Privacy Policy

<Privacy Policy> Gwangmyeong 77 Implant Dental Clinic (hereinafter "the Clinic") places great importance on protecting your personal information and complies with the Personal Information Protection Act. Through this Privacy Policy, the Clinic informs you of the purposes and methods for which the personal information you provide is used, and what measures are taken to protect it. This Privacy Policy is organized as follows. 1. Items of Personal Information Collected and Collection Methods 2. Purpose of Collecting and Using Personal Information 3. Retention and Use Period of Personal Information 4. Procedures and Methods for Destroying Personal Information 5. Provision and Sharing of Personal Information 6. Outsourcing of Collected Personal Information 7. Rights of Users and Legal Representatives and How to Exercise Them 8. Withdrawal of Consent / Membership Cancellation 9. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices 10. Personal Information Manager 11. Measures to Secure the Safety of Personal Information 12. Duty to Notify of Policy Changes 1. Items of Personal Information Collected and Collection Methods The Clinic collects only the minimum personal information necessary for providing services when you register as a member. To use the Clinic's services, there are required and optional items during registration; optional items such as whether to receive email are not required for using the service. A. [Medical Information] - Items collected: name, date of birth, address, contact information, medical records ※ Under the Medical Service Act, unique identification information and medical records must be retained (no separate consent required). B. [Items Collected When Registering as a Website Member] - Required items: name, ID, password, address, contact information (phone number, mobile number), email address - Optional items: birthday, whether to receive text messages, whether to receive email, areas of interest - The following information may be automatically generated and collected during the course of using the service or processing service-related tasks: service usage records, access logs, cookies, access IP information C. [Methods of Collecting Personal Information] - Personal information is collected through the following methods. · Website, written forms, fax, phone, consultation board, email 2. Purpose of Collecting and Using Personal Information The Clinic uses the collected personal information for the following purposes. All information provided by users will not be used for any purpose other than those stated below, and prior consent will be obtained if the purpose of use changes. A. [Medical Information] - Providing medical services for diagnosis and treatment, and administrative services such as billing, payment, and refunds B. [Website Member Information] - Required information: making and checking appointments through the website, providing membership services, posting on online boards (1:1 consultation / private consultation / post-surgery consultation / reviews, etc.) - Optional information: providing clinic news and health information via email, surveys, handling complaints, personalized services for individual members, collecting statistics on service use, and other new service and information notices; however, sensitive personal information that could infringe on users' basic human rights is not collected. Within the above scope, the Clinic collects additional information voluntarily provided by users in order to provide richer services. 3. Retention and Use Period of Personal Information The Clinic promptly destroys your personal information once the purpose of collection or receipt has been achieved. A. [Medical Information] - Retained in accordance with the medical record retention standards specified under the Medical Service Act B. [Website Member Information] - Retained until membership withdrawal or expulsion; however, even after the purpose of collection or receipt has been achieved, the Clinic may retain your personal information if retention is required under statutes such as the Commercial Act. - Records related to consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce, etc.) - Records related to the collection, processing, and use of credit information: 3 years (Act on the Use and Protection of Credit Information) - Records related to identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.) - Records related to visits: 3 months (Protection of Communications Secrets Act) 4. Procedures and Methods for Destroying Personal Information The Clinic destroys personal information immediately once the "Purpose of Collecting and Using Personal Information" has been achieved. The destruction procedures and methods are as follows. A. [Destruction Procedure] Information entered by users for membership registration, etc., is destroyed immediately by the destruction method below once its purpose has been achieved. B. [Destruction Method] Personal information stored in electronic file form is deleted using technical methods that make the records unrecoverable. Personal information printed on paper is destroyed by shredding or incineration. 5. Provision and Sharing of Personal Information Except with your consent or as required by relevant statutes, the Clinic does not use your personal information beyond the scope notified in "Purpose of Collecting and Using Personal Information," nor does it provide it to any other person, company, or institution. - Submission of medical records to the Health Insurance Review & Assessment Service for claiming medical care benefit costs under the National Health Insurance Act - Provision in a form that cannot identify specific individuals when necessary for statistical compilation or academic research - Submission when requested by investigative agencies in accordance with procedures and methods prescribed by law 6. Outsourcing of Collected Personal Information The Clinic outsources personal information as described below to fulfill its services, and specifies the necessary matters in outsourcing contracts to ensure personal information is managed safely in accordance with relevant laws. The Clinic's personal information outsourcing agencies and outsourced tasks are as follows. Outsourced company: Yourdev Outsourced tasks: Website maintenance, access record management, membership management Outsourced personal information items: name, address, phone number Retention and use period of outsourced personal information: Until termination of the outsourcing contract 7. Rights of Users and Legal Representatives and How to Exercise Them Membership registration for children under the age of 14 (hereinafter "children") is conducted through a separate form written in plain language that is easy for children to understand, and consent from a legal representative is always obtained when collecting personal information. To obtain consent from a legal representative, the Clinic collects the minimum necessary information from the child, such as the legal representative's name and contact information, and obtains the legal representative's consent according to the methods specified in this Privacy Policy. The legal representative of a child may request access to, correction of, or deletion of the child's personal information. To view, correct, or delete a child's personal information, the legal representative may do so directly after completing identity verification by clicking "Edit Member Information," or may contact the Personal Information Manager in writing, by phone, or by fax, and the necessary action will be taken. ※ Personal information whose retention is legally required cannot be modified or deleted within the retention period even upon request. 8. Withdrawal of Consent / Membership Cancellation You may withdraw your consent to the collection, use, and provision of personal information given at the time of registration at any time. To cancel your membership, click "Cancel Membership" in "My Page" on the Clinic's website to apply directly; the Personal Information Manager will confirm the request, and cancellation will be completed within 10 days of the request date. Alternatively, you may contact the Personal Information Manager in writing, by phone, or by fax, and your personal information will be destroyed without delay along with any other necessary action. 9. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices The Clinic operates "cookies" that periodically store and retrieve your information. A cookie is a very small text file sent to your browser by the server used to operate the Clinic's website, and it is stored on your computer's hard disk. The Clinic uses cookies for the following purposes. You have the option to decide whether to accept cookies. You may set your web browser options to accept all cookies, to be prompted for confirmation each time a cookie is stored, or to refuse the storage of all cookies. If you refuse to install cookies, you may experience difficulty using some services. 10. Personal Information Manager To protect your personal information and handle complaints related to personal information, the Clinic has designated a Personal Information Manager as follows. Name: Jang Jae Woo Position: Director Affiliation: Gwangmyeong 77 Implant Dental Clinic Contact: 02-2611-2228 You may report any complaints regarding personal information protection arising from your use of the Clinic's services to the Personal Information Manager. The Clinic will provide prompt and sufficient responses to users' reports. If you need to report or consult about any other infringement of personal information, please contact the organizations below. · Personal Information Dispute Mediation Committee (http://www.1336.or.kr / 1336) · Information Protection Mark Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533~4) · Supreme Prosecutors' Office Cyber Crime Investigation Division (http://www.spo.go.kr / (02) 3480-3573) · National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330) 11. Measures to Secure the Safety of Personal Information In handling users' personal information, the Clinic takes the following technical and administrative measures to ensure safety and prevent personal information from being lost, stolen, leaked, altered, or damaged. A. [Password Encryption] Passwords set upon registering on the site are encrypted for storage and management, known only to the user; personal information can only be checked or changed by the user who knows the password. However, if a member has difficulty using the service and directly requests the Personal Information Manager to make a change, the information can be changed after identity verification via written request, phone, fax, or email. B. [Countermeasures Against Hacking, etc.] The Clinic does its best to prevent members' personal information from being leaked or damaged due to hacking or computer viruses. To prepare for damage to personal information, the Clinic regularly backs up data, uses the latest antivirus programs to prevent users' personal information or data from being leaked or damaged, encrypts and stores users' sensitive personal information (such as resident registration numbers), and enables safe transmission of personal information over the network through encrypted communication. In addition, the Clinic uses an intrusion prevention system to control unauthorized access from outside, and makes every effort to secure all technically possible measures to ensure system security. C. [Minimizing and Training Staff Handling Personal Information] The Clinic limits staff handling personal information to designated personnel, assigns them separate passwords that are updated regularly, and provides regular and occasional training for such personnel. However, the Clinic bears no responsibility for problems arising from the leakage of personal information such as phone numbers, passwords, or resident registration numbers due to a user's own carelessness or internet-related issues. 12. Duty to Notify of Policy Changes This Privacy Policy was last revised on the date specified below. In the event of any additions, deletions, or amendments due to changes in laws, policies, or security technology, the Clinic will announce the reasons for and details of the change through its website at least 7 days before the revised Privacy Policy takes effect. · Effective Date: November 15, 2019