privacy
Gwanghwamun Heritage Dermatology Clinic (hereinafter referred to as the "Clinic") places great importance on protecting the personal information of its customers and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection.
Through this Privacy Policy, the Clinic informs customers of the purposes and methods by which their personal information is collected and used, as well as the measures taken to protect such information.
If this Privacy Policy is amended, the Clinic will provide notice through the website's notice board (or by individual notification, where applicable).
This Privacy Policy is effective as of January 1, 2023.
--------------------------------------------------
1. Personal Information Collected
The Clinic collects the following personal information for purposes such as membership registration, medical consultations, and service applications.
Items Collected
- Name
- Login ID
- Password
- Password question and answer
- Mobile phone number
- Email address
- Access logs
- Cookies
Method of Collection
- Website (membership registration, medical consultation, appointment booking)
--------------------------------------------------
2. Purpose of Collecting and Using Personal Information
The Clinic collects and uses personal information for the following purposes.
Medical Consultation and Appointment Services
To collect the personal information necessary for accurate medical consultations and appointment bookings, and to provide relevant content and services.
Member Management
- Identity verification for membership services
- Personal identification
- Prevention of fraudulent use by unauthorized users
- Prevention of unauthorized access
- Confirmation of intent to register
- Age verification
- Verification of parental or legal guardian consent when collecting personal information from children under the age of 14
- Handling customer inquiries, complaints, and other requests
--------------------------------------------------
3. Retention and Period of Use of Personal Information
In principle, once the purpose of collecting and using personal information has been fulfilled, the relevant information is destroyed without delay.
However, the following information may be retained for the periods specified below for the stated purposes.
Items Retained
- Name
- Login ID
- Email address
Reason for Retention
To facilitate the destruction of additional personal information collected through consultation records, appointment records, and similar services.
Retention Period
- 1 month
Where retention is required under applicable laws and regulations, the Clinic shall retain personal information for the periods prescribed by such laws.
Examples include:
- Records related to consumer complaints and dispute resolution: 3 years (pursuant to the Act on Consumer Protection in Electronic Commerce)
--------------------------------------------------
4. Procedures and Methods for Destroying Personal Information
In principle, the Clinic destroys personal information without delay once the purpose of its collection and use has been fulfilled.
The procedures and methods for destruction are as follows.
Destruction Procedure
Personal information entered by members during registration or other processes is transferred to a separate database (or a separate filing system in the case of paper records) after its intended purpose has been fulfilled.
Such information is retained only for the period required under the Clinic's internal policies and applicable laws (see "Retention and Period of Use of Personal Information") and is then securely destroyed.
Personal information transferred to the separate database is not used for any purpose other than those required by applicable laws and regulations.
Destruction Method
Personal information stored in electronic files is permanently deleted using technical methods that prevent recovery or restoration of the data.
--------------------------------------------------
5. Provision of Personal Information
In principle, the Clinic does not provide users' personal information to any third party without their prior consent.
However, exceptions may apply in the following cases:
- When the user has given prior consent.
- When disclosure is required by applicable laws and regulations.
- When requested by an investigative authority in accordance with procedures prescribed by law for investigative purposes.
--------------------------------------------------
6. Entrustment of Personal Information Processing
The Clinic does not entrust the processing of customers' personal information to any external party without the customer's consent.
If such entrustment becomes necessary in the future, the Clinic will notify customers of the entrusted party, the scope of the entrusted work, and obtain prior consent where required by applicable laws and regulations.
--------------------------------------------------
7. Rights of Users and Legal Representatives, and How to Exercise Them
Users and their legal representatives may, at any time, access, modify, or request the deletion of their personal information or the personal information of children under the age of 14 under their care.
To access or modify personal information, please click "Change Personal Information" (or "Edit Member Information").
To withdraw your membership (withdraw your consent to the collection and use of personal information), please click "Withdraw Membership" and complete the identity verification process.
Alternatively, you may contact the Clinic's Personal Information Protection Officer in writing, by telephone, or by email, and your request will be handled promptly.
If you request the correction of inaccurate personal information, the Clinic will neither use nor disclose the relevant information until the correction has been completed.
If inaccurate personal information has already been provided to a third party, the Clinic will promptly notify the third party of the correction so that the necessary changes can be made.
Personal information deleted or withdrawn at the request of a user or legal representative will be handled in accordance with the retention periods specified in the "Retention and Period of Use of Personal Information" section and will not be accessed or used for any purpose other than those permitted by applicable laws and regulations.
--------------------------------------------------
8. Installation and Operation of Automatic Personal Information Collection Devices and the Right to Refuse
The Clinic uses cookies and similar technologies that store and retrieve information on users' devices.
Cookies are small text files sent by the server operating the Clinic's website to the user's web browser and stored on the user's computer or device.
Purpose of Cookies
The Clinic uses cookies to:
- Analyze the frequency and timing of visits by members and non-members.
- Identify users' preferences and areas of interest.
- Track user activity.
- Measure participation in events and the number of website visits.
- Provide personalized services and customized marketing.
Users have the right to choose whether to allow the installation of cookies.
Accordingly, users may choose to:
- Allow all cookies.
- Receive confirmation before a cookie is stored.
- Refuse the storage of all cookies.
These options can be configured through the settings of the web browser being used.
How to Configure Cookie Settings
Example (Google Chrome)
Settings → Privacy and Security → Cookies and Other Site Data
Please note that disabling cookies may limit the availability of certain services provided through the website.
--------------------------------------------------
9. Customer Service for Personal Information Inquiries
To protect customers' personal information and handle complaints related to personal information, the Clinic has designated a Personal Information Protection Officer.
Customer Service Contact Number
02-733-2237
If you have any questions, concerns, or complaints regarding the protection of your personal information while using the Clinic's services, you may contact the Personal Information Protection Officer.
The Clinic will respond promptly and appropriately to all inquiries and complaints submitted by users.
For additional assistance regarding personal information infringements, you may contact the following organizations:
- Personal Information Dispute Mediation Committee
www.1336.or.kr / 1336
- Information Protection Mark Certification Committee
www.eprivacy.or.kr / 02-580-0533~4
- Supreme Prosecutors' Office Internet Crime Investigation Center
http://icic.sppo.go.kr / 02-3480-3600
- National Police Agency Cyber Terror Response Center
www.ctrc.go.kr / 02-392-0330
