Privacy Policy
Daybeau Clinic ('https://www.daybeauclinic.kr' hereinafter 'Daybeau') online site has established the following processing policy to protect users' personal information and rights in accordance with the Personal Information Protection Act and to smoothly handle users' grievances related to personal information. Daybeau will notify through website announcements (or individual notices) when revising the privacy policy.
Article 1 (Purpose of Processing Personal Information)
Daybeau processes personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent will be taken in accordance with Article 18 of the Personal Information Protection Act.
1. Customer registration confirmation, customer consultation and related information provision
Personal information is processed for the purpose of reservation management and confirmation, complaint handling, and receiving and responding to customer consultations.
2. Member management
Personal information is processed for identity verification, personal identification, prevention of unauthorized use by bad members and prevention of unauthorized access, confirmation of registration intention, age verification, complaint handling, and delivery of notices in accordance with the use of membership services.
3. Service provision
Personal information is processed for the purpose of storing and utilizing treatment history, treatment results, reservation information, sending bills and receipts, and identity verification.
4. Marketing and advertising use
Personal information is processed for the purpose of developing new services (products) and providing customized services, providing events and advertising information and participation opportunities, providing services and posting advertisements according to demographic characteristics, checking service validity, understanding access frequency or statistics on members' service use. (Limited to members who have consented to providing personal information)
Article 2 (Processing and Retention Period of Personal Information)
① Daybeau processes and retains personal information within the personal information retention and use period according to the law or within the personal information retention and use period agreed upon when collecting personal information from data subjects.
② Each personal information processing and retention period is as follows.
1. Online consultation and treatment reservation related information
Retention period: 3 years
2. Service usage records, access logs, access IP information
Retention period: 3 months
3. Treatment history
Retention period: 10 years (Medical Service Act Article 22)
4. Records of consumer complaints or dispute resolution
Retention period: 3 years
5. Website visit records (log records, access records, etc.)
Retention period: 3 months
Article 3 (Provision of Personal Information to Third Parties)
① Daybeau processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases that fall under the Personal Information Protection Act Articles 17 and 18, such as consent of data subjects or special provisions of the law.
② Daybeau provides personal information to third parties as follows.
Recipient of personal information
Purpose of use of personal information by the recipient
Items of personal information provided
Retention and use period of the recipient
Naver Corporation
Marketing utilization
Name, address, phone number, email, gender, date of birth
Upon member withdrawal or termination of consignment contract
Article 4 (Consignment of Personal Information Processing)
① Daybeau consigns personal information processing as follows for smooth personal information handling.
Consignee (Trustee) Content of consigned work
Naver Corporation Reservation reception and management, reservation confirmation text message sending, consultation and marketing
② When signing consignment contracts, Daybeau specifies in writing, such as contracts, matters concerning prohibition of processing personal information other than for the purpose of consigned work, technical and administrative protective measures, restrictions on re-consignment, management and supervision of the consignee, and liability for damages in accordance with Article 25 of the Personal Information Protection Act, and supervises whether the consignee processes personal information safely.
③ If the content of consigned work or the consignee changes, we will disclose it through this privacy policy without delay.
Article 5 (Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them)
① Data subjects may exercise rights such as requesting access, correction, deletion, and suspension of processing of personal information against Daybeau at any time.
② Exercise of rights under Paragraph 1 may be made in writing, by email, or by fax (FAX) in accordance with Article 41 Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and Daybeau will take action without delay.
③ Exercise of rights under Paragraph 1 may be made through an agent such as a legal representative of the data subject or a person delegated authority. In this case, a power of attorney in accordance with Attached Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
④ Requests for access and suspension of processing of personal information may be restricted in accordance with Articles 35 Paragraph 5 and 37 Paragraph 2 of the Personal Information Protection Act.
⑤ If the personal information is specified as a collection target in other laws, deletion cannot be requested for correction and deletion of personal information.
⑥ Daybeau verifies whether the person making the request for access, correction/deletion, or suspension of processing in accordance with the rights of data subjects is the person themselves or a legitimate representative.
Article 6 (Items of Personal Information Processed)
Daybeau processes the following personal information items.
1. Reservation and consultation
Required items: Name, reservation date and time, mobile phone number, gender, date of birth
Optional items: Other inquiries
2. The following personal information items may be automatically generated and collected during internet service use.
IP address, cookies, MAC address, service usage records, visit records, bad usage records, etc.
Article 7 (Destruction of Personal Information)
① Daybeau destroys the personal information without delay when personal information becomes unnecessary due to expiration of the retention period, achievement of processing purpose, etc.
② If personal information must continue to be preserved in accordance with other laws despite the expiration of the retention period agreed upon by the data subject or achievement of the processing purpose, the personal information is moved to a separate database (DB) or stored in a different location.
③ The procedures and methods for destroying personal information are as follows.
1. Destruction procedure
Information entered by users is moved to a separate DB after the purpose is achieved (in case of preservation according to laws) and is destroyed after being stored for a certain period according to internal policies and other relevant laws or immediately.
2. Destruction method
Technical methods that make it impossible to reproduce records are used for information in electronic file format.
Article 8 (Measures to Ensure Safety of Personal Information)
Daybeau takes the following measures to ensure the safety of personal information.
1. Administrative measures
Establishment and implementation of internal management plan, regular employee training, etc.
2. Technical measures
Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
3. Physical measures
Access control to computer rooms, data storage rooms, etc.
Article 9 (Matters Concerning Installation/Operation and Rejection of Automatic Personal Information Collection Devices)
① Daybeau uses 'cookies' that store and retrieve usage information from time to time to provide individualized customized services to users.
② Cookies are small amounts of information sent by the server (http) used to operate the website to the user's computer browser and may also be stored on the user's PC computer hard disk.
a. Purpose of using cookies: Used to provide optimized information to users by identifying visits and usage patterns, popular search terms, secure access, etc. for each service and website visited by users.
b. Installation/operation and rejection of cookies: You can refuse to store cookies through option settings in the Tools > Internet Options > Privacy menu at the top of the web browser.
c. If you refuse to store cookies, you may experience difficulties in using customized services.
10. Personal Information Protection Officer and Manager
To handle matters related to personal information held by Daybeau, please contact the following:
- Name
- 박미정
- Contact
- 02-6325-7771
11. Changes to Privacy Policy
This privacy policy applies from December 1, 2023.