Privacy Policy

1. Items of personal information collected and methods of collection

At sign-up, our clinic collects only the minimum personal information needed to use the services. To use our clinic’s services, you fill in required items and optional items when you sign up. Even if you do not fill in optional items, such as whether you agree to receive email, there is no restriction on your use of the services.

■ [Items collected at website sign-up]

• - Required items: name, user ID, password, nickname, email
• - Optional item: whether you agree to receive email
• - The following information may be automatically generated and collected while you use the services or while service tasks are processed: service use records, access logs, cookies, access IP information

■ [Methods of collecting personal information]

Personal information is collected by the following methods.

• - Website

2. Purposes of collecting and using personal information

Collector of personal information: our clinic

Our clinic uses the personal information it collects for the following purposes.

No information provided by users is used for anything other than what is needed for the purposes below. If the purpose of use changes, our clinic will ask for your prior consent.

■ [Website member information]

• - Required information: providing consultation services and members-only services through the website
• - Optional information: sending clinic news, information on diseases, and other notices by email; surveys

3. Period of retention and use of personal information

When the purpose for which personal information was collected or provided has been achieved, our clinic destroys your personal information without delay.

■ [Retention period for website member information]

• - Until you cancel your membership or are removed from membership. However, even after the purpose of collection or provision has been achieved, our clinic may retain your personal information if it must be kept under the provisions of laws such as the Commercial Act (상법).
• - Records of consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce (전자상거래 등에서의 소비자보호에 관한 법률))
• - Records of the collection/processing and use, etc., of credit information: 3 years (Credit Information Use and Protection Act (신용정보의 이용 및 보호에 관한 법률))
• - Records of identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc. (정보통신망 이용촉진 및 정보보호 등에 관한 법률))
• - Records of visits: 3 months (Protection of Communications Secrets Act (통신비밀보호법))

4. Procedure and methods for destroying personal information

Our clinic destroys personal information immediately after the “purposes of collecting and using personal information” have been achieved. The procedure and methods of destruction are as follows.

■ [Destruction procedure]

Information that users enter for sign-up and similar purposes is destroyed immediately by the destruction methods after the purpose has been achieved.

■ [Destruction methods]

Personal information stored as electronic files is deleted using technical methods that prevent the records from being reproduced.

Personal information printed on paper is destroyed by shredding it in a shredder or by incineration.

5. How to withdraw consent / cancel membership

You may withdraw at any time the consent you gave at sign-up to the collection, use, and provision of your personal information. To cancel your membership, click “Cancel membership” on My Page of our clinic’s website, complete the identity verification procedure, and cancel your membership yourself. Or contact the Personal Information Manager in writing, by phone, by fax, or by other means, and our clinic will take the necessary measures without delay, such as destroying your personal information.

6. Installation/operation of automatic personal information collection tools and how to refuse them

Our clinic uses ‘cookies’ that store and retrieve your information from time to time. A cookie is a very small text file that the server used to operate our clinic’s website sends to your browser, and it is stored on your computer’s hard disk. Our clinic uses cookies for the following purposes.

You have a choice about the installation of cookies. By setting the options in your web browser, you may accept all cookies, be asked each time a cookie is stored, or refuse to store any cookies. If you refuse the installation of cookies, our clinic will have difficulty providing some services.

7. Personal Information Manager

To protect your personal information and handle complaints about personal information, our clinic has designated a Personal Information Manager as follows.

• [Personal Information Manager]
• Name: Shin Young-ik
• Position: Medical Director, DM Dermatology Clinic
• Affiliation: DM Dermatology Clinic
• Phone: 02-3445-0803

You may report any complaint about personal information protection that arises while you use our clinic’s services to the Personal Information Manager. Our clinic will give users prompt and sufficient answers to their reports. If you need to report or consult about any other infringement of personal information, please contact the organizations below.

• Personal Information Dispute Mediation Committee (http://www.1336.or.kr / 1336)
• Information Protection Mark Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533~4)
• Cyber Crime Investigation Unit, Supreme Prosecutors’ Office (http://www.spo.go.kr / (02) 3480-3573)
• Cyber Terror Response Center, Korean National Police Agency (http://www.ctrc.go.kr / (02) 392-0330)

8. Measures to ensure the security of personal information

As technical measures to protect users’ personal information, our clinic has put several security devices in place. All information that users send is securely stored and managed in a security system protected by a firewall.

In addition, as administrative measures to protect users’ personal information, our clinic has set up the procedures needed for access to and management of users’ personal information, limits the staff who handle users’ personal information to a minimum, and gives them ongoing security training. Our clinic will also designate the users of the systems that process personal information, give them user passwords, and renew these passwords regularly.

9. Duty to give notice of policy changes

If any content of this Privacy Policy is added, deleted, or modified, our clinic will give notice of the reasons for the changes, their content, and other details on our clinic’s website at least 7 days before the changed Privacy Policy takes effect.