Outpost of Chinese business expansion
Qingdao JNTC Ltd.

1. Purpose of Handling (Collecting and Using) Personal Information

The Company handles personal information for the following purpose. The Company does not use personal information for any other purpose and will ask for users' consent before revising the purpose below.

• - The Company, products, investor relations, etc. (response to queries and provision of the other services)

2. Personal Information Retention and Use Period

The Company retains and handles personal information only within the statutory handling and retention periods for personal information or the handling and retention periods that users agreed to at the time of collecting personal information. All personal information is destroyed immediately after achieving the purpose of collection and use.

Personal information is retained for a year as evidence of the handling of customer inquiries. However, the Company may retain personal information for longer periods if required by the law.

3. Information Subjects' Rights and Obligations, and the Exercise of such Rights and Obligations.

An information subject may access, request a revision of, and withdraw consent for the personal information registered with the Company anytime. The Company will immediately act on an information subject's request to the Company's personal information department by mail, phone, or email.
In cases where an information subject requests the Company to correct errors in his/her personal information, the Company does not use or provide the personal information until they are corrected.

The legal representative of a child under 14 has the right to access, revise, or withdraw consent on the collection and use of, the child's personal information.

The Company handles the personal information deleted at the request of an information subject or a legal representative as specified in this Privacy Policy and does not access or use the information for any other purposes.

4. Information Items Collected by the Company

The Company collects the following personal information.

• - Personal information items collected by the Company: name, email address, and contact number (telephone or mobile number)

5. Destruction of Personal Information

Upon achieving the purpose of collection and use, or at the end of the retention period, the Company destroys the relevant personal information unless further retention is required by a user's consent, the Terms of Use, or the relevant law.

• (Method of Destruction)
• - Printouts and documents containing personal information: shredding or incineration
• - Electronic files: permanent deletion beyond restoration

7. Measures to Ensure Security of Personal Information

In handling users' personal information, the Company takes the following measures to prevent loss, theft, leakage, alteration, or damage to the information and ensure information security.

• (Managerial Measures)
• - The Company establishes and implements internal management plans for the safe management of personal information.
• - The Company requires its personal information personnel to receive periodical training and participate in awareness-raising activities at least once a year.
• - The Company restricts the personnel with access to personal information to the minimum.

• (Technical Measures)
• - To prevent leakage or damage of personal information by hacking or computer viruses, the Company uses security programs and responds to hacking and other attacks from outside the Company.
• - The Company stores/manages information subjects' personal information and passwords in encrypted forms and applies additional security measures when transmitting the same for secure management thereof.

• (Physical Measures)
• - The Company has designated its computer room, data storage, and other places as restricted areas for access control.

8. Handling of Employees' and Executives' Personal Information

The provisions of this Privacy Policy apply to the personal information of the Company's employees and executives.

9. Personal Information Protection Officer and Manager

The Company has appointed the Personal Information Officer and Manager as follows. They are responsible for the Company's handling of personal information, respond to users' complaints regarding the same, and providing remedies for damage inflicted on users.

For information or inquiry regarding infringement of personal information, please contact the following institutions:

• - Personal Information Infringement Report Center, Korea Internet & Security Agency (http://privacy.kisa.or.kr / 118)
• - Cyber Crime Investigation Center, Supreme Prosecutor's Office (www.spo.go.kr / 1301)
• - Cyber Bureau, National Police Agency (www.cyberbureau.police.go.kr / 182)

10. Modification of Privacy Policy

This Privacy Policy applies beginning on the enforcement date (November 12, 2020). In case of any addition, removal, or revision of provisions as per the relevant laws or policies, the Company will inform users through a notice before the enforcement of the revision.