Video Information Processing Device Operation and Management Policy

MakeStar Co., Ltd. (hereinafter referred to as the "Company") hereby informs you, in accordance with Article 25, Paragraph 7 of the Personal Information Protection Act, through its Video Information Processing Device Operation and Management Policy, of the purposes and methods by which video information processed by the Company is managed.

1. Basis and Purpose for Installing Video Surveillance Equipment

The company installs and operates video surveillance equipment for the following purposes:

• Facility safety and fire prevention
• Crime prevention to ensure the safety of employees and visitors
• Asset protection and theft prevention

2. Number of installations, installation locations, and coverage area

3. Data Protection Officer

To protect your video information and handle complaints related to personal video information, we have appointed a Personal Video Information Protection Officer as follows.

4. Recording Time, Retention Period, Storage Location, and Handling Method for Video Information

• Recording Duration: 24-hour recording
• Retention Period: 14 days from the date of recording
• Storage Location and Equipment: Stored on the CCTV system itself
• Processing Method: Matters concerning the processing of personal video information, including use for purposes other than the original intent, provision to third parties, destruction, and access, are recorded and managed. Upon expiration of the retention period, the data is permanently deleted using a method that prevents recovery.

5. Matters Concerning the Outsourcing of Installation and Management of Video Information Processing Devices

The Company outsources the installation and management of video information processing devices as detailed below. In accordance with relevant laws and regulations, the outsourcing contract stipulates necessary provisions to ensure personal information is managed securely.

• Contractor: S-One Co., Ltd.
• Contact: 1588-3112

6. Matters Concerning the Method and Location for Verifying Personal Video Information

• Verification Method: Contact the Video Information Management Officer in advance and visit the company to verify.
• Verification Location: Management Support Team

7. Measures Regarding Data Subjects' Requests for Access to Video Information

You may request the operator of the video information processing device at any time to access, confirm the existence of, or delete your personal video information. However, this is limited to personal video information in which you are recorded and personal video information clearly necessary for the protection of the data subject's life, body, or property. The company will take necessary measures without delay upon receiving such a request.

8. Measures to Ensure the Security of Video Information

The company implements the following measures to securely manage the video information it processes.

• Technical Measures: Differentiated access rights for video information, retention of access logs, and measures to prevent tampering or falsification
• Administrative Measures: Establishment of internal management plans and implementation of employee training
• Physical Measures: Access control and operation of locking devices for areas where recording equipment is installed

9. Matters Concerning Changes to the Video Surveillance Device Operation and Management Policy

This Video Surveillance Device Operation and Management Policy was established (or amended) on January 13, 2026. Should any additions, deletions, or modifications be made to its content due to changes in laws, regulations, policies, or security technologies, the reasons for and details of such changes will be announced via the company website or internal bulletin board at least 7 days prior to implementation.

• Announcement Date: January 13, 2026
• Effective Date: January 13, 2026
• Revision Date: Not applicable