1. Personal data we process

Healthhub processes the following personal information.

1. Profile: Name , email address, phone number, occupation, country, organization/company name
2. Our services: e- mail address, password, medical images, analysis reports (medical images are automatically anonymized and cannot be individually identified as soon as they are uploaded to the website).
3. Product Inquiry: Name, phone number, country, position, institution/company name
4. Information items that can be automatically generated and collected in the process of using other Internet services: IP address, cookie, MAC address, service use record, visit record, fraudulent use record

2. Purpose of processing personal information

Healthhub processes personal information for the following purposes: Your personal information processed by Healthhub will not be used for purposes other than the following, and if the purpose of use is changed, we will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Member management
   - Confirmation of intention to sign up for membership ; Identity verification and identity verification according to membership service provision ; maintenance and management of members ; Identity verification according to the implementation of the limited identity verification system ; Service fraud prevention notice; complaint handling; Confirmation of intent to withdraw from membership
2. services
   - provision of website services ; Service use record and access frequency analysis ; service usage statistics; Maintenance and improvement of services
   - Establishment of a service use environment in which users can use the service with peace of mind in terms of security
   - Repair and support when performing contracts ; payment; Errors or failure to provide paid services
3. Product Inquiry - Responding to product
   - related inquiries, receiving and supporting maintenance services, identifying complainants, confirming complaints, notifying facts, notifying processing results, reporting product safety information and quality complaints, evaluation and management

3. Cookies used on the website

A cookie is information that a web server sends to a web browser and stores it in the browser. This information is sent to the web server whenever the browser requests to open a page on the server. This allows web servers to identify and monitor web browsers.

1. Required : Necessary cookies are absolutely necessary for the website to function properly. These cookies ensure that the basic and secure functions of the website are anonymous.
2. Analytical/statistical : Analytical or statistical cookies are used to understand how visitors interact with our website by collecting and reporting anonymous information. These cookies help provide information about metrics such as number of visitors, bounce rate and traffic sources.
3. Functionality : Functional cookies help us perform certain functions on social media platforms, such as sharing website content, collecting feedback and other third-party functions.
4. Marketing : Marketing cookies are used to track website visitors. The intent is to display ads that are more valuable to publishers and third-party advertisers by making them relevant and engaging to individual users.
5. Other : Uncategorized Other cookies are cookies that are being analyzed and have not yet been classified into a category.

Installation, use and rejection of cookies: You can refuse to save cookies by changing the settings in the [Tools] > [Internal Options] > [Personal Information] menu at the top of the web browser screen.

4. Personal information processing and retention period

1. Healthhub processes and retains personal information only within the period of retention and use of personal information stipulated by relevant laws or the period agreed upon by each user when collecting users personal information.
2. of users personal information is as follows. Membership management: Until membership withdrawal, except in the following cases
   - If the investigation is continued in violation of related laws, until the end of the investigation
   - If a credit/debt relationship remains due to the use of the site, until the credit/debt relationship is settled
   Service provision: until completion of supply of goods or services, payment of charges, settlement of charges
   - Identification and authentication according to service use: Until membership withdrawal
   - Maintenance and improvement of service: Until purpose is achieved (only non-personally identifiable information is retained) However, in the case of the following reasons, until the end of the service period
   - Records on transactions such as indications and advertisements under the 「Act on Consumer Protection in Electronic Commerce, Etc.」, and records on contract contents and performance
   -- Record on display or advertisement: 6 months
   -- Records on contract or subscription withdrawal: 5 years
   -- Records on payment and provision of goods or services: 5 years
   -- Records on consumer complaints or dispute handling: 3 years
   - Storage of communication confirmation data under Article 41 of the Protection of Communications Secrets Act
   -- Computer communication, Internet log record data, access location tracking data: 3 months
   - Product Inquiries: Up to 3 years after completion of complaint handling
   - Newsletter Subscription: Until membership withdrawal or withdrawal of consent to receive newsletters

5. Provision of personal information to third parties

Healthhub will not provide your personal information to third parties without your consent. However, Healthhub may provide personal information to a third party if it falls under Article 17 of the Personal Information Protection Act, such as when there are special provisions in the law or when legal obligations must be observed.

6. Destruction of personal information

1. Healthhub destroys the users personal information after the personal information retention period ends or the purpose of personal information processing is achieved.
2. If Healthhub is required to retain personal information even after the personal information retention period has elapsed or the purpose of collection has been achieved according to relevant laws, the relevant personal information (or personal information file) must be moved to a separate DB or moved to another storage space . Ill do it.
3. The destruction procedure, deadline and method are as follows.
   - Destruction Procedure
   Healthhub selects the personal information (or personal information file) to be destroyed and destroys it after obtaining approval from the person in charge of personal information protection.
   - Destruction method
   Personal information stored in the form of an electronic file is deleted using a technical method that cannot reproduce the record. Personal information recorded and stored on paper is shredded with a shredder or destroyed by incineration.

7. Rights and obligations of information subject

1. information subject may exercise the right to protect personal information in each of the following subparagraphs with respect to Healthhub at any time.
   - Request to view personal information
   - If there are any errors, request corrections.
   - Deletion request
   - Request for suspension of processing
2. The information subject can exercise the rights under Paragraph 1 in writing or via e-mail, and the company will take action without delay. Healthhub verifies whether the person requesting access, correction/deletion, or suspension of processing according to the rights of the information subject is the person or a legal representative
3. If a user requests correction or deletion of personal information, Healthhub will not use or disclose the personal information to a third party until the correction or deletion is completed.
4. Users can exercise their rights through an agent, such as a legal representative or a person who has been delegated. In this case, you must submit a power of attorney in accordance with Attachment No. 11 of the Enforcement Rules of the Personal Information Protection Act.
5. Users You must not invade the privacy of yourself or others that Healthhub has collected in violation of privacy laws .
6. In accordance with Article 35 Paragraph 4 or Article 37 Paragraph 2 of the Personal Information Protection Act, the rights of the information subject may be restricted.
7. If other laws specify that personal information is subject to collection, that personal information cannot be deleted even if you request deletion.

8. Measures to ensure the safety of personal information

Healthhub takes the following measures to ensure safety in accordance with Article 29 of the Personal Information Protection Act.

1. Administrative measures: Establishment and execution of internal management plans, regular employee training, etc.
2. Technical measures: Management of access rights to systems that process personal information, installation of access control systems, encryption of identification information, installation of security programs
3. Physical measures: access control in computer room, data storage room, etc.

9. Personal Information of children under the age of 14

1. Healthhub collects the minimum amount of personal information necessary to perform its services when collecting personal information from minors under 14 years of age, only after obtaining the consent of their legal guardian.
   - Required items: name, relationship, and contact information of the legal guardian.
2. Healthhub may ask minimal information such as the name and contact information of the legal guardian, and can verify that the legal guardian has given proper consent through one of the following methods:
   - By informing the legal guardian of the consent through a text message after the personal information handler has confirmed the consent indication posted on the internet site that has published the consent contents.
   - By obtaining the credit card or check card information of the legal guardian after having the legal guardian indicate their consent on the internet site that has published the consent contents.
   - By confirming the identity of the legal guardian through the legal guardians mobile phone personal identification after having the legal guardian indicate their consent on the internet site that has published the consent contents.
   - Direct issuance of a written document containing the consent to the legal guardian or delivery through mail or fax with the legal guardian signing and submitting after confirming the content of the consent
   - Obtaining the consent by sending an email containing the consent and receiving an email with the expression of consent signed by the legal guardian
   - Informing the legal guardian of the content of the consent over the phone and obtaining the consent or guiding the legal guardian to a method of confirming the content of the consent through an internet address, and obtaining the consent through a subsequent phone call
   - Any other method equivalent to the above for informing the legal guardian of the content of the consent and confirming the expression of consent.
3. Healthhub considers the personal information of minors under 14 years old to have been agreed upon for collection, if there is consent from the legal guardian.

10. Personal Information Protection Officer

1. Healthhub appoints the person in charge of personal information protection as follows for the coordination of all tasks related to personal information processing, complaint handling of information subjects related to personal information processing, and damage relief .
   
   Personal Information Protection Officer
   Personal Information Protection Officer
   Name: Byun Si-seop
   Department: Medical and Imaging Artificial Intelligence Center
   Email: terry.byon@healthhub.kr
   
   Personal information manager
   Name : Shin Seung-joo
   Department: Medical and Imaging Artificial Intelligence Center
   Email: alex@healthhub.kr
2. inquiries, complaints, damage relief, etc. related to personal information that occurred while using Healthhubs services, please contact the person in charge of personal information protection or the personal information manager. Healthhub will promptly respond to and process your inquiries.

11. Request to view personal information

Users may request Healthhub to view their personal information in accordance with Article 35 of the Personal Information Protection Act. Healthhub will endeavor to process such requests without delay.

• Department in charge of reading personal information
• Name: Byun Si-seop
• Department: Medical and Imaging Artificial Intelligence Center
• Email: terry.byon@healthhub.kr

12. Criteria for determining additional use or provision of personal information without the consent of the information subject

If Healthhub additionally uses personal information without the consent of the information subject, the criteria for judgment are as follows.

1. If the purpose of additional use and provision is substantially related to the original purpose of personal information collection
2. additional use and provision are expected in light of circumstances and practices
3. If the additional use/provision does not unreasonably infringe on the interests of the information subject or a third party; and
4. Even if personal information is pseudonymized, if the purpose of additional use and provision can be achieved, personal information must be pseudonymized.

13. Remedies for Infringement of Rights and Interests

If you need to report or consult about personal information infringement, please contact the organizations below.

• Personal Information Dispute Mediation Committee : 1833-6972 (https://www.kopico.go.kr)
• Personal Information Infringement Report Center : 118 (https://privacy.kisa.or.kr)
• Supreme Prosecutor’s Office Cyber Crime Investigation Team : 1301 (www.spo.go.kr)
• National Police Agency Cyber Terror Response Center : 182 (ecrm.cyber.go.kr)