DIGITAL HAPPEACE DENTAL CLINIC (hereinafter "the Clinic") values the personal information of our patients and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection. In accordance with this Privacy Policy, the Clinic informs you of the purposes and manner in which the personal information you provide is used, and the measures taken to protect it. This Privacy Policy is organized as follows. ❑ Items of Personal Information Collected and Collection Methods ❑ Purpose of Collection and Use of Personal Information ❑ Retention and Use Period of Personal Information ❑ Procedures and Methods for Destroying Personal Information ❑ Provision and Sharing of Personal Information ❑ Outsourcing of Personal Information Handling ❑ Rights of Users and Legal Representatives and How to Exercise Them ❑ Withdrawal of Consent / How to Cancel Membership ❑ Installation/Operation of, and the Right to Refuse, Automatic Personal Information Collection Devices ❑ Personal Information Protection Officer ❑ Measures to Ensure the Security of Personal Information ❑ Duty to Notify upon Policy Changes ❑ Items of Personal Information Collected and Collection Methods The Clinic collects only the minimum personal information necessary to provide its services when you register as a member. To use the Clinic's services, there are required and optional items at the time of registration. Optional items, such as whether to receive email notifications, do not need to be entered and will not restrict your use of the service. [Items collected] Name, resident registration number, address, contact information, medical records ※ Unique identification information and medical records must be retained as required by the Medical Service Act (separate consent is not required). [Method of collection] Website (membership registration, consultation board, online reservations, etc.) ❑ Purpose of Collection and Use of Personal Information The Clinic uses the personal information it collects for the following purposes. All information provided by users is used only for the purposes described below, and if the purpose of use changes, the Clinic will obtain your prior consent. [Medical information] Provision of medical services for diagnosis and treatment, and administrative services such as billing, payment, and refunds [Website member information] The website does not provide appointment booking, appointment lookup, or membership-based services; it only handles anonymous online consultations. The Clinic does not send hospital news, health information, or surveys by email, so member information is not used for such purposes. ❑ Retention and Use Period of Personal Information The Clinic destroys your personal information without delay once the purpose of collection or the purpose for which it was provided has been achieved. [Medical information] Retained in accordance with the medical record retention standards specified in the Medical Service Act. [Website member information] The Clinic operates a website that does not require membership registration or withdrawal, so there is no need to enter member information. However, even after the purpose of collection or provision has been achieved, the Clinic may retain your personal information if retention is required under applicable laws, including the Commercial Act. - Records related to consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce) - Records related to the collection, processing, and use of credit information: 3 years (Credit Information Use and Protection Act) – Records related to identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection) – Records related to website visits: 3 months (Protection of Communications Secrets Act) ❑ Procedures and Methods for Destroying Personal Information The Clinic destroys personal information immediately once the [Purpose of Collection and Use of Personal Information] has been achieved. The destruction procedures and methods are as follows. [Destruction procedure] Information entered by users for membership registration, etc. is destroyed immediately after the purpose has been achieved, using the destruction method described below. [Destruction method] Personal information stored in electronic file form is deleted using a technical method that prevents the record from being reconstructed. Personal information printed on paper is destroyed by shredding or incineration. ❑ Provision and Sharing of Personal Information Except with your consent or as required by applicable law, the Clinic does not use your personal information beyond the scope disclosed in [Purpose of Collection and Use of Personal Information], nor does it provide it to any other person, company, or institution. - Submission of medical records to the Health Insurance Review & Assessment Service to claim medical care benefit costs under the National Health Insurance Act - Provision of information processed so that specific individuals cannot be identified, when necessary for statistical compilation or academic research - Submission in response to requests from investigative authorities, in accordance with the procedures and methods prescribed by law ❑ Outsourcing of Personal Information Handling The Clinic does not outsource the handling of personal information. ❑ Rights of Users and Legal Representatives and How to Exercise Them Membership registration for children under the age of 14 (hereinafter "children") is carried out through a separate form written in plain language that is easy for children to understand, and the consent of a legal representative is always obtained when collecting personal information. To obtain the consent of a legal representative, the Clinic collects the minimum necessary information from the child, such as the legal representative's name and contact information, and obtains the legal representative's consent in accordance with the methods set out in this Privacy Policy. A child's legal representative may request to view, correct, or delete the child's personal information. To view, correct, or delete a child's personal information, please click "Edit Member Information" and complete the legal representative verification process, after which the legal representative may directly view, correct, or delete the child's personal information, or contact the Personal Information Protection Officer in writing, by phone, or by fax, and the necessary action will be taken. The Clinic does not provide or share information about children with third parties, and if a legal representative requests correction of an error in personal information collected from a child, the Clinic prohibits the use and provision of that personal information until the error is corrected. ※ Personal information whose retention is legally mandated cannot be modified or deleted within the retention period, even upon request. ❑ Withdrawal of Consent / How to Cancel Membership As this is an open website that does not require membership registration, the collection, use, and provision of personal information through the website is fundamentally not possible. If you wish to have an online inquiry deleted, please contact the Personal Information Protection Officer in writing or by email, and the Clinic will take the necessary action, including destroying your personal information. ❑ Installation/Operation of, and the Right to Refuse, Automatic Personal Information Collection Devices The Clinic uses "cookies" that periodically store and retrieve patients' information. A cookie is a very small text file sent by the server operating the Clinic's website to a patient's browser, and it is stored on the patient's computer hard disk. The Clinic uses cookies for the following purposes. Patients have the right to choose whether to allow cookies to be installed. Accordingly, patients may set their web browser options to accept all cookies, to be prompted for confirmation each time a cookie is stored, or to refuse the storage of all cookies. If you refuse to allow cookies, you may experience some difficulty using certain services. ❑ Personal Information Protection Officer - Officer in charge: Sang-hee Lee, Director - Department: Office of the Director, DIGITAL HAPPEACE DENTAL CLINIC- Contact: 032-362-2896 Patients may report any complaints related to personal information protection that arise while using the Clinic's services to the Personal Information Protection Officer. The Clinic will respond promptly and thoroughly to users' reports. If you need to report or consult about any other infringement of personal information, please contact the organizations below. Personal Information Dispute Mediation Committee (http://www.1336.or.kr / 1336) eTrust Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533~4) Supreme Prosecutors' Office Cyber Investigation Division (http://www.spo.go.kr / (02) 3480-3573) National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330) ❑ Measures to Ensure the Security of Personal Information The Clinic has implemented various security devices as technical measures to protect users' personal information. All information you send is securely stored and managed in a security system protected by a firewall. In addition, as an administrative measure to protect users' personal information, the Clinic has established the procedures necessary for access to and management of users' personal information, and limits the number of personnel who handle users' personal information to a minimum while providing them with ongoing security training. ❑ Duty to Notify upon Policy Changes This Privacy Policy was established on December 15, 2017, and if there are any additions, deletions, or amendments due to changes in laws, policies, or security technology, the Clinic will announce the reasons for and details of such changes on its website at least 7 days before the revised Privacy Policy takes effect. Date of announcement: July 7, 2023 Effective date: July 7, 2023