Hycore Co., Ltd. (hereinafter referred to as the "Company") has established and disclosed
this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to
protect the personal information of the data subject and to swiftly and smoothly address any
related concerns.
- This Privacy Policy will be effective from February 21, 2025.

Article 1 (For the Purpose of Processing Personal Information)
1. The Company processes personal information for the following purposes. The personal
information being processed will not be used for any purposes other than those stated
above. In the event of a change in the purpose of use, necessary measures, such as
obtaining separate consent in accordance with Article 18 of the Personal Information
Protection Act, will be implemented.
 1) Utilization for the purpose of business partnerships/proposals
2) Utilization for the purpose of dealership partnerships/proposals

Article 2 (Processing and Retention Period of Personal Information)
1. The Company processes and retains personal information within the personal information
retention and usage period agreed upon by the data subject or as required by law.
2. The retention and processing periods for each type of personal information are as follows:
<Business Partnerships/Proposals> related personal information will be retained and used
for the purposes stated above from the date of consent for collection and use.
Retention basis: Personal Information Protection Act Article 15 (Consent of the Data
Subject)
Related laws:
    1) Records related to the collection/processing and use of credit information: 3 years
    2) Records related to handling consumer complaints or disputes: 3 years
    3) Records related to payment and supply of goods or services: 5 years
    4) Records related to contracts or withdrawal of offers: 5 years

Article 3 (Categories of Personal Information Processed)
1. The Company processes the following personal information categories.
    1) Required items: Company (Organization) Name, Name, Contact Information

Article 4 (Procedures and Methods for Disposal of Personal Information)
1. The Company will promptly dispose of personal information when it is no longer
necessary, such as when the retention period has expired or the purpose of processing has
been achieved.
2. The procedures and methods for disposing of personal information are as follows:
  1) Disposal Procedure:
    The company selects personal information for disposal when a disposal reason arises and
disposes of it after obtaining approval from the company’s personal information protection
officer.   
2) Disposal Method
    Information in electronic file format is disposed of using a technical method that ensures
the records cannot be restored. For paper documents, a shredder is used for disposal.

Article 5 (Rights, Obligations, and Methods of Exercise for Data Subjects and Legal Representatives)
1. The data subject may exercise rights such as requesting access, correction, deletion, or
suspension of processing of their personal information at any time with the company.
2. The exercise of rights under Paragraph 1 can be done in writing, via email, fax, or other
means in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the
Personal Information Protection Act. The company will take prompt action in response.
3. The rights under Paragraph 1 can be exercised through a legal representative or an
authorized agent. In this case, a power of attorney in accordance with Appendix 11 of the
"Notice on Personal Information Processing Methods (No. 2020-7)" must be submitted.
4. Requests for access to personal information and suspension of processing may be
restricted in accordance with Article 35, Paragraph 4 and Article 37, Paragraph 2 of the
Personal Information Protection Act.
5. Requests for correction and deletion of personal information cannot be made if the
information is explicitly designated as a target for collection under other laws.
6. The company will verify whether the person making the request for access, correction,
deletion, or suspension of processing is the data subject or a legitimate representative.

Article 6 (Measures to Ensure the Security of Personal Information)
The company takes the following measures to ensure the security of personal information.
1. Establishment and implementation of internal management plans.
    An internal management plan is established and implemented to ensure the secure
processing of personal information.
2. Access restriction to personal information
    Necessary measures are taken to control access to personal information by granting, changing, or revoking access rights to the database system processing personal information.
Additionally, an intrusion prevention system is used to block unauthorized access from
external sources.
3. Use of locking devices for document security.
    Documents and external storage devices containing personal information are stored in secure locations with locking devices.

Article 7 (Details of the Personal Information Protection Officer)
1. The company is responsible for overseeing and managing personal information processing and has designated a personal information protection officer as outlined below to handle complaints and remedy damages related to the processing of personal information.
    ▶ Personal Information Protection Officer
    Name: Sam Lee
    Position: CFO
    Contact Information: 1588-2063, op@hycore.com
2. The data subject may contact the Personal Information Protection Officer and the relevant department for any inquiries, complaints, or remedies related to personal information protection that arise while using the company’s services. The company will promptly respond to and address any inquiries from the data subject.

Article 8 (Department Responsible for Receiving and Handling Personal Information
Access Requests)
The data subject may submit a request for access to personal information in accordance with Article 35 of the Personal Information Protection Act to the department listed below.
The company will make efforts to ensure that the request for access to personal information is processed promptly.
    ▶ Department for Receiving and Handling Personal Information Access Requests
    Department Name: Management Support Department

    Person in Charge: Sam Lee
    Contact Information: 1588-2063, op@hycore.com

Article 9 (Remedies for Infringement of Data Subject's Rights)
The data subject may apply for dispute resolution or consultation to the Personal Information
Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, etc., to seek remedies for personal information
infringements. For other reports or consultations regarding personal information infringements, please contact the following organizations.
    1. Personal Information Dispute Mediation Committee: (no area code)1833-6972 (www.kopico.go.kr)
    2. Personal Information Infringement Report Center: (no area code)118 (privacy.kisa.or.kr)
    3. Supreme Prosecutors' Office: (no area code)1301 (www.spo.go.kr)
    4. Korea National Police Agency: (no area code)182 (ecrm.cyber.go.kr)
A person whose rights or interests have been infringed due to a disposition or failure to act by the head of a public institution in response to a request under Article 35 (Access to Personal Information), Article 36 (Correction/Deletion of Personal Information), or Article 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act may file an administrative appeal in accordance with the Administrative Appeals Act.
※ For more detailed information on administrative appeals, please refer to the Central Administrative Appeals Commission website (www.simpan.go.kr).

Article 10 (Changes to the Privacy Policy)
- This Privacy Policy will be effective from February 21, 2025.