Customer Information Handling Policy

Thank you very much for your support and interest in NH Nonghyup Financial. According to the Financial Holding Company Act, it is possible to provide and use customer information between group companies. Therefore, we inform you as follows, so please refer to it.

I.Types of customer information provided

• 1.Information or data on the contents of financial transactions under Article 4 of the Financial Real Name Transactions and Confidentiality Act
• 2. Personal credit information under Article 32 (1) of the 신용Act on the Use and Protection of Credit Information

• Information that can identify an individual, such as the name, contact number, resident registration number, passport number, driver's license number, alien registration number, domestic residence report number, gender, nationality, etc. of the surviving individual
• The type of transaction, the name or trade name of the parties to the transaction, the period, amount, and limit of the transaction, as information that can determine the transaction details of the credit information subject in relation to commerce such as loans, guarantees, collateral provision, checking accounts (including household account transactions), credit cards, installment financing, and facility loans
• Information that can determine the creditworthiness of the credit information entity, such as overdue, insolvency, loan payments, falsehood, deception, or other wrongful means related to commercial transactions, such as financial transactions, etc
• Total amount of individual property, debt, income, tax performance, etc. as information that can determine the credit transaction ability of the credit information entity in financial transactions, etc
• Trial and decision information of courts or public institutions that can identify credit information subjects and determine creditworthiness and credit transaction capabilities, delinquent information such as taxes or utility charges, resident registration information, and other information held by public institutions, etc

• 3.Information falling under any of the following items of information on money or securities deposited by an investment trader or an investment broker who intends to trade through the Capital Markets and Financial Investment Business Act

• Total amount of money deposited
• Total amount of securities deposited
• Total amount of securities deposited by type
• Total amount of debt securities by type
• The total amount of collective investment organizations according to the classification of each subparagraph of Article 229 of the Capital Markets and Financial Investment Business Act as beneficiary securities
• The average securities holding period of the consignor based on the total amount of securities deposited and the average number of transactions over a certain period of time

II.Trade names and industries of financial holding companies, etc

NH Nonghyup Financial Group Inc., NH Nonghyup Bank Co., Ltd., NH Nonghyup Life Insurance Co., Ltd., NH Insurance Co., Ltd., NH Investment & Securities Co., Ltd., NH-Amundi Asset Management Co., Ltd., NH Investment & Securities Co., Ltd.

III.Where Customer Information is Provided

NH Nonghyup Financial Group, NH Nonghyup Bank, NH Life Insurance, NH Insurance, NH Investment & Securities, NH-Amundi Asset Management, NH Futures, NH Savings Bank, NH Savings Bank, NH Nonghyup REITs, NH Venture Investment & Securities, and NH Asset Management.

IV.Internal Policy on the Protection of Customer Information

NH Nonghyup Financial Group has made the provision and use of information between group companies under strict procedures, management, and supervision as follows to manage customer information as safely as possible.

• 1.The provision and use of customer information shall be used only for internal management, such as credit risk management.
• 2.At least one executive of the group company was appointed as a customer information manager to take responsibility for the provision and use of customer information.
• 3.The department and person in charge were designated for each group company to promote systematic and intensive management.
• 4.When requesting and providing customer information, strict management and control are carried out through the formalization of the business process, such as requesting and providing customer information after obtaining approval from the customer information manager in writing or electronic payment system.
• 5.We made every effort to protect customer information by giving the general management role to the customer information manager of the financial holding company regarding the request, provision, and use of customer information between group companies.
• 6.When enacting or revising the handling policy related to the provision and use of customer information, we will do our best to notify customers by announcing it in two or more daily newspapers and posting it on each branch (including the relevant department) and each group company's website.
• 7.When providing customer information, the sharing details can be inquired on the website, and the customer's right to access self-information has been strengthened by notifying them at least once a year.
• 8.Each group company has a department in charge of handling civil complaints, such as guidance, counseling, handling, and results and notifications, to ensure proper compensation and handling for customers who have suffered damage due to illegal or unfair methods. In addition, you can receive relief through the dispute settlement system of the Financial Supervisory Service other than the competent department.
• 9.Only authorized to provide and use customer information, encrypt and manage customer information transmission, reception, and storage, establish a security system against natural disasters and force majeure, and provide security education to executives and employees related to customer information regularly.

NH Nonghyup Financial Group promises to provide more convenient and high-quality advanced financial services to customers based on customer information exchange, keeping in mind that allowing the provision and use of customer information between groups is a measure to improve the quality of financial services.