This institution processes the minimum amount of personal information for the following purposes.
The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, we will take necessary measures, such as obtaining separate prior consent in accordance with Article 18 of the Personal Information Protection Act.

• Used for identity verification procedures for medical appointment/checkup booking, appointment inquiry, and the use of membership services
• Information on hospital usage, new services, and events
• Mobile notification regarding medical consultations, appointments, scheduled hospitalizations, and scheduled tests
• Sending of medical bills, statements, and certificates, as well as medications, examination supplies, and results
• Provision of services for diagnosis and treatment (sharing of personal and medical information necessary for consultation) and administrative services such as billing, payment, and refunds
• Minimum analytical data required for education, research, and clinical services
• Basic data for online/offline consignment, external inspection, and clinical trial review, etc.
• Securing communication channels for handling complaints/grievances, etc.
• Provision of information in accordance with relevant laws, such as the Medical Service Act and Criminal Act
• Provision of information regarding pre- and post-examination services

※ To ensure the smooth processing of the above items, personal information processing tasks may be entrusted to external specialized companies, and the details thereof are disclosed within the Privacy Policy.

The personal information collected by this hospital is as follows. The collected information is divided into mandatory and optional items; there are no restrictions on the use of services, such as membership registration or medical treatment, even if optional items are not entered.

In addition to the above, we will provide separate notice when collecting personal information for specific purposes on a short-term basis. This includes not only the information at the time of registration but also information changed through information modification.

In principle, this institution processes users' personal information within the scope specified in the processing purpose and, as a general rule, does not provide users' personal information to external parties. However, the following cases are exceptions.

• Cases where separate consent has been obtained from the data subject
• Where there are special provisions in the law
• Cases where the data subject or their legal representative is unable to express their intent or prior consent cannot be obtained due to unknown address, etc., and it is deemed clearly necessary for the urgent benefit of the life, body, or property interests of the data subject or a third party
• Cases where personal information is provided in a form that prevents the identification of specific individuals, as necessary for purposes such as statistical compilation and academic research

Except for the items above, we will notify you through the Privacy Policy if any matters regarding the provision of personal information to third parties occur.

This institution processes and retains personal information within the retention and usage period stipulated by law or in accordance with consent at the time of collection.
The processing and retention periods for each type of personal information are as follows. Personal information is retained and used for the above purposes from the date of consent to collection/use until the purpose is achieved.

This center destroys personal information immediately after the purpose of collection and use has been achieved. The destruction procedures and methods are as follows.

A. Destruction Procedure
Information entered by users for purposes such as membership registration will be immediately destroyed by the destruction method described below once the purpose has been achieved.

B. Destruction period
If the personal information of the user has elapsed, within 5 days from the end of the retention period, when the personal information becomes unnecessary, such as the achievement of the purpose of processing personal information, the abolition of the service, or the termination of the business The personal information will be destroyed within 5 days from the date when the processing of is deemed unnecessary.

C. Method of destruction
Personal information stored in the form of electronic files is deleted using a technical method that can not reproduce the record.
Personal information printed on paper is destroyed by shredding or incineration.

This institution faithfully responds to and processes customer requests for access to, correction of, or deletion of personal information without delay. To protect personal information, we do not provide procedures for accessing, correcting, or deleting personal information via methods other than in-person visits, such as telephone, mail, or fax.

A. Access to Personal Information
Customers may visit this hospital to request access to or verification of their personal information. However, in order to more thoroughly protect the personal information provided by customers, access to or verification of customers' personal information will not be provided through application methods other than a visit, such as telephone, mail, or fax.

B. Correction/Deletion of Personal Information
• If a customer requests the correction or deletion of personal information, this hospital verifies their identity and takes necessary measures without delay.
• When a customer requests access to or verification of their personal information, we verify their identity by requiring them to present identification documents such as a resident registration card, passport, or driver's license (new type).
• When a customer's representative visits and requests inspection or certification, we verify whether they are a genuine representative by receiving proof such as a power of attorney indicating the agency relationship, the name customer's seal certificate, and the representative's identification document.
• Even if a customer has consented to the provision of personal information to a third party, if a request for correction of an error is received, the provision of personal information will be suspended until the error is corrected; and if incorrect personal information has already been provided to a third party, the third party and the party concerned will be notified of this fact and necessary measures will be taken.
• If the Hospital has a legitimate reason to refuse access to, verification of, or correction of all or part of personal information, it shall notify the customer and explain the reason.
• Customers may request withdrawal of consent (subscription/cancellation) for the collection, use, or provision of personal information as follows, and this hospital will take the necessary measures without delay.

c. Customers may withdraw their consent to the collection, use, or provision of personal information.

D. A legal representative may withdraw consent for the collection, use, or provision of personal information of a child under the age of 14, and may request access to or correction of errors in personal information provided by a child under the age of 14.

• This hospital takes protective measures to ensure that children under the age of 14 (hereinafter referred to as "children") and their legal representatives do not suffer any disadvantages due to personal information provided by such children.

• This hospital requires the consent of the child's legal representative to be obtained when performing the following actions regarding the child's personal information.
a. In cases where personal information is collected for a child's service registration, or where the child's personal information is to be used or provided to a third party beyond the scope notified at the time of service registration or specified in the Terms of Service.
B. Cases where the recipient of a child's personal information uses the personal information for a purpose other than the purpose for which it was received or provides it to a third party

• This hospital may request the minimum necessary information, such as the legal representative's name and phone number, to obtain their consent. In this case, the child will be notified of the purpose of the collection, use, or provision of personal information and the requirement for the legal representative's consent, using simple language that the child can easily understand.

• We do not use the personal information of legal representatives collected to obtain their consent for any purpose other than verifying whether such consent has been given, nor do we provide it to third parties.

You may withdraw your consent to the collection, use, and provision of personal information at any time upon signing up.
To withdraw your consent (withdraw membership), please click "Withdraw Membership" on the website, go through the identity verification process, and withdraw your consent directly, or contact the Personal Information Manager, and we will take necessary measures, such as destroying your personal information, without delay.

This institution uses 'cookies' to store and frequently retrieve user information in order to provide specialized, customized services to users. Cookies are small pieces of information that a website sends to a user's computer web browser, and they may also be stored on the PC's hard disk.

A. What are cookies?
Cookies are very small text files sent by the server operating a website to the user's browser, which are stored on the user's computer's hard drive. Subsequently, when the user visits the website, the website server reads the contents of the cookie stored on the user's hard drive to maintain the user's settings and provide personalized services.
• Cookies do not automatically or actively collect information that identifies individuals, and users can refuse to store or delete these cookies at any time.

B. Purpose of the Company's Use of Cookies
• It is used to analyze visit and usage patterns, secure connection status, and user scale regarding each service and website of this hospital visited by users, in order to provide users with optimized, customized information, including advertisements.

C. Refusal of installation and operation of cookies
• Users have the option to control cookie installation. Therefore, users can configure their web browser options to allow all cookies, be prompted for confirmation whenever a cookie is saved, or refuse the storage of all cookies.
However, if the user refuses the installation of cookies, there may be difficulties in providing the service.
• The method to specify whether to allow key installation (for Internet Explorer) is as follows.
[Tools at the top of the web browser > Internet Options > Privacy > Privacy level settings]

a. Minimization and training of personnel handling personal information
We are minimizing the designation of personal information handlers and providing regular training.

B. Conduct regular internal inspections
To ensure the security of personal information handling, we conduct regular internal inspections at least once a year.

C. Establishment and Implementation of Internal Management Plan
We have established and implemented an internal management plan for safe handling of personal information.

D. Encryption of personal information
Among the user's personal information, passwords are stored and managed in an encrypted form so that only the user can access them. For important data, separate security features such as file and transmission data encryption are used.

E. Technical measures to prevent hacking, etc.
To prevent the leakage and damage of personal information caused by hacking or computer viruses, we install security programs, perform periodic updates and checks, install systems in areas where external access is controlled, and monitor and block access technically and physically.

B. Restriction on access to personal information
We are taking necessary measures to control access to personal information by granting, changing, and deleting access rights to the database system that processes personal information, and we are controlling unauthorized access from outside by using an intrusion prevention system.

G. Access control for unauthorized persons
We have established and are operating access control procedures for the physical storage location of the personal information system that stores personal information.

This hospital informs you of the purposes and methods by which the image information processed at this hospital is utilized and managed through its Image Information Processing Device Operation and Management Policy.

A. Basis for Installation and Purpose of Installation of Image Information Processing Devices
In accordance with Article 25, Paragraph 1 of the Personal Information Protection Act, this hospital installs and operates image information processing devices for the following purposes.
• Facility Safety and Fire Prevention
• Crime prevention for customer safety

B. Number of units installed, installation locations, and shooting range
The number of installed image information processing devices, their locations, and shooting ranges are as follows.

C. Managers and Authorized Personnel
In order to protect the video information of data subjects and to handle complaints related to personal video information, we have appointed a Personal Video Information Protection Officer as follows.

D. Recording time and retention period of video information

E. Matters concerning the method and location for verifying personal video information
• Verification method: None
• Verification Location: None

f. Measures regarding data subjects' requests for access to video information, etc.
Data subjects may request access to, confirmation of existence of, or deletion of their personal video information from the operator of the video information processing device at any time. However, this is limited to personal video information in which you are filmed and personal video information that is clearly necessary for the urgent benefit of the data subject's life, body, or property.
This hospital will take necessary measures without delay if a request is made to view, confirm the existence of, or delete personal video information.
Notwithstanding a data subject's request for access, etc., the request for access to personal video information may be refused in the following cases, and in such cases, the data subject will be notified of the reasons for refusal and methods of appeal in writing, etc., within 10 days.
• Cases where personal video information is destroyed after the retention period has expired
• Other cases where there are justifiable grounds to refuse the data subject's request for access, etc.

G. Measures to Ensure the Safety of Video Information
The video information processed by this hospital is securely managed through measures such as encryption. Furthermore, as an administrative measure for the protection of personal video information, this hospital grants differentiated access rights. To prevent falsification or alteration of personal video information, we record and manage the creation date and time, as well as the purpose of viewing, the viewer, and the date and time of viewing. In addition, we have installed locking devices for the safe physical storage of personal video information.

In order to protect customers' personal information and handle complaints related to personal information, this institution has appointed a Chief Privacy Officer.
If you have any inquiries regarding personal information, please contact the Data Protection Officer listed below. We will respond to your inquiries promptly and sincerely.

A. Personal Information Management Officer

You may report all complaints related to personal information protection arising from your use of our services to the Chief Privacy Officer.
This institution will provide prompt and sufficient responses to user reports.
If you need to report or consult about other personal information infringements, please contact the organizations below.

Personal Dispute Mediation Committee (http://www.1336.or.kr / 1336)
Supreme Prosecutors' Office Cybercrime Investigation Division (http://www.spo.go.kr / (02) 3480-3573)
National Police Agency Cyber ​​Terrorism Response Center (http://www.ctrc.go.kr / (02) 392-0330)

This Privacy Policy was enacted on September 23, 2020. In the event of any additions, deletions, or modifications to the content due to changes in laws, policies, or security technologies, we will announce the reasons for the changes and the details on the hospital's website at least 7 days prior to the implementation of the revised Privacy Policy.

Announcement date: March 2020, 9
Effective date: March 2020, 9