In accordance with Article 30 of the Personal Information Protection Act, Dr. Trionf & Aesthetic (hereinafter referred to as the 'Hospital') establishes and discloses the following personal information processing guidelines to protect the personal information of the data subject and to process the related grievances quickly and smoothly.

Article 1 (Purpose of Processing Personal Information)

The hospital processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following purposes, and if the purpose of use is changed, we will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Home page membership and management
Personal information is processed for the purpose of confirming the intention to join, identifying and certifying oneself by providing membership services, maintaining and managing membership status, implementing a limited identification system, preventing illegal use of services, checking the consent of legal representatives when processing personal information of children under the age of 14, notifying and notifying various kinds of notices and grievances.

2. provision of goods or services
It processes personal information for the purpose of delivering goods, providing services, sending contracts and bills, providing content, providing customized services, personal authentication, age authentication, payment and settlement of charges, and debt collection.

3. the handling of grievances
Personal information is processed for the purpose of confirming the identity of the complainant, confirming the complaint, contacting and notifying for fact-finding, and notifying the results of the processing.

Article 2 (Period of Processing and Retention of Personal Information)

① Hospitals process and retain personal information within the period of use, or the period of use of personal information agreed upon when collecting personal information from the data subject according to the law.
② The processing and retention periods of each personal information are as follows.

1. Subscription and management of website membership: Until withdrawal from the website of the business operator/organization
However, in the following cases, until the end of the relevant reason
1) Where an investigation, investigation, etc. is in progress due to a violation of relevant statutes, until the relevant investigation or investigation is completed
2) In the event of the remaining bond and debt relationship due to the use of the website, until the settlement of the relevant bond and debt relationship

Article 3 (Rights of users and legal representatives and methods of exercising them)

① The data subject may exercise the following personal information protection rights against the company at any time.
1. a request for personal information access
2. Request correction if there is an error, etc
3. Request for deletion
4. Request to stop processing
② The exercise of rights under paragraph (1) may be made to the company in writing, by phone, e-mail, fax, etc., and the company will take action without delay.
③ If the data subject requests correction or deletion of errors in personal information, the company will not use or provide the personal information until the correction or deletion is completed.
④ The exercise of rights under paragraph (1) may be carried out through an agent, such as a legal representative of the data subject or a person who has been delegated. In such cases, a power of attorney under attached Form 11 of the Enforcement Rules of the Personal Information Protection Act shall be submitted.
⑤ The data subject shall not infringe on the personal information and privacy of the data subject himself/herself or others that the company is processing in violation of related laws such as the Personal Information Protection Act.

Article 4 (Personal Information Items to be Processed)

The company is processing the following personal information items.

1. Home page membership and management
Mandatory items : <Name, date of birth, ID, password, address, phone number, gender, email address>
Selections : <Marriage status, areas of interest>

2. In the process of using the Internet service, the following personal information items can be automatically generated and collected.
IP address, cookie, MAC address, service usage record, visit record, bad usage record, etc

Article 5 (Destruction of Personal Information)

① When personal information becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the processing purpose, the company will destroy the personal information without delay.
② If the personal information must be preserved in accordance with other laws and regulations despite the expiration of the personal information retention period agreed by the data subject or the purpose of processing has been achieved, the personal information shall be transferred to a separate database (DB) or stored differently.
③ The procedures and methods for destroying personal information are as follows.
1. a procedure for destruction
The company selects the personal information in which the reason for destruction occurred and destroys the personal information with the approval of the company's personal information protection manager.
2. How to destroy it
The company destroys personal information recorded and stored in the form of electronic files by using methods such as low-level format so that records cannot be reproduced, and the personal information recorded and stored in paper documents is destroyed by grinding or incinerating with a grinder.

Article 6 (Measures to ensure the safety of personal information)

The company is taking the following measures to ensure the safety of personal information.
1. Management measures: Establishment and implementation of internal management plans, regular employee training, etc
2. Technical measures: Management of access rights of personal information processing systems, etc., installation of access control systems, unique identification information Encryption, security program installation, etc
3. Physical measures: Control of access to computer rooms, data storage rooms, etc

Article 7 (Matters concerning the installation, operation, and rejection of automatic personal information collection devices)

① The company uses 'cookie' that stores usage information and calls it from time to time to provide individual customized services to users.
② A cookie is a small amount of information sent by the server (http) used to run a website to the user's computer browser and is also stored on a hard disk in the user's computer.
A. Purpose of use of cookies: It is used to provide optimized information to users by identifying the types of visits and use of each service and website visited by users, popular search terms, security access, etc.
B. Installation, operation, and rejection of cookies: You can deny saving cookies by setting options on Tools>Internet Options>Privacy menu at the top of the web browser.
C. Refusing to save cookies may cause difficulties in using customized services.

Article 8 (Personal Information Protection Officer)

① The company is in charge of handling personal information and designates a person in charge of personal information protection as follows for the handling of complaints and damage relief of information subjects related to personal information processing.

▶ a person in charge of personal information protection
Name: Park Jeong-won
Position: Director
Contact: 02-6237-7773
※ It leads to the department in charge of personal information protection.

▶ Department for receiving and processing requests for personal information access
Department name: Medical department
Person in charge: Park Jeong-won
Contact: 02-6237-7773

② The data subject may contact the person in charge of personal information protection and the department in charge for all personal information protection-related inquiries, complaint handling, damage relief, etc. that occurred while using the company's service (or business). The company will respond to and process the information subject's inquiries without delay.

Article 9 (Request for access to personal information)

The data subject may request the following departments to view personal information under Article 35 of the Personal Information Protection Act. The company will try to ensure that the data subject's request for personal information access is processed quickly.

▶ Department for receiving and processing requests for personal information access
Department name: Medical department
Person in charge: Park Jeong-won
Contact: 02-6237-7773

Article 10 (Method of Relief for Infringement of Rights and Interests)

The data subject can inquire about the following institutions for damage relief and counseling for personal information infringement.

▶ Personal Information Infringement Reporting Center (operated by the Korea Internet & Security Agency)
- Subject matter: Report of infringement of personal information, request for consultation
- Home page: privacy.kisa.or.kr
- Phone: 118 (without country number)
- Address: (58324) 3rd floor Personal Information Infringement Reporting Center, 9 Jinheung-gil, Naju-si, Jeollanam-do (301-2)

▶ Personal Information Dispute Mediation Committee
- Subject matter: Personal information dispute mediation application, collective dispute mediation (civil resolution)
- Home page: www.kopico.go.kr
- Phone: (without country number) 1833-6972
- Address: (03171) 4th floor of the Seoul Government Complex, 209, Sejong-daero, Jongno-gu, Seoul

▶ Supreme Prosecutors' Office Cybercrime Investigation Team: 02-3480-3573 (www.spo.go.kr )
▶ Cyber Safety Bureau, National Police Agency: 182 (http://cyberbureau.police.go.kr )

Article 11 (Enforcement and Change of Personal Information Processing Policy)

This privacy policy will take effect from January 1, 2025.