Personal Information Collected

For membership registration, consultation, service application, and other services provided by the Company, the following personal information is collected:

• Collection Items: Name, ID, Password, Contact information, Workplace/Hospital name, Workplace/Hospital address, Email, Occupation, License number, Telephone number (optional depending on member's choice)
• Collection Methods: Website (membership registration), Written forms

Purposes of Collection and Use of Personal Information

The Company utilizes the collected personal information for the following purposes:

• Fulfillment of service contracts and provision of related services, content provision, delivery of goods or invoices, etc.
• Member management: verification of identity, personal identification, age verification, confirmation of legal guardian's consent for collecting personal information of children under 14, notification of notices, utilization for marketing and advertising, understanding access frequency, statistical analysis of member's service usage, etc.

Retention and Use Period of Personal Information

After the purposes of collecting personal information have been achieved, the Company will promptly dispose of the information without exception.

Procedure and Method of Personal Information Disposal

The Company will dispose of personal information promptly after the purposes of collection and use have been achieved. The disposal process and method are as follows:

• Disposal Process: Information provided by members for membership registration, etc., will be transferred to a separate database (or stored separately in a document for paper forms) and stored for a certain period according to internal policies and other relevant laws and regulations (refer to retention and use period) before being disposed of.
  Personal information transferred to a separate database will not be used for any purpose other than retention unless required by law.
• Disposal Method: Personal information stored in electronic file format will be deleted using technical methods that cannot reproduce records.

Provision of Personal Information

The Company does not generally provide users' personal information to external parties. However, exceptions may occur in the following cases:

• When users have given prior consent
• When required by law or requested by investigative agencies according to legal procedures and methods for investigative purposes

Entrustment of Collected Personal Information

The Company will not entrust customers' information to external companies without their consent. If such a need arises in the future, the Company will notify customers of the outsourced parties and the contents of the outsourced tasks and obtain prior consent.

Rights of Users and Legal Representatives and How to Exercise Them

Users and legal representatives have the right to view, modify, or request the deletion of personal information of themselves or children under 14 registered with the Company, and to request withdrawal of membership. To view or modify personal information or withdraw membership, users can click "Change Personal Information" (or "Modify Membership Information," etc.), and to withdraw membership, they can click "Withdraw Membership" after going through the identity verification process. Alternatively, they can contact the personal information manager in writing, by phone, or by email, and the Company will promptly take action.

If a user requests correction of personal information errors, the Company will not use or provide the personal information until the correction is completed. Additionally, if incorrect personal information has already been provided to a third party, the Company will promptly notify the third party of the correction results to ensure that the correction is made.

The Company handles personal information that has been deleted or terminated in accordance with the "Retention and Use Period of Personal Information Collected by the Company."

Installation, Operation, and Refusal of Personal Information Automatic Collection Devices

The Company operates "cookies" and other devices to store and retrieve user information. Cookies are very small text files sent by the server operating the Company's website to the user's browser and stored on the user's computer hard disk. The Company uses cookies for the following purposes:

• Understanding user preferences and interests, tracking user activities, and providing targeted marketing and personalized services based on event participation, visit frequency, and the number of visits
• Users have the right to refuse to install cookies. Therefore, users can set options in their web browser to allow all cookies, request confirmation each time a cookie is saved, or refuse to save all cookies.

Complaints Handling Service for Personal Information

The Company has designated relevant departments and personal information managers to protect customers' personal information and handle complaints related to personal information.

• customer service department: management team
• phone number: +82-43-211-2877
• e-mail: mdclus@mdclus.com
• name: Kim Kyung Youl

If you have any complaints or concerns about personal information, you can report them to the personal information manager or the relevant department. The Company will promptly provide sufficient answers to users' complaints.

If you need to report or consult about other personal information breaches, please contact the following agencies:

1. Personal Information Dispute Mediation Committee (www.1336.or.kr/1336)
2. Information Protection Mark Certification Committee (www.eprivacy.or.kr/02-580-0533~4)
3. Cyber Crime Investigation Unit, Supreme Prosecutors' Office (http://icic.sppo.go.kr/02-3480-3600)
4. Cyber Terror Response Center, National Police Agency (www.ctrc.go.kr/02-392-0330)