Privacy

1. Purpose of Processing Personal Information

1. 1) Providing Shipping Services
2. 2) Providing response to customer inquiries

2. Items of personal information processed

Categories of personal data(mandatory)

1. • 1) Providing Shipping Services
   • Driver Full Name, Driver Phone No, Driver License No
   • 2) Providing response to customer inquiries
   • Customer name, phone number, e-mail

3. Processing and Retention Period of Personal Information

1. • 1) Providing Shipping Services
   • Destruction when withdrawing a contract for a transportation engineer
   • 2) Providing response to customer inquiries
   • Personal information is retained for one(1) year after the inquiry case is completely processed
   • If required by law, the personal information is retained for the period prescribed by relevant laws.

4. Providing third party

LX Pantos has committed the following personal information processing tasks for smooth personal information processing.

5. Matters Regarding the Outsourcing of Personal Information Processing

For efficiency, the Company partially outsources the processing of personal information as follows. the Company regulates, manages, and supervises entities outsourced as such to securely process personal information.

1. • 1) Homepage operation and maintenance
   • Outsourcing Entity : Xeogen
   • Retention Period : Until the end of outsourcing contract
   • 2) System operation and maintenance
   • Outsourcing Entity : LG CNS
   • Retention Period : Until the end of outsourcing contract

6. Transfer of personal data to Third Countries

1. • Non – EU Controller
   • HQ: LX Pantos Logistics Co., Ltd(LG)
   • (Address : LG Gwanghwamun Building, 58 Saemunan-ro, Jongro-gu, Seoul, 03184, Korea)
   • Transfer Agreement
   • Standard contractual clauses for the transfer of personal data from the Community to third countries(dated 02.April.2018)
   • You can find the standard contractual clauses in GSI board

7. Destruction of personal information

principle, LX Pantos will destroy personal information without delay when the purpose of processing personal information is achieved. The procedures, deadlines and methods of destruction are as follows.

1. • 1) Destruction procedure
   • The information entered by the information subject will be destroyed immediately after the purpose has been achieved. If it is necessary to keep it according to other laws and regulations, it will be transferred to another DB(separate document for paper) and destroyed. At this time, the personal information transferred to the DB will not be used for other purposes unless it is under the law.
   • 2) Destruction period
   • Employee's personal information will be kept for 5 years after termination.
   • 3) Destruction method
   • Information in the form of electronic file cannot reproduce the record Use technical methods.
     Personal information printed on paper is crushed by a crusher or destroyed by incineration.

8. Installation and operation of an automatic collection tool for personal information

The company operates 'Cookie' for the convenience of visitors to the website. Cookies are small text files that a website sends to your web browser and are stored on your PC. Cookies are used to determine whether a customer has requested 'Turn off for today' regarding the provision of pop-up information, or to improve of the site.

1. 1) Essential cookies

   Use of ‘Turn off for today’ function in pop-up

   Purpose of use	Use of ‘Turn off for today’ function in pop-up
   Tracking cookies	Popup
   Data collected	Cookie ID and value
   Retention period	1 day
   Data receiver	None(internally retained)

   • Options" > "Personal Data" Tab > Settings. However, if the customer refuses to install cookies, there may be restrictions on the provision of the service.
2. 2) Optional cookies

   Collection and processing of user data, user segmentation and maintenance of session state

   Purpose of use	Collection and processing of user data, user segmentation and maintenance of session state
   Tracking cookies	_ga, _ga_< container-id >
   Data collected	Number of users, session statistics, approximate location(IP), browser and device information * Google Analytics 4 uses individual IP addresses to determine countries, cities and their latitude and longitude. The addresses are not logged or stored
   Retention period	24 months
   Data receiver	− Alphabet Inc., Google LLC, Google Ireland Limited − Privacy policy of data processing company https://policies.google.com/privacy?hl=en − Cookie policy of data processing company https://policies.google.com/technologies/cookies?hl=en − You may completely disable Google Analytics in your browser by visiting https://tools.google.com/dlpage/gaoptout?hl=en

9. Rights of Data subjects

As the principal of his or her personal information, the customer is entitled to exercise the following rights:

1. • 1) Rights and Obligations of Personal Information Principals
   • Right to demand own personal information
   • Right to demand the Company to correct errors in own personal information, etc.
   • Right to demand the deletion of own personal information
   • Right to demand the suspension of own personal information processing
   • 2) Ways to Exercise the Rights
   • To request the viewing, correction, deletion, and processing suspension of personal information, please contact the personal information protection manager specified in “8. Contact Information of Personal Information Protection Manager and Office” in writing, phone, or e-mail for the Company to take action promptly.
   • In case the customer requests to correct errors in own personal information, the Company will not use or provide the personal information until the error is corrected. Also, if the erroneous personal information has already been provided to a third party, the processing results will be promptly notified to the third party to ensure that the correction is reflected.
   • Per Company regulations, personal information deleted according to customer request is processed as specified in “2. Retention and Usage Period of Personal Information” and it cannot be viewed or used for any other purpose.
   • 3) Office in Charge of Requests to View, Correct, Delete, Etc. Personal Information
   • A. Providing response to customer inquiries
   • Name : HWANG JOON HWAN, Tel : 82-02-3771-3983, E-mail : jh.hwang@lxpantos.com

10. Measures to ensure the safety of personal information

LX Pantos has the following technical, administrative and physical measures to ensure safety.

1. • 1) Regular self-audit
   • We conduct our own audits regularly(quarterly) to ensure the stability of handling personal information.
   • 2) Minimization and education of personal information handling staff
   • Employees who deal with personal information are designated and limited to the person in charge, and measures are taken to minimize personal information.
   • 3) Establishment and enforcement of internal management plan
   • We have established and implemented an internal management plan for the safe handling of personal information.
   • 4) Minimization and education of personal information handling staff
   • In order to prevent leakage and damage of personal information caused by hacking or computer virus, LX Pantos installs security program, periodically updates and checks the system, installs the system in outside controlled area and technically / physically monitors and blocks.
   • 5) Encryption of personal information
   • The personal information and the password of the information subject are encrypted and stored and managed only by the user, and the important data is using a separate security function such as encrypting the file and transmission data or using the file lock function.
   • 6) Storage of connection logs, prevention of falsification and tampering
   • We keep and manage the records that we access to the personal information processing system for at least six months and use the security function to prevent the connection record from being stolen, altered, stolen or lost.
   • 7) Restrict access to personal information
   • We take necessary measures to control access to personal information through granting, modifying, and deleting access rights to the database system that processes personal information. We also control unauthorized access from outside by using an intrusion prevention system.
   • 8) Use locking device for document security
   • We keep documents with personal information and auxiliary storage media in safe place with lock.
   • 9) Access control for non-authorized persons
   • We have set up a separate physical storage area for personal information and set up access control procedures.

11. Contact Information of Personal Information Protection Manager and Office

All complaints regarding personal information protection arising in the course of the customer's usage of Company services, including the protection of rights for information principals and reports about personal information infringement incidents, can be made to the personal information protection manager or the relevant office. The Company will provide sufficient answers regarding such complaints in a sufficient manner.

1. • [Contact of department in charge]
   • 1) Personal Information Protection Manager
   • Name : SooHan Bae, Tel : 82-02-6908-0779, E-mail : nami.choi@lxpantos.com
   • 2) Personal Information Protection officer(Korea)
   • Name : Nami Choi, Tel : 82-02-6908-0779, E-mail : nami.choi@lxpantos.com
   • 3) Regional Information Security officer(Europe)
   • Name : Dong il KIM, Tel : +49 (0)6105-4053-217, E-mail : tony.kim@lxpantos.com

12. Data subject rights remedy

The data subject can inquire about the following organizations to prevent damage to personal information infringement, consultation. Please contact us if you are not satisfied with our personal information complaint, the results of the damage relief, or need further assistance.
If the controller does not take action on the request, the data subject has right to file a complaint to the supervisory authority and take legal action.

13. The notice of Privacy notice changed

We keep our privacy notice under regular review to make sure it is up to date and accurate.

1. Purpose of Processing Personal Information

1. 1) Providing Shipping Services
2. 2) Providing response to customer inquiries

2. Items of personal information processed

Categories of personal data(mandatory)

1. • 1) Providing Shipping Services
   • Driver Full Name, Driver Phone No, Driver License No
   • 2) Providing response to customer inquiries
   • Customer name, phone number, e-mail

3. Processing and Retention Period of Personal Information

1. • 1) Providing Shipping Services
   • Destruction when withdrawing a contract for a transportation engineer
   • 2) Providing response to customer inquiries
   • Personal information is retained for one(1) year after the inquiry case is completely processed
   • If required by law, the personal information is retained for the period prescribed by relevant laws.

4. Providing third party

LX Pantos has committed the following personal information processing tasks for smooth personal information processing.

5. Matters Regarding the Outsourcing of Personal Information Processing

For efficiency, the Company partially outsources the processing of personal information as follows. the Company regulates, manages, and supervises entities outsourced as such to securely process personal information.

1. • 1) Homepage operation and maintenance
   • Outsourcing Entity : Xeogen
   • Retention Period : Until the end of outsourcing contract
   • 2) System operation and maintenance
   • Outsourcing Entity : LG CNS
   • Retention Period : Until the end of outsourcing contract

6. Transfer of personal data to Third Countries

1. • Non – EU Controller
   • HQ: LX Pantos Logistics Co., Ltd(LG)
   • (Address : LG Gwanghwamun Building, 58 Saemunan-ro, Jongro-gu, Seoul, 03184, Korea)
   • Transfer Agreement
   • Standard contractual clauses for the transfer of personal data from the Community to third countries(dated 02.April.2018)
   • You can find the standard contractual clauses in GSI board

7. Destruction of personal information

In principle, LX Pantos will destroy personal information without delay when the purpose of processing personal information is achieved. The procedures, deadlines and methods of destruction are as follows.

1. • 1) Destruction procedure
   • The information entered by the information subject will be destroyed immediately after the purpose has been achieved. If it is necessary to keep it according to other laws and regulations, it will be transferred to another DB(separate document for paper) and destroyed. At this time, the personal information transferred to the DB will not be used for other purposes unless it is under the law.
   • 2) Destruction period
   • Employee's personal information will be kept for 5 years after termination.
   • 3) Destruction method
   • Information in the form of electronic file cannot reproduce the record Use technical methods.
     Personal information printed on paper is crushed by a crusher or destroyed by incineration.

8. Rights of Data subjects

As the principal of his or her personal information, the customer is entitled to exercise the following rights:

1. • 1) Rights and Obligations of Personal Information Principals
   • Right to demand own personal information
   • Right to demand the Company to correct errors in own personal information, etc.
   • Right to demand the deletion of own personal information
   • Right to demand the suspension of own personal information processing
   • 2) Ways to Exercise the Rights
   • To request the viewing, correction, deletion, and processing suspension of personal information, please contact the personal information protection manager specified in “8. Contact Information of Personal Information Protection Manager and Office” in writing, phone, or e-mail for the Company to take action promptly.
   • In case the customer requests to correct errors in own personal information, the Company will not use or provide the personal information until the error is corrected. Also, if the erroneous personal information has already been provided to a third party, the processing results will be promptly notified to the third party to ensure that the correction is reflected.
   • Per Company regulations, personal information deleted according to customer request is processed as specified in “2. Retention and Usage Period of Personal Information” and it cannot be viewed or used for any other purpose.
   • 3) Office in Charge of Requests to View, Correct, Delete, Etc. Personal Information
   • A. Providing response to customer inquiries
   • Name : HWANG JOON HWAN, Tel : +82-2-3771-3983, E-mail : jh.hwang@lxpantos.com

9. Measures to ensure the safety of personal information

LX Pantos has the following technical, administrative and physical measures to ensure safety.

1. • 1) Regular self-audit
   • We conduct our own audits regularly(quarterly) to ensure the stability of handling personal information.
   • 2) Minimization and education of personal information handling staff
   • Employees who deal with personal information are designated and limited to the person in charge, and measures are taken to minimize personal information.
   • 3) Establishment and enforcement of internal management plan
   • We have established and implemented an internal management plan for the safe handling of personal information.
   • 4) Minimization and education of personal information handling staff
   • In order to prevent leakage and damage of personal information caused by hacking or computer virus, LX Pantos installs security program, periodically updates and checks the system, installs the system in outside controlled area and technically / physically monitors and blocks.
   • 5) Encryption of personal information
   • The personal information and the password of the information subject are encrypted and stored and managed only by the user, and the important data is using a separate security function such as encrypting the file and transmission data or using the file lock function.
   • 6) Storage of connection logs, prevention of falsification and tampering
   • We keep and manage the records that we access to the personal information processing system for at least six months and use the security function to prevent the connection record from being stolen, altered, stolen or lost.
   • 7) Restrict access to personal information
   • We take necessary measures to control access to personal information through granting, modifying, and deleting access rights to the database system that processes personal information. We also control unauthorized access from outside by using an intrusion prevention system.
   • 8) Use locking device for document security
   • We keep documents with personal information and auxiliary storage media in safe place with lock.
   • 9) Access control for non-authorized persons
   • We have set up a separate physical storage area for personal information and set up access control procedures.

10. Contact Information of Personal Information Protection Manager and Office

All complaints regarding personal information protection arising in the course of the customer's usage of Company services, including the protection of rights for information principals and reports about personal information infringement incidents, can be made to the personal information protection manager or the relevant office. The Company will provide sufficient answers regarding such complaints in a sufficient manner.

1. • [Contact of department in charge]
   • 1) Personal Information Protection Manager
   • Name : SooHan Bae, Tel : +82-2-6908-0779, E-mail : soohan.bae@lxpantos.com
   • 2) Personal Information Protection officer(Korea)
   • Name : Nami Choi, Tel : +82-2-6908-0779, E-mail : nami.choi@lxpantos.com
   • 3) Personal Information Protection officer(EU)
   • Name : EunKyung Woo, Tel : +49-6105-4053-213, E-mail : ek.woo@lxpantos.com

11. Data subject rights remedy

The data subject can inquire about the following organizations to prevent damage to personal information infringement, consultation. Please contact us if you are not satisfied with our personal information complaint, the results of the damage relief, or need further assistance.
If the controller does not take action on the request, the data subject has right to file a complaint to the supervisory authority and take legal action.

12. The notice of Privacy notice changed

We keep our privacy notice under regular review to make sure it is up to date and accurate.