• 1. Cowellmedi complies with the personal information protection regulations under the "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc." and the "Guidelines for the Protection of Personal Information" and "Standards for Technical/Administrative Measures for the Protection of Personal Information" established by the Ministry of Information and Communication. Additionally, Cowellmedi has established a "Privacy Policy" and is committed to doing its best to protect the personal information of its members.
• 2. Cowellmedi's "Privacy Policy" may be subject to changes due to amendments in relevant laws and government guidelines, as well as internal policy changes within Cowellmedi. If Cowellmedi's "Privacy Policy" is modified, any changes will be posted on the Cowellmedi website's 'Cowellmedi News' section for at least seven days.

• 1. The scope of "personal information" is defined according to the provisions of the "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc." It refers to "information about a living individual that can identify the individual by their name, resident registration number, etc., including information that can be easily combined with other information to identify a specific individual, even if that information alone cannot identify the individual."

• 2. Cowellmedi collects and uses the personal information of members for purposes such as user verification and providing personalized services. The specific purposes of collection and use of the collected personal information items are as follows:

  • - Name, gender, date of birth, dental clinic/company name, license number, ID, password: Used for identity verification procedures required for service use, and to confirm the ownership of the service.
  • - Email address, phone number: To secure essential information in accordance with domain management regulations, and to facilitate smooth communication for notifications and complaint handling.
• 3. Cowellmedi does not entrust the management of members' personal information to third parties.
• 4. Cowellmedi does not request sensitive personal information (such as race and ethnicity, beliefs, political orientation, criminal records, health status, and sexual life) that may infringe upon the basic human rights of users.

• 5. The retention period for personal information is "from the moment the member joins Cowellmedi until the moment they request termination."

  • - However, even after the purpose of collection and the purpose for which the information was provided have been achieved, if there is a need to retain the information due to legal provisions, the personal information of the customer may be retained according to the law.

• 1. Cowellmedi does not provide the personal information of members to others or other companies or institutions without permission. Exceptions to this include:

  • - When providing the applicant's information to the domain registrar for the purpose of domain name registration.
  • - When providing information for WHOIS services related to domain names.
  • - When requested by a national institution or consumer organization designated by the government in accordance with the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.
  • - When a dispute resolution organization or court requests contact information for a domain registrant involved in a dispute.
  • - When requested for investigative purposes by a legal entity such as the Information Communication Ethics Committee or the Korea Information Security Agency.
  • - When using a member's information (name, address, phone number) for business contact purposes.
  • - When necessary for statistical preparation, promotional materials, academic research, or market research, provided that the information is provided in a form that does not identify specific customers.
• 2. If Cowellmedi wishes to provide or share members' personal information with partners for the provision of more diverse services, we will obtain the individual consent of each member in advance. Members will be notified via email about which partner will receive the information, what personal information items will be provided or shared, why such information must be shared, and how long and in what manner it will be protected and managed. If you do not consent, your information will not be provided to or shared with the partner.

• 1. Cowellmedi members can view or correct their personal information at any time. If you wish to view or correct your personal information, please log in to the Cowellmedi website and click the "Change Personal Information" button next to the logout button.
• 2. If a member has lost their ID and password, they can confirm their ID or password using the "Find ID or Password" service on the website.
• 3. Members are responsible for managing their Cowellmedi ID and password. To protect your personal information effectively, you must properly manage and take responsibility for your ID and password. Cowellmedi is not responsible for the leakage of your ID and password if it was due to your own actions. However, if a member's ID and password are leaked due to Cowellmedi's negligence or intentional misconduct, the customer may hold Cowellmedi accountable. After using a Cowellmedi account to access the website, users must log out and close their web browser. Especially when sharing a computer with others or using it in a public place, you must log out or close the web browser to prevent unauthorized access.

Cowellmedi members can withdraw from membership at any time at their discretion. Membership withdrawal can be requested through the member information management page.
However, if the service used by the member has not yet expired, withdrawal is not allowed.

Cowellmedi has implemented the following technical measures to prevent the loss, theft, leakage, alteration, or damage of members' personal information:

• 1. Each member's personal information is protected by a password, and personal information data is protected through additional security features.
• 2. Cowellmedi has established and enforces password creation rules to ensure that neither users nor personal information handlers use easily guessable numbers, such as birthdates, resident registration numbers, or phone numbers, as passwords.
• 3. Cowellmedi uses antivirus programs and malicious code defense software to prevent damage caused by computer viruses. These software programs are updated regularly on a daily basis.
• 4. Cowellmedi uses high-end routers and L3 switch devices equipped with intrusion prevention and detection functions to securely protect personal information on the network.
• 5. Additionally, Cowellmedi operates a triple-layered personal information protection system by establishing a separate firewall.
• 6. Cowellmedi encrypts personal information stored in the personal information protection system and operates a system that ensures personal information transmitted outside of Cowellmedi's information network or stored on a PC is encrypted.

If any Cowellmedi member has complaints related to Cowellmedi's personal information protection, they may submit their concerns to the personal information management officer. Upon receipt, the complaint will be addressed immediately, and the results of the actions taken will be communicated to the member. In cases of unauthorized disclosure of personal information or other serious breaches, members may also file complaints or seek mediation with the Personal Information Infringement Report Center, which is established and operated by the government (http://www.cyberprivacy.or.kr, http://www.1336.or.kr, Phone: 02-1336).

Cowellmedi adheres to the following regulations by establishing separate electronic management regulations within the company:

• 1. Matters related to the designation of the personal information management officer and the composition and operation of personal information protection clauses.
• 2. Matters related to the education of personal information handlers.
• 3. Maintenance and regular monitoring of access records to the personal information processing system.
• 4. Protective measures when printing and copying personal information.
• 5. Other necessary matters to ensure personal information protection.

Cowellmedi has designated a personal information management officer responsible for collecting feedback and handling complaints related to personal information.

• - Personal Information Management Officer:
• - Name: Oh Chaerin
• - Phone: 02-3453-5083
• - E-mail: mynutella77@cowellmedi.co.kr

• 1. To protect children's personal information, Cowellmedi requires the consent of a legal guardian (parent) if a child under the age of 14 applies for membership. Cowellmedi may exclude minors under the age of 14 from membership if they do not have parental consent.
• 2. The legal guardian of a minor under the age of 14 may request access, correction, or withdrawal of consent for the minor's personal information. Cowellmedi will take necessary action without delay upon receiving such a request.

Cowellmedi has an obligation to obtain prior consent from the legal guardian (parent) when transacting with minors. If the transaction does not obtain the legal guardian's consent, the transaction may be canceled. Additionally, if the legal guardian (parent) of the minor requests a withdrawal within seven days of the transaction, Cowellmedi will cancel the transaction (refund).

• 1. Cowellmedi may freely send emails to members regarding services provided by Cowellmedi, including service notifications.
• 2. Cowellmedi may send advertising information to members. However, in such cases, Cowellmedi will include the word "advertisement" to ensure that members can easily recognize the information as advertising, and advertising information will not be sent to members who have expressed their refusal to receive it.