JY Plastic Surgery and Dermatology ('jy-clinic.com') respects and protects the privacy and rights of its users according to the Personal Information Protection Act. This policy ensures the smooth handling of any grievances related to personal information. JY Plastic Surgery and Dermatology will notify any changes to its privacy policy through website announcements (or individual notices). Privacy Policy Implementation This policy will be implemented from January 1, 2015. 1. Purpose of Personal Information Processing JY Plastic Surgery and Dermatology ('jy-clinic.com', hereafter referred to as 'JY Clinic') processes personal information for the following purposes. The information processed will not be used for any other purpose than those listed below, and should the purpose of use change, prior consent will be obtained. a. Website Membership Registration and Management Processing personal information for purposes such as confirming the intent to sign up, maintaining and managing membership qualifications, preventing misuse of services, verifying consent from the legal representative when collecting personal information of children under 14, record-keeping for various notices and communications, grievance handling, and record preservation for dispute resolution. b. Handling of Civil Complaints Processing personal information for the purpose of verifying the identity of the complainant, understanding the details of the complaint, contacting and notifying for fact-finding, and notifying the results of the complaint handling. c. Provision of Goods or Services Processing personal information for the purpose of providing services, content provision, and providing personalized services. d. Utilization for Marketing and Advertising Processing personal information for purposes such as developing new services (products), providing customized services, offering opportunities for participation in events and advertising information, providing services and advertising according to demographic characteristics, verifying the effectiveness of services, identifying the frequency of access, or producing statistics on service usage. 2. Status of Personal Information Files - Personal Information File Name: Privacy Policy - Personal Information Items: Email, mobile phone number, password, login ID, service usage records, access logs, cookies, access IP information - Method of Collection: Collected through the website, written forms, phone/fax, prize events, provided by partners - Basis for Retention: To provide smooth services - Retention Period: 5 years - Relevant Laws: Record of collection/processing and use of credit information: 3 years, Record of consumer complaints or dispute handling: 3 years, Record of payment and supply of goods, etc.: 5 years, Record of contract or withdrawal of subscription, etc.: 5 years, Record of display/advertising: 6 months 3. Delegation of Personal Information Processing ① JY Clinic ('JY성형외과피부과') delegates personal information processing tasks to ensure smooth processing of personal information. ② When entering into a delegation contract, JY Clinic follows Article 25 of the Personal Information Protection Act, specifying matters related to the prohibition of personal information processing beyond the scope of the delegation, technical and administrative protection measures, restrictions on re-delegation, management and supervision of the trustee, and compensation for damages in documents such as contracts, and supervises the trustee to ensure safe processing of personal information. ③ Should the content of the delegated work or the trustee change, JY Clinic will immediately disclose this through the personal information processing policy. 4. Rights and Obligations of the Data Subject and Methods of Exercise Users, as personal information subjects, can exercise the following rights: ① Data subjects can exercise the following personal information protection-related rights against JY Clinic ('jy-clinic.com', hereafter referred to as 'JY Clinic') at any time: 1. Request to view personal information 2. Request correction in case of errors 3. Request deletion 4. Request to stop processing ② The exercise of rights under paragraph 1 can be done through written, email, or fax according to the form no. 8 of the enforcement rules of the Personal Information Protection Act, and JY Clinic will take action without delay. ③ If a data subject requests correction or deletion of personal information due to errors, etc., JY Plastic Surgery and Dermatology ('site URL', hereafter 'site name') will not use or provide the personal information until the correction or deletion is completed. ④ The exercise of rights under paragraph 1 can be conducted through a legal representative or a duly authorized representative of the data subject. In this case, a power of attorney as per the form no. 11 of the enforcement rules of the Personal Information Protection Act must be submitted. 5. Composition of Personal Information Items Processed ① JY Plastic Surgery and Dermatology ('jy-clinic.com') processes the following personal information items: - Mandatory items: Email, mobile phone number, password, login ID, service usage records, access logs, cookies, access IP information, payment records - Optional items: 6. Destruction of Personal Information JY Plastic Surgery and Dermatology ('JY Clinic') will immediately destroy personal information once the purpose of its processing has been achieved. The procedure, deadline, and method of destruction are as follows: - Destruction Procedure: Information entered by the user will be transferred to a separate DB (in the case of paper, separate documents) after the purpose has been achieved and will be destroyed after being stored for a certain period as per internal policies and other relevant laws or immediately destroyed. Personal information transferred to the DB will not be used for any other purpose unless required by law. - Destruction Deadline: Personal information will be destroyed within 5 days after the retention period has passed or within 5 days from the day it is deemed unnecessary, such as when the purpose of processing personal information has been achieved, the service is discontinued, or the business is closed. - Destruction Method: Information in electronic file format is destroyed using technical methods that make records non-reproducible. Personal information printed on paper is shredded or incinerated. 7. Measures to Ensure the Safety of Personal Information JY Plastic Surgery and Dermatology ('JY Clinic') implements the following technical, managerial, and physical measures to ensure safety, as required by Article 29 of the Personal Information Protection Act: 1. Regular self-audits conducted We conduct regular (quarterly) self-audits to ensure the safety of personal information processing. 2. Minimization and training of staff handling personal information We have designated and limited staff to handle personal information and implemented measures to manage personal information by minimizing the number of people handling it. 3. Establishment and execution of internal management plans We have established and are implementing internal management plans for the safe processing of personal information. 4. Technical measures against hacking JY Clinic installs security programs to prevent leakage and damage of personal information due to hacking or computer viruses, and conducts periodic updates and checks, installs the system in an area with controlled access from the outside, and technically and physically monitors and blocks access. 5. Encryption of personal information The personal information of users, including passwords, is encrypted, stored, and managed, so only the user knows it. Important data is protected using additional security functions such as encrypting files and transmission data or using file lock functions. 6. Retention and Prevention of Tampering of Access Records We maintain and manage the records of access to the personal information processing system for a minimum of six months, using security functions to prevent tampering, theft, or loss of the access records. 7. Restricting Access to Personal Information We take necessary measures to control access to the database system processing personal information by granting, changing, and revoking access rights. Unauthorized access from outside is controlled using intrusion prevention systems. 8. Use of Locking Devices for Document Security Documents and auxiliary storage media containing personal information are stored in a secure location with locking devices. 9. Control of Entry for Unauthorized Persons Physical storage locations containing personal information are kept separate and entry control procedures are established and operated. 8. Appointment of Data Protection Officer ① JY Plastic Surgery and Dermatology ('jy-clinic.com', hereafter 'JY Clinic') is responsible for overseeing the processing of personal information and has designated a Data Protection Officer as below for handling complaints and damage relief related to the processing of personal information. ▶ Data Protection Officer Name: [Officer's Name] Position: [Position] Rank: [Rank] Contact: [Phone number], [Email], [Fax number] ※ You will be connected to the department in charge of data protection. ▶ Department in Charge of Data Protection Department Name: [Department Name] Person in Charge: [Person's Name] Contact: [Phone number], [Email], [Fax number] ② Data subjects may contact the Data Protection Officer and the department in charge for all inquiries, complaints, and damage relief related to personal information protection that arise while using the services (or business) of JY Clinic ('jy-clinic.com'). JY Clinic will respond and handle your inquiries without delay. 9. Changes to the Privacy Policy ① This privacy policy will be applied from the date of enforcement, and any additions, deletions, or corrections of changes according to the law and policies will be announced through the notice section seven days before the implementation of the changes.