Privacy Policy

Venus Clinic Privacy Policy

In accordance with Article 30 of the Personal Information Protection Act, Venus Clinic (hereinafter referred to as "the Clinic") establishes and discloses the following personal information processing policy in order to protect the personal information of data subjects and to handle related complaints promptly and smoothly.

Article 1 (Purpose of Processing Personal Information) The Clinic processes personal information for the following purposes. Personal information being processed shall not be used for any purpose other than those stated below. If the purpose of use changes, the Clinic will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.


  1. Website Membership Registration and Management
    Personal information is processed for the purposes of confirming membership registration intent, identity verification and authentication for providing membership services, maintaining and managing membership status, identity verification under the limited identity verification system, preventing fraudulent use of services, verifying legal guardian consent when processing personal information of children under 14, various notifications, and handling complaints.
  2. Complaint Handling
    Personal information is processed for the purposes of verifying the identity of complainants, confirming complaint details, contacting and notifying for fact-finding investigations, and communicating processing results.

 

Article 2 (Processing and Retention Period of Personal Information)

 

  • 1. The Clinic processes and retains personal information within the retention and use period prescribed by law or within the retention and use period consented to by the data subject at the time of collection.
  • 2. The processing and retention periods for each category of personal information are as follows:

Website membership registration and management: Until withdrawal from the website
However, in the following cases, retention continues until the applicable reason ceases:
1) If an investigation or inquiry due to violation of applicable laws is in progress: until the conclusion of such investigation or inquiry
2) If credit/debt obligations arising from website use remain outstanding: until settlement of such obligations

Service provision: In the following cases, retention continues until the applicable period expires:
1) Records relating to display/advertising, contract details, and fulfillment under the Act on Consumer Protection in Electronic Commerce
- Records of display/advertising: 6 months
- Records of contracts, withdrawal of subscription, payment, and supply of goods: 5 years
- Records of consumer complaints or dispute resolution: 3 years
2) Retention of communication fact confirmation data under Article 41 of the Protection of Communications Secrets Act
- Subscriber telecommunication date/time, start/end times, counterpart subscriber number, usage frequency, originating base station location tracking data: 1 year
- Computer communication, internet log records, access point tracking data: 3 months

 

Article 3 (Rights and Obligations of Data Subjects and Methods of Exercise)

 

  • 1. Data subjects may exercise the following rights related to personal information protection against the Clinic at any time:
    a. Request to access personal information
    b. Request for correction of errors
    c. Request for deletion
    d. Request to cease processing
  • 2. The rights under Paragraph 1 may be exercised against the Clinic in writing, by telephone, email, or fax, and the Clinic will take action without delay.
  • 3. If a data subject requests correction or deletion of errors in personal information, the Clinic will not use or provide the relevant personal information until the correction or deletion is completed.
  • 4. The rights under Paragraph 1 may be exercised through a legal representative or an authorized agent of the data subject. In such cases, a power of attorney in the form prescribed by Annex No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
  • 5. Data subjects must not infringe upon the personal information or privacy of themselves or others processed by the Clinic in violation of the Personal Information Protection Act or other applicable laws.


Article 4 (Categories of Personal Information Processed) The Clinic processes the following categories of personal information:

 

  1. Website Membership Registration and Management
    Required items: Password, nickname, email address
    Optional items: Name, gender, phone number, website URL, blog URL
  2. The following personal information items may be automatically generated and collected during the use of internet services:
    IP address, cookies, MAC address, service usage records, visit records, records of improper use, etc.


Article 5 (Destruction of Personal Information)

 

  • 1. When personal information becomes unnecessary due to the expiration of the retention period, achievement of the processing purpose, or other reasons, the Clinic will destroy the relevant personal information without delay.
  • 2. If personal information must continue to be retained under other laws despite the expiration of the consented retention period or the achievement of the processing purpose, such personal information will be transferred to a separate database or stored in a different location.
  • 3. The procedures and methods for destruction of personal information are as follows:

1. Destruction Procedure
The Clinic selects personal information for which grounds for destruction have arisen and destroys such personal information upon approval of the Privacy Officer.
2. Destruction Method
Personal information recorded and stored in electronic file format on servers is periodically deleted on an annual basis. Any personal information recorded and stored in paper documents is incinerated to prevent exposure.

 

Article 6 (Measures to Ensure Security of Personal Information) The Clinic takes the following measures to ensure the security of personal information:

 

  • 1. Members' personal information is protected by passwords. Only members themselves can know their passwords, and verification and modification of personal information can only be performed by the member who knows the password. Therefore, members should take care not to disclose their passwords to others and should log out immediately and close the web browser after completing their work. Particular caution is required when sharing a computer with others or using one in a public place to prevent personal information from being exposed to others.
  • 2. The Clinic employs security measures to block and protect against external intrusion into the personal information management system in order to prevent loss, theft, leakage, alteration, external attacks, hacking, and other threats. If any issues are identified, corrective action is taken promptly.

 

Article 7 (Privacy Officer)

 

  • 1. The Clinic has designated the following Privacy Officer who has overall responsibility for personal information processing and handles complaints and damage remedies related to personal information processing:

    Privacy Officer
    • Name: Won-Ho Jung
    • Position: Director, Venus Clinic
    • Contact: help@myvenus.co.kr, 032-322-4845

  • 2. Data subjects may direct all inquiries, complaints, and damage remedy requests related to personal information protection arising from the use of the Clinic's services to the Privacy Officer and the relevant department. The Clinic will respond to and process data subject inquiries without delay.

 

Article 8 (Request to Access Personal Information)

 

  • Data subjects may request access to their personal information in accordance with Article 35 of the Personal Information Protection Act. The Clinic will endeavor to process such requests promptly.

    Request to Access Personal Information
    • Name: Won-Ho Jung
    • Position: Director, Venus Clinic
    • Contact: help@myvenus.co.kr, 032-322-4845

Article 9 (Remedies for Infringement of Rights)

 

  • Data subjects may contact the following organizations for damage remedies, consultation, and other matters relating to personal information infringement:

<The following organizations are independent from the Clinic. If you are not satisfied with the Clinic's own complaint handling or damage remedy results, or if you need more detailed assistance, please contact them.>

 

▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
- Scope: Report personal information infringement, apply for consultation
- Website: privacy.kisa.or.kr
- Phone: 118 (no area code required)
- Address: 135 Jungdae-ro, Songpa-gu, Seoul, Korea Internet & Security Agency

▶ Personal Information Dispute Mediation Committee (operated by Korea Internet & Security Agency)
- Scope: Application for personal information dispute mediation, collective dispute mediation (civil resolution)
- Website: privacy.kisa.or.kr
- Phone: 118 (no area code required)
- Address: 135 Jungdae-ro, Songpa-gu, Seoul, Korea Internet & Security Agency

▶ Supreme Prosecutors' Office Cyber Crime Investigation Division: 02-3480-3573 (www.spo.go.kr)

▶ National Police Agency Cyber Terror Response Center: 1566-0112 (www.netan.go.kr)


Article 10 (Changes to the Privacy Policy) 1. This privacy policy is effective as of August 24, 2017.