Privacy Policy
Effective date: to be announced
Article 1 (General Provisions)
Dermia Clinic (the "Clinic") values users' personal information and complies with the Personal Information Protection Act and other applicable laws. This Privacy Policy applies to the website operated by the Clinic (the "Site").
Article 2 (Personal Information Collected and Collection Method)
The Site does not operate a separate membership registration, reservation, or consultation request form through which users directly enter information. Appointments and consultations are made through channels designated by the Clinic, such as phone or KakaoTalk; personal information collected through those channels is governed by the privacy policy of the relevant channel operator (e.g., Kakao). The following information may be collected automatically while using the Site: - Cookies, access IP information, visit date and time, browser type and OS information, pages visited, and service usage records This information is collected via Google Tag Manager (GTM) and Google Analytics (GA).
Article 3 (Purpose of Collection and Use)
The Clinic uses the collected information for the following purposes: - Analyzing Site usage statistics and improving the service - Checking the Site's access environment and errors, and operating a stable service
Article 4 (Retention and Use Period)
In principle, the Clinic destroys personal information without delay once the purpose of its collection and use has been achieved. However, where retention is required under applicable law, the information is kept for the period prescribed by such law.
Article 5 (Provision of Personal Information to Third Parties)
In principle, the Clinic does not provide users' personal information to third parties, except where the user has given prior consent, where required by law, or where requested by an investigative agency for investigative purposes in accordance with the procedures and methods prescribed by law.
Article 6 (Outsourcing of Personal Information Processing)
To improve its services, the Clinic outsources personal information processing as follows: - Website hosting: Amazon Web Services (AWS) - Website visit statistics analysis: Google (Google Tag Manager, Google Analytics) When entering into outsourcing agreements, the Clinic stipulates compliance with applicable personal information protection laws and a prohibition on providing personal information to third parties.
Article 7 (Installation, Operation, and Refusal of Cookies)
The Clinic may use cookies to provide a customized service to users. Users may refuse or delete cookies through their web browser settings. However, refusing cookies may make it difficult to use some services.
Article 8 (Rights of Data Subjects and How to Exercise Them)
Users may request access to, correction of, deletion of, or suspension of processing of their personal information in accordance with the Personal Information Protection Act and other applicable laws. Such requests may be made in writing, by phone, or by email to the Privacy Officer designated in Article 11, and the Clinic will act on such requests without delay.
Article 9 (Procedure and Method of Destroying Personal Information)
The Clinic destroys personal information without delay once it becomes unnecessary, such as upon expiry of the retention period or achievement of the processing purpose. Information in electronic file form is permanently deleted using a method that prevents recovery, and paper documents are shredded or incinerated.
Article 10 (Measures to Ensure the Safety of Personal Information)
The Clinic implements administrative and technical measures to ensure the safety of personal information, including access authority management, retention of access records and prevention of forgery or alteration, and minimizing and training staff who handle personal information.
Article 11 (Privacy Officer)
The Clinic has designated a Privacy Officer as follows to protect users' personal information and handle complaints related to personal information. - Name: Shin Dong-hyun (Director) - Contact: to be announced Users may direct any inquiries related to personal information protection arising from use of the Clinic's services to the Privacy Officer.
Article 12 (Remedies for Infringement of Rights)
Users may contact the following organizations for reports or consultations regarding infringement of personal information: - Personal Information Infringement Report Center (privacy.kisa.or.kr / 118, no area code required) - Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972) - Cyber Investigation Division, Supreme Prosecutors' Office (www.spo.go.kr / 1301, no area code required) - Cyber Bureau, National Police Agency (cyberbureau.police.go.kr / 182, no area code required)
Article 13 (Changes to This Privacy Policy)
This Privacy Policy may be added to, deleted from, or amended due to changes in law, policy, or security technology, and any such change will be announced in advance on the Site.
Addendum
This Privacy Policy takes effect as of the effective date: to be announced.