name: Kim Jeong-tae
Department name: DT team
Contact information : (+82)2-707-9156, jungtae.kim@lotte.net
▶ Person in charge of personal information protection
Name: Kim Hyo-won
Department name: DT team
Contact information : (+82)2-707-9720, hwkim_@lotte.net

10. Changes to the Privacy Policy

In the event of any additions, deletions, or corrections to the contents of this policy due to changes in laws or policies, we will notify you through announcements at least 7 days before the changes take effect. However, if there are significant changes to the rights of data subjects, such as the collection and use of personal information or provision to third parties, we will notify you at least 30 days in advance.
LOTTE Energy Materials values personal information and promises to do its best to ensure that data subjects can use the services with greater peace of mind.
• Announcement Date: February 25, 2025
• Effective Date: March 4, 2025