B:AID (hereinafter referred to as "the clinic") values your personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection. Through this Privacy Policy, the clinic informs you of how and for what purpose your personal information is used, and what measures are taken to protect your personal information. If the clinic revises its Privacy Policy, it will notify you through website announcements (or individual notices).

[ Purpose of Processing Personal Information ]
The clinic processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act will be implemented.

1. Contract fulfillment and service provision regarding service delivery
2. Utilization for marketing and advertising
Development and specialization of new services, delivery of promotional information such as events, tracking access frequency, or statistics on member service usage
Collected items: Name, age, phone number
Method of personal information collection: Website (member registration), creating various posts, participating in events
3. When participating in events
Utilization for petite procedure consultation at the clinic (phone, text message)
4. Grievance handling
Personal information is processed for purposes such as verifying the identity of the complainant, confirming complaint details, contacting/notifying for fact-finding, and notifying processing results.


[ Items of Personal Information Processed ]
The clinic processes the following personal information items.

1. Website member registration and management
Required items :

2. When participating in events
Collected items: Name, age, phone number
Method of personal information collection: Website (member registration), creating various posts, participating in events

3. In the course of using internet services, the following personal information items may be automatically generated and collected.
IP address, cookies, MAC address, service usage records, visit records, improper usage records, etc.


[Processing and Retention Period of Personal Information]
① The Company processes and retains personal information within the personal information retention and usage period prescribed by laws and regulations, or the personal information retention and usage period consented to by the data subject when collecting personal information.
② The processing and retention period for each category of personal information is as follows.

1. Website membership registration and management: Until withdrawal from the business/organization website
However, in cases falling under any of the following reasons, until the termination of the relevant reason:
1) If an investigation or inquiry due to a violation of relevant laws and regulations is in progress, until the conclusion of the relevant investigation or inquiry
2) If claims and debt relations remain from website use, until the settlement of the relevant claims and debt relations

In principle, after the purpose of collecting and using personal information has been achieved, the clinic destroys the relevant information without delay.

① Destruction Procedure
The information entered by the member for membership registration, etc., is transferred to a separate database (in the case of paper, a separate filing cabinet) after the purpose is achieved, stored for a certain period in accordance with internal policies and information protection reasons under other relevant laws (refer to the retention and usage period), and then destroyed.
Personal information transferred to a separate database will not be used for any purpose other than being retained unless required by law.
② Destruction Method
Personal information stored in electronic file format is deleted using technical methods that render the records unrecoverable.
Personal information printed on paper is destroyed by shredding with a shredder or by incineration.
Rights of Users and Legal Representatives and How to Exercise Them
Users may view or modify their registered personal information at any time and may also request cancellation of membership. To view or modify personal information, click 'Change Personal Information' (or 'Edit Member Info', etc.), and to cancel membership (withdraw consent), click 'Delete Account' to undergo an identity verification process, after which you can directly view, correct, or withdraw. Alternatively, if you contact the Privacy Officer in writing, by telephone, or by email, we will take action without delay.
If you request correction of errors in your personal information, the personal information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a 3rd party, we will notify the 3rd party of the results of the correction without delay so that the correction is made.
Matters Concerning the Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
The clinic operates 'cookies' that store and retrieve user information from time to time.
Cookies are very small text files sent to your browser by the server used to operate the clinic's website and are stored on your computer's hard drive. The clinic uses cookies for the following
purposes.
① Purpose of Using Cookies, etc.
Analyzing the access frequency and visit duration of members and non-members, identifying user preferences and interests, tracking user activities, and determining event participation levels and visit frequency to provide targeted marketing and personalized services. Users have the option regarding cookie installation. Therefore, users may allow all cookies, require confirmation each time a cookie is saved, or refuse the storage of all cookies by setting options in their web browser.
② How to Refuse Cookie Settings
Example: As a method to refuse cookie settings, users can select options in their web browser to allow all cookies, require confirmation each time a cookie is saved, or refuse the storage of all cookies.
Setting Method
Example (for Internet Explorer): Tools at the top of the web browser > Internet Options > Privacy. However, if the user refuses cookie installation, there may be difficulty in providing services.

Withdrawal of Consent (Account Deletion)
Users may withdraw their consent to the collection, use, and provision of personal information given upon membership registration at any time. To withdraw consent (delete account), while logged in, click Delete Account at the bottom of My Page > Personal Information at the top of the clinic website, undergo a password verification process, and directly withdraw consent (delete account), or contact the Privacy Officer by email, and we will take necessary measures such as destroying the user's personal information without delay.
Management of Personal Information Protection for Children Under 14 Years of Age
When collecting personal information from a child under the age of 14 or providing the child's personal information to a 3rd party, consent is obtained from the legal guardian of the child under the age of 14. For this purpose, the hospital may request minimal information from the child, such as the legal guardian's name, necessary to obtain consent from the legal guardian. The legal guardian may request access to or correction of errors in the personal information provided by the child, and may withdraw consent to the collection of the child's personal information and the provision of the child's personal information to a 3rd party. Access to or correction of errors in personal information, and withdrawal of consent can be processed in Edit Personal Information.

[Rights of Users and Legal Representatives and How to Exercise Them]

① The data subject may exercise the following rights related to personal information protection against the company at any time.
1. Request to inspect personal information
2. Request for correction if there are errors, etc.
3. Request for deletion
4. Request for suspension of processing
② The exercise of rights pursuant to Paragraph 1 may be made to the company in writing, by telephone, e-mail, facsimile (FAX), etc., and the company will take action without delay.
③ If a data subject requests correction or deletion of errors in personal information, the company will not use or provide the relevant personal information until the correction or deletion is completed.
④ The exercise of rights pursuant to Paragraph 1 may be done through a representative, such as the data subject's legal representative or a person authorized by the data subject. In this case, a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
⑤ Data subjects shall not infringe upon the personal information and privacy of themselves or others processed by the company in violation of relevant laws and regulations, such as the Personal Information Protection Act.

[Measures to Ensure the Safety of Personal Information]
The clinic takes the following measures to ensure the safety of personal information.
1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, unique identification information
encryption, installation of security programs, etc.
3. Physical measures: Access control to computer rooms, data storage rooms, etc.

Article 9 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)
① The company uses 'cookies' that store and frequently retrieve usage information to provide individual customized services to users.
② Cookies are a small amount of information sent to the user's computer browser by the server (http) used to operate the website, and may also be stored on the hard disk inside the user's computer.
A. Purpose of using cookies: Used to provide optimized information to users by understanding the visit and usage patterns for each service and website visited by users, popular search terms, secure connection status, etc.
B. Installation, operation, and refusal of cookies: You can refuse cookie storage through option settings in Tools > Internet Options > Privacy menu at the top of the web browser.
C. If you refuse to store cookies, difficulties may arise in using customized services.

[Personal Information Protection Officer]
① The company designates a personal information protection officer as follows to take overall responsibility for personal information processing and to handle complaints and remedy damages of data subjects related to personal information processing.

▶ Personal Information Protection Officer
Name : Nam Ho-seok
Title : Representative Director
Contact : 0507-1343-1985
※ You will be connected to the department in charge of personal information protection.

▶ Personal Information Protection Department
Department: Marketing Team
Contact Person: Kang Yu-jung
Contact : 0507-1343-1985

② Information subjects may contact the Personal Information Protection Officer and the department in charge regarding all personal information protection inquiries, complaint processing, damage relief, etc., that occur while using the company's services (or business). The company will respond to and process information subjects' inquiries without delay.

[Request to Access Personal Information]
Information subjects may request to access their personal information under Article 35 of the Personal Information Protection Act to the department below. The company will endeavor to ensure that information subjects' requests to access personal information are processed promptly.

▶ Department for Receiving and Processing Personal Information Access Requests
Department: Marketing Team
Contact Person: Kang Yu-jung
Contact : 0507-1343-1985

[Remedies for Infringement of Rights and Interests]
Information subjects may contact the following agencies for remedies for damages, consultations, etc., regarding personal information infringement.

▶ Personal Information Infringement Report Center (Operated by Korea Internet & Security Agency)
- Responsibilities: Reporting personal information infringement, applying for consultation
- Website: privacy.kisa.or.kr
- Phone: (Without area code) 118
- Address: (58324) 3F, Personal Information Infringement Report Center, 9 Jinheung-gil, Naju-si, Jeollanam-do (301-2 Bitgaram-dong)

▶ Personal Information Dispute Mediation Committee
- Responsibilities: Application for personal information dispute mediation, collective dispute mediation (civil resolution)
- Website: www.kopico.go.kr
- Phone: (Without area code) 1833-6972
- Address: (03171) 4F, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul

▶ Supreme Prosecutors' Office Cybercrime Investigation Division: 02-3480-3573 (www.spo.go.kr)
▶ National Police Agency Cyber Bureau: 182 (http://cyberbureau.police.go.kr)

[Enforcement and Changes to the Privacy Policy]
This Privacy Policy is effective from 2023. 1. 1.