Hanwha Ocean co., Ltd.(hereinafter referred to as “the Company”) places great importance on the protection of users’ personal information, and in order to comply with relevant laws such as the Personal Information Protection Act, etc., has enacted and complies with the Audio-visual Information Processing Equipment Operation and Management Policy (hereinafter referred to as “this Policy”). Through this Policy, the Company explains the purpose and manner in which audio-visual information is being used and managed.

The Company posts this Policy on the main page of its website so that users can easily view it at any time. This Policy may be revised from time to time due to changes in laws and government guidelines or changes in the Company's internal policies. The Company establishes the necessary procedures for its continuous improvement. If this Policy is revised or changed, the revision date will be shown at the top. It is recommended that users visit the website and check this Policy regularly.

This Policy contains the following matters and comes into effect on December 21, 2022.
Enactment Date: December 21, 2022

1. Basis and Purpose of Installation of Audio-visual Information Processing Equipment In accordance with Article 25, Paragraph 1 of the Personal Information Protection Act, the Company installs and operates audio-visual information processing equipment for the following purposes.

'Personal Information' 'Personal Information' means information that can be used to uniquely identify one person from another including name and social security number (It also includes information that can be used together with other information to differentiate one person from another)

• Facility safety and fire prevention
• Crime prevention for the safety of employees and customers
• Traffic information, prevention of vehicle theft and damage
• Protection of business sites and prevention of trespassing (illegal intrusion) by outsiders

2. Business Sites and Location of Installation, and Filming Range

Business Sites and Location of Installation, and Filming Range

Installation Sites	Installation Location and Filming Range
· Okpo Shipyard(Headquarter) · Seoul Office · Siheung R&D Campus	· Places where security is required for public safety and for protection of military secrets/defense industrial technology and trade secrets, such as the inside of buildings, parking lots at the business sites. · Outer fences and roads to check trespassing (illegal intrusion) on business sites and traffic information

3. Management and Operation of Audio-visual Information Processing Equipment

Management and Operation of Audio-visual Information Processing Equipment

Business Sites	Classification		Department	Name	Position (Title)	Contact
Okpo	Manager in charge		General Affairs Team	Yun Bi-won	Senior Engineer	055-735-2307
	Access authority		S-Tec System Co.	Kim Tae-hyo	Team Head	055-734-7171
	Specialized vessel	Manager in charge	Naval & Special Ship Security Control Part	Kim Kyeong-ho	Senior Engineer	055-735-5116
		Access authority	General Affairs Team	Ji Chun-geun	Group Manager	055-734-7178
Seoul	Manager in charge		Seoul General Affairs Part	Choi Seong-ah	Senior Engineer	02-2129-0268
	Access authority		SK shieldus	Hwang In-sik	Team Head	010-6372-8410
Siheung	Manager in charge		R&D Planning Team	Choi Seong-ah	Senior Engineer	02-2129-7391
	Access authority		DOING Co., Ltd.	Hwang Sun-myeong	General Manager	02-2129-7302

4. Collection, Protection Measures and Processing Method of Audio-visual Information

Business Sites and Location of Installation, and Filming Range

Time of Filming	Storage Period	Storage Places
24 hours, 7 days	60 days from the date of filming (ISPS: 90 days from the date of filming)	· Okpo: General Situation Room/Control Room/Security room at main gate of specialized vessel · Seoul: Restricted Area (22nd floor) · Siheung: Disaster Prevention Room

• The Company does not check or use audio-visual information for purposes other than those in Paragraph 1, and all collected audio-visual information in the storage places is thoroughly controlled and managed by the security systems (encryption).
• The Company records and manages matters related to extra-purpose use of personal audio-visual information, provision to third parties, destruction, and requests for viewing, etc. Upon expiration of the storage period, the Company permanently deletes the personal audio-visual information in an irrecoverable way (shredding or incineration in the case of printouts).

5. Entrustment of Management and Operation of Audio-visual Information Processing Equipment

The Company entrusts the management and operation of audio-visual information processing equipment as follows, and stipulates necessary matters so that personal information can be safely managed when entrustment contracts are made in accordance with relevant laws and regulations.

Entrustment of Management and Operation of Audio-visual Information Processing Equipment

Business Sites	Classification	Entrusted companies (contractors)	Position (Title)	Contact
Okpo	Operation and management	S-Tec System Co.	Director of Operation	055-734-7191
	Installation and management	DINC	Department Head	055-734-1111
Seoul	Operation and management	General Administration Department	Senior Engineer	02-2129-0268
	Installation and management	SK shieldus	Team Head	010-6372-8410
Siheung	Operation and management	DOING Co., Ltd.	General Manager	02-2129-7302
	Installation and management	SK shieldus	Senior Engineer	010-4908-9792

6. How and Where to Check Personal Audio-visual Information

• How: Contact the person in charge of audio-visual information management in advance and visit the Company.
• Where: Okpo (General Situation Room/Control Room/Security room at main gate of specialized vessel), Seoul (Restricted Area on the 22nd floor), Siheung (Disaster Prevention Room)

7. Subjects’ Requests for Viewing of Audio-visual Information, etc.

If the subjects want to view, check the existence of, or delete their personal audio-visual information, they may request it at any time of the person in charge of managing the audio-visual information processing equipment. However, the foregoing is limited to personal audio-visual information where the subjects are filmed and the personal audio-visual information is clearly necessary for the immediate interests of the subjects’ life, body and property. In the case of a request for viewing or existence checking, or for deletion of personal audio-visual information, the Company will take necessary measures without delay, except in the following cases.

• If the personal audio-visual information storage period has elapsed and the information has been deleted
• If there is a concern about invasion of another person’s privacy due to viewing and disclosure of audio-visual information
• In the case of material hindrance to criminal investigation, maintenance of public prosecution, trial, etc.
• If there is any other reason for the Company to legitimately reject the information subject’s request for viewing and checking

8. Security of Audio-visual Information

Audio-visual information processed by the Company is safely managed through encryption measures. In addition, the Company has several administrative measures to protect personal audio-visual information, which include granting different levels of access authority to personal information, and to prevent forgery and falsification of personal audio-visual information, which include recording and managing the creation date and time of the personal audio-visual information, purpose and date of viewing, viewer, etc.

9. Changes to Audio-Visual Information Processing Equipment Operation and Management Policy

This Policy is enacted on December 21, 2022. If there are additions, deletions, or modifications to the contents due to changes in laws, policies, or security technology, the date of revision will be notified at the top of this Policy.