[FacelinePlastic Surgery ClinicPersonal InformationProcessing Policy]
FacelinePlastic Surgery Clinic (hereinafter referred to as "clinic") iscommitted to protecting personal information on the Internet and is committedto protecting the personal information provided to the user when using thissite.
Accordingly,we have established a privacy policy based on relevant laws and regulationsthat must be followed by telecommunication service providers, such as theTelecommunications Privacy Act, the Telecommunication Business Act, thePromotion of Information and Communication Network Utilization Act, and so on.
Thispersonal information processing policy may be changed from time to time due tochanges in the laws and guidelines of the government or changes in the internalpolicies of the clinic. In case of any changes, we immediately reflect therelevant contents in the personal information processing policy.
Throughthis privacy policy, you will understand how your personal information is usedhow it is safely protected.
Theorder of this privacy policy is as follows:
1.Items of personal information to collect and how to collect
2.Purpose of collection and use of personal information
3.Providing and sharing personal information
4.Retention and use period of personal information
5.Procedures and methods of destroying personal information
6.Rights of users and legal representatives and how to exercise them
7.How to withdraw consent / How to unsubscribe
8.Matters concerning the installation / operation of the automatic collectiondevice of personal information and its rejection
9.Matters on operation and management of image information processing equipment
10.Matters concerning safeguard measures of personal information
11.Personal information manager
12.Obligation notices due to policy changes
1.Items of personal information to collect and how to collect
Wecollect only the minimum personal information needed to use the service whenyou sign up. The information collected for your use of the service includes therequired items and optional items to be filled in when registering for theservice, and there is no limit to the use of the service even if you do notenter your choice such as whether to receive the mail.
A. Items collected at the time of medical examination
-Required items: Name (Korean), Date of Birth, Address, Contact number
-Health information: Personal health information that medical staff thinksnecessary to provide medical services such as medical history and familyhistory.
※ Itis mandatory to keep unique identification information and medical informationby medical law.
(There is no consent for collectingmedical information.)
B. Items collected at the time ofmembership
-Required items: Name, ID, Password, Date of birth, Email, Address, Gender,Contact number
-Optionalitems: Address, Whether to receive mail
-Sensitive information: Past history, History of surgery, Area of interestedsurgery
-The following information may be automatically generated and collected duringthe process of using the service or the process of providing the service.(Service use record, access log, cookie, connection IP information)
-Personal authentication (mobile phone authentication / Ipin authentication): Name,Self-certificationvalue,Ipin members are required to have an IP number, Date of birth, Gender,ID, password, Contact information (e-mail address, mobile phone number)
C.Collection items for payment
-When paying by credit card: The credit card payment authorization informationsuch as the name of the card and the card numberD. How to collect personal information
-We collect personal information in the following ways.
-Homepage (Membership, Surgery price consultation, KakaoTalk consultation, Real timeconsultation, Online reservation, Online consultation, Postoperative Survey), Writtenform, Fax, Telephone, Email
2.Purpose of collection and use of personal information
Weuse the collected personal information for the following purposes.
Allinformation provided by the user will not be used for purposes other than thoserequired for the purposes below and will be subject to prior agreement if thepurpose of use is changed.
-Procedures for checking / Checking appointments / Reservations and confirmingyour identity for medical treatment
-Services for diagnosis and treatment
-Duties such as billing, payment, refund, etc.
-Medical bill, Statement, Certificate, Medicine / Article and results
-Providing medical information to other medical institutions
-Providing a communication path for helping notices, handling complaints / Grievances,etc.
-Materials for online consultation
-Provides information on new services and events
-Quality management of medical care, Legal and administrative measures andmeasures for the operation of the hospital
-Minimal analysis required for education and research
-Medical Information, Academic Information, Clinic information
-Use reference materials to provide smooth services for consultation andtreatment
-Collection of information for consumers under Article 52 of the Basic Law ofConsumer
3. Providing and sharing personal information
Wereserve the right to use your personal information beyond the limits specifiedin the "Purpose of Collection and Use of Personal Information", or toprovide it to other companies or other organizations, except in the case ofyour consent or the provisions of related laws and regulation.
However,except in the following cases.
-When users agree to release in advance
-In accordance with the provisions of the Act, or for the purpose ofinvestigation, if the investigation agency is required by the procedures andmethods prescribed in the Act
-Statistical writing • In cases where it is necessary for academic research ormarket research,4. Retention and use period of personal information
Wewill destroy your personal information without delay when the purpose ofcollecting or receiving the personal information is accomplished.
-In case of membership information: When the member withdraws from membership oris expelled from membership
-If collected for the purpose of surveys, events, etc.: When the questionnaire,event, etc. are finished
-If collected for medical purposes: Preservation according to the periodspecified in Article 15 of the 「Enforcement Regulations of Medical Law」 (Record of Patient Records: 5 years for patients, 10 years formedical records), Address, Resident registration number, Medical information)
-Record of dissatisfaction or dispute of consumer: 3 years (Consumer ProtectionAct in Electronic Commerce etc.)
-Records on collection, processing and use of credit information: 3 years (Acton the Use and Protection of Credit Information)
-Record of identity verification: 6 months (Act on Information Network Promotionand Information Protection Act)
-Record of visit: 3 months (Communication Confidentiality Protection Act)
※However, even if the purpose of collection is provided or the purpose receivedhas been accomplished, you may retain your personal information if it isnecessary to preserve it in accordance with the provisions of the CommercialAct.5. Procedures and methods of destroying personal information
Wewill destroy immediately after the purpose of collection and use of personalinformation is achieved. The procedure and method of destruction are asfollows.
A. Destruction procedure
Informationentered by the user for membership, etc., will be destroyed immediately afterthe purpose has been accomplished by the following method of destruction.B. Period of destruction
Whenthe personal information of the user has elapsed and the personal informationof the user is no longer required within five days from the end of the holdingperiod, such as accomplishing the purpose of processing personal information,abolishing the service, or ending the business, we destroy the personalinformation within five days from day when processing of information isrecognized as unnecessary.
C. Method of destruction
Personalinformation stored in the form of electronic files is deleted using a technicalmethod that cannot reproduce the record. Personal information printed on paperis crushed or incinerated by the shredder and destroyed.6. Rights of users and legal representatives and how to exercise them
Ifyou request to view, correct or delete personal information, we will respond toyour requests faithfully and process it without delay. In order to protectpersonal information, we do not provide the process of viewing, correcting anddeleting personal information of customers by telephone, mail, FAX or any otherapplication method other than customer's visit.
A. Viewing personal information
Customerscan visit our website to request access to personal information,and we willrespond quickly.
B. Correction / Deletion of personal information
-If the customer requests correction / deletion of personal information, and ifit is found that there is a mistake in the personal information, it iscorrected / deleted without delay. We may request proof of the facts ofcorrection / deletion. Personal information will not be used or provided untilthe correction is completed. Also, if wrong personal information has alreadybeen provided to a third party, we will notify the third party without delay tocorrect the result of the correction.
-When a customer requests to view, correct or delete personal information of aperson, identification card such as resident registration card, passport,driver's license, etc. indicating the identity of the customer is presented toconfirm the identity of the person.
-When a customer's agent visits, requests to read, correct or delete, confirmthe letter of proxy and consent of the customer and the identity document ofthe agent and confirm whether or not it is a legitimate agent.
-We will notify the customer if there is a good reason to refuse to read,correct or delete the whole or part of the personal information and explain thereasons.
-When it is possible to limit the viewing and correction of personal information
-If there is a risk of significant damage to the life, body, property or rightsof the person or a third party
-If there is a possibility of causing serious damage to the service provider'sbusiness
-In case of violation of laws, etc.
-Children under 14 years of age (hereinafter referred to as"children") are made through a separate form and require the consentof the legal representative when collecting personal information.
-In order to obtain the consent of the legal representative, we collect theminimum information such as the name and contact information of the legalrepresentative from the child. We obtain the consent of the legalrepresentative according to the method prescribed in the personal informationprocessing policy.
-Users and legal representatives can use the Internet, telephone, and writing tocontact us to exercise their rights in connection with personal information.The hospital takes necessary measures without delay.
※Personal information that is required to be kept by law cannot be modified /deleted within the storage period even if requested.7. Withdrawal of consent • How to withdraw from membership
Youmay at any time withdraw your consent to the collection, use and provision ofpersonal information when you register. If you want to withdraw your consent(withdraw your membership), please click the "Withdraw consent (withdrawalof membership)" button on the homepage to cancel your consent afterconfirming your identity, or contact the personal information officer and wewill take necessary measures such as destruction.8. Matters concerning the installation / Operation of the automatic collectiondevice of personal information and its rejection
Weuse 'cookies' to store and retrieve information from users in order to providecustomized services to users. A cookie is a small amount of information that awebsite sends to the computer's web browser, which is sometimes stored on thePC hard disk.A. The purpose of the cookie
-Cookies identify your computer but do not identify individual usersindividually. By using this cookie, we can make more convenient service byknowing the types of visits and usage of each service visited by users and thesize of users.
-Users can choose whether to use cookies by adjusting the options of the webbrowser. That is, you can accept all cookies, send a notification when a cookieis installed, or reject all cookies.
-However, users must log in and log in to the service to use cookies.B. Install / Operate and deny cookies
-The user has the option to install cookies. As a result, you can allow allcookies by setting options in your web browser, check each time a cookie issaved, or refuse to save all cookies.
-You can refuse to set cookies by selecting the option of the web browser you use,you can accept all cookies, check each time you save cookies, or refuse to saveall cookies.
-Example of setting method
•For Internet Explorer: Click Tools menu> Internet Options> Privacy>Settings
•For Chrome: Settings menu on the right side of the web browser> Showadvanced settings at the bottom of the screen> Content settings button forprivacy> Cookies
-However, if you refuse to store cookies, you may have difficulty using some ofour services that require login.9. Matters concerning safeguard measures for personal information
[Minimizationand Training of Personal Information Handling Staff]
Weminimize the designation of personal information handlers and conduct regulartraining.
[Regularself-check]
Weconduct regular self-inspections at least once a year to ensure the safety ofhandling personal information.
[Establishmentand enforcement of internal management plan]
Wehave established and implemented an internal management plan for the safehandling of personal information.
[Encryptionof personal information]
Thepassword of the user's personal information is encrypted and stored andmanaged. Only the user can know it, and the important data uses separatesecurity function such as encrypting the file and transmission data.
[Technicalmeasures against hacking]
Toprevent leakage and damage of personal information caused by hacking orcomputer virus, we install security program, periodically update and check,install system in outside controlled area and technically / physically monitor andblock
[Restrictaccess to personal information]
Wetake necessary measures to control access to personal information throughgranting, modifying, and deleting access rights to the database system thathandles personal information. We also control unauthorized access from outsideby using an intrusion prevention system.
[Accesscontrol to unauthorized persons]
Thephysical storage of personal information system that stores personalinformation is separately set up, and access control procedures are establishedand operated.10. Personal information manager
Inorder to protect your personal information and to handle complaints related toyour personal information, we have the person in charge of personal informationmanagement as follows.
[Personalinformation manager]
ManagingDirector: Tae-hee Lee
HandlingOfficer: Hee-jung Kim
Affiliation:Faceline Plastic Surgery Clinic
Position:Manager
Phone:02-541-0082
Email:faceline82@naver.com
Youmay report all personal information related complaints that may arise fromusing this service as the person in charge of personal information management.
Wewill respond quickly and fully to your report.
Ifyou need to report or consult about other privacy infringement, please contactthe following organizations.
PersonalDispute Resolution Committee (http://www.1336.or.kr/1336)
InformationProtection Mark Certification Committee (http://www.eprivacy.or.kr/ (02)580-0533 ~ 4)
TheSupreme Prosecutors' Office (http://www.spo.go.kr/ (02) 3480-3573)
CyberTerror Response Center(http://www.ctrc.go.kr/ (02) 392-0330)11. Obligation to notify in accordance with policychanges
This personal information processing policywas enacted on April 5, 2012, and if there is any addition, deletion ormodification of the contents due to changes in laws, policies or securitytechnologies, we will notify you of the reasons for change and contents throughthe homepage.
Announcement date: April 9, 2012
Effective date: April 12, 2012
 |
 |
 |
 |
 |
