01. General Provisions

• "Personal Information" refers to the personally identifiable information of a living person whose identity may be checked easily in combination with the use of other sources such as a name, national identity number and picture, even though it is rarely possible to differentiate the individual in question with only the given information.
• "Informer" means the owner of any information which enables the recognition of a person’s identity.
• The Company discloses the Personal Information Processing Policy on the first screen of the website (www.doosaninfracore.com/engines/) to facilitate the verification of the policy in question, and will always announce any changes or revisions to this policy via a notice posted on its website or by an individual communication.

---

02. Purposes and items in the processing of personal data

Without the legitimate provisions or the consent of the informer, the Company may handle neither the sensitive information that may compromise significantly the privacy of its provider nor the unique identification information assigned to distinguish the interested-party from others.

A. Processed data

<Relating to customers>
Name, home address, email, company names, service record, access logs, cookies and IP address information

<Relating to recruitment>
Name, national identity number, picture, password, home address, home telephone number, mobile phone number, email, education, military service, foreign language skills, computer skills, qualifications, family relationships, career, social experience, awards, international experience and research experience

B. Purposes of processing

<Relating to the customers>

• Settlement of the complaints on the membership and points of dissatisfaction
• Online market research or survey
• Marketing or advertising
• Service delivery and the settlement of fees

<Relating to the recruitment>

• Test process, modification of the application form, verification of acceptance, contact for applicants, and verification of employment requirements
• Personnel management, including payroll, and benefits information, as well as information pertaining to the support and assessment for various tasks, etc.

---

03. Processing and storage periods of personal information

In principle, the collected personal information will be destroyed immediately after the purpose for which it has been collected has been achieved. However, the following information will be saved during the designated period for the reasons set forth below:

• Saved item: name, home address, email, company name
• Storing period: 1 year
• Reason: user question and request management, user identification, etc.
• Saved item: service use recording, connection log, cookies, IP address information
• Storing period: 3 years
• Reason: enhanced quality of the service through analysis of usage patterns
• Saved item: name, password, date of birth, national identity number, home address, home telephone number, mobile phone number, hobbies, skills, education, work experience, language skills, military information and family relationship
• Storing period: as a rule, until the end of the workplace relations
• Reason: payroll, benefits, personnel management such as the support and assessment for various tasks
However, the privacy of applicants whom the Company doesn’t hire will be discarded immediately after the completion of the recruitment process.

---

04. Procedures and methods for the destruction of personal information

A. Destruction procedures

The company destroys the personal information without delay once it has achieved the purpose of its collection or the storing period has finished, except in cases where the storage is required due to the informer's consent, terms and conditions, or compliance of relevant legislation.

B. Methods of destruction

• Personal information stored in electronic file formats shall be deleted using technical methods that prevent the recovery of its record.
• Personal information printed on the paper shall be broken by the shredder, or destroyed through incineration.

---

05. Providing the personal information to a third party

The Company uses the personal information only within the scope laid out in "02. Purposes and items of the processing of personal data”, and does not abuse it in excess of the established range nor disclose it to a third party. However, the following cases are exceptions:

• In the case of having received the special consent of the informer
• If there are special provisions in other relevant laws
• If it is impossible to obtain the prior consent of the informer or its legal representative due to the state in which he cannot express his or her intention or his or her unknown address, so that the stored information is deemed to be necessary evidence for an imminent benefit of life, health, property of the informer or relevant third party.
• In case of providing the personal information in a form to block to recognize a particular individual as necessary for the purposes of statistics and research

Currently, the Company provides the personal information to other institutions as shown below:

• Receiver of the personal information
  Credu, Korea TOEIC Committee, Chamber of Commerce, the Department of Defense and Regional Military Manpower Administration, District Office/Residents’ Center of a dong
• Provided items of the personal information
  Name, national identity number, phone number, military serial number
• Objective of using the provided information
  Verifying the qualifications
• Period of possession and use of the provided information
  Immediate destruction
• Receiver of the personal information
  Doosan Inc.
• Provided items of the personal information
  Name, National identity number, picture, password, home address, home telephone number, mobile phone number, email, education, military service, foreign language skills, computer skills, qualifications, family relationship, career, social experience, awards, international experience and research experience
• Objective of using the provided information
• The integration and development of human resources management
• Period of possession and use of the provided information
• until the end of the workplace relations

---

06. Consignment of processing of the personal information

The Company does not entrust the processing of the personal information to an outsourcing agency without the prior consent of the relevant informer.
For the consignment of the processing of personal information, the Company has in place the following instructions that determine the required regulations to manage safely the personal information when it commits a trust agreement in accordance with the relevant legislation:

• Trustee company
  Nshaper Inc.
• Entrusted service
  Payroll, benefits and others



• Trustee company
  Doosan Information Communication BU Inc.
• Entrusted service
  Consignment operation of the recruitment system



• Trustee company
  Doosan Donga Inc
• Entrusted service
• Online courses for the staff

---

07. Rights and obligations of the informer and their exercise methods

Every informer may demand the access, correction, omission and suspension of his or her personal information that the Company treats. However, the Company may refuse or limit above mentioned demand under the following conditions:

• If there is a special provision by law or it is unavoidable to comply with statutory obligations
• if there is a concern to harm the lives or bodies of others, or to damage improperly the property and other interests of other people
• If it is difficult to fulfill the contract, including agreed services, without processing the personal information, meanwhile the informer does not reveal clearly the intention to terminate the contract

Methods and procedures for the exercise of rights

• The informer who wants to read his or her personal information may submit the Request of Reading, Correction, Deletion and Suspension in writing, e-mail, fax, etc., to the department in charge. (For this, see the section "09. Complaint Resolution Service on Personal information".)
• The Company takes action to respond to the demand within 10 days unless there is a justifiable reason, and communicate the reasons, if any, for such denial or restriction within five days, as well as the methods to appeal against this refusal or restriction.
• The Company may verify the identity of the informer or, his or her representative that demands the request of reading the personal information, checking his o her identity cards such as national identity card, one of certified electronic signatures or other equivalents.

Request form > Download

---

08. Technical, managerial, physical protection measures of personal information

The Company takes the following safety measures to prevent personal information being lost, stolen, leaked, altered, or damaged:

<Technical measures>

• The Company complies with the required standards by the laws for the secure storage and transmission of the personal information
• Using anti-virus software, the company takes steps to prevent the damage caused by computer viruses. The anti-virus program is updated periodically, and protects against the violation of privacy in case of a sudden outbreak of a new virus, providing its new version as soon as possible.
• Against external attacks such as hacking, the Company does everything for the security, utilizing intrusion detection system and vulnerability assessment system for each server.

<Managerial measures>

• The company gives the exclusive access to personal information to those who deal with sales and marketing directly with the informers, to those in charge the management of the personal information, and those who inevitably handle the personal data through carrying out other tasks.
• The employees who treat the personal information take a regular in-house training and outsourcing education on the protection of personal information, being properly supervised to comply strictly with laws and regulations to the same purpose after both starting work and after taking retirement.

<Physical measures>

• For the secure storage of the personal information and its handling system, the facilities are equipped with the protection measures to prevent a physical access. such as the physical locking devices
• The computer room and data storage room, designated as special protective areas, are under strict access control.

---

09. Complaint Resolution Service on Personal information

The Company assigns the following division and officer in charge to protect the personal information and respond to the complaints regarding the sector:

A. Division of Personal Information

• Division: Legal Affairs
• Phone: 82 2 3398 8465
• Fax: 82 2 3398 2650
• E-mail : joejkim@doosan.com
• Business Hours: (Mon-Fri), 08:30 to 18:30, (Sat-Sun) Closed

B. Chief Privacy Officer

• Name: Kim Byeong Ju
• Phone: 82 2 3398 0854
• E-mail : kbj@doosan.com

If you want to report or need an advice on the invasion of the privacy, please contact the following organizations:

• Personal Information Dispute Mediation Committee (http://privacy.kisa.or.kr/118)
• Privacy Complaint Center (http://privacy.go.kr/118)
• Government Protection Mark Authentication Commission (www.eprivacy.or.kr/82 2 580 0533~4)
• Internet Criminal Investigation Center, Supreme Prosecutor's Office (http://icic.sppo.go.kr/82 2 348 3600)
• Cyber Terror Response Center, National Police Agency (www.ctrc.go.kr/82 2 392 0330)

---

10. Notification obligations

Additions, deletions and modifications of the current Personal Information Processing Policy will be notified through the website’s notice at least 10 days prior to the revision.

- Announcement date: 30 November 2011
- Effective Date: 30 November 2011

Doosan Corporation (“Doosan”) appreciates the importance of your personal information and conforms to the Act on Promotion of Information and Communication Network Utilization and Information Protection. Doosan hereby informs you of the purposes and methods by which we may use your personal information and of the actions taken to protect your privacy. If the privacy policy is modified or updated, Doosan will inform you of the details by providing a notice on our website or through individual notification.

The following privacy policy is applied to this website (www.doosaninfracore.com/engines/, “this Site”).

This policy will take effect on February 26, 2010

---

01. Matters of Installation, Operation and Rejection of Automatic Collection System of Personal Information

The Company operates cookies which frequently store and access your personal information. A cookie is a small piece of text sent by a web server to your web browser, which is used to run the website. It is also stored on the hard disk of your computer.

---

02. Uses of Cookies

Cookies may be used to analyze the frequency of access or visiting hours of members or non-members, store the information about user preferences, track user’s web browsing habits, and provide target marketing and customized service through analysis of user participation in events and number of visits.
You have a choice of whether to install cookies. You may accept all cookies, confirm whenever cookies are stored, or reject storage of all cookies by setting an option in your web browser.Users’

---

03. How to Reject Storage of Cookies

You may accept all cookies, or confirm whenever cookies are stored, or reject storage of all cookies by selecting an option in your web browser.
Example of settings (for Internet Explorer)
: Tools > Internet Option > Privacy

But, if you refuse to install cookies, you may have a difficulty using certain services.

---

04. Purpose of Collection

Doosan may collect your personal information for the following purposes.

• To provide customer service such as membership management and settling complaints;
• To provide you with better service and improve the level of this Site by conducting online market research or public opinion polls by which your ideas can be given;
• For marketing or advertising use with your prior consent and
• To implement provisions of service contracts, if any, and to provide billing content for services provided.

---

05. Items of Personal Information to be Collected

Doosan collects the following personal information to manage membership, counseling, or application for service:

• Items collected: Name (First and Last), Contact number (Phone), Email / Residence (Location), Company Name
• How we collect personal information: Home page(Contact Us, training applications and Voice of Customer Command Center)

---

06. The provision of personal information

The company, in principle, does not provide its users' personal information to outside persons, bodies or organizations. However, the exceptions possible are listed below:

• If users agree in advance
• If the provision of personal information complies with provisions of the law or by the request of the investigation agencies according to the procedures and methods set forth for the purpose of investigation

---

07. Rights of Users and Legal Representatives and How to Exercise Them

You and your respective legal representatives, at any time, may check or modify your registered personal information as well as request to cancel your membership.

To check or modify your personal information, click Change Personal Information (or Change Member Information); to cancel your membership (withdraw the agreement), click Cancel Membership. After going through the procedure to confirm your identity, you can review, change your information or withdraw your membership. You may also contact our personal information manager by telephone or email, and the manager will help you promptly.

If you request to correct errors in your personal information, you may not use or access the information before the correction is completed. If your incorrect personal information has been provided to a third party, they will be promptly notified of the result of the correction.

Doosan handles the personal information which has been withdrawn or deleted at the request of you or your legal representative in the manner provided in the Period of Storing and Using Personal Information and does not access or use it for other purposes.

---

08. Retention and Destruction of Personal Information

Any information provided by you will be transferred to separate Date Base upon achievement of the purpose of its use. Such information will then be banned from use, other than for the purpose of record keeping in our archives or for the purpose of complying with relevant laws and regulations.
However, if you wish to remove your personal information from our records, the information in its entirety will be destroyed immediately upon your request, and no information shall be retained in our archives unless relevant laws and regulations require such information to be stored for a longer period of time.

A. Retention and Duration of Use

• Retained information: Name, postal address, email address and company name.
• Statutory grounds for storage: prevention against confusion arising regarding service use, and cooperation with relevant investigation agencies in connection with any instances of service abuse
• Retention period: One year
• Reason of retention: User inquiries/requests control, user identification, etc.

• Retained information: Service usage data, access information, cookie, IP address
• Statutory grounds for storage: Communications Secrets Act
• Retention period: Three years
• Reason of retention: Collect service use statistics.

B. Termination procedure

The information that you enter moves to a separate database (a separate file folders in case of paper) after the achievement of its purpose, to be saved for internal policies and other information protection reasons adhering to the relevant regulations (see “the storing and usage period”) during a limited time and will be destroyed ultimately. The data separately transferred into the database, unless the law permits the exception, shall not be used for other purposes than its original objective.

C. Destruction methods

Personal information stored in electronic file formats shall be deleted using technical methods that prevent the recovery of its record.

---

09. Links to Websites Outside this Site

This Site may contain links to external web sites, and Doosan shall not be liable for the use of the linked web sites or their contents. You agree that the use of the linked web sites is subject to the privacy policy of those web sites.

---

10. Protection of Personal Information

Doosan maintains strict safety devices to prevent unauthorized or inappropriate access to personal information by limiting the access or use by its employees to the information.

---

11. Consignment of personal information collected

The Company entrusts with the implementation of this service to the following external specialists:

• Trustee: Doosan Information Communication Inc.
• Entrusted service: administration of the website and website system

---

12. Customer Support Service for Personal Information

The Company assigns the following relevant departments and personal information managers to protect customers’ personal information and address related complaints.

• Department in charge of Personal Information:Doosan infracore Engine Overseas Marketing Team
• Phone number: 82 2 3398 8533
• Fax: 82 2 3398 8509
• Email : kilsoo.kim@doosan.com
• Service hours : (Mon-Fri) 08:30 – 18:30, (Sat-Sun) Closed

To report violation of the privacy policy or inquire about the privacy policy, please contact the following organizations.

• Individual Dispute Mediation Committee (http://www.1336.or.kr Telephone : 1336)
• Information Protection Mark Certification Committee (http://www.eprivacy.or.kr Telephone : 82 2 580 0533~4)
• Supreme Prosecutors’ Office Cyber Crime Investigation Center (http://www.sppo.go.kr Telephone : 82 2 3480 3600)
• National Police Cyber Terrorism Countermeasure Center (http://www.ctrc.go.kr Telephone : 82 2 392 0330)
  
  Announcement Date: November 30, 2011
  Enforcement Date: November 30, 2011

01. Basis and on purposes of the installation of visual information processing equipment

Management Policy on Visual Information Processing Equipment (hereinafter as "the Policy") has its purpose to promote the proper execution of work and contribute to the assurance of interests of the informers, establishing the provisions with which the Company shall comply regarding the installation and operation of visual information processing equipment and the protection of personal video information, in accordance with Article 25 of the Personal Information Protection Act.

---

02. Principles for the protection of visual personal information

The Company collects personal visual information within the scope of minimum necessity to meet the purpose of installing visual information processing equipment, taking care so that this intention will be recognized clearly by the informers, and does not use the data for aims other than this. The Company commits to correctly manage the personal visual information safely, ensuring its accuracy and latest update, disclosing general details on the processing of personal visual information and guaranteeing the rights of any relevant informers.

---

03. Designation of the Administrator

The responsible officer, division and personnel in charge that take the tasks on the personal visual information processing for its safe management are as follows:

• Officer: Emergency Planning Team Manager
• Division: Emergency Planning Team, Div. of Administrative Support
• Operator in charge: responsible operator of installation and operation of visual information processing equipment, Emergency Planning Team, Div. of Administrative Support

---

04. Installation of visual information processing equipment

Amount, locations, and the shooting ranges of the installed visual information processing equipment are shown below:

• Amount of visual information processing equipment: Total 82 units (71 of fixed types, 11 of rotary types)
• Locations of visual information processing equipment:
  Entrance and aisle of each floor, elevator hall and elevator interior, and entering and exiting vehicles of parking, outside square
• Shooting range of video information processing equipment:
  Entrances, walkways, elevator hall and elevator interior

---

05. Installation of signs

The Company takes the necessary measures so that the installation and operation of visual information processing equipment can be easily recognized, including installation of information signs that state the following points:

• Purpose and place of the installation, shooting range and time, and the administrator's name, job title and contact details
• In case of the consignment of the installation and management, the trustee's name and contact details

Location and size of the sign attached are as follows:

• Place: Entrance to the building
• Size: 40 ⅹ 30cm (However, it can be changed according to the condition of the installed location).

---

06. Request of the informer to see

The informer may request to view and verification (hereafter referred to as "the view") of his or her own personal visual information that the Company handles.

Request form (personal visual information) > Download

When the Company receives the request for the view, it shall take the necessary measures without delay, and may verify the identity of the requestor, or his or her legitimate representative with the submission of documents which can prove the informer’s identity, such as a national identity card, driver’s license or passport.
The Company may refuse the informer's request for the view, notifying within 10 days the denial reasons and appeal procedures in writing to him or her in the following cases:

• If the corresponding personal visual information is destroyed, due to the storage period termination
• If there are legitimate reasons to reject the informer's view request

---

07. Recording time of the visual information processing equipment

Recording and storage times and storage areas are as follows:

• Recording time: 24 hours
• Storage time
  30 days to 3 months, depending on the shooting area
• Storage areas
  General Control Center

---

08. Management of visual information

Using the personal visual information for any purpose other than the collection or providing of it to third parties with informer's consent or by the provisions of the law requires the following points on the "Personal Visual Information Management Record" to be inscribed:

• Name of personal visual information file
• Name of the person who use or receive the information
• Purpose of the use or offer
• Statutory grounds of the use or offer, if any
• Period of the use or offer, if any
• Form of the use or offer

In the case of the destruction of the personal visual information, it is required to note down the following points on the "Personal Visual Information Management Record" to carry out later administration:

• Personal visual information item to be destroyed
• Date of the destruction of personal visual information (in case of a pre-set period for automatic destruction, its destruction time)
• Personnel in charge of the destruction of personal visual information

---

09. Storage and destruction

The Company destroys the collected personal visual information without delay, when the storage period expires, set forth in the Policy. However, this does not apply if there are special provisions in other relevant laws.
The destruction methods of personal visual information are as follows.

• For the output (pictures, for example) containing the personal visual information, shredding or incineration
• For personal visual information in the form of electromagnetic video files, permanent deletion that incapacitate their restoration by technical means

---

10. Managerial, technical and physical measures

• The Company administers minimum personnel to access to the personal visual information processed by the equipment, including the administrator and responsible operator in charge.
• The zones where the personal visual information is viewed and played transmitted by the processing equipment, are designated as restricted access areas to control the entrance of the people other than the authorized to access.
• The Company modifies or disqualifies without delay the permission rights of those who change their positions by the reasons of the retirement and transfer.
• The company takes necessary measures to ensure the security of the personal information or video files, processed or transmitted in order to prevent its being lost, stolen, leaked, damaged or altered, including the password setting.
• The Company checks regularly the functions of the visual information processing equipment to block an alteration or falsification of it.

---

11. Consignment of the installation and management of visual information processing equipment

The Company entrusts to the following trustee and is responsible for overseeing the processing of visual information charged with the safety.

• Trustee
  DFMS Inc.
• Entrusted service
  installation and operation of visual information processing equipment

Announcement Date: November 30, 2011
Effective Date: November 30, 2011