Consultation Inquiry

1. Purpose of processing personal information

[ Seoul Choice Dental Clinic ] hereinafter referred to as [ The Clinic ] processes personal information for the following purposes and does not use it for any purpose other than those listed below.
- Confirmation of customer's intent to sign up, identification and authentication of the customer for the provision of services, maintenance and management of membership status, payment of amounts for the supply of goods or services, supply and delivery of goods or services, etc.

2. Processing and Retention Period of Personal Information

① [The Institution] processes and retains personal information within the personal information retention and usage period agreed upon when collecting personal information from data subjects or within the personal information retention and usage period in accordance with laws and regulations.

3. Provision of Personal Information to Third Parties

[This Institute] does not provide personal information to third parties except in cases falling under Article 17 of the Personal Information Protection Act, such as separate consent from the data subject or special provisions of the law.

4. Outsourcing of Personal Information Processing

① [This Institute] does not outsource personal information processing tasks.
② [The Institute], in accordance with Article 25 of the Personal Information Protection Act, specifies in documents such as contracts matters concerning the prohibition of processing personal information for purposes other than the performance of entrusted work, technical and administrative protective measures, restrictions on re-entrustment, management and supervision of the trustee, and liability for damages, and supervises whether the trustee safely processes personal information.
③ If there are any changes to the content of the entrusted work or the trustee, we will disclose this without delay through this Privacy Policy.

5. Rights, Obligations, and Methods of Exercising the Rights of Data Subjects As a data subject, the user may exercise the following rights.

① The data subject may exercise the following rights related to personal information protection with respect to [Hospital Name] ( 'Site URL' hereinafter 'Site Name') at any time.
1. Request for access to personal information
2. Request correction in case of errors, etc.
3. Request for deletion
4. Request to Stop Processing

6. List the items of personal information processed

① [This Institute] processes the following personal information items.
1. Online Consultation and Marketing
- Required items: Name, phone number, access logs, cookies, access IP information
- Selectable item: None

7. Destruction of personal information

In principle, [This Institution] destroys the relevant personal information without delay once the purpose of processing the personal information has been achieved.
The procedure, deadline, and method of destruction are as follows.
- Destruction Procedure: Information entered by the user is transferred to a separate database (or separate documents in the case of paper) after the purpose is achieved, and is destroyed immediately or stored for a certain period in accordance with internal policies and other relevant laws. At this time, personal information transferred to the database is not used for any other purpose unless required by law.
- Destruction Deadline: Users' personal information is destroyed within 5 days from the end of the retention period if the retention period has expired, or within 5 days from the date it is recognized as unnecessary to process the personal information when the personal information becomes unnecessary due to the achievement of the purpose of processing the personal information, the discontinuation of the relevant service, or the termination of the business.

8. Measures to Ensure the Safety of Personal Information

[ The Institution ] ('The Institution') takes the following technical, managerial, and physical measures necessary to ensure safety in accordance with Article 29 of the Personal Information Protection Act.

1. Establishment and Implementation of Internal Management Plan
We have established and are implementing an internal management plan for the safe processing of personal information.

2. Encryption of personal information
Users' personal information and passwords are encrypted and stored and managed so that only the user knows them, and separate security features are used for important data, such as encrypting files and transmitted data or using file locking functions.

3. Storage of access records and prevention of tampering
We store and manage records of access to the personal information processing system for at least six months, and use security features to prevent access records from being falsified, stolen, or lost.

4. Restriction on access to personal information
We are taking necessary measures to control access to personal information by granting, modifying, and revoking access rights to database systems that process personal information, and we are controlling unauthorized access from the outside by using an intrusion prevention system.

9. Designation by the Chief Privacy Officer

① The Institute assumes overall responsibility for matters concerning the processing of personal information and designates a Personal Information Protection Officer as follows to handle complaints and provide relief for damages to data subjects regarding the processing of personal information.
▶ Chief Privacy Officer
Name: Kim Eun-kyung
Position: Representative
Position: Director
Contact: 02-2671-9188

10. Changes to the Privacy Policy

① This Privacy Policy applies from the effective date, and in the event of any additions, deletions, or corrections to the contents pursuant to laws and policies, we will notify you through announcements starting 7 days prior to the effective date of the changes.

If you need to report or seek consultation regarding other personal information infringements, please contact the organizations below.
1. Personal Dispute Mediation Committee ( https://www.kopico.go.kr/1833-6972 )
2. Information Protection Mark Certification Committee ( http://www.eprivacy.or.kr/02-550-9500 )