privacy policy

General rules

Corederm Skin Clinical Trial Institute (hereinafter referred to as the "Company") places great importance on protecting your personal information and complies with the requirements of the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Communications Secrets Protection Act, and other relevant laws.

Corederm Skin Clinical Trial Institute is committed to protecting your personal information by disclosing its personal information handling policy on its website in accordance with the Act on Promotion of Information and Communications Network Utilization and Information Protection.

Corederm Skin Clinical Trial Institute's personal information handling policy contains the following:

1. Protection of user personal information

"Personal information" refers to information about a living individual, such as name, phone number, or image, that can be used to identify the individual (including information that cannot be used on its own to identify a specific individual, but can be easily combined with other information to identify the individual).

Corederm Skin Clinical Trial Institute, Inc., complies with relevant laws and government guidelines to inform you of how your personal information is used and what measures are taken to protect your personal information.

2. Personal information items collected and collection methods

(1) Personal Information Collection Items

1. Corederm Skin Clinical Trial Institute collects the following personal information for purposes such as membership registration, smooth customer consultation, identity verification, notification delivery and confirmation, and confirmation of intent, as well as for providing services (products) and events of Corederm Skin Clinical Trial Institute or its affiliates.

- Required Collection Items: Name, real-name authentication value (i-PIN number for i-PIN members), date of birth, gender, member ID, password, address, home phone number, mobile phone number, and email address.

- Optional Collection Items: Occupation, marital status, wedding anniversary.

2. The following information may be automatically generated and collected during service use or processing:

- IP address, cookies, service usage history, access log, visit date and time

3. The following payment information may be collected during paid service use:

- Credit card payment: Card company name, card number, expiration date

- Bank transfer: Financial institution, account number

4. The following information is collected during product delivery and service use:

- Product recipient and service user name, mobile phone number, and other contact information

5. Additional information may be collected only for users of additional services and event applications.

- Additional personal information collected will be specified on the additional service and event application pages.

(2) Personal Information Collection Methods

Corederm Skin Clinical Trial Institute collects personal information through the following methods:

- Website, Member Information Modification

(3) Consent to Personal Information Collection

Corederm Skin Clinical Trial Institute, Inc., only allows users aged 19 years or older to register as members. Upon registration, users are required to click either the "Agree" or "Disagree" button regarding the membership terms and conditions, Corederm Skin Clinical Trial Institute's privacy policy, the consent form for the provision and use of personal information, or the Terms of Use. Clicking the "Agree" button is deemed consent to the collection of personal information.

Corederm Skin Clinical Trial Institute, Inc., may collect and use personal information without the user's consent in the following cases:

1. Personal information required to fulfill a contract for the provision of information and communication services, for which obtaining consent is clearly difficult due to economic or technical reasons.

2. Personal information required for billing purposes related to the provision of information and communication services.

3. Cases subject to special provisions in this Act or other laws.

3. Provision and sharing of personal information with third parties

Corederm Skin Clinical Trial Institute collects the minimum amount of personal information necessary to provide better quality services, including membership registration and customized services. The company uses the collected personal information for the following purposes:

(1) Membership Management

Identity verification, personal identification, prevention of fraudulent use by delinquent members and unauthorized use, prevention of personal information theft through real-name verification, verification of product usage for rental, membership, and lump-sum payment customers, confirmation of intent to subscribe, age verification, complaint handling, and notification delivery.

(2) Service provision contract performance and fee settlement.

Service provision contract performance and fee settlement. Content provision, delivery of ordered products, delivery of event prizes, purchases and payment, billing, financial transaction identity verification and financial services, and fee collection.

(3) New service development, marketing, and advertising.

Development of new services and provision of customized services, delivery of promotional information such as events, provision of services and delivery of advertisements based on access frequency or statistical characteristics of member service use. The above information includes information that was changed when you registered as well as information that was changed when you modified your information.

4. Sharing and Provision of Personal Information

In principle, the Company does not use or provide personal information to other individuals, companies, or organizations beyond the scope specified in "3. Purpose of Collection and Use of Personal Information." However, the following exceptions apply:

(1) When the user consents to the provision of personal information to a third party

(2) When special provisions exist in other laws

5. Retention and use period of personal information

(1) In principle, users' personal information will be destroyed without delay once the purpose of collection and use of personal information has been achieved. However, the following information will be retained for the period specified below for the reasons stated below:

(2) If retention is required pursuant to relevant laws and regulations, such as the Commercial Act and the Act on Consumer Protection in Electronic Commerce, etc., the Company will retain member information for a specified period of time as stipulated by such laws and regulations. In such cases, the Company will use the retained information solely for the purpose of retention, and the retention periods are as follows:

1. Records related to contracts or subscription cancellations: 5 years

2. Records related to payment and supply of goods: 5 years

3. Records related to consumer complaints or dispute resolution: 3 years

(3) If information and communication services are not used for one year after August 18, 2015, the Company will take necessary measures, such as destroying personal information, in accordance with the Information and Communications Network Act. However, if other laws and regulations stipulate a different retention period or a different retention period is set at the user's request, the Company will take necessary measures, such as destruction, after the specified retention period has elapsed.

6. Procedures and methods for destroying personal information

Corederm Skin Clinical Trial Institute, Inc., in principle, destroys personal information without delay once the purpose of collection and use has been achieved. The destruction procedures and methods are as follows:

(1) Destruction Procedure

1. Information entered for membership registration and other purposes is transferred to a separate database (or, in the case of paper, stored in a separate file cabinet) after the purpose has been achieved. This information is stored for a certain period of time in accordance with internal policies and other relevant laws and regulations for information protection (see Retention and Use Period) and then destroyed.

2. This personal information will not be used for any purpose other than its retention, unless required by law.

(2) Destruction Method

1. Personal information printed on paper is destroyed by shredding or incineration.

2. Personal information stored in electronic files is deleted using a technical method that renders the records unrecoverable.

7. Rights of users and legal representatives and how to exercise them

(1) Users and their legal representatives may view or modify their registered personal information or that of their legal representative at any time, and may also request cancellation of their membership.

(2) To view or modify personal information, click "Change Personal Information" (or "Modify Member Information"). To cancel membership (withdraw consent), click "Cancel Membership." After completing the identity verification process, users can directly view, correct, or cancel their membership.

(3) Please contact the personal information manager in writing, by phone, or by email, and we will take action upon verification.

(4) If a user requests correction of errors in their personal information, the personal information will not be used or provided until the correction is completed. Furthermore, if incorrect personal information has already been provided to a third party, the company will promptly notify the third party of the results of the correction process to ensure the correction is made.

(5) Personal information canceled or deleted at the request of a user or legal representative will be processed in accordance with the provisions of "6. Retention and Use Period of Personal Information" and will be processed so that it cannot be viewed or used for any other purpose.

8. Matters concerning the installation/operation and refusal of automatic personal information collection devices.

The company uses "cookies" to store and periodically retrieve user information to provide customized services. Cookies are small pieces of information sent by the server (HTTP) used to operate the website to the user's computer browser and may also be stored on the hard drive of the user's PC. The company uses cookies for the following purposes:

(1) Purpose of Cookie Use

Cookies are used to analyze the access frequency and visit time of members and non-members, identify user preferences and interests, track user activity, and determine the level of participation in various events and the number of visits, thereby enabling targeted marketing and providing personalized services.

(2) Cookie Installation/Operation and Rejection

Users have the option to choose whether to install cookies. Therefore, users can configure their web browser options to allow all cookies, request confirmation each time a cookie is saved, or reject all cookies.

However, if you reject cookies, you may not be able to use some services that require login.

- Example of cookie settings (Internet Explorer): Tools > Internet Options > Privacy at the top of the web browser.

9. Technical and administrative safeguards for personal information protection

Corederm Skin Clinical Trial Institute, Inc., handles users' personal information and implements the following technical and administrative measures to ensure its security and prevent loss, theft, leakage, alteration, or damage.

(1) Password Encryption

Member ID passwords are stored and managed in an encrypted format, known only to the user (passwords are encrypted one-way). Personal information can only be viewed and modified by the user who knows the password.

(2) Countermeasures against Hacking, etc.

The company makes every effort to prevent personal information from being leaked or damaged by hacking, computer viruses, etc. To protect against personal information damage, the company regularly backs up data and utilizes the latest antivirus software to prevent leakage or damage to users' personal information and data. Furthermore, encrypted communication ensures the secure transmission of personal information over the network. Furthermore, the company uses intrusion prevention systems and other technologies to control unauthorized access from outside sources, and implements all possible technical and administrative safeguards to ensure systemic security.

(3) Minimizing and Training Personal Information Handling Staff

The company limits the handling of personal information to only those in charge. Separate passwords are assigned and regularly updated. We also provide regular training to these staff to emphasize compliance with the privacy policy.

(4) Operation of a Dedicated Personal Information Protection Organization

The company operates a dedicated personal information protection organization to ensure compliance with the privacy policy and ensure immediate corrections if any issues are identified. However, the company assumes no responsibility for any issues arising from the leakage of personal information, such as IDs, passwords, or real-name authentication credentials, due to the user's negligence or internet issues.

(5) Encryption of Personal Identification Information

Personally identifiable information, such as real-name authentication credentials, subscription authentication information, phone numbers, account numbers, and addresses (street address, building number, and apartment number), are encrypted and stored and managed. Therefore, only the user can verify and modify personal information.

(6) Prevention of Forgery and Alteration of Access Records

When a personal information handler accesses the personal information processing system and processes personal information, the access date and time, processing details, etc. are stored and a separate access log is maintained.

10. Personal Information Management Officer

Corederm Skin Clinical Trial Institute values ​​customer opinions very much, and you can report any complaints regarding personal information that arise while using the service to the personal information protection organization.

책 임	이 름	소 속	E-Mail
Personal Information Protection Manager	Kim Eun-jung	Corederm Co., Ltd. Skin Clinical Trial Institute	src@corederm.co.kr

Customers can receive dispute resolution and consultation regarding personal information infringement through the following organizations:

- Personal Information Protection Comprehensive Support Portal: www.privacy.go.kr

- Personal Information Infringement Reporting Center and Dispute Mediation Committee: http://privacy.kisa.or.kr / 118 (without area code)

- Internet Crime Investigation Center: www.spo.go.kr / +82 2-3480-3600

- Cyber ​​Terror Response Center: www.ctrc.go.kr / +82 2-392-0330

11. User Rights and Obligations

Please keep your personal information accurate and up-to-date to prevent any unexpected accidents.

Users are solely responsible for any accidents resulting from inaccurate information. Entering false information, such as stealing someone else's information, may result in the loss of membership with Corederm Skin Clinical Trial Institute or suspension of access to the Corederm Skin Clinical Trial Institute website. Users are responsible for maintaining the security of their ID and password associated with their personal information.

You have the right to have your personal information protected, but you also have the responsibility to protect yourself and not infringe on the information of others. Corederm Skin Clinical Trial Institute will never ask you for your password directly, so please take extra care to prevent your password from being leaked to others. Please be careful not to infringe on the personal information of others, including posts. Failure to fulfill this responsibility and infringing on the information of others may result in punishment under applicable laws and regulations. Be especially careful when accessing the Internet in public places.

Corederm Skin Clinical Trial Institute has appointed a personal information manager and staff member responsible for collecting opinions and handling complaints regarding personal information.

12. Obligation to notify

Any additions, deletions, or revisions to this Privacy Policy will be announced at least seven days prior to the revision through the "Notices" section of the website. However, if there are significant changes to user rights, such as those related to the collection and use of personal information or third-party provision, notice will be provided at least 30 days in advance.
 

Announcement Date: July 29, 2025

Enforcement Date: July 29, 2025