Scope of collection of personal information

Personal information is information about a living individual that can be used to identify the individual by the name and resident registration number included in the information (even if the information alone cannot identify a specific individual, it can be easily combined with other information) includes those that can be identified by

· Mori Clinic attaches great importance to the protection of your personal information and complies with the personal information protection regulations under the 「Act on Promotion of Information and Communications Network Utilization and Information Protection」 and 「Personal Information Protection Guidelines」 established by the Ministry of Information and Communication. Through the Privacy Policy, Mori Clinic informs you about the purpose and method of using the personal information you provide and what measures are being taken to protect your personal information.

· Mori Clinic discloses the privacy policy on the first screen of the website so that you can easily view it at any time.

· Mori Clinic establishes the necessary procedures to revise the personal information protection policy for continuous improvement of the personal information protection policy. And when revising the privacy policy, a version number is given so that you can easily recognize the revised information.

Consent to collection of personal information

Mori Clinic has prepared a procedure for you to click the “I agree” button or the “I do not agree” button to the contents of the personal information protection policy or terms of use, and if you click the “I agree” button, you You agree to the collection of information.

Purpose of collection and use of personal information

· Personal information is collected for the following purposes.

ㆍName, ID, password: Used for identification process according to membership service use

- E-mail address, phone number: delivery of notices, confirmation of one's own intention, securing a smooth communication path such as handling complaints, and information on new services/new products or events

- Address, phone number: Securing the correct delivery address for invoice and gift delivery

- Resident registration number, address: demographic analysis data (statistical analysis by age, gender, and region of the user chapter)

- Other optional items: Data to provide personalized service

· However, sensitive personal information that may infringe upon users' basic human rights (race and ethnicity, ideology and creed, place of birth and domicile, political orientation and criminal record, health status and sex life, etc.) is not collected.

Collection of personal information by cookies

· What is a cookie?

Mori Clinic uses 'cookies' to store and find information about you from time to time. Cookies are small pieces of information that websites send to your computer browser (Netscape, Internet Explorer, etc.). When you access the website, Mori Clinic's computer reads the contents of the cookie in your browser, finds your additional information on your computer, and provides services without additional input such as your name. Cookies identify your computer, but do not personally identify you. You also have choices about cookies. In the Tools > Internet Options tab at the top of your web browser, you can choose to accept all cookies, send a notification when cookies are installed, or reject all cookies.

Mori Clinic’s cookie operation

Mori Clinic operates cookies for the convenience of users. The information collected through cookies is limited to the member ID of Mori Clinic, and no other information is collected. Member IDs collected by Mori Clinic through cookies are used for the following purposes.

Provide differentiated information according to individual interests

- Analyzing the access frequency or length of stay of members and non-members to identify users' tastes and interests and utilize them for target marketing

-Provide personalized service next time by tracking traces of items you are interested in

- Measures such as service reorganization by analyzing members' habits

- Registration of bulletin board posts

Cookies expire when you close your browser or log out.

Non-Purpose Use and Provision and Sharing to Third Parties

Mori Clinic uses your personal information within the scope notified in 「Purpose of Collection and Use of Personal Information」, and does not use it beyond this range or provide it to others or other companies/organizations. In particular, we will use and provide personal information with care in the following cases.

- Affiliate relationship: In order to provide better service, your personal information may be provided to or shared with affiliates. When providing or sharing personal information, we will inform you in advance who our affiliates are, what items of personal information are provided or shared, why such personal information should be provided or shared, and how long and how protected.

ㆍIf you do not agree, we will not provide or share it with affiliates. When there is a change in the partnership or when the partnership is terminated, the same procedure will be followed to notify or seek consent.

- Consignment processing: In case of consignment processing of user's personal information for smooth business processing, the name of the consigned processing company, the scope of the consigned personal information, the purpose of the consignment processing, the consignment processing process, and the period of maintaining the consignment relationship must be detailed in advance. Notice.

- Sales, mergers and acquisitions, etc.: If the rights and obligations of the service provider are completely succeeded or transferred, the justifiable reasons and procedures will be notified in detail in advance, and the user's option to withdraw consent to personal information is given.

The notification and consent method shall be notified at least 10 days in advance through the notice on the initial screen of the online website and at the same time individually notified at least once through e-mail, etc. Proceed only by those who directly express their intention to provide and share with a third party).

· The following exceptions are made.

- When there is a request from the relevant agency for the purpose of investigation in accordance with the relevant laws and regulations

- When providing to advertisers, partners, or research organizations in a form that cannot identify specific individuals for statistical preparation, academic research, or market research

- When there is a request in accordance with the procedures stipulated in other related laws

- However, even in exceptional cases, when information is provided according to related laws or at the request of an investigation agency, Mori Clinic is operating in principle to notify it. Notification may not be unavoidably due to legal grounds. We will do our best not to provide information indiscriminately against the original purpose of collection and use.

Opening and Correction of Personal Information

· You can view or correct your registered personal information at any time. If you wish to view and correct personal information, click 『Change Personal Information』 to directly view or correct it, or contact the person in charge of personal information management and the person in charge in writing, by phone or e-mail, and we will take action without delay.

· If you request correction of errors in personal information, the personal information will not be used or provided until the correction is completed.

· If incorrect personal information has already been provided to a third party, we will notify the third party of the result of the correction without delay and take measures to correct it.

Withdrawal of consent to collection, use and provision of personal information

· You can withdraw your consent to the collection, use, and provision of personal information at any time through membership registration, etc. To withdraw consent, click “Withdraw from membership” in 『Change information』 on the first screen of the website or contact the person in charge of personal information management in writing, by phone or by e-mail, and we will take necessary measures such as deletion of personal information immediately. If we have taken measures such as withdrawing consent and destroying personal information, we will notify you without delay.

Mori Clinic will take necessary measures to make it easier to withdraw consent (withdrawal of membership) to the collection of personal information than to collect personal information.

Period of retention and use of personal information

· Your personal information will be destroyed when the purpose of collecting or receiving personal information is achieved as follows. However, if it is necessary to retain it for a certain period of time for reasons such as confirmation of the relationship of rights and obligations related to transactions as follows in accordance with the provisions of relevant laws such as the Commercial Act, it is retained for a certain period of time.

- In the case of membership registration information, consent is obtained by specifying the purpose of retention, period, and personal information items in advance, such as when a member withdraws from membership or is expelled from membership.

- Records on contract or subscription withdrawal: 5 years

- Records on payment and supply of goods: 5 years

- Records on consumer complaints or dispute resolution: 3 years

· If you request to view transaction information held with your consent, Mori Clinic will take measures so that you can view and confirm it without delay.

link site

· Mori Clinic may provide you with links to other Mori Clinic's websites or materials. In this case, Mori Clinic does not have any control over the external site and data, so it cannot be held responsible for and cannot guarantee the usefulness of the services or data provided from it. If you click on a link included in Mori Clinic and move to a page on another site, the privacy policy of that site is irrelevant to Mori Clinic, so please review the policy of the newly visited site.

post

· Mori Clinic values your posts and does its best to protect them from falsification, damage, or deletion. However, this is not the case in the following cases.

- Spam-like posts (e.g., lucky letters, 800 million emails, advertisements on specific sites, etc.)

- Posts that damage the reputation of others by disseminating false information for the purpose of slandering others

- Disclosure of other people's personal information without consent

- In order to activate a desirable bulletin board culture, Mori Clinic may delete a specific part or modify it with a symbol and post it when revealing the identity of another person without consent.

- If the content can be moved to a bulletin board with a different topic, the route of movement is disclosed in the post to avoid misunderstandings. - In other cases, it can be deleted after an explicit or individual warning.

· Fundamentally, all rights and responsibilities related to postings rest with the individual author. In addition, information that is voluntarily disclosed through postings is difficult to protect, so please think carefully before disclosing information.

Consignment processing of personal information

· Mori Clinic may entrust the collection, handling, and management of your personal information to an external party for service improvement.

- In the case of entrusting the processing of personal information, we will notify you in advance in writing, by e-mail, by phone or through the website of the trustee, the consignment period, the relationship between the service provider and the trustee, and the scope of responsibility.

- In the case of entrusting the processing of personal information, adherence to the service provider's personal information protection-related instructions through a consignment contract, maintaining the confidentiality of personal information, prohibition of provision to a third party and responsibility in case of an accident, consignment period, termination of processing We will clearly stipulate the return or destruction of personal information in the future and keep the contents of the contract in writing or electronically.

User rights and obligations

· Prevent unexpected accidents by entering your personal information accurately and up to date. Users are responsible for accidents caused by inaccurate information entered by users, and if they enter false information, such as stealing other people's information, membership may be lost.

· In addition to the right to privacy, you also have an obligation to protect yourself and not infringe on the information of others. Be careful not to leak your personal information, including your password, and be careful not to damage other people's personal information, including postings. If you fail to fulfill this responsibility and damage the information and dignity of others, you may be punished under the 「Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc.」.

Advertising information transmission

· Mori Clinic does not transmit advertising information for commercial purposes against your explicit refusal to receive.

· If you have consented to the transmission of e-mails such as newsletters, Mori Clinic takes the following measures in the subject and body of the e-mail so that you can easily recognize it.

- Subject line of e-mail: The phrase (advertisement) may not be displayed in the subject line, and the main content of the e-mail body is displayed.

- The body of the e-mail:

ㆍ Specify the name, e-mail address, phone number and address of the sender to whom you can express your intention to reject the reception.

ㆍ The method by which you can easily express your intention of refusing to receive is specified in Korean and English respectively.

ㆍ Specify the time and content of your consent.

· When sending advertising information by e-mail, etc. for online marketing such as product information guide, Mori Clinic takes measures such as the following in the subject and body of the e-mail so that you can easily recognize it.

- Subject line of e-mail: The phrase (advertisement) or (adult advertisement) is displayed in Korean without spaces at the beginning of the subject line, followed by the main contents of the e-mail body line.

- The body of the e-mail:

ㆍ Specify the name, e-mail address, phone number and address of the sender to whom you can express your intention to reject the reception.

ㆍ The method by which you can easily express your intention of refusing to receive is specified in Korean and English respectively.

· If harmful information is transmitted to youth as follows, the phrase "(Adult Advertisement)" is displayed.

- In the case that each of the following items 1 is expressed in the form of a code, text, image, or sound in the body (even if it is not directly expressed in the body of the e-mail, technical measures have been taken so that the recipient can easily check the contents) case), the phrase "(Adult Advertisement)" is displayed in the subject line of the e-mail.

- Sexual or obscene material that stimulates sexual desire in adolescents (referring to persons under 19 years of age)

-Things that may provoke violent or criminal urges in adolescents

- Stimulates or glorifies the use of drugs and various forms of violence, including sexual violence

- Articles determined and announced as harmful media to juveniles according to the Juvenile Protection Act

- In case of announcing an Internet homepage dealing with each item of Paragraph 4 in the body of an e-mail for commercial purposes, the phrase “(Adult Advertisement)” is displayed in the subject line of the e-mail.

In the case of transmitting commercial advertisement information through text transmission other than e-mail, such as fax or mobile phone text transmission, the word “(advertisement)” shall be written at the beginning of the transmission and the sender’s contact information shall be specified in the transmission. .

duty of notice

· The current personal information protection policy was enacted on February 10, 2002, and if there is any addition, deletion, or modification of the contents according to the change of government policy or security technology, will notify you.

Security measures to protect personal information

・Technical measures

-In handling your personal information, Mori Clinic is taking the following technical measures to ensure safety so that your personal information is not lost, stolen, leaked, altered or damaged.

- Your personal information is protected by a password, and important data is protected through a separate security function by encrypting files and transmission data or using the file lock function.

- Mori Clinic is taking measures to prevent damage caused by computer viruses by using a vaccine program.

- The vaccine program is updated periodically, and in the event of a sudden virus outbreak, it is provided as soon as the vaccine is released to prevent infringement of personal information.

- Mori Clinic employs a security device (SSL or SET) that can safely transmit personal information on the network using a cryptographic algorithm.

- In preparation for external intrusions such as hacking, each server uses an intrusion prevention system and a vulnerability analysis system to ensure security.

· Administrative measures

- Mori Clinic limits access to your personal information to a minimum number of people. Those who fall under the minimum number of people are as follows.

- A person who performs marketing tasks directly with users

- Persons in charge of personal information management, such as the person in charge of personal information management and person in charge

- Persons who are unavoidable in handling personal information for other business purposes

- Regular in-house training and outsourced training are provided for employees handling personal information on acquisition of new security technologies and obligations to protect personal information.

- Internal procedures are in place to prevent information leakage by humans through the security pledge of all employees at the time of joining the company, and to audit the implementation of the personal information protection policy and the compliance of the employees.

- The handover of personal information-related handlers is carried out thoroughly with security maintained, and responsibility for personal information accidents after joining and leaving the company is clarified.

- Personal information and general data are not mixed and kept separately through a separate server.

- Access is controlled by setting the computer room and data storage room as special protection areas.

- Mori Clinic is not responsible for the user's personal mistakes or for any incidents that occur due to the basic internet risk. Each member must properly manage and take responsibility for his/her ID and password in order to protect his/her personal information.

- In the event that personal information is lost, leaked, altered, or damaged due to an internal manager's mistake or an accident in technical management, Who's Who will immediately notify you and take appropriate measures and compensation.

Collecting opinions and handling complaints

· Mori Clinic values your opinions, and you always have the right to receive sincere answers from your questions.

· Mori Clinic operates a complaint handling center for smooth communication with you. The contact information for the complaint handling center is as follows.

【 Complaint handling center 】

- E-mail: hbtopp@naver.com

- Phone number: 02-562-8878

- Address: Room 301, SK Hub Building, 431 Seolleung-ro, Gangnam-gu, Seoul

· Consultation by e-mail, fax or mail will be answered sincerely within 24 hours after receipt. However, in principle, it is processed the next day after working hours or on weekends and holidays.

· If you need advice on other personal information, you can inquire at the Personal Information Infringement Report Center, the Supreme Prosecutors' Office Internet Crime Investigation Center, or the National Police Agency Cyber Terror Response Center.

◑ Personal Information Infringement Report Center

- Phone: 1336

- URL:  http://www.cyberprivacy.or.kr

◑ Supreme Prosecutors' Office Internet Crime Investigation Center

- Tel: 02-3480-3600

- URL:  http://icic.sppo.go.kr

◑ National Police Agency Cyber Terror Response Center

- Tel: 02-392-0330

- URL:  http://www.police.go.kr/ctrc/ctrc_main.htm

Member personal information manager

· Mori Clinic is doing its best to ensure that you can use good information safely. In case of an accident that goes against the notices to you in protecting personal information, the person in charge of personal information management takes all responsibility. However, despite taking technical supplementary measures, we are not responsible for information damage caused by unexpected accidents caused by basic network risks such as hacking, and for various disputes caused by posts made by visitors. The person in charge and person in charge of handling your personal information is as follows, and we respond promptly and faithfully to inquiries related to personal information.

◑ Personal information manager

- Person in charge: Lee Sang-wook

- Tel 02-562-8878

- e-mail :  hbtopp@naver.com