Privacy Policy

LIFTON Dermatology Clinic (hereinafter referred to as the "Clinic") values users' personal information and complies with the Personal Information Protection Act and other laws relating to personal information, including the "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.", as well as the "Personal Information Protection Regulations" established by the Korea Communications Commission.
In addition, in accordance with the relevant laws, the Clinic has established this Privacy Policy and does its utmost to protect the rights and interests of users.
Through this Privacy Policy, the Clinic informs users of the purposes and methods for which the personal information they provide is used, and of the methods by which it is managed to protect their personal information. Furthermore, in accordance with the relevant laws, the Clinic respects the rights and interests of data subjects, including the right to request access to, correction or deletion of, and suspension of the processing of, the personal information it holds. A data subject may file an administrative appeal regarding infringements of such statutory rights and interests in accordance with the Administrative Appeals Act.

---

Article 1 (Items of Personal Information Collected and Methods of Collection)
When collecting personal information, the Clinic notifies users in advance of the scope and purpose of collection at the time of application for membership or in the terms of use, in accordance with the relevant laws. The items of personal information collected are as follows.
❍ Items collected upon website membership registration
- Items collected: name, ID, password, email, gender, date of birth, home address, mobile phone number, telephone number, access logs, cookies, access IP information
- Method of collecting personal information: In the course of using website services (membership registration, online reservation, online consultation, post-procedure consultation) or in the course of providing services, the following information may be automatically generated and collected.
- Service usage records, access logs, cookies, access IP information

❍ Items collected at the time of treatment
- Required items: name, gender, date of birth, contact information (including guardian's contact information), address, E-mail, height, weight, blood type, previous surgical history
- Health information: personal health information deemed necessary by the medical team for the provision of medical services, such as medical history and family history

❍ Items collected upon payment of medical expenses
- Upon credit card payment: card payment approval information such as card company name and card number
* In cases where personal information is collected on a short-term basis for a specific purpose, it will be collected after separate notice is given.

❍ Methods of collecting personal information
- Collection through the website, written forms, fax, telephone, consultation boards, email, and the like

---

Article 2 (Purposes of Collection and Use of Personal Information)
The Clinic uses the collected personal information for the following purposes.
All information provided by users will not be used for any purpose other than that necessary for the purposes set forth below, and if the purpose of use is changed, prior consent will be obtained.
- Identity verification procedures for treatment, examination, reservation inquiry, and medical care
- Services for diagnosis and treatment
- Administrative services such as billing, payment, and refund of medical expenses
- Issuance of medical expense statements, itemized statements, and various certificates, and dispatch of medicines/supplies and results
- Acceptance of online/offline testing on consignment and requests for external testing
- Securing channels of communication to assist with the handling of civil complaints and grievances
- Legal and administrative responses and measures for medical quality management and clinic operations
- Minimal analytical data necessary for education and research
- Provision of medical information, academic information, and clinic information

---

Article 3 (Provision and Sharing of Personal Information)
Except where you have given your consent or where provided by the relevant laws, the Clinic will under no circumstances use your personal information beyond the scope notified in the "Purposes of Collection and Use of Personal Information" or provide it to others or to other companies or institutions. However, the following cases are exceptions.
- Submission of medical records to the Health Insurance Review and Assessment Service for the claim of medical care benefit costs under the National Health Insurance Act- Where users have consented in advance to disclosure
- Where there is a request from an investigative agency in accordance with the procedures and methods prescribed by law for investigative purposes, or pursuant to the provisions of the law
- Where necessary for the compilation of statistics or for academic research, and the information is provided in a form processed so that no specific individual can be identified

---

Article 4 (Retention and Use Period of Personal Information)
Retention period and use period of personal information
Your personal information will be destroyed once the purpose of its collection or the purpose for which it was provided has been achieved, as follows.
- In the case of membership registration information, when the membership is withdrawn or the member is expelled
- In the case of a reservation, when the processing and treatment pursuant to the reservation are completed
Notwithstanding the above retention period, your consent will be obtained where there is a need to continue to retain the information.

[Technical Measures for the Protection of Personal Information]
In handling your personal information, LIFTON Dermatology Clinic takes the following technical measures to ensure security so that personal information is not lost, stolen, leaked, altered, or damaged.
Your personal information is protected by a password, and important data is protected through separate security functions by encrypting files and transmitted data or by using a file lock function.
LIFTON Dermatology Clinic has adopted authentication and security devices that enable personal information on the network to be transmitted securely using cryptographic algorithms related to member authentication; where this cannot be carried out due to system circumstances, confirmation of intent is conducted by an assistant.
To prevent your personal information from being leaked through hacking and the like, the Clinic uses devices that block intrusion from outside, and installs an intrusion detection system on each server to monitor intrusion 24 hours a day.

---

Article 5 (Rights of Users and Legal Representatives and the Method of Exercising Them)
Where a customer requests access to, correction of, or deletion of their personal information, the Clinic responds faithfully to the customer's request and processes it without delay.
In order to protect personal information, the Clinic does not provide procedures for access to, correction of, or deletion of a customer's personal information by methods other than a customer's visit, such as telephone, mail, or FAX.
❍ Access to personal information: A customer may visit the Clinic and request access to their personal information, and the Clinic responds to this promptly.
❍ Correction and deletion of personal information
1. Where a customer requests correction or deletion of their personal information, the Clinic corrects or deletes it without delay if it is determined that there is an error in the personal information or it is otherwise recognized that correction or deletion is necessary.
The Clinic may request supporting documents necessary to verify the facts regarding the content of the correction or deletion.
2. Where a customer requests access to, correction of, or deletion of their own personal information, the Clinic verifies their identity by being presented with an identification document indicating the customer's identity, such as a resident registration card, passport, or driver's license.
3. Where there are legitimate grounds to refuse access to, correction of, or deletion of all or part of the personal information, the Clinic notifies the customer thereof and explains the reasons.
4. The legal representative of a child under the age of 14 may request access to, correction of, deletion of, or suspension of the processing of the child's personal information, and must submit proof of their relationship with the child and proof of identity.

---

Article 6 (Matters Concerning the Installation/Operation of Devices that Automatically Collect Personal Information and the Refusal Thereof)
The Clinic operates "cookies" that store and retrieve your information from time to time.
A cookie is a very small text file sent to your browser by the server used to operate the Clinic's website, and it is stored on the hard disk of your computer.
The Clinic uses cookies for the following purposes.
1) To analyze the access frequency and visit times of members and non-members, to identify users' preferences and areas of interest, and to use this as a measure for service reorganization and the like.
2) Used as data to identify the number of your visits at various events held by the Clinic and to provide differentiated information according to an individual's area of interest.
You have the option to choose whether to install cookies.
Accordingly, by setting options in your web browser, you may allow all cookies, undergo confirmation each time a cookie is saved, or refuse the storage of all cookies.
If you refuse the installation of cookies, there may be difficulties in providing some services.

---

Article 7
In order to provide better services and customer convenience and to carry out its work smoothly, the Clinic entrusts the processing of personal information to external specialized providers and operates it as follows.
Through the consignment work contract and the like, the Clinic stipulates compliance with laws related to the protection of personal information, the maintenance of confidentiality regarding personal information, the prohibition of provision to third parties, liability in the event of an accident, the consignment period, and the obligation to return or destroy personal information after the completion of processing, and manages the contractor to comply with these so that personal information can be managed securely.
Recipient: LIFTON Dermatology Clinic (the party that has entered into a management support service contract with this provider)
Purpose of collection and use: Information on clinic news, medical information, medical services, appreciation events, and the like
Information provided: personal information (name, address, contact information, email)
Retention and use period: May be retained and used for the period prescribed by law.

---

Article 8 (Personal Information Protection Officer)
The Clinic has put in place security devices as a technical measure for the protection of users' personal information.
All information provided by users is securely protected and managed by security equipment such as firewalls.
In addition, as an administrative measure for the protection of users' personal information, the Clinic has established procedures necessary for access to and management of users' personal information,
and conducts ongoing security training by limiting to a minimum the number of personnel who process users' personal information.
Furthermore, the Clinic designates users of the system that processes personal information, grants them user passwords, and updates these regularly.

---

Article 9 (Withdrawal of Consent / Method of Membership Withdrawal)
You may withdraw at any time the consent you gave to the collection, use, and provision of your personal information at the time of membership registration.
To withdraw membership, you may click "Membership Withdrawal" on the My Page of the Clinic's website and withdraw your membership directly after undergoing identity verification procedures, or you may contact the personal information protection grievance handling department in writing, by telephone, or by Fax, and the Clinic will take necessary measures without delay, such as destroying your personal information.

---

Article 10 (Obligation to Notify of Changes to the Policy)
This Privacy Policy may be changed in content in accordance with changes to the relevant laws and guidelines or changes to internal operating policies.
In the event that the Clinic's "Privacy Policy" is changed, notice will be provided through the website.

---

[Personal Information Management Officer]
Management Officer:
Contact:
E-mail:
If you require a report or consultation regarding other personal information infringements, please contact the institutions below.
1. Personal Information Dispute Mediation Committee (https://www.kopico.go.kr/main/main.do/1336)
2. ePRIVACY Mark Certification Committee (https://www.eprivacy.or.kr/index.do/02-580-0533~4)
3. Internet Crime Investigation Center of the Supreme Prosecutors' Office (https://www.spo.go.kr/site/spo/main.do/02-3480-3600)
4. Cyber Terror Response Center of the National Police Agency (https://ecrm.cyber.go.kr/minwon/main/02-392-0330)

---

[Policy on the Operation and Management of Image Information Processing Devices]
Through this Policy on the Operation and Management of Image Information Processing Devices, LIFTON Dermatology Clinic (hereinafter referred to as the "Clinic") informs you of the purposes and methods for which the image information processed at this Clinic is used and managed.

---

Article 1 (Grounds and Purpose for the Installation of Image Information Processing Devices)
Pursuant to Article 25 (1) of the Personal Information Protection Act, this Clinic installs and operates image information processing devices for the following purposes.
- Facility safety and fire prevention
- Crime prevention for the safety of customers

---

Article 2 (Number of Devices Installed, Installation Location, and Filming Range)
The number of image information processing devices installed, their location, and their filming range are as follows.
Number of devices installed:
Location and filming range: building lobby and corridors, inside the elevator, etc.

---

Article 3 (Matters Concerning the Method and Location of Confirming Personal Image Information)
- Method of confirmation: Confirmation is possible if you contact the image information management officer in advance and visit this Clinic.
- Location of confirmation: LIFTON Dermatology Clinic

---

Article 4 (Measures in Response to a Data Subject's Request to Access Image Information, etc.)
A data subject may, at any time, request the operator of the image information processing devices to allow access to, confirm the existence of, or delete their personal image information.
However, this is limited to personal image information in which you are filmed and personal image information clearly necessary for the urgent benefit of the life, body, or property of the data subject.
Where a request to access, confirm the existence of, or delete personal image information is made, this Clinic will take the necessary measures without delay.
Notwithstanding a data subject's request to access, etc., this Clinic may refuse the request to access, etc. personal image information in the following cases,
and in such cases, the data subject will be notified in writing or otherwise of the reasons for refusal and the methods of objection within 10 days.
- Where the personal image information has been destroyed because its retention period has elapsed
- Where there exist other legitimate grounds to refuse the data subject's request to access, etc.

---

Article 5 (Measures to Ensure the Security of Image Information)
The image information processed at this Clinic is managed securely through measures such as encryption.
In addition, as an administrative measure for the protection of personal image information, this Clinic grants differentiated access privileges to personal information,
and, to prevent the forgery or alteration of personal image information, records and manages the date and time of creation of the personal image information, the purpose of viewing, the viewer, and the date and time of viewing.
In addition to this, locking devices are installed for the safe physical storage of personal image information.

---

Article 6 (Matters Concerning Changes to the Privacy Policy)
This Policy on the Operation and Management of Image Information Processing Devices was established on February 10, 2020, and in the event of any addition, deletion, or amendment of its content due to changes in laws, policies, or security technology, the Clinic will notify of the reasons for and content of the change through this Clinic's website at least 7 days before its implementation.
If you require a report or consultation regarding other personal information infringements, please contact the institutions below.
1. Personal Information Dispute Mediation Committee (https://www.kopico.go.kr/main/main.do/1336)
2. ePRIVACY Mark Certification Committee (https://www.eprivacy.or.kr/index.do/02-580-0533~4)
3. Internet Crime Investigation Center of the Supreme Prosecutors' Office (https://www.spo.go.kr/site/spo/main.do/02-3480-3600)
4. Cyber Terror Response Center of the National Police Agency (https://ecrm.cyber.go.kr/minwon/main/02-392-0330)