Personal Data Protection and Implementation Status

Evergreen International Storage & Transport Corp. Personal Data Protection Policy

Evergreen International Storage & Transport Corp. (hereinafter referred to as "the Company"), as a domestic container terminal operation service provider, providing passenger and freight transportation services, combining container terminal and inland container yard services, as well as large and small vehicle repair and vehicle inspection services and gas station related businesses, is committed to protecting your personal data and privacy. To ensure the proper use of personal data belonging to the Company's clients, employees, suppliers, and business partners, and to avoid harm to their personality rights, the Company complies with the relevant provisions of the "Personal Data Protection Act" regarding the collection, processing, and use of personal data as a prerequisite. The Company shall properly maintain and manage the security of personal data files in its possession, and the aforementioned content serves as the Company's personal data protection policy, applicable to all Company employees and third parties who come into contact with personal data through business dealings, to prevent personal data from being stolen, altered, damaged, destroyed, or disclosed.

Evergreen International Storage & Transport Corp. Personal Data Protection Implementation Status

The Company continuously identifies the scope, categories, and potential risks of personal data involved in the business processes of various departments through personal data inventories, internal information security controls, and other related operations. The Company establishes protective control measures and continuously implements various improvement programs. To ensure that all colleagues understand their responsibilities when processing personal data, the Company regularly provides professional education and training or basic awareness promotion and retains implementation records, enabling personnel responsible for daily personal data management policy compliance to understand the laws and regulations they must comply with. At the same time, for new employees, the Company also provides guidance to help them understand the relevant laws and regulations on personal data protection, scope of responsibilities, and related management measures that must be observed.

As of September 16, 2025, the Company has a total of 1,010 employees have completed relevant personal data protection and information security education and training (with a total training duration of approximately 500 hours).

Major Personal Data Breaches

There was no major personal data breaches or violations of the Personal Data Protection Act in 2025.

Last Updated: September 25, 2025