'Midline Plastic Surgery Clinic' (hereinafter referred to as the "Clinic") places great importance on the personal information of its users and complies with the Personal Information Protection Act and the "Personal Information Protection Regulations" enacted by the Korea Communications Commission, as well as other relevant laws regarding personal information, such as the "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc." Furthermore, the Clinic has established a Privacy Policy in accordance with relevant laws and is committed to protecting the rights and interests of users. Through this Privacy Policy, the Clinic informs users of the purposes and methods for which personal information provided by users is utilized, and the methods by which it is managed to ensure its protection.

In addition, the Hospital respects the rights and interests of data subjects, such as the right to request access, correction, deletion, or suspension of processing of personal information held in accordance with relevant laws and regulations, and data subjects may file an administrative appeal in accordance with the Administrative Appeals Act regarding any infringement of such legal rights and interests.

This policy is effective from April 1, 2021.

When collecting personal information, the hospital provides advance notice of the scope and purpose of collection, either at the time of registration or in the Terms of Use, in accordance with relevant laws and regulations. The personal information collected is as follows:

■ Items collected when registering as a member on the website
○ Collected Items: Name, ID, Password, Email, Gender, Date of Birth, Home Address, Mobile Phone Number, Telephone Number, Access Logs, Cookies, Access IP Information
○ Method of collecting personal information: Website (membership registration, online reservation, online consultation, post-surgery consultation)
The following information may be automatically generated and collected during the service use process or service provision process.
– Service usage records, access logs, cookies, and access IP information

■ Items collected during treatment
○ Required items: Name, Gender, Date of Birth, Contact Information (including guardian's contact), Address, E-mail, Height, Weight, Blood Type, History of Previous Surgery
○ Health Information: Personal health information, such as medical history and family history, that medical staff deem necessary for the provision of medical services.

■ Items collected when paying medical expenses
○ When paying by credit card: Card payment approval information such as card issuer name and card number
In addition, if personal information is collected for a short period for specific purposes, we will provide separate notice before collection.

■ Personal information collection method
○ Collection via website, written forms, fax, telephone, consultation bulletin board, email, etc.

The hospital uses the collected personal information for the following purposes. All information provided by users will not be used for any purpose other than those listed below. If the purpose of use changes, prior consent will be obtained.
○ Identity verification process for treatment/examination/reservation inquiry and treatment
○ Services for diagnosis and treatment
○ Administrative services such as billing, payment, and refund of medical expenses
○ Sending medical bills, statements, certificates, and medicines/items and results
○ Acceptance of online/offline inspections, request for external inspections
○ Securing a communication channel to assist in handling complaints/grievances
○ Legal and administrative responses and measures for quality control of medical services and hospital operation
○ Minimum analysis data required for education and research
○ Guidance on medical treatment information, academic information, and hospital information

The hospital will not use your personal information beyond the scope specified in the “Purpose of Collection and Use of Personal Information” or provide it to other persons, companies, or organizations, except with your consent or as required by applicable laws and regulations.
However, the following cases are exceptions.
○ Submission of medical records to the Health Insurance Review & Assessment Service for claiming medical care benefits in accordance with the National Health Insurance Act
○ Cases where users have consented to disclosure in advance
○ In accordance with the provisions of laws and regulations, or when there is a request from an investigative agency for investigative purposes in accordance with the procedures and methods prescribed by law
○ Cases where data is processed and provided in a form that prevents the identification of specific individuals, as necessary for statistical compilation or academic research

When the purpose of collecting or providing personal information has been achieved, we will destroy your personal information without delay.
– In the case of membership information: When withdrawing from membership or being expelled from membership
– In cases where collection was made for the purpose of surveys, events, etc.: When the said survey, event, etc. has ended
– In cases where collected for the purpose of medical treatment: Retained in accordance with the period specified in Article 15 of the Enforcement Rules of the Medical Service Act, “Preservation of Records Related to Medical Treatment” (Patient Register: 5 years, Medical Record: 10 years), (Items to be retained: Name, Address, Resident Registration Number, Medical Information)
– Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in E-commerce, etc.)
– Records of collection/processing and use of credit information: 3 years (Act on the Use and Protection of Credit Information)
- Records of identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.)
– Records of visits: 3 months (Communications Secrets Protection Act)
※ However, even if the purpose of collection or the purpose for which the information was received has been achieved, we may retain your personal information if there is a need to preserve it in accordance with the provisions of laws and regulations, such as the Commercial Act.

In principle, the hospital destroys personal information without delay after the purpose of collection and use has been achieved. The destruction procedures and methods are as follows.
■ Destruction Procedure
The information you entered for membership registration, etc., is transferred to a separate database (or a separate filing cabinet in the case of paper documents) after the purpose is fulfilled. It is then destroyed after being stored for a certain period in accordance with internal policies and reasons for information protection under other relevant laws (refer to the retention and usage period). Personal information transferred to a separate database will not be used for any purpose other than retention, unless required by law.
■ Destruction method
Personal information stored in the form of electronic files is deleted using technical methods that render the records unrecoverable. Personal information printed on paper is shredded or dissolved.

If a customer requests to view, correct, or delete personal information, the hospital will respond faithfully and promptly. To protect personal information, the hospital does not provide access, correction, or deletion of personal information through any method other than a customer's in-person visit, such as by phone, mail, or fax.
■ Access to personal information
Customers may visit the hospital and request access to their personal information, and we will respond promptly.
■ Correction/deletion of personal information
1. If a customer requests the correction or deletion of personal information, or if it is determined that such correction or deletion is necessary, such as when errors are found in the personal information, the Hospital will correct or delete the information without delay. The Hospital may request supporting documents necessary to verify the facts regarding the correction or deletion.
2. When a customer requests to view, correct, or delete his or her personal information, the customer's identity will be verified by presenting an identification document, such as a resident registration card, passport, or driver's license.
3. If the hospital has a legitimate reason to refuse access, correction, or deletion of all or part of personal information, it shall notify the customer and explain the reason.
4. A legal representative of a child under the age of 14 may request access to, correction of, deletion of, or suspension of processing of the child's personal information, and must submit proof of relationship with the child and identification.

The hospital uses "cookies" to periodically store and retrieve your information. Cookies are very small text files that the server used to operate the hospital's website sends to your browser and are stored on your computer's hard drive. The hospital uses cookies for the following purposes:
We analyze the access frequency and visit times of members and non-members, identify users' preferences and interests, and utilize this as a benchmark for service reorganization and other initiatives.
○ The frequency of your visits to various events hosted by the hospital is tracked and used as data to provide differentiated information based on your individual interests.
You have a choice regarding cookie installation. Therefore, you can configure your web browser to accept all cookies, notify you when a cookie is stored, or reject all cookies. If you reject cookies, you may experience difficulties in using some services.

The hospital has implemented security measures as a technical measure to protect users' personal information. All information provided by users is safely protected and managed by security devices such as firewalls. Furthermore, as an administrative measure to protect user personal information, the hospital has established procedures necessary for accessing and managing personal information. The hospital also limits the number of personnel handling personal information to a minimum and provides ongoing security training. Furthermore, the hospital designates users of the personal information processing system, assigns them passwords, and regularly updates them.

You may withdraw your consent to the collection, use, and provision of your personal information at any time, provided upon registration. To withdraw your membership, click "Withdraw Membership" on the hospital website's My Page, complete the identity verification process, and then directly withdraw your membership. Alternatively, contact the Personal Information Protection Complaints Department in writing, by phone, or by fax. We will promptly take necessary measures, including destroying your personal information.

The contents of this Privacy Policy may be amended in accordance with changes in relevant laws and guidelines or internal operating policies. If the Hospital's "Privacy Policy" is changed, we will announce it through the website (http://www.jjprs.com).

Chief Privacy Officer >
Name: Kim Jun-hyun
Position: Chief Director of Midline Plastic Surgery Clinic

Email: midlineps@naver.com

< Personal Information Management Officer >
Name: Kim Jun-hyun
Position: Chief Director of Midline Plastic Surgery Clinic

Email: midlineps@naver.com

* Effective Date: September 01, 2021

If you need to report or consult about other personal information infringements, please contact the organizations below.
1. Personal Dispute Mediation Committee (www.1336.or.kr/1336)
2. 정보보호마크인증위원회 (www.eprivacy.or.kr/02-580-0533~4)
3. Supreme Prosecutors' Office Internet Crime Investigation Center (http://icic.sppo.go.kr/02-3480-3600)
4. National Police Agency Cyber ​​Terror Response Center (www.ctrc.go.kr/02-392-0330)

'Midline Plastic Surgery Clinic' (hereinafter referred to as the 'Hospital') informs you, through its Image Information Processing Device Operation and Management Policy, of the purposes and methods for which image information processed by this Hospital is utilized and managed.

In accordance with Article 25, Paragraph 1 of the Personal Information Protection Act, this hospital installs and operates image information processing devices for the following purposes.
○ Facility Safety and Fire Prevention
○ Crime prevention for customer safety

The number of installed image information processing devices, their locations, and shooting ranges are as follows.
Number of units installed, installation location and shooting range: (21) units installed, inside the building

○ How to check: You can verify by contacting the person in charge of image information management in advance and visiting our hospital.
○ Verification Location: Midline Plastic Surgery Clinic

Data subjects may request access to, confirmation of existence of, or deletion of their personal video information from the operator of the video information processing device at any time. However, this is limited to personal video information in which you are filmed and personal video information that is clearly necessary for the urgent benefit of the data subject's life, body, or property.
This hospital will take necessary measures without delay if a request is made to view, confirm the existence of, or delete personal video information.
Notwithstanding a data subject's request for access, etc., the request for access to personal video information may be refused in the following cases, and in such cases, the data subject will be notified of the reasons for refusal and methods of appeal in writing, etc., within 10 days.
○ Cases where personal video information is destroyed after the retention period (30 days) has expired
○ Other cases where there are justifiable grounds to refuse the data subject's request for access, etc.

The video information processed by this hospital is securely managed through measures such as encryption. Furthermore, as an administrative measure for the protection of personal video information, this hospital grants differentiated access rights. To prevent falsification or alteration of personal video information, we record and manage the creation date and time, as well as the purpose of viewing, the viewer, and the date and time of viewing. In addition, we have installed locking devices for the safe physical storage of personal video information.