Privacy Policy

SK Speedmate Co., Ltd. (the “Company”) values the personal information of its users and complies with the personal information protection provisions of the Personal Information Protection Act (“PIPA”) of the Republic of Korea and other relevant laws. In accordance with Article 30 of PIPA, the Company has established this Privacy Policy to protect the personal information of data subjects and to handle related complaints promptly and smoothly.

The Privacy Policy contains the following provisions.

1. Purpose of Processing Personal Information
2. Processing and Retention Period of Personal Information
3. Items of Personal Information Processed
4. Outsourcing of Personal Information Processing
5. Rights of Data Subjects and Methods of Exercise
6. Procedure and Method of Destroying Personal Information
7. Measures to Ensure the Security of Personal Information
8. Installation, Operation, and Refusal of Devices that Automatically Collect Personal Information
9. Chief Privacy Officer
10. Department Receiving and Handling Requests for Access to Personal Information
11. Remedies for Infringement of Rights
12. Additional Use or Provision of Personal Information
13. Changes to This Privacy Policy

Article 1. Purpose of Processing Personal Information

The Company processes personal information for the following purposes. Personal information being processed will not be used for any purpose other than the following, and if the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent in accordance with Article 18 of PIPA.

1. Automotive parts inquiries and quotations: Personal information is processed to prevent misuse of the automotive parts quotation service, to send various notices and notifications, and to handle complaints.

Article 2. Processing and Retention Period of Personal Information

1. The Company processes and retains personal information within the retention and use period prescribed by law or the period consented to by the data subject at the time of collection.
2. The Company destroys personal information without delay once the purpose of collection and use has been achieved.

Article 3. Items of Personal Information Processed

1. The Company processes the following items of personal information for the purposes below.

2. The Company may selectively collect additional personal information from users in order to provide high-quality customized services. In such cases, the Company provides a separate consent procedure for collecting such personal information.

Article 4. Outsourcing of Personal Information Processing

1. For the smooth processing of personal information, the Company outsources personal information processing tasks as follows.

2. When entering into an outsourcing contract, the Company specifies in the contract or other s, in accordance with relevant laws, matters regarding the prohibition of processing personal information for purposes other than performing the outsourced work, technical and administrative protective measures, restrictions on re-outsourcing, management and supervision of the outsourcee, and liability for damages, and supervises whether the outsourcee processes personal information securely.
3. If the details of the outsourced work or the outsourcee change, the Company will disclose such changes through this Privacy Policy without delay.

Article 5. Rights of Data Subjects and Methods of Exercise

1. Data subjects may exercise their rights against the Company at any time to request access to, correction, deletion, or suspension of processing of their personal information, or to withdraw consent.

   ※ Requests for access, etc. regarding personal information of children under the age of 14 must be made directly by their legal representative. Minors aged 14 or older may exercise their rights regarding their personal information themselves or through their legal representative.

2. Rights may be exercised against the Company in writing, by email, or by facsimile (FAX), etc. in accordance with Article 41(1) of the Enforcement Decree of PIPA, and the Company will take action without delay.
3. Rights may also be exercised through an agent, such as the data subject’s legal representative or a person delegated by the data subject. In this case, a power of attorney in the form of Annex 11 of the “Notice on Methods of Processing Personal Information” must be submitted.
4. The right to request access to and suspension of processing of personal information may be restricted pursuant to Article 35(4) and Article 37(2) of PIPA.
5. Deletion of personal information cannot be requested if such personal information is specified as subject to collection under other laws.
6. The Company verifies whether the person making a request for access, correction, deletion, or suspension of processing in accordance with the data subject’s rights is the data subject or a legitimate agent.

Article 6. Procedure and Method of Destroying Personal Information

1. The Company destroys personal information without delay when it is no longer necessary, such as upon expiration of the retention period or achievement of the processing purpose.
2. The procedure and method of destruction are as follows.
   1. Destruction procedure: The Company selects personal information for which a reason for destruction has arisen and destroys it with the approval of the Company’s Chief Privacy Officer.
   2. Destruction method: Personal information recorded and stored in electronic file format is destroyed in a manner that makes the records irreproducible, and personal information recorded and stored in paper s is destroyed by shredding or incineration.

Article 7. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information.

1. Administrative measures: Establishment and implementation of an internal management plan, regular employee training
2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, measures to prevent forgery or alteration of access logs, installation and updating of security programs
3. Physical measures: Access control to computer rooms, data storage rooms, etc.

Article 8. Installation, Operation, and Refusal of Devices that Automatically Collect Personal Information

1. The Company uses “s,” which store and retrieve usage information from time to time, in order to provide users with individually customized services.
2. A is a small amount of information sent by the server (HTTP) used to operate the website to the user’s computer browser, and may be stored on the hard disk of the user’s PC.
   1. Purpose of s: Cookies are used to identify visit and usage patterns for each service and website visited by the user, popular search terms, whether secure connections are used, etc., in order to provide optimized information to the user.
   2. Installation, operation, and refusal of s: Users may refuse the storage of s through the option settings of their web browser.
      - Example 1) Chrome: [Settings] → [Privacy and security] → [Site settings] → [Cookies and site data] → Block s
      - Example 2) Edge: [Settings] → [Cookies and site permissions] → [Cookies and saved data] → Block s
      - Example 3) Internet Explorer: [Tools] → [Internet Options] → [Privacy] → [Advanced] → Block s
      - Example 4) Safari: Preferences → “Prevent cross-site tracking” and “Block all s”
   3. If users refuse to store s, they may experience difficulties in using customized services.

Article 9. Chief Privacy Officer

1. The Company has designated the Chief Privacy Officer and the privacy officer in charge as follows to take overall responsibility for personal information processing and to handle complaints and remedies of data subjects related to personal information processing.

2. Data subjects may contact the Chief Privacy Officer and the privacy officer in charge regarding all inquiries, complaints, and requests for remedies related to personal information protection arising from the use of the Company’s services. The Company will respond to and handle such inquiries without delay.

Article 10. Department Receiving and Handling Requests for Access to Personal Information

Data subjects may submit requests for access to personal information under Article 35 of PIPA to the department below. The Company will make efforts to promptly process such requests.

• Department: AI Innovation Group (Phone: +82-1600-1600 / Email: tim98@sk.com)

Article 11. Remedies for Infringement of Rights

Data subjects may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency (KISA), and other organizations to seek remedies for infringement of personal information. For reports and consultations regarding other personal information infringements, please contact the following organizations.

※ The telephone numbers above are available only within the Republic of Korea. Users outside Korea may contact the organizations through their websites.

Article 12. Additional Use or Provision of Personal Information

1. In accordance with Article 15(3) and Article 17(4) of the Personal Information Protection Act (PIPA), the Company may additionally use or provide personal information without the consent of the data subject, taking into account the matters prescribed in Article 14-2 of the Enforcement Decree of PIPA. The Company discloses the related matters in this Privacy Policy so that data subjects can review them.
2. When the Company additionally uses or provides personal information, it applies the following criteria:
   1. Whether the purpose of the additional use or provision is related to the original purpose of collection
   2. Whether the additional use or provision is foreseeable in light of the circumstances in which the personal information was collected or the practices of processing it
   3. Whether the additional use or provision unfairly infringes the interests of the data subject
   4. Whether necessary measures to ensure security, such as pseudonymization or encryption, have been taken

Article 13. Changes to This Privacy Policy

This Privacy Policy takes effect on January 23, 2026.

This English version is provided for reference purposes only. In case of any discrepancy between the Korean and English versions, the Korean version shall prevail.