Privacy Policy

1. Personal information collected and collection methods

The Company collects the following items in order to handle inquiries about cargo storage and transport.

· Required items: company name, contact person's name, telephone number, email address

· Optional items: any information the data subject chooses to include in the inquiry

Collection is limited to inquiries received by email, telephone or fax.

Content entered on this website's inquiry screen is only copied on the user's own device; it is not transmitted to or stored on the Company's servers. The Company collects that content only when the user sends it by email.

This website uses only the essential cookie needed to remember the user's cookie consent choice, and does not operate access log analytics tools or any other mechanism that automatically collects personal information. The types of cookies and how to manage them are described on the Cookie Policy page.

2. Purposes of collecting and using personal information

The Company uses collected personal information only for the following purposes. If a purpose changes, the Company takes the necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.

· Reviewing and responding to inquiries

· Assessing whether storage or transport is possible, providing consultation and quotations

· Discussions and related communication for concluding a contract

3. Retention and use period of personal information

The Company destroys personal information without delay once the purpose of collection and use has been achieved.

· Inquiry-related information: one year from the date the inquiry is closed

· Where a contract is concluded: the period prescribed by the Commercial Act and other applicable laws after the contractual relationship ends

Where applicable laws prescribe a separate retention period, the information is retained for that period.

4. Provision of personal information to third parties

The Company processes the personal information of data subjects only within the scope stated in Sections 1 and 2, and provides it to third parties only in the cases set out in Articles 17 and 18 of the Personal Information Protection Act, such as with the data subject's consent or under a specific provision of law.

The Company does not currently provide personal information to any third party on a regular basis.

5. Outsourcing of personal information processing

The Company does not currently outsource any personal information processing to external parties.

If outsourcing occurs in the future, the Company will disclose the outsourced party and the scope of the outsourced work in this policy, and will supervise the outsourced party to ensure it processes personal information safely in accordance with Article 26 of the Personal Information Protection Act.

6. Procedure and method of destroying personal information

The Company destroys personal information without delay when it is no longer needed because the retention period has expired or the purpose of processing has been achieved.

· Destruction procedure: the Company identifies personal information for which grounds for destruction have arisen and destroys it with the approval of the Personal Information Protection Officer.

· Destruction method: information in electronic file form is deleted using technical methods that prevent recovery, and paper documents are shredded or incinerated.

7. Rights of data subjects and how to exercise them

Data subjects may at any time request the Company to allow access to, correct or delete, or suspend the processing of their personal information.

Rights may be exercised in writing, by email or by fax, and the Company will act without delay.

Where a data subject requests correction of an error in their personal information, the Company will not use or provide that personal information until the correction is complete.

Rights may be exercised through a legal representative or an authorized agent, in which case a power of attorney in Form No. 11 of the Notice on Personal Information Processing Methods must be submitted.

8. Measures to ensure the security of personal information

The Company takes the following measures to ensure the security of personal information.

· Keeping the number of staff who handle personal information to a minimum and managing access rights.

· Keeping documents and storage media containing personal information in locked locations.

· Providing regular training to staff who handle personal information.

9. Personal Information Protection Officer

The Company has designated the following Personal Information Protection Officer, who has overall responsibility for personal information processing and handles inquiries, complaints and requests for remedy from data subjects relating to personal information processing.

· Name: Choi Bo-yeong

· Position: CEO

· Contact: 055-543-7200 / cmk@cmklogis.com

Data subjects may direct all inquiries relating to personal information protection arising from their use of the Company's services to the Personal Information Protection Officer.

10. Remedies for infringement of rights

Data subjects may apply to the following agencies for dispute resolution or consultation in order to obtain remedy for infringement of their personal information.

· Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)

· Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)

· Supreme Prosecutors' Office Cyber Investigation Division: 1301 (www.spo.go.kr)

· National Police Agency Cyber Bureau: 182 (ecrm.police.go.kr)

11. Changes to this Privacy Policy

This Privacy Policy takes effect on October 13, 2026.

If its content is added to, deleted or amended due to changes in laws, policies or the Company's internal policies, the changes will be announced on the website at least 7 days before they take effect.