TATOA Clinic places great importance on protecting your personal information and complies with the Personal Information Protection Act. This Privacy Policy explains the purposes and methods by which the information you provide is used and the measures taken to protect it. The policy is organized as follows.
| Contents |
|---|
| 1. Personal information collected and collection methods 2. Purposes of collection and use 3. Retention and use periods 4. Destruction procedures and methods 5. Provision and sharing of personal information 6. Outsourced processing of collected information 7. Rights of Users and legal representatives and how to exercise them 8. Withdrawal of consent and membership cancellation 9. Installation and operation of automatic collection tools and how to refuse them 10. Personal Information Manager 11. Security safeguards 12. Notification of policy changes |
Personal information collected and collection methods
TATOA Clinic collects only the minimum personal information necessary for service use at registration. Registration includes required and optional fields; leaving optional fields such as email preferences blank does not restrict service use. [Information collected for website membership] - Required: name, ID, password, nickname, email, contact details (telephone or mobile number), documents verifying foreign nationality (foreign nationals only), address, email preferences, and SMS preferences. - Optional: other information supplied at registration. - The following may be generated and collected automatically during use of the Services or performance of service-related tasks: service usage records, access logs, cookies, and access IP information. [Collection methods] - Website, written forms, fax, telephone, consultation bulletin board, email, and participation in events.
Purposes of collection and use
TATOA Clinic uses collected personal information for the following purposes. Information supplied by Users will not be used beyond these purposes, and prior consent will be sought if the purposes change. [Website member information] - Required: name, ID, password, nickname, email, contact details (telephone or mobile number), documents verifying foreign nationality (foreign nationals only), address, email preferences, and SMS preferences. - Optional: other information supplied at registration. Purposes include clinic news by email, appointment and response notifications by SMS, disease-related information, surveys, participation in events, and other related uses.
Retention and use periods
TATOA Clinic destroys personal information without delay once the purpose of collection or receipt has been fulfilled. [Website member information] - Upon withdrawal or removal from membership. However, information may be retained where required by the Commercial Act or other laws, even after the purpose has been fulfilled. - Consumer complaints or dispute resolution records: 3 years (Act on Consumer Protection in Electronic Commerce). - Credit information collection, processing, and use records: 3 years (Credit Information Use and Protection Act). - Identity verification records: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection). - Visit records: 3 months (Protection of Communications Secrets Act).
Destruction procedures and methods
TATOA Clinic destroys personal information immediately after the stated purposes of collection and use have been fulfilled. Procedures and methods are as follows. [Procedure] - Information entered by Users for membership registration or other purposes is destroyed immediately using the methods below once its purpose has been fulfilled. [Methods] - Information stored in electronic files is deleted using technical methods that prevent recovery. Printed personal information is shredded or incinerated.
Provision and sharing of personal information
Except with your consent or as provided by applicable law, TATOA Clinic does not use your information beyond the notified purposes of collection and use or provide it to other individuals, companies, or organizations. Exceptions include: - Users have given prior consent to disclosure; - Information needed for statistics or academic research is processed so that no individual can be identified; - Submission in response to investigative authorities' requests made through legally prescribed procedures and methods.
Outsourced processing of collected information
TATOA Clinic outsources the processing of personal information as described below to deliver the Services. In accordance with applicable laws, outsourcing agreements specify the measures necessary to manage personal information securely.
The organizations processing personal information on behalf of TATOA Clinic and their assigned tasks are as follows.
| Service provider | Outsourced tasks | Personal information entrusted | Retention and use period |
|---|---|---|---|
| - | - | - | - |
Rights of Users and legal representatives and how to exercise them
Children under 14 (‘Children’) register through a separate form written in language they can easily understand. Consent from a legal representative is always obtained when collecting their personal information. To obtain this consent, TATOA Clinic collects the minimum necessary information from the Child, such as the legal representative's name and contact details, and obtains consent using the methods specified in this policy. A Child's legal representative may request access to, correction of, or deletion of the Child's information. To do so, the representative may select member information editing and complete the legal representative verification procedure, then directly access, correct, or delete the information. Alternatively, they may contact the personal information protection officer in writing, by telephone, or by fax for the necessary action. TATOA Clinic does not provide or share information about Children with third parties. If a legal representative requests correction of an error, use and provision of the information are prohibited until the correction is completed. ※ Information that must be retained by law cannot be amended or deleted during the mandatory retention period, even upon request.
Withdrawal of consent and membership cancellation
You may withdraw your consent to collection, use, and provision of personal information given at registration at any time. To cancel membership, contact the Personal Information Manager in writing, by telephone, or by fax. The clinic will take necessary action, including destruction of your information, without delay.
Installation and operation of automatic collection tools and how to refuse them
TATOA Clinic uses cookies to store and retrieve information from time to time. A cookie is a small text file sent to your browser by the server operating the clinic's website and stored on your computer's hard drive. TATOA Clinic uses cookies for the purposes described here. You may choose whether cookies are installed. Browser settings allow you to accept all cookies, receive a prompt whenever a cookie is stored, or reject all cookies. Refusing cookies may make some services difficult to provide.
Personal Information Manager
To protect your personal information and address related complaints, TATOA Clinic has designated the following Personal Information Manager. [Personal Information Manager] - Position: Corporate representative
- Organization: TTC - Personal Information Manager: Kim Sung-su - Telephone: 031-8044-2025
- Email: sungsukim1223@gmail.com
You may report any personal information protection concerns arising from use of TATOA Clinic's Services to the Personal Information Manager. The clinic will respond promptly and fully. For other reports or advice concerning personal information infringements, contact the following organizations: - Personal Dispute Mediation Committee (http://www.1336.or.kr / 1336) - Information Protection Mark Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533~4) - Supreme Prosecutors' Office Cybercrime Investigation Unit (http://www.spo.go.kr / (02) 3480-3573) - Korean National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330).
Security safeguards
TATOA Clinic maintains various technical safeguards to protect Users' personal information. All information you send is securely stored and managed in a security system protected by a firewall. Administrative safeguards include procedures for access to and management of personal information, limiting the number of personnel handling it, and providing ongoing security training. The clinic also designates users of systems that process personal information, assigns user passwords, and will update them regularly.
Prohibition of Unauthorized Email Harvesting
TATOA Clinic carefully protects your email information. Unauthorized collection of email addresses posted on this page using email harvesting programs or other technical means is prohibited. Please note that violations may result in criminal penalties under the Information and Communications Network Act.
Notification of policy changes
This Privacy Policy was established on February 1, 2025. If provisions are added, deleted, or amended due to changes in laws, policies, or security technology, TATOA Clinic will announce the reasons and details on its website at least 7 days before the amended policy takes effect. Announcement date: February 1, 2025. Effective date: February 1, 2025.