Privacy Policy

At a Glance

Company name (hereinafter referred to as the “Company”) hereby establishes and publishes the following personal information processing policy, pursuant to Article 30 of the Personal Information Protection Act, in order to protect the personal information of data subjects and to handle related complaints promptly and smoothly.

Article 1
Purposes of Processing Personal InformationThe Company processes personal information for the following purposes.
Article 2
Processing and Retention Period of Personal InformationWebsite membership registration and management: until the business/organization withdraws from the website
Article 5
Rights of Users and Legal Representatives and How to Exercise ThemData subjects may exercise the following rights related to personal information protection against the Company at any time.
Article 6
Personal Information Items ProcessedThe Company processes the following personal information items.

Article 1

Purposes of Processing Personal Information

The Company processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than those listed below, and if the purpose of use changes, the Company will take the necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.

1. Website membership registration and management

We process personal information for the purposes of confirming the intention to register as a member, identifying and authenticating members in connection with membership services, maintaining and managing membership status, verifying identity under the limited identity verification system, preventing fraudulent use of the service, confirming the consent of a legal representative when processing the personal information of children under the age of 14, sending various notices and notifications, and handling complaints.
2. Provision of goods or services

We process personal information for the purposes of delivering goods, providing services, sending contracts and invoices, providing content, providing personalized services, identity verification, age verification, payment and settlement of fees, and debt collection.
3. Handling of Complaints

Personal information is processed for purposes such as verifying the identity of the complainant, confirming the details of the complaint, contacting and notifying the complainant for fact-finding, and notifying the complainant of the results.

Article 2

Processing and Retention Period of Personal Information

① The Company processes and retains personal information within the retention and use period required by law or the retention and use period to which the data subject consented when the personal information was collected.

② The processing and retention period for each type of personal information is as follows.

Line illustration of a calendar and an arrow indicating the point of withdrawal — Website membership registration and management

1. Website membership registration and management: until the business/organization withdraws from the website

However, in the following cases, the information will be retained until the relevant reason ends.

Line illustration of a magnifying glass examining documents — Until the investigation or inquiry ends

1) If an investigation or inquiry for a violation of relevant laws is in progress, until that investigation or inquiry ends

Line illustration of a balance scale — Until receivables and payables are settled

2) If receivables or payables arising from use of the website remain outstanding, until those receivables and payables are settled

Article 5

Rights of Users and Legal Representatives and How to Exercise Them

① Data subjects may exercise the following rights related to personal information protection against the Company at any time.

1. Request to access personal information
2. Request for correction if there are errors
3. Request for deletion
4. Request to suspend processing

② The rights under Paragraph 1 may be exercised against the Company in writing, by telephone, by email, or by fax, and the Company will take action without delay.

In writing
Telephone
Email
Fax

③ If a data subject requests correction or deletion of errors in personal information, the Company will not use or provide that personal information until the correction or deletion is completed.

④ The rights under Paragraph 1 may be exercised through an agent, such as the data subject's legal representative or a person authorized by the data subject. In this case, a power of attorney in the form of Attached Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

⑤ Data subjects must not infringe upon the personal information or privacy of themselves or others that is being processed by the Company, in violation of the Personal Information Protection Act and other relevant laws.

Article 6

Personal Information Items Processed

The Company processes the following personal information items.

1. Website membership registration and management
2. Provision of goods or services
3. Use of internet services

Personal information items processed — required and optional items by category
Type	Required items	Optional items
1. Website membership registration and management	Name, date of birth, ID, password, address, telephone number, gender, email address, i-PIN number	Areas of interest
2. Provision of goods or services	Name, date of birth, ID, password, address, telephone number, email address, i-PIN number, and payment information such as credit card number and bank account information	Areas of interest
3. The following personal information items may be generated and collected automatically while you use internet services.	IP address, cookies, MAC address, service usage records, visit records, records of improper use, etc.

Swipe the table sideways to see all items.

Destruction of Personal Information · Security Measures

Article 7Destruction of Personal Information

① When personal information is no longer necessary, such as after the retention period has elapsed or the purpose of processing has been achieved, the Company destroys it without delay.

② If personal information must continue to be retained under other laws even though the retention period consented to by the data subject has elapsed or the purpose of processing has been achieved, the Company moves that personal information to a separate database (DB) or stores it in a different location.

③ The procedures and methods for destroying personal information are as follows.

1. Destruction procedure

The Company selects the personal information for which grounds for destruction have arisen and destroys it with the approval of the Company's Chief Privacy Officer.

Selecting personal information to be destroyed
Approval of the Chief Privacy Officer
Destruction of personal information

2. Destruction method

The Company destroys personal information recorded and stored in electronic file form using methods such as low-level formatting so that the records cannot be recovered, and destroys personal information recorded and stored on paper documents by shredding or incinerating them.

Electronic files

Destroyed using methods such as low-level formatting so that the records cannot be recovered.
Paper documents

Destroyed by shredding or incineration.

Article 8Security Measures for Personal Information

The Company takes the following measures to ensure the security of personal information.

1. Administrative Measures

Establishing and implementing an internal management plan, regular staff training, etc.
2. Technical Measures

Managing access rights to personal information processing systems, installing access control systems, encrypting unique identifiers and other data, installing security programs
3. Physical Measures

Access control for server rooms, records storage rooms, etc.

Automatic Personal Information Collection Devices · Privacy Officer · Access Requests

Article 9Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

① The Company uses "cookies," which store usage information and retrieve it from time to time, in order to provide users with individually tailored services.

② A cookie is a small amount of information that the server (http) used to operate a website sends to the user's computer browser, and it may also be stored on the hard disk of the user's computer.

A. Purpose of Using Cookies

Cookies are used to identify the visit and usage patterns of each service and website the user has visited, popular search terms, whether a secure connection is used, and so on, in order to provide information optimized for the user.
B. Installing, Operating, and Refusing Cookies

You can refuse cookie storage by adjusting the options under Tools > Internet Options > Privacy at the top of your web browser.
C. If You Refuse

If you refuse to allow cookies to be stored, you may have difficulty using personalized services.

Article 10Privacy Officer

① The Company bears overall responsibility for the handling of personal information and has designated a Privacy Officer, as set out below, to handle complaints from data subjects and provide remedies for damage relating to personal information processing.

Privacy Officer

NameJegal Jeong⁠-⁠jae, Song Gyeong⁠-⁠ho

PositionMedical Director

Contact051-806-7979, [email protected]

※ Your inquiry will be routed to the personal information protection department.
Privacy Department

DepartmentPlanning Team

Person in ChargeManager Jeon Eun-seon

Contact051-806-7979, [email protected]

② Data subjects may direct all inquiries, complaints, and requests for remedies related to personal information protection that arise while using the Company's services (or business) to the Chief Privacy Officer and the responsible department. The Company will respond to and process data subjects' inquiries without delay.

Article 11Requests for Access to Personal Information

Data subjects may submit a request to access their personal information under Article 35 of the Personal Information Protection Act to the department below. The Company will do its best to process data subjects' access requests promptly.

Line illustration of an access request document going into an inbox — Department Receiving and Processing Personal Information Access Requests

DepartmentPlanning Team

Person in ChargeManager Jeon Eun-seon

Contact051-806-7979, [email protected]

Remedies for Rights Infringement · Enforcement and Amendment

Article 12Remedies for Infringement of Rights

Data subjects may contact the agencies below for relief from damage caused by personal information infringement, counseling, and more.

Personal Information Infringement Report Center
Personal Information Dispute Mediation Committee
Cyber Crime Investigation Division, Supreme Prosecutors' Office
Cyber Bureau, Korean National Police Agency

Guide to Rights Infringement Remedy Agencies
Agency	Responsibilities	Telephone	Website
Personal Information Infringement Report Center (Operated by the Korea Internet & Security Agency) (58324) 3rd Floor, Personal Information Infringement Report Center, 9 Jinheung-gil, Naju-si, Jeonnam (Bitgaram-dong 301-2)	Reporting personal information infringement; requesting counseling	118 (no area code)	privacy.kisa.or.kr
Personal Information Dispute Mediation Committee (03171) 4th Floor, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul	Applications for personal information dispute mediation and collective dispute mediation (civil resolution)	1833-6972 (no area code)	www.kopico.go.kr
Cyber Crime Investigation Division, Supreme Prosecutors' Office		02-3480-3573	www.spo.go.kr
Cyber Bureau, Korean National Police Agency		182	cyberbureau.police.go.kr