Privacy Policy

Plan Dental Clinic Seoul | Gangnam Dental Clinic, Sinsa Dental Clinic (hereinafter the “Clinic”) places great importance on the personal information of its customers and will handle it lawfully and appropriately to protect the rights and interests of data subjects. The Clinic complies with the Framework Act on Telecommunications, the Telecommunications Business Act, the Personal Information Protection Act and its Enforcement Decree, and other relevant laws as prescribed.
The Clinic hereby informs you of the purposes and manner in which the personal information you provide is used and of the measures taken to protect personal information.

■ Personal Information We Collect

1. The Clinic collects the following personal information for membership registration, smooth customer consultation and the provision of various services.- Individual Members: name, date of birth, gender, address, age, contact information, mobile phone information, email address- Individual Members under 14: information on the legal representative (resident registration number or i-PIN number, mobile phone information)- Other information: visit information, prescription information, treatment information, card payment approval information such as card issuer name and card number- When participating in events: name, age, contact information, email, address, gender, appointment information, treatment information, consultation history

2. Methods of collecting personal information- Website, written forms, fax, telephone, bulletin boards, email, event participation

3. The following information may be automatically generated and collected in the course of using the Service.- IP Address, cookies, date and time of visit, service usage records, records of improper use

■ Purposes of Collecting and Using Personal Information

The Clinic does not use personal information for any purpose other than the following, and will obtain your consent before processing it if the purpose of use changes.1. Provision of services- Treatment information: providing medical services for diagnosis and treatment and administrative services such as billing, payment and refunds, etc.- Appointment information: used for identity verification when making or checking appointments and using other services, etc.- Consultation information: treatment consultations and guidance for customers by telephone, text message or KakaoTalk, etc.- Other information: securing a smooth channel of communication for news about the Clinic and information on diseases via text message and social media, surveys, handling of complaints, etc.

2. Member managementIdentity verification for use of the Service, individual identification, prevention of fraudulent and unauthorized use by improper Members, confirmation of consent from a legal representative when collecting personal information of children under 14, subsequent identity verification of the legal representative, retention of records fordispute mediation, handling of complaints and civil petitions, delivery of notices, provision of various information for member management, delivery of news, surveys

3. Use for new service development, marketing and advertising- Developing new services and providing customized services, providing event and advertising information and opportunities to participate- If you participate in event promotions or wish to use optional services, the following information may be collected with the Member's separate consent.• Name, age, contact information, email, address, gender, appointment information, treatment information, consultation history• Mobile phone numbers of third parties stored in the contacts of the Member's mobile phone (limited to services with social community features; even in this case, the mobile phone numbers of third parties are not stored)• Credit card number, mobile phone number, ID and password for gift certificate payment partners (limited to Members who use paid services)

4. When participating in events- Used by Plan Dental Clinic for customer consultation (telephone, text message)

■ Processing and Retention Period of Personal Information

The Clinic processes and retains personal information within the retention and use period prescribed by law or the retention and use period agreed to by the data subject at the time of collection. However, even after the purpose of collection or provision has been achieved, the Clinic may retain your personal information if it needs to be preserved under the provisions of laws such as the Commercial Act.
The processing and retention period for each item of personal information is as follows.

1) Website membership registration and management: until withdrawal from the WebsiteHowever, in the following cases, until the relevant reason ends (View details)• If an investigation or inquiry for a violation of relevant laws is in progress, until the investigation or inquiry is concluded- Website visit records• Reason for retention: Protection of Communications Secrets Act• Retention period: 3 months- Records of identity verification• Reason for retention: Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.• Retention period: 6 months- Records of consumer complaints or dispute resolution• Reason for retention: Act on the Consumer Protection in Electronic Commerce, etc.• Retention period: 3 years- Records on the collection, processing and use of credit information• Reason for retention: Credit Information Use and Protection Act• Retention period: 3 years2) Medical services: retained in accordance with Article 15 of the Enforcement Rule of the Medical Service Act, "Retention of Medical Records" (View details)• Patient register: 5 years• Medical records: 10 years• Prescriptions: 2 years• Surgical records: 10 years• Test details and records of test findings: 5 years• Radiographs (including image files) and their reports: 5 years• Copies of medical certificates, etc.: 3 years3) Handling of civil petitions: 3 years after the petition has been resolved

Information such as IP addresses, cookies, service usage records and device information may be generated and collected in the course of using the Service.- Information collected in this way may or may not constitute personal information, depending on factors such as whether it is linked to personal information.

■ Provision to Third Parties and Outsourcing of Personal Information Processing

The Clinic outsources some of the tasks necessary to provide its services to external companies, and stipulates the necessary matters and manages and supervises the contractors so that they process personal information safely in accordance with the Personal Information Protection Act.
If the outsourced tasks or the contractors change, the Clinic will disclose this without delay through this Privacy Policy.

Contractors entrusted with personal information processing by the Clinic and the outsourced tasks• Retention period of personal information: until the outsourcing contract ends

※ Website operation and management, delivery of advertising information such as events, outsourced computer management services, etc.: Plan Dental Clinic (Seoul)

■ Rights and Obligations of Data Subjects and How to Exercise Them

1. Request for access to personal information: You may request access to the personal information files held by the Clinic in accordance with Article 35 (Access to Personal Information) of the Personal Information Protection Act. However, requests for access may be restricted as follows under Article 35(5) of the Personal Information Protection Act.- Where access is prohibited or restricted by law- Where access is likely to harm the life or body of another person or to unfairly infringe on the property or other interests of another person

2. Request for correction or deletion of personal information: For personal information files held by the Clinic, you may request the Clinic to correct or delete your personal information in accordance with Article 36 (Correction or Deletion of Personal Information) of the Personal Information Protection Act. However, deletion cannot be requested where other laws specify that the personal information is subject to collection.

3. Request for suspension of processing of personal information: For personal information files held by the Clinic, you may request the Clinic to suspend the processing of your personal information in accordance with Article 37 (Suspension of Processing of Personal Information, etc.) of the Personal Information Protection Act. In addition, the legal representative of a child under 14 may request the Clinic to provide access to, correct, delete or suspend the processing of the child's personal information.However, a request for suspension of processing may be refused under Article 37(2) of the Personal Information Protection Act in the following cases.- Where there are special provisions in law or it is unavoidable in order to comply with legal obligations- Where it is likely to harm the life or body of another person or to unfairly infringe on the property or other interests of another person- Where the service agreed with the data subject cannot be provided without processing the personal information, making performance of the contract difficult, and the data subject has not clearly expressed an intention to terminate the contract

■ Procedures and Methods for Destroying Personal Information

In principle, the Clinic destroys personal information without delay once its retention period has expired or the purpose of processing has been achieved. However, this does not apply where the information must be preserved under other laws.
The procedures, deadlines and methods of destruction are as follows.

1. Destruction procedureInformation entered by users is destroyed in accordance with internal policies and relevant laws after the retention period has expired or the purpose of processing has been achieved. (See Processing and Retention Period of Personal Information)

2. Destruction deadlineUsers' personal information is destroyed within 5 days from the end of the retention period when the retention period has expired, and, when the personal information becomes unnecessary because the purpose of processing has been achieved or for similar reasons, within 5 days from the date on which its processing is deemed no longer necessary.

3. Destruction methodThe Clinic destroys the personal information it processes using the following methods.- Electronic files: permanently deleted using a method that makes recovery impossible- Records, printouts, documents and other recording media other than electronic files: shredded or incinerated

■ Measures to Ensure the Security of Personal Information

In accordance with Article 29 of the Personal Information Protection Act, the Clinic takes the following technical, administrative and physical measures necessary to ensure security.

1. Establishment and implementation of an internal management planThe Clinic establishes and implements an internal management plan in accordance with Article 29 of the Personal Information Protection Act.

2. Minimizing the designation of personal information handlers and trainingThe Clinic minimizes the designation of personal information handlers and provides regular training in accordance with the internal management plan.

3. Administrative measures- All employees sign a security pledge upon joining to prevent leaks of information by people in advance, and internal procedures are in place to audit the implementation of the privacy policy and employees' compliance with it.- Handovers of duties by personnel processing personal information are carried out thoroughly while maintaining security, and responsibility for personal information incidents after joining and after leaving is clearly defined.

4. Restriction of access to personal informationThe Clinic controls access to personal information by granting, changing and revoking access rights to the database systems that process personal information, controls unauthorized access from outside using intrusion prevention and intrusion detection systems, andrecords the history of granting, changing or revoking rights and keeps those records for at least 3 years.

5. Retention of access records and prevention of forgery or alterationThe Clinic keeps and manages records of access to the personal information processing system (web logs, summary information, etc.) for at least 6 months, and manages the access records so that they are not forged, altered, stolen or lost.

6. Encryption of personal informationUsers' personal information is stored and managed in encrypted form. In addition, separate security functions are used, such as encrypting important data when it is stored and transmitted.

7. Technical measures against hacking, etc.To prevent the leakage and damage of personal information due to hacking, computer viruses and the like, the Clinic installs security programs, updates and checks them regularly, installs its systems in areas where access from outside is controlled, and monitors and blocks access technically and physically.

8. Access control for unauthorized personsThe Clinic maintains a separate physical storage location for the personal information system that stores personal information, and has established and operates access control procedures for it.

■ Privacy Policy Officer

The Clinic designates a Chief Privacy Officer as follows to protect personal information and handle matters related to personal information.

- Name: Choi Young-in- Affiliation: Plan Dental, Seoul- Email: [email protected]

■ Changes to the Privacy Policy

This Privacy Policy applies from its effective date. If any changes are added, deleted or corrected in accordance with laws and policies, the Clinic will, where possible, give notice through announcements from 7 days before the changes take effect.- Date of change: April 8, 2024- Effective date: April 15, 2024

■ Remedies for Infringement of Rights

To obtain remedies for an infringement of personal information, customers may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency (KISA) Privacy Infringement Report Center, etc.For other reports of or consultations on infringements of personal information, please contact the organizations below.- Privacy Infringement Report Center / privacy.kisa.or.kr / 118 (no area code)- Supreme Prosecutors' Office, Cyber Investigation Division / www.spo.go.kr / 1301 (no area code)- Korean National Police Agency, Cyber Security Bureau / police.go.kr / 182 (no area code)

■ View previous versions of the Privacy Policy (Korean)

[Consent to Collection and Use of Personal Information]
Plan Dental Clinic (hereinafter referred to as the 'Clinic') collects and uses personal information of users as follows to provide membership registration, convenient consultation, and medical services.
You have the right to refuse consent to the optional collection and use of personal information.
1. Purpose of Collection and Use: Providing dental consultation services, appointment scheduling, medical care provision, customer inquiry response, and promotional communications.
2. Items Collected: Name, Contact Phone Number, Consultation details.
3. Retention and Use Period: Destroyed immediately upon customer's withdrawal of consent or fulfillment of purpose.
Right to Refuse Consent and Consequences of Refusal:
You may refuse consent to this collection and use of personal information. However, since this consent is essential for providing hospital consultation services, failure to agree will prevent consultation application.
* Matters related to the privacy policy for the Clinic's services follow the Clinic's Privacy Policy ( /policy/privacy/ ).

[Consent to Marketing Use and Advertising Communications]
Plan Dental Clinic (the 'Clinic') wishes to use user information to send notifications, special event information, and procedure guidance via phone or SMS.
1. Purpose of Collection and Use: Introduction of new dental treatments, personalized services, promotional event information, consultation calls and text messages.
2. Items Collected: Name, Contact Phone Number, Consultation details.
3. Retention and Use Period: Destroyed immediately upon withdrawal of consent.
* You have the right to refuse consent to the marketing use of your personal information and to receiving such communications. However, if you refuse, there may be limitations on receiving product and event information, participating in events, and consultations.
* The Clinic, or the outsourced service providers listed in Article 4(1) of the Privacy Policy, may promote the Clinic's services and recommend purchases by phone or text message, and a professional consultant may contact you at the number you entered for consultation.
* Matters related to the privacy policy for the Clinic's services follow the Clinic's Privacy Policy ( /policy/privacy/ ).