25 Oct 2021 Please be informed that Privacy Policy for Korean air cargo will be revised 1. Object : Privacy Policy for Korean air cargo 2. Applicable date : Nov 2021 3. Changes : Change of Purpose And Basis For Collecting Personal Data and Disclosure of personal Data Change of personal information processing business consignment company, Overseas ground handling agent and Addition of overseas transfer items 4. Details for revisions to the Privacy Policy Before Revision After Revision > Purpose And Basis For Collecting Personal Data Legitimate interest of Korean Air - Pre-litigation and litigation: maintaining records for disputes resolution purposes - Marketing and advertising: Notices about new services, promotional events and information > Disclosure of personal Data Korean Air only provides Personal Data to third parties when there is a legal basis (such as the performance of a contract entered into with the Data Subject or consent from the Data Subject). In any event, Korean Air shall notify such disclosure to the Data Subject via a written document, email, or notice board of website specifying the purpose and contents of such Personal Data provision as well as the retention periods, and obtain the consent (for instance an opt-in) from the Data Subject before proceeding > ENTRUSTING PERSONAL DATA Korean Air entrusts a part of the handling of Personal Data to the following companies to provide Data Subjects with stable web services and for the managing of Korean Air's cargo website. Category Outsourced work Outsourced company Internet website Maintaining and operating of online website, including web server and database management, etc. IBS SOFTWARE, LG CNS Hanjin Information Systems & Telecommunication Co., Ltd., Announcement/notification via SMS and KakaoTalk message regarding service for air cargo transportation and so forth AWS Airport Stations Booking, transportation, documentation, customs declaration of cargo Incheon - K-tec manpower, Zeniel, Samkoo Inc., Unies Gimpo - Korea Airport Servise CO., LTD. Uniair service, Unies Pusan - Zeniel Jeju - K-tec manpower Other regional airports - Air Korea Providing customer services to shippers and agencies > Overseas Ground handling agents Region Ground Handling Company America F&E AGI (Alliance Ground International) WFS (Worldwide Flight Service) Going (Global Operations & Infrastructure Group) Aeromexico Services HGL (Hanjin Global Logistics) TAS (Total Airport Services) Gateway Facility Swissport Mega International GTA CTA Orbital PFS Europe Swissport WFS AF (Air France) LUG Fraport AG Pulkovo Cargo Terminal Northern Cargo Gateway ALHA (Mail : MLE) Airport Handling HY (Uzbekistan Airways) Spirit Cargo Center Menzies Sheremetyevo Airport QAS (Quality Airport Services) VIA Airport ACL (Aerospace Cargo Logistics) Ground Force China MU (China Eastern Airlines) CA (Air China Cargo) HACTL (Hong Kong Air Cargo Terminal) CZ (China Southern Airlines) 공항공단 Japan JAL - JALKAS JAL – JCG(IN), JASCO(OUT) South east Aisa JTG (Thai Airways) PT Gapura Angkasa Celebi BWFS MH (Aerodarat) TCS (Tan Son Nhat Cargo Services Limited) VIAGS (Vietnam Airport Ground Services Company Ltd.,) ALSC (ALS Cargo Terminal Co., Ltd) SATS (SATS Ltd) > Purpose And Basis For Collecting Personal Data Legitimate interest of Korean Air - Pre-litigation and litigation: maintaining records for disputes resolution purposes - Marketing and advertising: Notices about new services, promotional events and information > Disclosure of personal Data Korean Air only provides Personal Data to third parties when there is a legal basis (such as the performance of a contract entered into with the Data Subject or consent from the Data Subject). In any event, Korean Air shall notify such disclosure to the Data Subject via a written document, email, or notice board of website specifying the purpose and contents of such Personal Data provision as well as the retention periods, and obtain the consent (for instance an opt-in) from the Data Subject before proceeding > ENTRUSTING PERSONAL DATA Korean Air entrusts a part of the handling of Personal Data to the following companies to provide Data Subjects with stable web services and for the managing of Korean Air's cargo website. Category Outsourced work Outsourced company Internet website Maintaining and operating of online website, including web server and database management, etc. IBS SOFTWARE, LG CNS Hanjin Information Systems & Telecommunication Co., Ltd., Announcement/notification via SMS and KakaoTalk message regarding service for air cargo transportation and so forth AWS Airport Stations Booking, transportation, documentation, customs declaration of cargo Incheon - Korea Airport Servise CO., LTD. K-tec manpower, Zeniel Gimpo - Korea Airport Servise CO., LTD. Unies SecurityPusan - Zeniel Jeju - ATSOverseas - Overseas outsourcedcompanies Providing customer services to shippers and agencies > Overseas Ground handling agents Region Ground Handling Company Americas F&E AGI (Alliance Ground International) WFS (Worldwide Flight Service) Going (Global Operations & Infrastructure Group) HGL (Hanjin Global Logistics) TAS (Total Airport Services) Gateway Facility Swissport Mega International GTA CTA Orbital PFS Almacenadora GWTC SA DE CV CLA Guadalajara SA DE CV People & Logistics America Inc DBA B&S Logistics COSMO APS (Aero Port Services) AEKO KULA (Aloha Air Cargo) Crossracer SCAMD/CTA Europe Swissport WFS LUG Pulkovo Cargo Terminal ALHA (Mail : MLE) Spirit Cargo Center Sheremetyevo Airport VIA Airport ACL (Aerospace Cargo Logistics) CELEBI Cargologic Dnata FLE Skyport Islam Karimov Tashkent International Airport LLC cargo Vladivostok MZLZ Ground Handling China MU (China Eastern Airlines) CA (Air China Cargo) HACTL (Hong Kong Air Cargo Terminal) CZ (China Southern Airlines) Airport Service Aviation Ground Handling Service (Xi'am) Co.,Ltd Shenzhen Airport International Cargo Terminal CI (China Airlines) OM (MIAT Mongolian Airlines) Japan JAL - JALKAS JAL – JCG(IN), JASCO(OUT) Skyport FACTL (Fukuoka Air Cargo Terminal) Tokyo International Air Cargo Terminal Hokuriku CGO Terminal Fuji Dream Airlines South East Asia PT Gapura Angkasa Celebi MH (Aerodarat) TCS (Tan Son Nhat Cargo Services Limited) VIAGS (Vietnam Airport Ground Services Company Ltd.,) ALSC (ALS Cargo Terminal Co., Ltd) SATS (SATS Ltd) Thai Airways Philippine Airport Ground Support Solutions Inc AIR INDIA GALCO Srilankan Air SAGS Maldives Airport Nepal Airlines Corporation Myanma National Airlines SCA Oceania Qantas ASIG (Menzies) Menzies Belau Transfer & Terminal Co. To fulfill the contract and to offer improved convenience to our customers, we outsource the processing of personal information overseas as follows. Company Personal Information Overseas Date and Method of Outsourcing Purpose of using Personal Information Period of Retention and Use AWS (aws-korea-privacy@amazon.com) Shipper, Consignee information : Name, Address, Telephone number The United States Shipper, Consignee information : Completion of AWB execution Disaster Recovery System Launches in the Eastern Region Data Center in case of AWB Seoul region data center shutdown Same as our policy on processing personal information IBS Software Homepage Membership information : e-mail Japan Membership Information : Completion of registration Cargo transportation and Customs declaration Same as our policy on processing personal information Shipper, Consignee information : Name, Address, Telephone number Shipper, Consignee information : Completion of AWB execution