Legal hub

The purpose of these Terms and Conditions (hereinafter referred to as "Terms") is to set forth the rights, obligations, and responsibilities of Läderach Korea LLC (hereinafter referred to as the "Company") and users (hereinafter referred to as "Users") in connection with the use of services (hereinafter referred to as the "Services") provided through the website operated and managed by the Company (hereinafter referred to as the "Site").

2.1
The term "Site" refers to the virtual premises, established by the Company using computer and information communication devices, through which products may be transacted for the purpose of providing such products to Users.

2.2
The term "User(s)" refers to both members and non-members who access the Site and receive Services provided by the Company in accordance with these Terms.

2.3
The term "Member(s)" refers to any individual who has registered an account on the Site and is thereby eligible to use the Services provided by the Company on a continuing basis.

2.4
The term "Non-member(s)" refers to any individual who utilizes the Services provided by the Company without registering as a Member.

3.1
The Company shall post the contents of these Terms, the Company name and representative's name, principal office address (including the address where consumer complaints may be handled), telephone number, fax number, email address, business registration number, mail-order business registration number, and the name of the person in charge of personal information management on the initial service screen of the Site in a manner that is easily accessible to Users. However, the details of these Terms may be made available via a linked page.

3.2
The Company may amend these Terms to the extent such amendments do not violate the Act on Consumer Protection in Electronic Commerce, the Act on the Regulation of Terms and Conditions, the Basic Act on Electronic Documents and Transactions, the Electronic Financial Transactions Act, the Electronic Signature Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Door-to-Door Sales Act, the Framework Act on Consumers, and other related laws and regulations.

3.3
If the Company amends these Terms, it shall notify Users by stating the effective date and the reason for the amendment, posting the current and revised terms on the Site from at least seven (7) days prior to the effective date until the day before the effective date. The Company shall also notify Users through means such as the email address provided by the Member. However, if the amendments are unfavorable to Users, the Company shall provide notice or notification with a prior grace period of at least thirty (30) days. In such cases, the Company shall present the changes in a manner that is easy for Users to understand.

3.4
When providing notice to Member, the Company may notify Member via the email address specified by the Member. In the case of notices to many Member, the Company may substitute individual notice by posting such notice for at least one (1) week on the Notice board on the Site. However, matters which may have a material impact on a Member's transaction shall be notified to such Member individually.

3.5
Amendments to these Terms shall apply only to agreements executed after the effective date of the amended Terms; with respect to agreements executed prior to such effective date, the previous version of the Terms shall continue to apply. Notwithstanding the foregoing, if an existing User who has already entered into an agreement expresses the intent to have the amended Terms apply by transmitting such intent to the Company during the public notice period in accordance with Paragraph 3 above, and the Company consents thereto, the amended Terms shall apply.

Any matters not expressly stipulated in these Terms and the interpretation of these Terms shall be governed by the Act on Consumer Protection in Electronic Commerce, the Act on the Regulation of Terms and Conditions, the Guidelines on Consumer Protection in Electronic Commerce established by the Fair Trade Commission, other relevant laws and regulations, or generally accepted commercial practices.

5.1
The Services provided by the Company are as follows:

5.1.1
Providing information regarding products, and entering into and performing purchase agreements;

5.1.2
Providing information on new products and Company updates;

5.1.3
Providing services related to electronic commerce, including mail order sales;

5.1.4
Other services as may be determined by the Company.

5.2
Users may utilize the Services by providing the information required for product purchase on the Site without registering as a Member in accordance with Article 6. In such cases, Users are required to enter the relevant information each time they make a purchase request.

5.3
When a User submits a product purchase request on the Site, the User shall be deemed to have agreed to the contents of these Terms.

5.4
Users must accurately provide all information required by the Company when submitting a purchase request. Should any or all of the information provided prove to be false or inaccurate, the Company may refuse the purchase request or terminate an already executed purchase agreement.

6.1
Users may apply for member registration (hereinafter referred to as the "Member Registration") on the Site's member registration page (https://laderach.com/kr-en/) by providing their name, email address, and password, and by entering their address, telephone number, payment information, and any other information required.

6.2
Upon receipt of a registration application from a User, the Company shall determine whether to approve the registration. If the Company approves Member Registration, such approval shall be notified to the User, and Member Registration shall be deemed completed at the time the notification is received by the User.

6.3
The Company may refuse Member Registration application in any of the following circumstances, and shall not be obligated to disclose the reasons for such refusal:

6.3.1
Where any or all of the information provided in the registration application is found to be false, omitted, or erroneous;

6.3.2
Where, as of the date of application, the User is under the age of fourteen (14);

6.3.3
Where the User's membership has previously been revoked in accordance with Article 8, Paragraph 2 of these Terms;

6.3.4
Where the User has otherwise breached these Terms in the past;

6.3.5
Where there exist any other unavoidable grounds for refusing Member Registration.

7.1
In the event of any change to their registration information, Member shall promptly access the member information modification page on the Site (https://laderach.com/kr-en/) and follow the prescribed procedures to update such information.

7.2
The Company shall not be liable for any damages arising from a Member's failure to complete the procedures to update their registration information.

8.1
Member may, at any time, request withdrawal of membership through the Member withdrawal page on the Site(www.laderach.com/kr-en/). Unless it is prevented by technical difficulties or other exceptional circumstances, the Company shall process such withdrawal requests without undue delay.

8.2
If a Member falls under any of the events set out in Article 6, Paragraph 3, or otherwise breaches any provision of these Terms, the Company may, without prior notice, restrict or suspend the Member's status.

8.3
If, after the restriction or suspension of membership in accordance with Paragraph 2 above, the same or similar act is repeated two or more times, or the cause is not rectified within thirty (30) days, the Company may revoke the Member's status and delete the registration..

8.4
The Company shall not be liable for any damages arising from the measures taken pursuant to the preceding paragraphs, except in cases of willful misconduct or gross negligence on the part of the Company.

9.1
Member shall be responsible for properly managing their email address and password required to log in to the Site (hereinafter referred to as the "Login Information") and shall ensure that such information is not disclosed to any third party.

9.2
Member shall not allow any third party to use, transfer, or lend their Login Information.

9.3
Member shall be solely responsible for all acts performed using their Login Information by any third party.

10.1
Users may apply to purchase products on the Site by reviewing the order details, clicking the "Order" button, and submitting all required information.

10.2
A purchase agreement is formed when, following a User's application to purchase, the Company sends an order confirmation by email and such confirmation is received by the User or, at the latest, when the Company dispatches the product.

10.3
The Company may refuse to accept a User's purchase application under any of the following circumstances:

10.3.1
When an order is placed for a product that is out of stock due to a system error or it is confirmed that supply at the ordered price is impossible due to significant price fluctuations;

10.3.2
If the purchase application contains false, omitted, or erroneous information;

10.3.3
If the purchase is for commercial (resale) purposes or is reasonably deemed by the Company to be for such purposes based on the circumstances of the transaction (the Company's policies shall determine the criteria for recognizing commercial purchases, as well as the rejection or cancellation of such purchases);

10.3.4
If the Company determines that there are significant technical difficulties in accepting the purchase application;

10.3.5
If it is identified that the purchase application has been submitted by a Member whose membership has been restricted or suspended under Article 8, Paragraph 2;

10.3.6
Any other reasons comparable to the above.

10.4
Where an agreement is executed with a minor, the Company shall provide notice that such agreement may be cancelled by the minor or the minor's legal representative unless the necessary consent of the legal representative has been obtained.

10.5
If a User engages in improper conduct or violates these Terms, the Company may cancel or terminate the purchase agreement or take any other appropriate measures.

10.6
The scope of Services provided (including eligible shipping destinations and address registration) shall be limited to the Republic of Korea.

11.1
Payment for products, including the product price, value added tax (VAT), shipping charges, and any other related fees (hereinafter referred to as the "Product Price"), may be made using one of the following methods only:

11.1.1
Payment by prepaid cards, debit cards, credit cards, or other cards;

11.1.2
Payment via electronic money;

11.1.3
Payment by means of gift certificates contracted with or approved by the Company;

11.1.4
Online wire transfer or mobile phone payment;

11.1.5
Any other electronic payment method recognized by the Company.

11.2
When using any of the foregoing payment methods, Users shall comply with the terms and conditions separately established by the respective payment service provider. Users shall resolve any disputes arising in connection with the use of such payment methods at their own responsibility.

12.1
Unless exceptional circumstances arise, the Company shall dispatch the products immediately following successful completion of payment procedures in accordance with Article 11, Paragraph 1.

12.2
In the event delivery is delayed or impossible due to insufficient inventory, product discontinuation, or any other reason, the Company shall notify the User thereof via email.

13.1
A User who has entered into an agreement to purchase a product with the Company may withdraw the purchase application within seven (7) days from the date of receipt of the written agreement details pursuant to Article 13(2) of the Act on Consumer Protection in Electronic Commerce (hereinafter referred to as "E-Commerce Act"). Provided, however, if delivery of the product occurs after delivery of such written agreement details, withdrawal may be made within seven (7) days from the date the product is received or the date supply of the product commences, whichever is later. Where otherwise prescribed by the E-Commerce Act, such provisions shall govern.

13.2
Notwithstanding the foregoing, Users may not exchange or return products in any of the following circumstances:

13.2.1
Where loss or damage to the product is attributable to the User (excluding cases where the packaging was opened for the purpose of checking the product's contents);

13.2.2
Where the value of the product has been substantially diminished due to use or partial consumption by the User;

13.2.3
Where the value of the product has been substantially diminished to the extent that resale is difficult due to the passage of time;

13.2.4
Where the product is individually manufactured to order, and the User was notified of and provided written (including electronic means) consent to such restriction prior to the transaction.

13.3
Notwithstanding Paragraph 2, where the Company has failed to clearly indicate in an easily accessible manner that withdrawal of application or return/exchange is restricted, or to provide a sample for trial, the User's rights to withdrawal or return/exchange under items (2) through (4) of Paragraph 2 shall not be restricted.

13.4
Notwithstanding Paragraphs 1 and 2, if the product supplied is inconsistent with what was displayed, advertised, or contracted for, the User may withdraw the purchase application, request an exchange, or return the product within three (3) months of receipt, or within thirty (30) days of discovering or having reasonable grounds to discover such inconsistency, whichever is earlier.

13.5
If a User requests an exchange in accordance with this Article but the relevant product is out of stock, such request shall be processed as a return.

13.6
The responsibility for return shipping and any other necessary costs in connection with a return or exchange shall rest with the party at fault. Notwithstanding the foregoing, in cases of product defects or incorrect delivery, the Company shall bear such costs; however, where return or exchange is due to change of mind, the User shall bear such costs.

The Company shall lawfully handle the personal information of Users acquired in connection with use of the Services in accordance with its separately established Privacy Policy.

Users shall not engage in any of the following acts:

15.1
Providing false information at the time of application or modification;

15.2
Illegally using another person's information;

15.3
Altering information posted on the Site;

15.4
Transmitting or posting information (including computer programs, etc.) other than as prescribed by the Company;

15.5
Infringing upon the copyrights or other intellectual property rights of the Company or any third party;

15.6
Damaging the reputation of or interfering with the business of the Company or any third party;

15.7
Posting or disclosing on the Site any obscene, violent messages, images, sounds, or other content that is contrary to public order or morals.

16.1
The Company may, without prior notice to Users, suspend all or part of the Services in the event of system maintenance, failure of communication facilities, acts of God, or other similar reasons.

16.2
The Company shall compensate Users or third parties for damages incurred as a result of temporary interruptions to the provision of Services as set forth in Paragraph 1, unless the Company proves that there was no intent or negligence on its part.

Users shall not assign, create security interests in, or otherwise dispose of any rights, obligations, or contractual status under these Terms to any third party without the prior written consent of the Company.

If any provision of these Terms is held to be invalid or unenforceable under the Act on the Regulation of Terms and Conditions or other applicable laws and regulations, the remaining provisions shall remain in full force and effect.

19.1
Any disputes arising between User and the Company in connection with electronic commerce transactions shall be governed by the laws of the Republic of Korea.

19.2
Any litigation arising in connection with electronic commerce transactions between User and the Company shall be brought before a court of competent jurisdiction in accordance with the Civil Procedure Act of the Republic of Korea.

Laderach Korea Ltd. ("Läderach Korea", "we", "us" or "our") respects the privacy and rights of its customers, website users, store visitors and other individuals whose personal information we process. We process personal information in accordance with the Korean Personal Information Protection Act ("PIPA") and other applicable Korean laws and regulations.

This Privacy Policy is established and disclosed pursuant to Article 30 PIPA. It explains how Läderach Korea collects, uses, stores, discloses, transfers and protects personal information, how data subjects may exercise their rights, and how Läderach Korea operates fixed video information processing devices (CCTV).

Läderach Korea is the personal information controller for the processing activities described in this Privacy Policy unless expressly stated otherwise. Läderach Korea is part of the Läderach Group. Certain IT, administrative, privacy management and other central Group services are provided by Läderach (Schweiz) AG. Where Läderach (Schweiz) AG processes personal information solely on behalf of Läderach Korea, it does so as an entrusted processor under the applicable instructions, contractual safeguards and data protection requirements. Where Läderach (Schweiz) AG processes personal information for independently determined purposes, that processing is assessed separately and disclosed as a third-party provision and/or international transfer where required by applicable Korean law.

This Privacy Policy applies in particular to personal information processed in connection with:

• the Läderach Korea website and online shop;
• customer accounts and customer services;
• orders, payments, deliveries, returns and refunds;
• customer enquiries and complaints;
• newsletters, marketing and customer communications;
• website operation, analytics, cookies and similar technologies;
• visits to Läderach Korea stores and other locations, including CCTV; and
• related administrative, information-security and compliance activities.

Separate privacy information may apply to employees, applicants or specific services where required.

Läderach Korea processes personal information only to the extent necessary for the relevant purpose. The following table reflects the categories and purposes currently documented for the Korean website and online shop. Optional data are processed only where the corresponding functionality is actually offered.

Personal information	Purpose	Retention	Legal basis
ID, password, name, date of birth, email address, phone number	Membership registration, authentication, account administration and prevention of fraudulent use	Until membership withdrawal or achievement of purpose, unless statutory retention applies	Article 15(1)4 PIPA - performance of contract
Name, phone number, address, email address, order and delivery information	Product delivery, service provision, contracts/invoices, payment/settlement, complaints and disputes	5 years after transaction completion where statutory e-commerce retention applies	Article 15(1)4 PIPA and applicable statutory obligations
Payment and transaction information	Payment and settlement	5 years after transaction completion where statutory e-commerce retention applies	Article 15(1)4 PIPA and applicable statutory obligations
Access IP, cookies, service usage records, access logs, device/browser data	Website operation, security, fraud prevention and service usage statistics	According to the applicable technical retention schedule and service configuration	Applicable basis under PIPA; consent where required
Name, address, mobile number, email, browsing and purchase history	Advertising and customized services	Until withdrawal of consent or achievement of purpose	Consent under Article 15(1)1 PIPA
Date of birth, gender, interests	Customized recommendations and marketing analysis, if offered	Until withdrawal of consent or achievement of purpose	Consent under Article 15(1)1 PIPA
Social login information	Simple login service, if offered	Until membership withdrawal or achievement of purpose	Consent or other applicable basis under PIPA
Location information	Store guidance or regional promotions, if offered	Until withdrawal of consent or achievement of purpose	Consent where required
CCTV images and associated date/time metadata	Crime prevention/investigation; protection of persons and property; facility safety and management	See Section 10	Article 25 PIPA

Where continued retention is required by law, or where an investigation, dispute or outstanding claim requires continued processing, Läderach Korea retains the relevant personal information only for the applicable period and purpose. In particular, the following statutory periods may apply under Korean e-commerce law:

• Records of contracts, withdrawal from contracts, payments and supply of goods: 5 years.
• Records of consumer complaints and dispute resolution: 3 years.
• Records of display and advertising: 6 months.

Where information is retained solely because of a statutory obligation, it is separated or otherwise restricted from ordinary processing where appropriate.

Läderach Korea destroys personal information without delay when the retention period expires or the processing purpose has been achieved, unless continued retention is required by law.

Electronic records are deleted using methods designed to prevent restoration or reconstruction. Paper records containing personal information are destroyed by secure shredding or another appropriate destruction method. Destruction is performed under the responsibility of the person or function responsible for personal information protection.

Läderach Korea processes personal information within the purposes described in this Privacy Policy and provides personal information to third parties for their independent purposes only where a basis under Articles 17 or 18 PIPA or another applicable provision exists, including valid consent or a specific statutory authorization.

A transfer to another Läderach Group company is not treated uniformly. Depending on the specific processing activity, a Group company may act as an entrusted processor/service provider or as an independent recipient. The applicable role, purpose and legal basis are determined for each processing activity.

Läderach Korea may entrust personal information processing to service providers where necessary for the operation of its business and services. Entrustees process personal information only within the scope of the entrusted work.

Entrustee	Entrusted work
Hyundai Glovis Logistics	Product delivery and related logistics
Läderach (Schweiz) AG	Central Group IT, administration, privacy management and other central Group services, solely to the extent actually performed on behalf of Läderach Korea

When entering into entrustment arrangements, Läderach Korea documents the matters required by Article 26 PIPA, including purpose limitation, technical and managerial safeguards, restrictions on re-entrustment, supervision and responsibility. Re-entrustment is subject to the requirements of PIPA. Material changes to entrusted processing are disclosed as required by law.

Website technologies detected by the technical compliance scan are described separately in Section 8.2. Any additional processor or entrustee used outside the technically observable website environment must be documented and disclosed where required by PIPA.

Läderach Korea may transfer personal information outside the Republic of Korea, including by provision, remote access, entrusted processing or storage, only where a transfer basis permitted under Article 28-8 PIPA applies. Where separate consent is the applicable basis, Läderach Korea provides the information required by PIPA before obtaining consent. Where cross-border entrusted processing or storage is necessary for entering into or performing a contract, Läderach Korea provides the information required by Article 28-8 PIPA through this Privacy Policy or another legally permitted method.

For each international transfer, the following information is disclosed as applicable: the transferred personal information, destination country, timing and method of transfer, recipient and contact details, purpose, retention/use period, legal basis, and - where consent is relied upon - the method for refusing the transfer and the consequences of refusal.

Recipient / country	Data	Purpose / method	Retention / basis
Läderach (Schweiz) AG / Switzerland	Personal information processed in connection with central Group services, depending on the relevant service	Central Group services; electronic transfer and/or authorized remote access	According to the relevant processing purpose and applicable retention requirements / transfer permitted only where a basis under Article 28-8 PIPA applies
Cloudflare / USA; CDN server location detected in Canada	Technical website and traffic information, including IP address and request-related technical data as applicable	Website delivery, security and analytics; online transmission	According to service configuration and applicable retention requirements / transfer permitted only where a basis under Article 28-8 PIPA applies
UserWay / USA	Device/browser and website-interaction or accessibility-related technical data as applicable	Website interaction and accessibility-related functionality; online transmission	According to service configuration and applicable retention requirements / transfer permitted only where a basis under Article 28-8 PIPA applies
VWO (Wingify) / India	Online identifiers and website usage/interaction data as applicable	Website analytics and optimisation; online transmission	According to service configuration and applicable retention requirements / transfer permitted only where a basis under Article 28-8 PIPA applies
Unidentified service via on.aws / destination not identified by scan	Technical request and usage data as applicable	Purpose and recipient not identified by the technical scan	Recipient, purpose, destination and retention remain technically unidentified; disclosure will be updated when the service is identified

Läderach Korea implements appropriate safeguards for international transfers and addresses security, complaints and dispute resolution with the recipient as required by Korean law.

Läderach Korea uses cookies and similar technologies to operate and secure the website, provide requested functions, remember settings and, subject to consent where required, perform analytics, personalization and marketing.

Necessary technologies may be used for functions such as login, shopping-cart operation, security and fraud prevention. Non-essential analytics, advertising or similar tracking technologies are activated only after the applicable requirements, including consent where required, have been fulfilled.

8.1
Cookie controls

Users may manage cookies through the Läderach cookie settings and may also restrict or delete cookies through the privacy or cookie settings of their browser or mobile device. Available controls depend on the browser and device used. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Blocking necessary cookies may impair website functionality.

8.2
Services used on the website

The following external services were detected on the Läderach Korea website by the technical compliance scan dated 24 September 2026 (full scan dated 21 September 2026). The list reflects the technical findings of that scan and does not add services that were not detected.

Service detected	Purpose / function in scan	Transfer finding
Amazon CloudFront	Web storage / content delivery functionality	No destination country identified by the scan
Cloudflare Analytics	Website analytics	Cloudflare infrastructure identified as USA; CDN server location detected in Canada
Cloudflare Turnstile	Browser/security functionality	No destination country identified by the scan
Cookie Information	Consent management	No destination country identified by the scan
Google	Functional website services	No destination country identified by the scan
Google Ads	Programmatic advertising	No destination country identified by the scan
Google Ads Conversion Tracking	Programmatic advertising / conversion measurement	No destination country identified by the scan
Google Analytics	Website analytics	No destination country identified by the scan
Google Ads Remarketing	Advertising / remarketing	No destination country identified by the scan
Google Fonts	Provision of website fonts / essential website content	No destination country identified by the scan
Google Maps	External map content	No destination country identified by the scan
Google Tag Manager	Management of website tags and technologies	No destination country identified by the scan
Hotjar	Website analytics	No destination country identified by the scan
Klaviyo	Website analytics	No destination country identified by the scan
Meta	Programmatic advertising	No destination country identified by the scan
Meta Pixel	Programmatic advertising / measurement	No destination country identified by the scan
Microsoft Advertising	Programmatic advertising	No destination country identified by the scan
Microsoft Clarity	Website analytics	No destination country identified by the scan
UserWay	Website interaction / accessibility-related functionality	USA
VWO (Wingify)	Website analytics and optimisation	India
Unidentified service via on.aws	Purpose not identified by the scan	A data transfer was detected; destination country was not identified by the scan

Depending on the respective service and its technical configuration, information such as IP addresses, online and cookie identifiers, device and browser information, URLs and referrer information, timestamps, website interactions, usage information and advertising or conversion events may be processed.

Where consent is required, the relevant service is intended to be activated in accordance with the user’s consent choices made through the consent-management interface. The technical scan identified consent-management issues for certain services; these findings require technical remediation and are not altered by this Privacy Policy.

The scan detected a connection to on.aws but did not identify the specific service, recipient, purpose or destination country. Läderach Korea will update this Privacy Policy where the technical assignment establishes additional information that must be disclosed.

Läderach Korea implements appropriate managerial, technical and physical safeguards under PIPA to protect personal information against unauthorized access, disclosure, alteration, loss or destruction. Depending on the relevant processing, these measures include:

• internal management plans, defined privacy responsibilities, supervision and employee training;
• access-right management and access controls for personal information processing systems;
• authentication, encryption and secure transmission where appropriate;
• logging, monitoring, security software and system maintenance;
• physical access restrictions for locations and systems containing personal information; and
• procedures for responding to personal information incidents and data-subject requests.

This Section constitutes the fixed video information processing device operating and management policy of Läderach Korea for purposes of Article 25(7) PIPA and the applicable Enforcement Decree. Läderach Korea operates fixed CCTV only at selected stores and/or other locations and only for legally permitted purposes.

10.1
Legal basis and purposes

CCTV may be installed and operated in publicly accessible areas where necessary for crime prevention and investigation, facility safety and management, fire prevention, and the protection of customers, employees and property, in accordance with Article 25 PIPA. CCTV is not used for general employee performance or behaviour monitoring.

10.2
Number, locations and recording areas

CCTV is operated only at Läderach Korea locations where fixed video surveillance is installed for the purposes stated above. Recording is limited to security-relevant areas such as entrances/exits and sales or other documented security areas. Toilets, changing rooms and other areas with a particularly high expectation of privacy are not recorded.

10.3
Recording, retention and storage

CCTV is operated without audio recording. Recordings are retained only for the period necessary for the stated security purpose and are deleted or overwritten after expiry, unless preservation is required for a specific incident, legal claim or competent authority. Recordings are stored in the designated CCTV system with access restricted to authorized persons.

10.4
Management responsibility and access

Local management responsibility for CCTV lies with Läderach Korea. Access to recordings is restricted to specifically authorized persons who require access for the stated purposes. Access, disclosure, export and preservation of recordings are subject to authorization and appropriate security controls.

10.5
How and where recordings can be reviewed

Authorized review of CCTV recordings takes place only through the designated CCTV system and through authorized secure access. Review and disclosure are limited to the purposes permitted by law and are documented where required.

10.6
Data-subject requests concerning CCTV

A data subject may request access to CCTV recordings concerning them in accordance with applicable law. Requests should be submitted to the privacy contact in Section 13 and should identify the relevant location and approximate date and time so that the recording can be located. Läderach Korea may verify identity and may restrict or redact access where necessary to protect other individuals or where another legal restriction applies.

10.7
CCTV security measures

Läderach Korea protects CCTV recordings through appropriate technical, managerial and physical safeguards, including access restrictions, authorization controls, secure storage, logging where applicable, confidentiality obligations and controlled procedures for disclosure, export and deletion.

10.8
CCTV signage

Locations where CCTV is operated are identified by notices that are readily visible to individuals. The signage states the installation purpose and location, recording range and time, and contact details of the management officer, together with any additional information required by Korean law. Where appropriate, the notice links to this Privacy Policy as the detailed second layer of information.

Subject to the requirements and limitations of PIPA, data subjects may exercise rights including access, correction, deletion, suspension of processing, withdrawal of consent, and rights relating to automated decisions where applicable.

For children under 14, rights are exercised by their legal representative as provided by Korean law. A minor aged 14 or older may exercise rights personally or through a lawful representative where permitted.

Requests may be submitted in writing or electronically to the contact in Section 13. Läderach Korea may verify the identity and authority of the requester. Where deletion or suspension cannot be granted because information must be retained or processed by law, the request will be handled in accordance with the applicable statutory requirements.

Where Läderach Korea knowingly processes personal information of children under 14 in circumstances requiring consent, the required consent is obtained from the child’s legal representative. Läderach Korea does not intentionally use children’s personal information for marketing or profiling unless the applicable legal requirements have been fulfilled.

Läderach Korea designates a local person responsible for personal information protection and for handling privacy-related enquiries and complaints. The local function is supported by the Läderach Group Data Protection Officer as part of the Läderach Group Privacy Framework.

Role	Contact
Personal Information Protection Officer / Local Privacy Contact	Summer Lee General Manager Korea Laderach Korea Ltd. Email: [email protected] Telephone: +82 10 9016 4224
Group Data Protection Officer	Lars Ebertz Group Data Protection Officer Email: [email protected]
Company address	Laderach Korea Ltd. Room 121, 5th Floor, 507, Teheran-ro, Gangnam-gu, Seoul, Republic of Korea

Data subjects may contact the local privacy contact or the Group Data Protection Officer regarding questions concerning the processing of their personal information. Requests for access and other statutory rights are coordinated by Läderach Korea.

Läderach Korea will respond to privacy enquiries and complaints without undue delay. Data subjects may also seek consultation or remedies from the competent Korean bodies, including:

Body	Contact
Personal Information Dispute Mediation Committee	1833-6972 | www.kopico.go.kr
Privacy Infringement Report Center (KISA)	118 | privacy.kisa.or.kr
Supreme Prosecutors’ Office	1301 | www.spo.go.kr
Korean National Police Agency	182 | ecrm.cyber.go.kr

This Privacy Policy may be updated where processing activities, services or applicable legal requirements change. Changes are disclosed through the Läderach Korea website in accordance with PIPA and applicable implementing requirements.

Effective date: 24 September 2026

Previous versions of this Privacy Policy will be made available where required.