Privacy Policy
Mind Dermatology Clinic (hereinafter 'the Clinic') places great importance on the personal information it collects and strives to comply with the Act on Promotion of Information and Communications Network Utilization and Information Protection and the Personal Information Protection Act. Through this Privacy Policy, the Clinic informs you of how the personal information provided through our website is used and for what purposes, and what measures are being taken to protect your personal information.
Article 1: Consent to Collection of Personal Information
When you use services such as online consultation on our website and click to agree to the personal information handling policy or terms of service posted at that time, you are deemed to have consented to the collection of personal information.
Article 2: Items and Methods of Personal Information Collection
1. Items of Personal Information Collected When using certain services on our website, the Clinic collects the following personal information from users. We collect the minimum amount of personal information necessary to provide the relevant service. (1) Personal information required for online consultation and similar services (may include all or some of the following) - Email address, phone number (home and mobile), password, name (2) Information required for use of each service, and service usage record information Service usage record information for each service Log data, cookies, usage time, search terms entered by the user, etc. Device information, access IP information, preference settings, etc. 2. Restricted Items of Personal Information Collection The Clinic does not collect sensitive information through our website that could significantly infringe upon users' privacy (such as information relating to ideology or beliefs, membership in or withdrawal from labor unions or political parties, political views, biometric information, etc.). 3. Protection Policy for Children Under 14 In principle, the Clinic does not collect personal information from users under the age of 14. When personal information has been collected for the purpose of medical treatment, it will not be shared with third parties without parental consent, and user information will not be sold or rented. ※ In principle, our website does not require real-name verification. 4. Methods of Personal Information Collection (1) Collection Principle via Website The Clinic principally collects personal information through our website only. When a non-member posts content, procedures are in place to allow the user to select "Agree" or "Do Not Agree" to the Clinic's personal information collection and use consent form. (2) Collection of Personal Information via Cookies The Clinic uses 'cookies' to store and retrieve information about you. When you access our website, the web server reads the cookies in your browser and may retrieve additional information from your computer to provide services without requiring additional input. Cookies identify your computer but do not personally identify you. ※ A cookie is a small piece of information that a website sends to your browser. You have the right to choose your cookie settings. By adjusting your web browser options, you may accept all cookies, receive a notification when cookies are set, or choose to refuse all cookies.
Article 3: Purpose of Collection and Use of Personal Information
The Clinic collects personal information for the purposes of enabling your use of our website and providing various services. If the purpose of use changes, prior consent will be obtained. 1. Provision of complaint handling and customer management services (1) Personal identification information for use of bulletin boards for customer consultation and service provision (2) Purposes of research and clinical trials, medical education and training, outsourced testing, and medical statistics (3) Collection of consumer harm information pursuant to Article 52 of the Framework Act on Consumers
Article 4: Provision of Personal Information to Third Parties
The Clinic uses customers' personal information only within the scope notified in the purposes of collection and use, and does not use it beyond that scope or provide it to other individuals, companies, or organizations at its discretion. Exceptions are made when the user has given consent, or when a request is made by a government agency through lawful procedures pursuant to applicable laws and regulations. Furthermore, when personal information is outsourced for processing, the Clinic will notify customers in advance in detail of the items of personal information being outsourced, the name of the entrusted company, and the content of the outsourced work.
Article 5: Entrustment of Collected Personal Information
The Clinic entrusts personal information as described below for the performance of services, and stipulates the necessary provisions in entrustment agreements to ensure that personal information is managed securely in accordance with applicable laws and regulations. The Clinic's personal information entrusted processors and the content of entrusted work are as follows. Entrusted Company: Wonup Creative (website development and operation) Content of Entrusted Work and Entrusted Information (Retention Period: until end of entrustment contract) - Log data including password, name, phone number, email, cookies, and browsing history
Article 6: Retention and Use Period of Personal Information
In principle, personal information is destroyed without delay once the purpose of collection and use has been achieved. Personal information with no login or usage records for one year is destroyed or stored separately. However, where retention is required by applicable laws and regulations, the Clinic retains personal identification information for the period specified by those laws and regulations, as follows. User internet log records / user access tracking data: 3 months (Protection of Communications Secrets Act) Records relating to consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce, Etc.) Records relating to the collection, processing, and use of credit information: 3 years (Act on the Use and Protection of Credit Information) Records relating to identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc.)
Article 7: Procedures and Methods for Destruction of Personal Information
In principle, the Clinic destroys personal information without delay once the purpose of collection and use has been achieved. The destruction procedures and methods are as follows. 1. Destruction Procedures Users' personal information is stored for a certain period in accordance with internal policies and other applicable laws and regulations regarding information protection (refer to retention and use period) after the purpose has been achieved, and is then destroyed within 5 business days. Where personal information has been transferred to a separate database, it will not be used for any purpose other than retention except as required by law. 2. Destruction Methods Personal information stored in electronic file format is deleted using technical methods that prevent reproduction of the records. Personal information printed on paper is destroyed by shredding or incineration.
Article 8: Measures to Ensure Safety of Personal Information
1. Technical and Managerial Measures for Personal Information Protection In handling users' personal information, the Clinic takes the following technical and managerial measures to ensure security so that personal information is not lost, stolen, leaked, altered, or damaged. (1) Establishment and Implementation of Internal Management Plans ① The Clinic establishes and implements internal management plans for the safe processing of personal information. ② The Clinic verifies the implementation status of personal information protection measures and the compliance of those responsible through a dedicated internal personal information protection body, and takes immediate corrective action upon discovery of any issues. (2) Encryption of Personal Information Users' personal information is stored and managed in encrypted form, and important data is also protected during transmission through additional secure communication methods. (3) Prevention of Search Engine Exposure of Personal Information The bulletin board is managed to prevent personal information contained in posts or attachments from being exposed in portal search engines such as Google and Naver. (4) Administrator Page Authentication Procedures The risk of exposure is minimized by increasing the complexity requirements for administrator page passwords. (5) Minimization of Handling Staff and Training ① The Clinic accesses the administrator page and personal information database only upon processing requests, and has designated a person responsible for personal information processing to ensure thorough management of customer databases. ② The Clinic requires all staff to sign a security pledge upon joining and leaving the organization, prohibiting the disclosure or distribution of any information acquired in the course of work to third parties, and takes full measures to ensure information management so that civil and criminal liability may be imposed for violations. ③ The Clinic not only keeps the Standard Personal Information Protection Guidelines (Ministry of Government Legislation) and the Medical Institution Personal Information Protection Guidelines (Ministry of Health and Welfare & Ministry of the Interior) on-site, but also conducts in-house job training to reinforce personal information security awareness. 2. Posting Management Policy The Clinic values users' posts and makes every effort to protect them from alteration, damage, or deletion. However, the following types of posts are excepted: Spam posts Posts that damage another person's reputation by spreading false information with the intent to defame Posts that disclose another person's personal information without consent Posts that infringe upon the intellectual property rights or other rights of the Clinic or third parties Other posts whose content is unrelated to the bulletin board topic ※ To foster a healthy bulletin board culture on the website, the Clinic may delete specific portions of or replace with symbols any posts that disclose another person's personal information without consent. In other cases, posts may be deleted after explicit or individual warning. ※ Fundamentally, all rights and responsibilities relating to posts rest with the individual author. Since information voluntarily disclosed through posts is difficult to protect, please consider carefully before disclosing any information.
Article 9: Rights, Obligations, and Exercise Methods of Data Subjects
Users, as data subjects, may exercise the following rights. 1. Verification of Personal Information Processing You may verify at any time how the personal information you have provided is being managed. You may withdraw your consent to the collection, use, and provision of personal information on our website at any time. To withdraw consent, please contact the website or the personal information management officer by email, and the Clinic will take necessary measures such as deletion of personal information immediately upon receipt. If you request correction or deletion of errors in your personal information, the Clinic will not use or provide that personal information until the correction or deletion has been completed. ※ Rights may be exercised through a legal representative or an authorized agent of the data subject. In such cases, a power of attorney in accordance with Appendix Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted. Personal information that is required by law to be retained cannot be corrected or deleted during the retention period even upon request. 2. Collection of Opinions and Complaint Handling The Clinic has established a channel through which you may raise opinions and complaints regarding personal information protection. If you have a complaint relating to personal information, please contact the Clinic's personal information management officer, and the Clinic will take action immediately upon receipt and notify you of the outcome.
Article 10: Personal Information Policy and Management Officer
The Clinic has designated the relevant department and personal information management officer as follows to protect users' personal information and to handle complaints and provide remedies related to personal information. 1. Mind Dermatology Clinic Personal Information Management Officer Name: Hongsun Lee Position: Director Affiliation: Mind Dermatology Clinic Phone: 02-333-3133 2. Other Organizations Users may report all personal information protection-related complaints arising from use of our website to the personal information management officer or the relevant department. The Clinic will provide prompt and sufficient responses to users' reports. For other reports or consultations regarding personal information infringement, please contact the following organizations. Personal Information Infringement Report Center (www.118.or.kr / 118) Supreme Prosecutors' Office Internet Crime Investigation Center (www.spo.go.kr / 02-3480-3600) National Police Agency Cyber Terror Response Center (www.ctrc.go.kr / 02-392-0330)
Article 11: Changes to Privacy Policy
This Privacy Policy was established on June 10, 2017. In the event of additions, deletions, or corrections to the content due to changes in laws or policy, notice will be provided through the Mind Dermatology Clinic website at least 7 days prior to the implementation of such changes.
Date of Notice: June 10, 2017 / Effective Date: June 10, 2017