Personal Data Protection Policy

ENE Technology Inc values personal data protection. In order to implement the collection, processing, utilization, preservation, and security management of personal data, and to protect the rights of the parties involved, this personal data protection policy is established in accordance with the Personal Data Protection Act and relevant legal regulations as a guideline for the company's personal data management.

This policy applies to all personnel, business partners, customers, consultants, job candidates, and other individuals related to the company's business. The company adheres to the principles of honesty and good faith when collecting, processing, and using personal data, limiting it to the scope necessary for specific purposes, not exceeding the collection purposes, and ensuring that the use of personal data is legally and reasonably connected to the collection purposes.

The company's principles of personal data protection are as follows:

1. Legal Collection and Notification
   When our company collects personal data, unless otherwise provided by law, we will clearly inform the purpose of collection, the categories of personal data, the duration of use, the region, relevant parties, and methods, and obtain the consent of the relevant parties when necessary.
2. Purpose Limitation and Necessary Use
   The collection, processing, and use of personal data should be limited to specific purposes and necessary business scope, and must not be disclosed, sold, or used for other purposes unrelated to the collection purpose.
3. Data Accuracy and Security Maintenance
   The company will take appropriate management measures to maintain the accuracy, integrity, and timeliness of personal data, and to prevent personal data from being stolen, tampered with, damaged, lost, or leaked.
4. Access Control and Confidentiality Responsibilities
   Access to and use of personal data is only permitted for authorized personnel necessary for business purposes. Relevant personnel shall fulfill their confidentiality obligations and comply with the company's internal regulations regarding personal data protection and information security.
5. Information Security Protection
   The company has established necessary information security protection measures for electronic systems and media that store personal data, including access control, data encryption, backup, recovery, firewalls, antivirus, and access log retention mechanisms, to reduce the risk of personal data leakage or improper use.
6. Protection of the Rights of the Parties Involved
   The parties have the right to request the company to inquire, review, produce copies, supplement, correct, stop the collection, processing, use, or delete their personal data in accordance with the law. The company will handle this properly in accordance with relevant laws and internal procedures.
7. Personal Data Incident Reporting and Handling
   In the event of personal data being stolen, leaked, tampered with, or otherwise violated, the company will conduct investigations and handle the matter in accordance with relevant laws and internal procedures, and will notify the affected individuals of the relevant facts and the measures taken when necessary.

The company is managed by the Human Resources unit as the personal data protection management unit, the Information unit is responsible for the security maintenance of relevant systems, and the Legal unit serves as the contact point for personal data cases, jointly promoting personal data protection management operations. In the future, the company will continue to review and strengthen personal data protection measures to ensure the effectiveness of the personal data management system and protect the personal data rights of employees, customers, suppliers, and other stakeholders.