Make a Reservation

Ppeum Clinic (hereinafter referred to as "The Company") attaches great importance to the protection of personal information and does its best to ensure that any personal information provided to us by our users in using our site or services, is protected. The "Personal Information Protection Act" lays out general guidelines for the handling of such personal information, and we collect information in accordance with the provisions set forth by these laws and regulations. We will handle the personal information that we hold and process lawfully and appropriately in order to properly carry out business affairs and we protect the rights and interests of the subjects of any information that we collect.

In addition, the Company respects the rights and interests of the information subject such as their right to request access to, correct, delete or suspend information processing in accordance with relevant laws and regulations. The information subject may request administrative actions as prescribed by the Administrative Appeals Act in the event of infringement of the rights and interests.

In order to protect the personal information, rights, and interests of the information subject in accordance with the Personal Information Protection Act, and to facilitate the handling of any grievances related to personal information brought forth by the information subject, we will notify you via notice on our homepage, or directly, if there are any changes to the Privacy Policy.

Article 1: Collected Personal Information and Collection Methods

When collecting personal information, we will notify you in advance of the scope and purpose of collection in accordance with relevant laws and regulations and as stated in the Terms and Conditions of Use. Details of the collection of personal information are as follows:

Online consultation, items to be collected at the time of booking

• • Collected information: Name, ID, password, mobile phone number, access log, cookies, IP address
• • Methods of collection of personal information: Consultations when making appointments

Items to be collected when registering for membership on the website

• • Items to be collected: Name, ID, password, place of residence, mobile phone number, email, access log, cookie, access IP information
• • Method of collecting personal information: The following information may be automatically generated and collected during the process of using the website (membership) service or in the process of handling the business of providing the service.
• • Service usage records, access logs, cookies, access IP information

Items to be collected at the time of visit

• • Required items: Name, resident registration number, address, telephone number, mobile phone number, e-mail, marital status, visit route, alien registration number (for foreigners only)
• • Health information: Personal information deemed necessary by medical staff to provide medical services, such as medical and family history, etc.

Items to be collected when storing payment information

• • When paying by credit card: Card payment authorization information, such as the name of the cardholder, card number, etc.

Mediums of collection of personal information

• • Website, written forms, faxes, phone calls, consultations, e-mails, etc.

Article 2: Purpose of Collection and Use of Personal Information

All information provided by the user will not be used for any reason other than those necessary for the following purposes, and prior consent will be sought if the purpose of use is changed. We collect personal information for the following purposes:

• • Diagnosis and treatment
• • Identification protocol for medical treatments and examinations, appointment bookings, and appointment inquiries
• • Services such as billing, storage, and refunds
• • Sending bills, statements, certificates, products, and results
• • Online/offline inspection outsourcing, external inspection requests
• • Securing channels of communication to assist in the handling of complaints, grievances, etc.
• • Quality assurance of medical services, legal and administrative responses, and hospital operations
• • Minimal analytical data required for education and research
• • Provision of information for marketing purposes, location specific promotional events, new services, social media announcements, text messages, emails, KakaoTalk channels and notifications, and phone calls.
• • Medical information, academic information, and hospital information

Article 3: Provision and Sharing of Personal Information

How We Use Personal Information

• • For patient identification, booking appointments for treatment, cancellations, etc.
• • Clinic Information, new services, promotional events, etc.
• • Text messages guidance related to treatments, appointments reservation, etc.
• • Items of personal information to be provided: Name, ID, password, gender, mobile phone number, e-mail, residence

Period of Information Retention

• • The retention period of personal information is the same as that of the information collection organization. However, in the event of termination of contract with a personal information collection institution, the patient has the right to refuse consent.
• • If consent is refused, the patient may not be able to make an appointment and the patient's convenience and satisfaction may be affected.

Article 4: Provision of Personal Information to Third Parties

The Company shall only process personal information within the scope specified in "Article 1: Collected Personal Information and Collection Methods" and provide personal information to third parties only in the event of prior consent by the user, or as specified under relevant laws and regulations.

Source	Purpose of Information Provision	Required Fields	Retention Period
Genius	To provide medical consultations and information regarding new services and promotional events	Name, password, areas of interest, contact information, age, gender, KakaoTalk ID	Until a request to withdraw consent has been made

Information provided to third parties without prior consent as stipulated by relevant laws:

• • Non-personally identifying information necessary for statistical purposes, academic research, or market research.
• • Requests made by government agencies in accordance with relevant laws
• • Criminal investigations or a request from the Information and Communication Ethics Committee
• • Any other requests that are made in accordance with relevant laws

Article 5: Entrustment of Personal Information Processing

In order to be able to provide business in a smooth manner, and provide better service and convenience for customer, the Company entrusts personal information to several third party information processing businesses as follows:

Trustee	Purpose of Entrusted Information	Entrusted Personal Information	Trustee Period
CareLabs co., Ltd.	Database management	Name, hospital registration number, date of birth, etc.	Until contract expiry
EnableSoft co., Ltd.	Database management	Name, hospital registration number, date of birth, etc.	Until contract expiry
Jeonneung IT co., Ltd	Database management	Name, hospital registration number, date of birth, etc.	Until contract expiry
Sungmin Networks co., ltd.	Database management	Name, hospital registration number, date of birth, etc.	Until contract expiry
TNH co., ltd.	Database management	Name, hospital registration number, date of birth, etc.	Until contract expiry
Genius	Website development and operation, services and promotional events	Name, hospital registration number, date of birth, etc.	Until contract expiry

Article 6: Period of Data Retention and Use of Personal Information

After the purpose of collection and use of personal information has been achieved, the information will be destroyed without delay. However, some of the information may be retained for a specified period for the following reasons:

• • Items to be preserved: Name, gender, login ID, password, home telephone number, mobile phone number, e-mail
• • Basis for retention: Article 15 of the website's Terms of Use/Implementation Rules of Medical Law (Preservation of Medical Records)
• • Retention period: Destruction upon withdrawal of membership / Medical records for 10 years, but even if the purpose of collection or the purpose for which it was provided is achieved, we may retain your personal information if it is necessary to preserve it in accordance with the provisions of laws and regulations such as the Commercial Law.

Article 7: Destruction of Personal Information

After the purpose of collection and use of personal information has been fulfilled, the information will be destroyed. The procedure and method of destruction are as follows:

Destruction procedure

The information entered by the user for membership registration, etc., shall be destroyed immediately after the purpose has been achieved, by the destruction methods listed below.

Method of destruction

Personal information stored in the form of electronic files is deleted using technical methods which make it impossible to reproduce or recover the information. Personal information printed on paper is shredded or incinerated.

Article 8: Rights of Users and Their Legal Representatives and How to Exercise Them

When the company is requested to access, correct, or delete personal information, the company shall respond faithfully to the customer's request and handle it without delay. In order to protect personal information, we do not provide methods to view, correct, or delete personal information by telephone, mail, fax, or any methods other than visiting our company physically.

Viewing Personal Information

Customers may request access to their personal information by visiting the company, in which we will respond promptly.

Correction and Deletion of Personal Information

• • If a customer requests the correction or deletion of personal information, the company shall correct or delete the personal information without delay. If it is deemed necessary to correct or delete the personal information, such as if it is found that there is an error, we may request evidence supporting the corrections or deletions.
• • If the customer requests access to, or correction or deletion of his/her personal information, an identity document such as a resident registration card, passport, driver's license, etc., indicating the identity of the customer, must be used to confirm their identity.
• • If we have a legitimate reason to refuse to view, correct or delete all or part of your personal information, we will notify you and explain our reasoning.
• • The legal representative of a child under the age of 14 may request access, correction, deletion or suspension of processing of the child's personal information, and must provide proof of their relationship to the child, their name, and some form of identification.

※Personal information that is obliged to be stored by law cannot be modified or deleted within the storage period even if requested.

Article 9: Withdrawal of Consent

You may withdraw your consent to the collection, use and provision of your personal information at any time when you register as a member. To withdraw your consent (Withdrawal of membership), please click "Cancel Membership" on found in the "My Page" section of our site and go through the identity verification process and withdraw your consent, or you may contact the personal information manager by phone, fax, or written request. We will then take the necessary measures to destroy your personal information as requested.

Article 10: Cookie Policy

On occasion, the Company uses "Cookies" to store and retrieve user information to provide customized services. A cookie is a small amount of information that a website transmits to a user's internet browser and is stored on the device's hard disk.
We use cookies for the following purposes:

• • To analyze user visit frequency and visit time, and identify user tastes and areas of interest for the purposes of service reorganization.
• • To obtain data about user's areas of interest in relation to promotional events held by our company.

Accepting cookies is optional. You may elect to accept all cookies, accept cookies on a case by case basis, or refuse all cookies, by setting the option to do so in your web browser. If one chooses to accept cookies, there may be difficulties in providing some services.

Article 11: Personal Information Protection Officer

The company has established security measures for the protection of users' personal information.
All information provided by the user is protected and managed by security software tools such as firewalls. In addition, as an administrative measure to protect user information, the company has established protocols for access to or management of user information, and has implemented security measures such as limiting the number of people who process users' personal information. Our system managers also regularly update passwords to keep personal information secure.

Article 12: Notification of Policy Changes

This privacy policy is subject to change as a result of changes to applicable laws and guidelines or changes to our internal operating policies.
If our "Privacy Policy" changes, we will notify you via our homepage (https://www.ppeum.com).

Clinic Location	Personal Information Protection Officer	Contact Number	Implementation Date
Gangnam (Sinnonhyeon)	Jeong Heon-jin	02-593-3344	11/28/2016
Sinsa	Han Yong-un	02-546-1800	04/26/2017
Ilsan	Lee San-ha	031-915-3225	11/15/2018
Hongdae	Park Han-sol	02-322-3366	05/23/2017
Suwon	Baek Kyung-don	031-253-8833	06/19/2017
Gangnam	Cho Han-yong	02-535-2205	01/11/2018
Bundang	Yongjin Jung	031-703-3010	03/29/2018
Incheon	Kang Dong-han	032-439-3008	03/09/2018
Beomgae	Seo Ji-hoon	031-476-9888	05/18/2018
Cheonho	Lee Jin-soo	02-471-4010	08/03/2018
Bupyeong	Kim Jeong-hyuk	032-505-3010	09/28/2018
Myeongdong	Jeong Jin-goo	02-752-8887	11/23/2018
Keondae	Park Hwon-ham	02-467-1177	12/12/2018
Ansan	Ha Ui-yeon	031-402-7717	05/18/2018
Busan	Seon Kyung-kyung	051-807-3400	12/30/2019
Daegu (Jungang Road)	Kim Jeong-hong	1644-3997	06/01/2020
Nowon	Choi Sun-wook	02-518-5020	07/18/2020
Dongtan	Kim Kyung-tae	031-377-7050	08/17/2020
Suwon Station	Kang Seok-hoon	031-248-9110	10/26/2020
Seoul National University Station	Go Myeong-jin	02-875-9930	12/01/2020
Daegu (Dongseong Road)	Jin Ho-seong	053-716-3996	12/18/2020
Jamsil	Kim Seung-beom	02-564-8881	01/04/2021
Daejeon	Kim Bo-young	042-487-3888	06/02/2021
Cheonan	Byeon Je-ik	041-557-8898	06/15/2021
Jeju	Joo Dong-jun	064-900-2600	07/08/2021

*Effective as of: 10/26/2020
If you need to report or inquire about other personal information infringements, please contact the following organizations:

1. Personal Dispute Mediation Committee (www.1336.or.kr/1336)
2. Information Protection Mark Certification Committee (www.eprivacy.or.kr/02-580-0533~4)
3. Supreme Prosecutor's Office Internet Crime Investigation Center (http://icic.sppo.go.kr/02-3480-3600)
4. National Police Agency Cyber Terror Response Center (www.ctrc.go.kr/02-392-0330)

Image Information Processing Operation and Management

The purpose of this section is to provide information regarding the purpose for and method of use of image information processed by the Company.

Article 1: Purpose for Installation of CCTV Cameras

In accordance with Article 25 (1) of the Personal Information Protection Act, we install and operate CCTV cameras for the following purposes:

• • Facility security and fire prevention
• • Crime prevention and for the safety of our customers

Article 2: Number of CCTV Camera Installations and Camera Locations

The number of CCTV cameras, as well as their locations are as follows:

Clinic Location	Number of CCTV Cameras	Locations
Gangnam (Sinnonhyeon)	47	Entrance, lobby, desk, waiting room, consultation room, entrance to the treatment room, treatment room, laser room, management room, nurse's room, director's room, powder room, staff room
Sinsa	25	Treatment room, counseling room, waiting room, nurse's room, multi-person management room, staff room
Ilsan	8	Building lobby and hallway, entrance, etc.
Hongdae	8	Waiting room, entrance and hallway
Suwon	4	Lobby and staff room
Gangnam	8	Building lobby and hallway, entrance, etc.
Bundang	10	Lobby and consultation room, hallway, management room, staff room
Incheon	4	Lobby and staff room
Beomgae	10	Lobby and staff rooms, hallways, consultation rooms
Cheonho	4	Lobby and staff room, hallway
Bupyeong	4	Lobby and staff room, etc.
Myeongdong	11	Waiting room, hallway, elevator, etc.
Keondae	12	Building lobby and hallway, waiting room, consultation desk, etc.
Ansan	10	Lobby and staff rooms, hallways, consultation rooms
Busan	4	Lobby and staff room
Daegu (Jungang Road)	64	Lobby and staff room, hallways, entrances, etc.
Nowon	16	Lobby and staff room
Dongtan	5	Lobby and staff room, consultation room, waiting room
Suwon Station	4	Lobby and staff room
Seoul National University Station	16	Lobby and staff room, waiting room, consultation room, entrance, hallway
Daegu (Dongseong Road)	50	Entrance, lobby, consultation room, waiting room, hallway, treatment room, staff room
Jamsil	16	Entrance, lobby, waiting room, consultation room, treatment room, management room, powder room, etc.
Daejeon	36	Lobby and staff room, consultation room, waiting room, entrance, etc.
Cheonan	8	Lobby and staff hallway, consultation room, waiting room, hallway
Jeju	29	Desk, aisle, consultation room, skin care room, laser room, treatment room, recovery room, staff room, director's room, dining room, etc.

Article 3: Managers in Charge of Personal Information Protection and Data Access Information

In order to protect individual's image data and be able to handle complaints related to this data, the company has appointed a Personal Information Protection Officer at each clinic location as listed below:

Clinic Location	Personal Information Protection Officer	Contact Number	Implementation Date
Gangnam (Sinnonhyeon)	Jeong Heon-jin	02-593-3344	11/28/2016
Sinsa	Han Yong-un	02-546-1800	04/26/2017
Ilsan	Lee San-ha	031-915-3225	11/15/2018
Hongdae	Park Han-sol	02-322-3366	05/23/2017
Suwon	Baek Kyung-don	031-253-8833	06/19/2017
Gangnam	Cho Han-yong	02-535-2205	01/11/2018
Bundang	Yongjin Jung	031-703-3010	03/29/2018
Incheon	Kang Dong-han	032-439-3008	03/09/2018
Beomgae	Seo Ji-hoon	031-476-9888	05/18/2018
Cheonho	Lee Jin-soo	02-471-4010	08/03/2018
Bupyeong	Kim Jeong-hyuk	032-505-3010	09/28/2018
Myeongdong	Jeong Jin-goo	02-752-8887	11/23/2018
Keondae	Park Hwon-ham	02-467-1177	12/12/2018
Ansan	Ha Ui-yeon	031-402-7717	05/18/2018
Busan	Seon Kyung-kyung	051-807-3400	12/30/2019
Daegu (Jungang Road)	Kim Jeong-hong	1644-3997	06/01/02020
Nowon	Choi Sun-wook	02-518-5020	07/18/2020
Dongtan	Kim Kyung-tae	031-377-7050	08/17/2020
Suwon Station	Kang Seok-hoon	031-248-9110	10/26/2020
Seoul National University Station	Go Myeong-jin	02-875-9930	12/01/2020
Daegu (Dongseong Road)	Jin Ho-seong	053-716-3996	12/18/2020
Jamsil	Kim Seung-beom	02-564-8881	01/04/2021
Daejeon	Kim Bo-young	042-487-3888	06/02/2021
Cheonan	Byeon Je-ik	041-557-8898	06/15/2021
Jeju	Joo Dong-jun	064-900-2600	07/08/2021

Article 4: Video Data Recording and Retention Period

CCTV camera recording periods, data retention periods, and storage location of video data are as follows:

Clinic Location	Recording Period	Retention Period	Storage Location
Gangnam (Sinnonhyeon)	24 hours	14 days	Server Room
Sinsa	Within operating hours	14 days	Server Room
Ilsan	Within operating hours	14 days	Server Room
Hongdae	24 hours	14 days	Server Room
Suwon	Within operating hours	14 days	Server Room
Gangnam	Within operating hours	14 days	Server Room
Bundang	Within operating hours	14 days	Server Room
Incheon	Within operating hours	14 days	Server Room
Beomgae	Within operating hours	14 days	Server Room
Cheonho	Within operating hours	14 days	Server Room
Buypyeong	Within operating hours	14 days	Server Room
Myeongdong	Within operating hours	14 days	Server Room
Keondae	24 hours	14 days	Server Room
Ansan	Within operating hours	14 days	Server Room
Busan	Within operating hours	14 days	Server Room
Daegu (Jungang Road)	Within operating hours	14 days	Server Room
Nowon	Within operating hours	14 days	Server Room
Dongtan	Within operating hours	14 days	Server Room
Suwon Station	Within operating hours	14 days	Server Room
Seoul National University Station	Within operating hours	14 days	Server Room
Daegu (Dongseong Road)	Within operating hours	14 days	Server Room
Jamsil	24 hours	14 days	Server Room
Daejeon	24 hours	14 days	Server Room
Cheonan	24 hours	14 days	Server Room
Jeju	Within operating hours	14 days	Server Room

Article 5: Verifying Personal Video Information

• • How to confirm: You can check with the person in charge of video information management by visiting our offices with advance notice.
• • Confirmation location: Server room

Article 6: Video Data Viewing Requests

The subject of video information may request to view their video information from the video information operator at any time in order to confirm the existence of or delete the aforementioned information. However, this is limited to the personal video information relevant to the subject and personal video information that is immediately relevant to their person be it for their body or property interests.
The company will take necessary measures in the event of a request to view,
confirm the existence of, or delete a video or image containing personal information. However, in spite of a request to view information, etc., a request may be refused in the following cases, and in these cases, the reason for refusal, and the method of objection shall be submitted to the subject in writing within 10 days.

• • When personal image information has been destroyed because the data retention period has ended.
• • In cases where there is a justifiable reason to reject the request of the video information subject.

Article 7: Video Data Safety Protocol

Any video data processed by the company is stored securely and encrypted. In addition, the company grants different access rights for personal information as an administrative measure for the protection of personal image information and records and manages video metadata and the date and time of viewing the data in order to prevent tampering. In addition, the information is stored in a locked facility for safe physical storage.

Article 8: Notification of Policy Changes

If there are any additions, deletions or modifications to the contents of this policy due to changes in laws, policies or security technology, we will notify you of the reasons for these changes and the extent of the changes via our homepage at least 7 days before implementation.
*Effective as of: 10/26/2020
If you need to report or inquire about other personal information infringements, please contact the following organizations:
1. Personal Dispute Mediation Committee (www.1336.or.kr/1336)
2. Information Protection Mark Certification Committee (www.eprivacy.or.kr/02-580-0533~4)
3. Supreme Prosecutor's Office Internet Crime Investigation Center (http://icic.sppo.go.kr/02-3480-3600)
4. National Police Agency Cyber Terror Response Center (www.ctrc.go.kr/02-392-0330)