Privacy policy
Privacy Policy
[Enacted on Sep. 13, 2024]
Benjamin Clinic (hereinafter referred to as the “Hospital”) utilizes members' personal information for the provision of services.
The Hospital complies with relevant laws and regulations, such as the "Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc.", the "Personal Information Protection Act", and guidelines established by relevant organizations. To prevent the abuse of members' precious personal information, the Hospital establishes and operates the following Privacy Policy to clarify the purpose, method, and scope of collecting and using members' personal information.
The Hospital discloses this Privacy Policy on the Hospital's website so that members can view it easily at any time.
Article 1 (Purpose of Processing Personal Information)
The Hospital processes personal information for the following purposes.
1. Member Registration and Management
Confirmation of intent to join as a member, confirmation of being 14 years of age or older, identification for the provision of membership services, maintenance and management of membership qualifications, prevention of unauthorized use of services, various notices and notifications, and handling of civil complaints
2. Provision of Services
Provision of skin solution services, reservation services, consultation services, etc.
3. Handling of Civil Complaints
Member identification, confirmation of complaints, contact for fact-finding, and notification of processing results
4. Utilization for Marketing and Advertising
Personalized advertisements, notices of events and benefits, provision of promotional information, etc.
Article 2 (Items of Personal Information Processed)
The Hospital collects the minimum personal information necessary for the provision of services and does not use the collected information for purposes other than those intended.
The Hospital receives consent by dividing the minimum information essential for the provision of services into mandatory collection information, and information collected to provide specialized services as optional collection information. There are no restrictions on the use of Hospital services even if you do not agree to the optional collection information.
The Hospital does not collect sensitive personal information without the user's explicit separate consent. If it is judged that there is a risk of infringement on privacy because the user's sensitive information is included in the information disclosed during the process of providing Hospital services, the Hospital will post a method to select the possibility of disclosure and non-disclosure of sensitive information on the Hospital website prior to the provision of services so that users can check it.
The personal information items collected by the Hospital upon member registration and service use, the main purposes of their collection and use, and the retention and utilization period are as follows:
1. Member Registration and Management
- Until withdrawal from membership • However, even after withdrawal, it is retained and used for the retention and utilization period according to relevant laws and regulations for handling civil complaints, resolving disputes, and fulfilling legal obligations.
- Even within the retention period, if the user, court, or government agency requests early deletion or destruction of the relevant personal information, we will comply.
2. Use of Skin Solution Services
- Until withdrawal from membership • However, even after withdrawal, it is retained and used for the retention and utilization period according to relevant laws and regulations for handling civil complaints, resolving disputes, and fulfilling legal obligations.
- Even within the retention period, if the user, court, or government agency requests early deletion or destruction of the relevant personal information, we will comply.
3. Use of Reservation Services
- Until withdrawal from membership • However, even after withdrawal, it is retained and used for the retention and utilization period according to relevant laws and regulations for handling civil complaints, resolving disputes, and fulfilling legal obligations.
- Even within the retention period, if the user, court, or government agency requests early deletion or destruction of the relevant personal information, we will comply.
4. Use of Consultation Services
- Until withdrawal from membership • However, even after withdrawal, it is retained and used for the retention and utilization period according to relevant laws and regulations for handling civil complaints, resolving disputes, and fulfilling legal obligations.
- Even within the retention period, if the user, court, or government agency requests early deletion or destruction of the relevant personal information, we will comply.
5. Other Service Usage Records
- Access IP, access logs, used browser, used device, etc.
- Until withdrawal from membership • However, even after withdrawal, it is retained and used for the retention and utilization period according to relevant laws and regulations for handling civil complaints, resolving disputes, and fulfilling legal obligations.
- Even within the retention period, if the user, court, or government agency requests early deletion or destruction of the relevant personal information, we will comply.
Article 3 (Processing and Retention Period of Personal Information)
The Hospital uses members' personal information in a limited manner only during the period from the start of service use to the period the member uses the service. If a member requests the deletion of personal information or withdraws consent to the collection and use of the provided personal information, or if the purpose of collection and use is achieved or the retention and utilization period expires, the personal information of the member will be destroyed without delay. However, personal information is kept for a certain period according to the regulations of relevant laws, and the details are as follows:
1. Records on Display and Advertising: 6 months (E-Commerce Act)
2. Records on Contracts or Subscription Withdrawals, etc.: 5 years (E-Commerce Act)
3. Records on Payment and Supply of Goods, etc.: 5 years (E-Commerce Act)
4. Records on Consumer Complaints or Dispute Handling: 3 years (E-Commerce Act)
5. Service usage records such as access logs and access IP information: 3 months (Protection of Communications Secrets Act)
Article 4 (Procedure and Method of Destruction of Personal Information)
After the purpose of collecting and using personal information is achieved, the Hospital destroys the information without delay.
1. Destruction Procedure
The Hospital destroys personal information whose retention period has elapsed by a method that makes recovery impossible.
2. Destruction Method
Personal information stored in electronic file form is deleted using technical methods that cannot reproduce records, and personal information printed on paper is destroyed by shredding with a shredder.
Article 5 (Provision of Personal Information to Third Parties)
The Hospital does not in principle provide members' personal information to third parties. However, exceptions are made in the following cases:
1. When the member pre-discloses or agrees to third-party provision
2. When a state agency such as a court forces the provision of members' personal information based on statutes
Article 6 (Entrustment of Personal Information Processing)
To improve services, the Hospital entrusts personal information processing as follows, and regulates necessary matters so that personal information can be safely managed upon consignment contracts in accordance with relevant laws and regulations. The retention and utilization period of personal information is until the expiration of the consignment contract, suspension of service use, and the point in time determined by laws and regulations. In addition, if the trustee or the content of the entrusted work changes, we will notify you through this Privacy Policy. If you wish to refuse the entrusted processing of personal information, you can suspend the use of the service through the member withdrawal procedure.
Domestic personal information consignment institutions and details of entrusted work are as follows:
1. Trustee: Lullulab Co., Ltd.
Entrusted work:
A. Operation of AI skin analysis and procedure recommendation system for the performance of skin solution services
B. Integrated server management related to the operation of other hospital services
2. Trustee: [Slow Slow Co., Ltd.]
Entrusted work: Website production and maintenance
3. Trustee: [Tryup Co., Ltd.]
Entrusted work: Electronic charting of information collected through the site and connection with the hospital's offline facilities using it
Overseas personal information consignment institutions and details of entrusted work, etc., are as follows:
1. Trustee: Amazon AWS, etc. (Privacy Policy)
Country: United States
Timing and Method of Transfer: Transmission via network during the course of service use
Entrusted work:
2. Trustee:
Country: United States
Timing and Method of Transfer: Transmission via network during the course of service use
Entrusted work:
Article 7 (Rights and Obligations of Members and Legal Representatives and Methods of Exercise)
The Hospital protects members' rights regarding service use as follows:
1. Members can view and delete their registered personal information at all times. However, in such cases, use of part or all of the services may be restricted.
2. Members can request withdrawal of consent regarding the provision of personal information at any time.
3. If a member requests correction of errors in personal information, the relevant personal information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, the result of the correction will be notified to the third party without delay so that correction can be made.
4. Personal information terminated or deleted at the request of a member or legal representative will be processed in accordance with what is specified in "Retention and Utilization Period of Personal Information" and will not be viewed or used for other purposes.
5. Members may request the Hospital to view, inquire, correct, suspend processing, and delete personal information, and the Hospital will take measures without delay.
6. To protect children's personal information, the Hospital restricts new member registration for children under 14 years of age.
7. Members must not infringe upon the personal information and privacy of others processed by the Hospital in violation of related laws such as the Information and Communications Network Act and the Personal Information Protection Act. In particular, when submitting data to the Hospital, personal information of others must be removed and provided.
Article 8 (Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)
1. The Hospital installs and operates devices that automatically collect personal information, such as ‘cookies’ (access information files), to provide users with a convenient usage environment.
A ‘cookie’ is a very small text file sent by the server to the member's device and stored in the storage space within the member's device. Afterwards, when a member uses the service, the server reads the contents of the cookie stored in the member's device to maintain the member's environment settings and provide customized services.
Members have choices regarding cookie installation. Therefore, members can allow all cookies by setting or options in their device, check each time a cookie is saved, or refuse the saving of all cookies. However, if a member refuses to save all cookies, there may be restrictions on service provision or use may be impossible.
<How allow cookie installation set to whether>
- Chrome: Select Settings menu > Select Show advanced settings > Select Privacy - Content settings > Cookie level settings
- Safari: Preferences > 'Prevent cross-site tracking' and 'Block all cookies'
- In addition, major web browsers such as Firefox and Opera also provide cookie deletion functions.
2. The Hospital may use Google Analytics web log (analysis of user service usage patterns) analysis functions, and in this case, uses de-identified information processed so that individual members cannot be identified. Members can opt out of Google Analytics use.
<How Analytics Google block to>
- https://tools.google.com/dlpage/gaoptout/
Article 9 (Safety Measures to Secure Personal Information)
In handling members' personal information, the Hospital takes the following technical/administrative measures to secure safety to prevent personal information from being lost, stolen, leaked, altered, or damaged:
1. Password Encryption
Members' passwords are encrypted, stored, and managed. Therefore, even if a member forgets their password, it is impossible to check the password, and we adopt a method of issuing a new password after a prescribed identity verification procedure.
2. Strengthening Network Security
The Hospital takes various technical measures to prevent members' personal information from being leaked through abnormal network access such as hacking or computer viruses, and performs constant monitoring of network access.
3. Implementation of Security Training and Designation of Personnel
The Hospital conducts regular security maintenance training on members' personal information for employees, designates personnel in charge of processing members' personal information to secure expertise in personal information processing, and minimizes the risk of personal information leakage.
4. Access and Storage Control
Areas processing and storing personal information are set as security zones to control access only to those with personal information processing authority, and tangible items and electronic records containing personal information are stored in places with locking devices or computers with separate access rights set.
Article 10 (Chief Privacy Officer and Department in Charge)
Officer: Seongmin Noh
Title: Representative Director
Phone Number: 010-7747-0447
Email: sminno@gmail.com
In addition, if you need reporting or consultation regarding a personal information infringement, you can contact the following organizations for help:
Personal Information Dispute Mediation Committee: (Without area code) 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Report Center: (Without area code) 118 (privacy.kisa.or.kr)
Supreme Prosecutors' Office: (Without area code) 1301 (www.spo.go.kr)
Korean National Police Agency: (Without area code) 182 (cyberbureau.police.go.kr)
Article 11 Matters Concerning the Operation and Management of Fixed Video Information Processing Devices
1. The Hospital installs and operates fixed video information processing devices for purposes such as facility safety and management in accordance with Article 25, Paragraph 1 of the Personal Information Protection Act.
2. The installation locations, number of units, and shooting ranges are as follows:.
Installation Location | Number of Units | Shooting Range |
Outside the hospital | 0 units | Outside the entrance |
Inside the hospital | 18 units | Reception desk, corridor, waiting room, consultation room, employee lounge, etc. |
3. The management supervisor and access authorized personnel are as follows:.
Category | Name | Position | Contact |
Management Supervisor | Seongmin Noh | Director | 02-2296-7007 |
Access Authorized Person | Chaewon Lee | Executive Director | 02-2296-7007 |
4. The Hospital entrusts the operation of video information processing devices to S-1 Corporation, and implements measures to protect video information such as encryption and access control through S-1 Corporation's management system.
5. Video information is recorded 24 hours a day, stored in a storage device inside the hospital for 30 days, and permanently deleted by the management system upon expiration of the retention period. However, if necessity is recognized due to a request from the information subject, it can be preserved separately.
6. The Hospital checks video information in a place accessible to the system through S-1 Corporation's management system, and does not operate video information processing devices for purposes other than the installation purpose or utilize video information.
7. If an information subject needs to view or confirm the existence of video information in which they were filmed, they can request this by submitting a document to the Hospital stating their personal information, the scope of necessary video information, and the purpose and grounds for the claim. The Hospital receives and verifies identification documents to confirm the identity of the information subject, reviews whether viewing video information is possible, and takes necessary measures. However, viewing may be denied if viewing is restricted by law or if there is a risk of unjustly infringing on the property and other interests of others.
Article 12 (Changes to Privacy Policy)
If there is an addition, deletion, or modification of the above contents, the Hospital will guide members through the notices of each service at least 7 days before the enforcement date. However, if there are important changes to members' rights, such as the collection and utilization of personal information, or provision to third parties, we will notify you at least 30 days in advance. However, if unavoidable circumstances arise, the prior notice period may not be observed or may be notified afterwards.
Addendum
This policy will take effect from Sep. 13, 2024.
Benjamin Clinic Personal Information Collection and Utilization Consent (General) (Mandatory)
¨ Person collecting and utilizing personal information
- Benjamin Clinic
¨ Purpose of collection and utilization of personal information
- Member registration and management, provision of services, etc.
¨ Items of personal information to be collected
- Name, mobile phone number, email address, password, linkage information when linking SNS accounts (in case of member registration)
- Phone number and all information provided by the member accompanying legal consultation
- Access IP, access logs, used browser
¨ Retention and utilization period of personal information
- Deleted without delay after member withdrawal or termination of service use. However, in cases where there is an obligation to store based on relevant laws and regulations as determined by the Privacy Policy, it is stored for the relevant period
※ You can refuse consent to the collection and utilization of personal information, and service use will be restricted upon refusal.
※ <Check Policy Privacy> [Provide Link]
Benjamin Clinic Advertising & Marketing Utilization Consent (Optional)
Benjamin Clinic processes members' personal information for the purpose of promoting new services, various events, benefit information, products, and services.
Purpose | Collection and Utilization Items | Retention and Utilization Period |
Personalized advertisements, notices of events and benefits, provision of promotional information, etc. | Name, email, mobile phone number, gender, date of birth, address, country, service usage records, information collected automatically by cookies | Destroyed upon withdrawal of consent or member withdrawal |
※ This consent can be canceled at any time.
※ You can refuse consent to the collection and utilization of personal information, and refusal of consent may result in restrictions on the use of related benefits.
※ <Check Policy Privacy> [Provide Link]
Benjamin Clinic Personal Information Collection and Utilization Consent (Sensitive) (Mandatory)
¨ Person collecting and utilizing personal information
- Benjamin Clinic
¨ Purpose of collection and utilization of personal information
- Provision of skin solution services (skin information analysis and personalization) to members
¨ Items of personal information to be collected
- Name, date of birth, gender, country, facial photo, skin-related questionnaire, skin type, skin concerns, email address, mobile phone number, service usage records, recommended procedures
¨ Retention and utilization period of personal information
- Deleted without delay after member withdrawal or termination of service use. However, in cases where there is an obligation to store based on relevant laws and regulations as determined by the Privacy Policy, it is stored for the relevant period
※ You can refuse consent to collection and utilization of personal information, and use of skin solution services will be restricted upon refusal. However, use of other services excluding the skin solution service provided among the services is available.
※ <Check Policy Privacy> [Provide Link]
