Name
Contact
Consultation Area
New / Returning Patient Distinction
First Consultation
Follow-up visit
Content
Consent to Collection and Use of Personal Information
CLYVE Plastic Surgery Clinic (hereinafter referred to as 'the Company') establishes and discloses the following personal information processing policy in accordance with Article 30 of the Personal Information Protection Act, to protect the personal information of data subjects and to promptly and smoothly handle related grievances.
The company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those specified, and if the purpose of use changes, necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act, will be implemented.
1. Website Member Registration and Management
2. Provision of Goods or Services
Personal information is processed for purposes such as product delivery, service provision, sending contracts and invoices, content provision, customized service provision, identity verification, age verification, payment and settlement, and debt collection.
3. Grievance Handling
Personal information is processed for purposes such as identity verification of the complainant, confirmation of complaint details, contact and notification for factual investigation, and notification of processing results.
① The company processes and retains personal information within the period of retention and use of personal information according to laws and regulations, or within the period of retention and use of personal information agreed upon when collecting personal information from the data subject.
② The processing and retention periods for each type of personal information are as follows.
However, in the following cases, until that reason ends
1) In cases where investigations or inquiries are ongoing due to violations of relevant laws and regulations, until the completion of such investigations or inquiries.
2) If creditor and debtor relationships remain due to website usage, until the settlement of the respective creditor and debtor relationships.
2. Provision of goods or services: Until the completion of goods/services supply and payment/settlement.
However, in cases corresponding to the following reasons, until the end of the relevant period
1) Records related to transactions such as display, advertising, contract details, and fulfillment, in accordance with the 「Act on Consumer Protection in Electronic Commerce, etc.」
- Records related to display and advertising : June
- Record of contract or subscription withdrawal, payment, and supply of goods: 5 years
- Records of consumer complaints or dispute resolution: 3 years
2) Retention of communication fact verification data pursuant to Article 41 of the Telecommunications Secret Protection Act
- Subscriber's telecommunication date/time, start and end times, other party's subscriber number, usage frequency, and transmitting base station location tracking data: 1 year
- Computer communication, internet log records, access location tracking data: 3 months
① The Company processes the personal information of data subjects only within the scope specified in Article 1 (Purpose of Personal Information Processing) and provides personal information to third parties only with the data subject's consent, special provisions of law, or in cases falling under Articles 17 and 18 of the Personal Information Protection Act. Otherwise, the Company does not provide the data subject's personal information to third parties.
② To ensure smooth service provision, the Company may provide personal information to third parties, with the data subject's consent, and only to the minimum extent necessary, in accordance with Article 17, Paragraph 1, Item 1 of the Personal Information Protection Act.
- Recipient of personal information: <Ex) OOO Card Co., Ltd.>
- Purpose of using personal information of the recipient: <e.g., business partnerships such as co-hosting events and issuance of affiliated credit cards>
- Personal information items provided: <Ex) Name, address, phone number, email address, credit card payment account information>.
- Retention and usage period of the recipient: <e.g., during the transaction period according to the credit card issuance contract>
① The company entrusts personal information processing tasks as follows for smooth personal information processing.
- Content of Entrusted Tasks
- Entrusted Party (Consignee): I'mweb Co., Ltd. - Details of Entrusted Tasks: Provision of shopping mall hosting service system, mobile app service, provision of marketing services and additional/affiliated services, and services such as Alimtalk, Friendtalk, and SMS sending agency.
- Entrusted party (trustee): OOO PG
- Content of entrusted tasks: Payment and escrow services
- Recipient of Consignment (Consignee) : OOO Delivery
- Content of consigned work: Product Delivery Service
- Recipient of consignment (Consignee): OOO Customer Center
- Details of entrusted tasks: Customer consultation services.
- Recipient of consignment (Consignee) : OOO
- Scope of entrusted work: Identity verification
- **Sub-contractor**
- **Recipient of re-entrustment (Consignee): I'mweb Co., Ltd. → Infobip (Ltd.)**
- **Content of entrusted tasks: Sending text messages, sending KakaoTalk AlimTalk (informational messages)**
- **Re-entrusted Party (Consignee): I'mweb Co., Ltd. → Lunasoft Co., Ltd.**
- **Details of entrusted tasks : Sending text messages, KakaoTalk AlimTalk (informational messages) and FriendTalk sending services**
② When concluding a consignment contract, the company specifies in documents such as contracts, in accordance with Article 25 of the Personal Information Protection Act, matters concerning liability such as the prohibition of personal information processing for purposes other than the entrusted task, technical and administrative protective measures, restrictions on sub-consignment, management and supervision of the consignee, and compensation for damages, and supervises whether the consignee handles personal information safely.
③ If the content of the entrusted work or the trustee changes, we will promptly disclose it through this privacy policy.
① The data subject may exercise the following personal information protection rights against the company at any time.
1. Request for Access to Personal Information
2. Request for correction in case of errors, etc.
3. Deletion Request
4. Request for Suspension of Processing
② Rights under Article 1 can be exercised in writing, by phone, email, or fax to the company, which will take prompt action.
③ If the data subject requests correction or deletion of personal information errors, the company will not use or provide the personal information until the correction or deletion is completed.
④ The exercise of rights under Paragraph 1 may be carried out through an agent, such as the data subject's legal representative or an authorized person. In this case, a power of attorney must be submitted in accordance with Annex Form No. 11 of the Enforcement Rule of the Personal Information Protection Act.
⑤ The data subject shall not infringe on their own or others' personal information and privacy processed by the company, in violation of relevant laws and regulations such as the Personal Information Protection Act.
The company processes the following personal information items.
Required items: <e.g.) Name, Date of Birth, ID, Password, Address, Phone Number, Gender, Email Address, i-PIN Number>
Optional Items: <e.g., Marital Status, Areas of Interest>
Required items: <e.g., Name, Date of Birth, ID, Password, Address, Phone Number, Email Address, i-PIN Number, Credit Card Number, Bank Account Information, etc. Payment Information>
Optional Items: <Interests, Past Purchase History>
① The company promptly destroys personal information when it becomes unnecessary, such as upon expiration of the retention period or achievement of the processing purpose.
② If the personal information retention period agreed upon by the data subject has expired, or the purpose of processing has been achieved, but the personal information must continue to be preserved according to other laws, the personal information will be moved to a separate database (DB) or preserved in a different storage location.
③ The procedures and methods for personal information destruction are as follows.
1. Destruction Procedure
The company selects personal information for which a reason for destruction has occurred and destroys it upon approval from the company's personal information protection officer.
2. Disposal Method
The company destroys personal information recorded and stored in electronic file format in a way that prevents reproduction of the records, and destroys personal information recorded and stored in paper documents by shredding or incineration.
The Company takes the following measures to ensure the security of personal information.
1. Administrative Measures: Establishment and implementation of internal management plans, regular employee training, etc.
Encryption, security program installation
3. Physical Measures: Access control for computer rooms, data storage rooms, etc.
① The Company uses 'cookies' to store and frequently retrieve user information to provide individualized customized services.
② Cookies are small pieces of information that servers (http) used to operate websites send to the user's computer browser and are stored on users' PCs or mobile devices.
③ Data subjects can configure settings such as allowing or blocking cookies through web browser options. However, refusing cookie storage may lead to difficulties in using personalized services.
▶ Allow/Block cookies in your web browser
- Chrome : Web Browser Settings > Privacy and Security > Clear Browsing Data
- Edge: Web browser settings > Cookies and site permissions > Manage and delete cookies and site data
▶ Allow/Block Cookies in Mobile Browser
- Chrome: Mobile Browser Settings > Privacy and security > Clear browsing data
- Safari: Mobile Device Settings > Safari > Advanced > Block All Cookies
- Samsung Internet: Mobile Browser Settings > Internet Usage History > Delete Internet Usage History
④ The Company collects and uses information such as visit and usage patterns for each service and website visited by the user, popular search terms, and secure connection status during the service usage process, to provide optimized information to the user.
① The company is responsible for overseeing all personal information processing operations and designates a personal information protection officer as follows for handling data subjects' complaints and providing remedies related to personal information processing.
▶ Personal Information Protection Officer
Name: OOO
Position: OOO
Contact : <Phone Number>, <Email>, <Fax Number>
※ You will be connected to the department responsible for personal information protection.
▶ Personal Information Protection Department
Department Name: OOO Team
② Data subjects may inquire about all matters related to personal information protection, complaint handling, and damage relief arising from their use of the company's services (or business) with the personal information protection officer and relevant department. The company will respond to and process data subjects' inquiries without delay.
Data subjects may request access to their personal information in accordance with Article 35 of the Personal Information Protection Act to the department below. The company will strive to ensure that data subjects' requests for access to personal information are processed promptly.
▶ Personal Information Access Request Reception and Processing Department
Department Name: OOO
Data subjects may inquire about relief for damages, consultations, etc., regarding personal information infringement with the institutions below.
1. Personal Information Dispute Mediation Committee : (Toll-free) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Reporting Center: (without area code) 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: (No area code) 1301 (www.spo.go.kr)
4. National Police Agency: (No area code) 182 (ecrm.police.go.kr/minwon/main)
This Privacy Policy is effective from 20XX. X. X.
Article 1 (Purpose of Personal Information Processing)
I agree to the collection and use of personal information.
Write
Article 2 (Processing and Retention Period of Personal Information)
Article 3 (Provision of Personal Information to Third Parties)
Article 5 (Rights of Data Subjects and Legal Representatives and Methods of Exercise)
Article 6 (Items of Personal Information Processed)
Article 7 (Destruction of Personal Information)
Article 8 (Measures to Ensure Personal Information Security)
Article 9 (Matters concerning the installation, operation, and refusal of automatic personal information collection devices).
Article 10 (Personal Information Protection Officer)
Article 11 (Request for Access to Personal Information)
Article 12 (Methods for Redressing Rights Infringement)
Article 13 (Enforcement and Amendment of Personal Information Processing Policy)