Privacy Policy

Dr. E-Laser Dermatology (hereinafter referred to as the “Clinic”) values your personal information and complies with the applicable laws and regulations regarding the protection of personal information, including the Act on Promotion of Information and Communications Network Utilization and Information Protection.

Through this Privacy Policy, the Clinic informs you of the purposes and methods for which your personal information is collected and used, as well as the measures taken to protect your personal information.

This Privacy Policy shall take effect on July 8, 2021.

1. Personal Information Collected

The Clinic collects the following personal information in order to provide convenient services such as membership registration, consultations, and appointment reservations.

1) Items Collected

• Personally identifiable information: name, date of birth, login ID, password, email address, home phone number, mobile phone number, home address, and areas of interest
• Medical information: medical history, treatment or surgical area, infectious diseases, and other health-related information

2) Method of Collection

Personal information is collected through the website, including:

• Membership registration
• Treatment inquiries
• Treatment reservations
• Online consultations
• Consultation reservations
• Treatment reservations
• Treatment reviews

※ In accordance with the Medical Service Act, certain personally identifiable information and medical information may be retained as required by law without separate consent.

2. Purpose of Collection and Use of Personal Information

The Clinic uses collected personal information for the following purposes:

1) Performance of Service Contracts and Billing

To perform contractual obligations related to the provision of services and process related payments

2) Provision of Content

To provide information and content requested by users

3) Member Management

• Verification of user identity for member services
• Personal identification
• Prevention of unauthorized or fraudulent use by improper members
• Confirmation of intent to register
• Handling complaints and customer service requests

4) Marketing and Advertising

• To provide information on new services and events
• To deliver promotional information
• To analyze website access frequency
• To compile statistics regarding service usage by members

5) Other

• To provide short message services (SMS)

3. Retention and Use Period of Personal Information

In principle, once the purpose of collection and use of personal information has been fulfilled, such information will be destroyed without delay. However, if retention is required under applicable laws and regulations, the Clinic will retain the information for the period prescribed by such laws.

Items Retained

• Login ID
• Service usage records
• Access IP information

Legal Basis

• Act on Promotion of Information and Communications Network Utilization and Information Protection

Retention Period

• Until the user withdraws membership

In addition, the following information may be retained for the periods set forth below in accordance with relevant laws:

• Records on consumer complaints or dispute resolution: 3 years
  (Act on the Consumer Protection in Electronic Commerce, etc.)
• Records on the collection, processing, and use of credit information: 3 years
  (Use and Protection of Credit Information Act)
• Records on identity verification: 6 months
  (Act on Promotion of Information and Communications Network Utilization and Information Protection)
• Records on website visits: 3 months
  (Protection of Communications Secrets Act)

4. Procedure and Method of Destruction of Personal Information

In principle, once the purpose of collection and use has been achieved, the Clinic destroys the relevant personal information without delay.

1) Destruction Procedure

Information entered by users for membership registration or other purposes is transferred to a separate database after the relevant purpose has been fulfilled (or, in the case of paper documents, stored separately in a filing cabinet), and retained for a certain period in accordance with internal policies and applicable laws before being destroyed.

Personal information transferred to a separate database will not be used for any purpose other than retention as required by law.

2) Destruction Method

Personal information stored in electronic file format is deleted using technical methods that make the records irrecoverable.

5. Provision of Personal Information to Third Parties

In principle, the Clinic does not provide users’ personal information to external parties. However, exceptions may apply in the following cases:

• Where users have given prior consent
• Where disclosure is required by law
• Where a lawful request is made by an investigative authority in accordance with applicable legal procedures

6. Entrustment of Personal Information Processing

The Clinic entrusts certain operations to an external professional service provider for the purpose of fulfilling its services.

• Entrusted Company: MPR Co., Ltd.
• Scope of Entrusted Services: Website and system management
• Items of Personal Information Entrusted: Information collected during website membership registration
• Retention and Use Period: Until the termination of the outsourcing agreement

7. Rights of Users and Legal Representatives and How to Exercise Them

Users may view or modify their registered personal information at any time and may also request cancellation of membership.

To view or correct personal information, users may access the “Edit Personal Information” or “Edit Member Information” section of the website. To cancel membership and withdraw consent, users may click “Withdraw Membership” and complete the identity verification procedure.

Alternatively, users may contact the person in charge of personal information protection by mail, telephone, or email, and the Clinic will take appropriate action without delay.

If a user requests correction of an error in personal information, the relevant personal information will not be used or provided until such correction has been completed.

Personal information that has been canceled or deleted at the request of the user will be handled in accordance with the retention period set forth in this Privacy Policy and will not be viewed or used for any other purpose.

8. Withdrawal of Consent / Membership Cancellation

Users may withdraw their consent to the collection, use, and provision of personal information at any time after providing such consent during membership registration.

To withdraw membership, users may click “Withdraw Membership” in the My Page section of the website and complete the identity verification process. Alternatively, users may request membership cancellation by contacting the person in charge of personal information protection by mail, telephone, or fax.

Upon such request, the Clinic will promptly take necessary measures, including the destruction of the user’s personal information, in accordance with applicable laws and regulations.

9. Installation, Operation, and Rejection of Automatic Personal Information Collection Devices

The Clinic operates cookies and similar technologies that store and retrieve user information from time to time. A cookie is a small text file sent by the server used to operate the Clinic’s website to the user’s browser and stored on the user’s computer hard drive.

The Clinic uses cookies for the following purposes:

Purpose of Using Cookies

• To analyze access frequency and visiting times of members and non-members
• To identify users’ preferences and interests
• To track browsing behavior
• To measure participation in events and frequency of visits
• To provide targeted marketing and personalized services

Users have the right to choose whether to allow cookies. By adjusting the settings in their web browser, users may allow all cookies, be notified whenever a cookie is stored, or refuse the storage of all cookies.

How to Refuse Cookie Settings

Example: Users may configure their browser settings to confirm each time a cookie is stored or to refuse all cookies.

Example (Internet Explorer):
Tools > Internet Options > Privacy

Please note that if cookies are refused, some services may not function properly.

10. Civil Complaints Related to Personal Information

To protect users’ personal information and handle complaints related to personal information, the Clinic designates the following person in charge:

Person in Charge of Personal Information Protection: Team Manager Kim Geun-deok
Email: rlarmsejr1123@nate.com

Users may report any complaints regarding personal information protection arising while using the Clinic’s services to the person in charge listed above. The Clinic will respond promptly and appropriately to such reports.

For further consultation or to report personal information infringement, users may also contact the following organizations:

1. Personal Information Dispute Mediation Committee
2. Information Protection Mark Certification Committee
3. Supreme Prosecutors’ Office Internet Crime Investigation Center
4. National Police Agency Cyber Bureau

11. Obligation to Notify Changes to This Policy

This Privacy Policy was established on July 12, 2013. If any additions, deletions, or modifications are made due to changes in applicable laws, policies, or security technology, the Clinic will provide notice of the reasons for and details of such changes on the website at least 7 days prior to the effective date of the revised Privacy Policy.

• Effective Date: June 4, 2021