This English version is a translation provided for your convenience. The Korean original is the governing version; if there is any inconsistency between this translation and the Korean original, the Korean original prevails. View the Korean original
OAKS Dental Clinic (옥스치과의원; hereinafter the “Clinic”) processes personal information lawfully and manages it securely in compliance with the Personal Information Protection Act and other relevant laws and regulations, in order to protect the freedom and rights of data subjects. Accordingly, pursuant to Article 30 of the Personal Information Protection Act, the Clinic establishes and discloses this Privacy Policy as follows, to inform data subjects of the procedures and standards for the processing of personal information and to handle related grievances promptly.
This Policy applies to personal information collected and processed through the Clinic’s website (https://oaksdental.kr). Medical information, such as medical records prepared or generated while you visit and receive treatment at the Clinic, is managed separately in accordance with the Medical Service Act and other relevant laws.
The Clinic collects and processes the following personal information to the minimum extent necessary to provide its services.
The Clinic’s website currently does not operate an online consultation request form that asks for your name, contact details or similar information. Treatment inquiries and appointments are received by the main phone line (02-555-6633), and when you contact us by phone, information is checked only to the extent you tell us during the call.
The Clinic does not use the collected personal information for purposes other than those stated above, and if the purposes of processing change, the Clinic will take the necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
The Clinic processes and retains personal information within the retention and use period prescribed by law or the retention and use period consented to by the data subject, and destroys it without delay once the purposes of processing have been achieved.
| Category | Retention and use period |
|---|---|
| Automatically collected information, such as website access records | 1 year from the date of collection |
| Member information (when the membership registration function is used) | Until withdrawal of membership |
However, where other laws prescribe an obligation to retain information, it is retained for the period prescribed by those laws, and in this case the retained personal information is not used for any purpose other than retention. If a data subject requests deletion before the retention period expires, the request is processed without delay in accordance with Article 10.
The Clinic outsources personal information processing work as follows for the smooth provision of its services. When concluding an outsourcing contract, the Clinic specifies in the contract, in accordance with Article 26 of the Personal Information Protection Act, matters concerning the prohibition of processing for other purposes, technical and managerial protective measures, restrictions on re-outsourcing, management and supervision of the outsourcee, and responsibilities such as compensation for damages, and it supervises whether the outsourcee processes personal information safely.
| Outsourcee | Details of outsourced work | Outsourcing period |
|---|---|---|
| METALINK Co., Ltd. (주식회사 메타링크) | Website development, operation and maintenance, and data storage (server operation) | Until the outsourcing contract ends or the personal information is destroyed |
| Hanbeon Marketing (한번 마케팅) | Support for website operation on the Clinic’s behalf (website management through the administrator screen) | Until the outsourcing contract ends or the personal information is destroyed |
If the details of the outsourced work or the outsourcee change, the change will be disclosed through this Privacy Policy without delay.
The Clinic transfers (stores) personal information overseas as follows in order to provide its website services.
| Category | Details |
|---|---|
| Recipient | Akamai Technologies, Inc. (cloud server hosting) |
| Country of transfer | Japan |
| Time and method of transfer | Transmitted through the information and communications network when the website is used, and stored on servers located in that country |
| Items of personal information transferred | All items collected under Article 1 of this Policy (Items of Personal Information Processed and Methods of Collection) |
| Recipient’s purpose of use | Website hosting and service provision (server operation) |
| Retention and use period | In accordance with Article 3 of this Policy (Retention and Use Period of Personal Information) |
Data subjects may refuse the overseas transfer of personal information; however, in that case, use of the website services may be restricted.
The Clinic does not use the personal information of data subjects beyond the scope specified in Article 2 or provide it to third parties, except in the following cases.
When providing personal information to the company below, which handles the Clinic’s publicity and marketing work on its behalf, the Clinic notifies you of the details below in advance and provides the information only if the data subject’s separate consent has been obtained.
| Recipient | Purpose of provision | Items provided | Retention and use period |
|---|---|---|---|
| Hanbeon Marketing (한번 마케팅) | Publicity, marketing and advertising operations for the Clinic, improving the quality of consultation responses, and information about events and treatments | Name, contact details (phone number), field of inquiry, date and time of receipt | 1 year from the date of consent to provision, or until consent is withdrawn |
The Clinic does not collect or process, through its website, sensitive information (such as health information) under Article 23 of the Personal Information Protection Act.
The Clinic does not collect the personal information of children under the age of 14 without the consent of their legal representative. Inquiries about treatment for children under the age of 14 should be made by their legal representative (guardian).
To analyze website usage and improve its services, the Clinic may store a visit identifier (session ID) and referral path information in the user’s browser storage (cookies and session storage).
When personal information becomes unnecessary, such as when its retention period has elapsed or the purposes of processing have been achieved, the Clinic destroys the personal information without delay.
The Clinic has designated a Chief Privacy Officer as follows to take overall responsibility for work related to the processing of personal information, and to handle data subjects’ complaints, provide remedies for damage and receive requests for access to personal information in connection with the processing of personal information.
| Category | Details |
|---|---|
| Chief Privacy Officer | Chulmin Bae, Head Director |
| Phone | 02-555-6633 |
| oaks1177@naver.com | |
| Address | (06134) 7F, A-Tower, 105 Teheran-ro, Gangnam-gu, Seoul(06134) 서울특별시 강남구 테헤란로 105, A타워 7층 |
Data subjects may contact the above for inquiries regarding personal information protection, complaint handling, remedies for damage, requests for access to personal information and other matters arising while using the Clinic’s services, and the Clinic will respond and take action without delay.
Data subjects may apply to the following institutions for dispute resolution, consultation and the like to obtain remedies for infringement of personal information.
In addition, a person whose rights or interests have been infringed by a disposition or omission of the head of a public institution in response to a request under Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information) or Article 37 (Suspension of Processing of Personal Information, etc.) of the Personal Information Protection Act may file an administrative appeal as prescribed by the Administrative Appeals Act.
If anything is added to, deleted from or modified in this Privacy Policy, the reasons for and details of the changes will be announced through the “Privacy Policy” page of the website at least 7 days before the changes take effect. However, changes that materially affect the rights of data subjects will be announced at least 30 days in advance.
Effective date: September 11, 2026