[Onlif Plastic Surgery] Personal Information Handling Policy

The Onlif Plastic Surgery Clinic (referred to as "Headquarters") places great importance on protecting your personal information and complies with the Personal Information Protection Act.
We would like to inform you of the purpose and method of personal information you provide and what measures are being taken to protect it through the personal information processing policy. The order of this privacy policy is as follows.

1. Items of personal information to be collected and method of collection
2. Purpose of collection and use of personal information
3. Retention and use period of personal information
4. Personal information destruction procedure and method
5. Provision and sharing of personal information
6. Consignment of handling of collected personal information
7. Rights of users and legal representatives and how to exercise them
8. Consent withdrawal / membership withdrawal method
9. Matters concerning the installation/operation of automatic personal information collection devices and their refusal
10. Person in charge of personal information management
11. Measures to ensure the safety of personal information
12. Obligation to notify in accordance with policy changes

1. Items of personal information to be collected and method of collection
When signing up for membership, we collect only the minimum amount of personal information necessary to use the service.
[Appointment information]
- Items to be collected: name, resident registration number, address, contact information, medical record
[Information collected when signing via homepage]
- Required: name, ID, password, email, contact information (phone number, mobile phone number)
- Optional: Whether or not to receive e-mails - The following information may be automatically generated and collected in the process of using the service or processing the service provision.
: Service use records, access logs, cookies, access IP information
[Personal information collection method]
- We collect personal information in the following ways.
- Website, written form, fax, phone, consultation board, e-mail

2. Purpose of collection and use of personal information
We utilize the collected personal information for the following purposes.
All information provided by the user is not used for any purposes other than the following and prior consent will be sought if the purpose of use is changed.
[Medical information]
- Provision of medical services for diagnosis and treatment, and services such as claims, receipts, and refunds.
[Homepage member information]
- Required information: Medical reservation, reservation inquiry, and membership service provided through the homepage.
- Optional information: Information on the clinic’s news, disease information, etc. through e-mail, survey

3. Retention and use period of personal information
We will get rid of your personal information without delay when the purpose of collection or provision of personal information is achieved.
[Medical Information] - Stored in accordance with the standards for keeping medical records stipulated in the Medical Service Act.
[Homepage Member Information] - Even if you withdraw from the membership, if the purpose of collection or provision is achieved, or if it is necessary to preserve it according to the provisions of laws and regulations such as the Commercial Act, personal information may be stored.
- Records on the handling of consumer complaints or disputes: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
- Records on the collection/processing and use of credit information: 3 years (Act on the Use and Protection of Credit Information)
– Records of identification: 6 months (Act on Promotion of Information and Communication Network Use and Information Protection, etc.)
– Records of visits: 3 months (Communications Secret Protection Act)

4. Personal information destruction procedure and method
Headquarters will get rid of personal information immediately after the 『Purpose of Collection and Use of Personal Information』 is achieved. The removal procedure and method are as follows.
[Deletion Procedure] The information entered by the user for membership registration, etc., is immediately deleted according to the deletion method after the purpose is achieved.
[Deletion method] Personal information stored in an electronic file format is deleted using a technical method that cannot be played back. Personal information printed on paper is destroyed by a shredder or incinerated.

5. Providing and sharing personal information
Without consent or in accordance with relevant laws and regulations, we will not provide your personal information to third parties, other companies, or institutions beyond the scope notified in the Purpose of Collection and Use of Personal Information.
-Submission of medical records to the Health Insurance Review and Assessment Service for claiming medical care benefits under the National Health Insurance Act.
– If necessary for statistical writing and academic research, it is processed and provided in a form in which a specific individual cannot be identified.
- If there is a request from the investigative agency in accordance with the procedures and methods set forth in the law, submission, etc.

6. Entrustment of handling collected personal information
We do not entrust the collected personal information to third parties or other organizations.

7. Rights of users and legal representatives and how to exercise them
Membership of children under the age of 14 (hereinafter referred to as "children") is made through a separate form written in a simple expression that is easy for children to understand, and the consent of their legal guardian is required when collecting personal information.
In order to obtain the consent of the legal guardian, we collect minimum information such as the name and contact information of the legal guardian of children, and obtain the consent of the legal guardian according to the method stipulated in the personal information handling policy.
The child's legal guardian may request to view, correction, and deletion of the child's personal information.
If you want to view, correct, or delete a child's personal information, click Modify Member Information and go through the legal guardian confirmation process, and the legal representative directly reads, corrects, deletes the child's personal information, or contacts the person in charge of personal information protection by writing, phone, or fax.
The headquarters does not provide or share information of children to third parties, and if the legal guardian requests correction of errors on personal information collected from children, the use and provision of such information is prohibited until the errors are corrected.
※ Personal information that is obliged to be stored by law cannot be modified or deleted within the storage period even if requested.

8. Withdrawal of consent / membership withdrawal method
You can withdraw your agreement on the collection, use, and provision of personal information at any time when you sign up.
For membership withdrawal, click on "Membership withdrawal" on the homepage of the headquarters, go through the identification process, or contact the person in charge of personal information management in writing, phone, or fax, and we will take necessary measures.

9. Matters concerning the installation/operation of automatic personal information collection devices and their refusal
We operate 'cookies' that frequently store and find your information.
A cookie is a very small text file sent to your browser by the server used to run the website and stored on your computer's hard disk.
We use cookies for the following purposes. You have the option to install cookies.
Therefore, you may allow all cookie setting options in your web browser, go through confirmation whenever a cookie is saved, or refuse to save all cookies.
If you refuse to install cookies, it may be difficult to provide some services.

10. Person in charge of personal information management
In order to protect your personal information and handle complaints related to personal information, we have the following personal information manager.
[Personal information manager]
･ Name : Lee Jae Woon
･ Position : Director
･ Company : Onlif Plastic Surgery
･ Phone Number : 02-1833-8171
You can report all complaints related to personal information protection that occur while using our services to the person in charge of personal information management.
We will provide a prompt and sufficient response to the reports of users. If you need to report or consult about other personal information infringement, please contact the organizations below.
･ Personal Dispute Mediation Committee (http://www.1336.or.kr / 1336)
･ Information Protection Mark Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533~4)
･ Cybercrime Investigation Team, Supreme Prosecutor’s Office (http://www.spo.go.kr / (02) 3480-3573)
Q ･ National Police of Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330)

11. Measures to ensure the safety of personal information
As a technical measure for the protection of users' personal information, the headquarter has prepared several security protocols.
All information sent by users are safely stored/managed in a security system protected by a firewall.
In addition, as a managerial measure for the protection of users' personal information, the headquarters prepares procedures necessary for accessing and managing users' personal information, and conducts continuous security training by limiting the number of people handling users' personal information to a minimum. In addition, we designate users of the system that processes personal information, give them user passwords, and update them regularly.

12. Obligation to notify in accordance with policy changes
This privacy policy was enacted on May 31, 2018. If there are additions, deletions, or modifications to the contents due to changes in laws, policies, or security technologies, the reason and contents of the change will be announced on the website of the clinic at least seven days before implementation.

This privacy policy is effective from 2021. 01. 01.