About Us(hereinafter referred to as the "Company") takes the protection of your personal information very seriously and complies with the Personal Information Protection Act.
Through our Privacy Policy, we will inform you of the purpose and manner in which the personal information you provide is used and what measures are being taken to protect your personal information. The order of this Privacy Policy is as follows
1. what personal information we collect and how we collect it
2. Purpose of collecting and using personal information
3. Providing and Sharing Personal Information
4. Retention and use period of personal information
5. Measures to ensure the safety of personal information
6. Procedures and methods for the destruction of personal information
7. Rights of users and legal representatives and how to exercise them
8. How to withdraw consent
9. Installation/operation of automatic personal information collection devices and refusal thereof
10. Privacy Officer
11. Notice obligations for policy changes
1. what personal information we collect and how we collect it
We only collect the minimum amount of personal information necessary to use the Services. In order for you to use our services, there are mandatory and optional fields, and if you do not fill in the optional fields, you will not be restricted from using the services.
A. Care Collections
-
- Required: Full name, social security number, alien registration number/passport number (foreigners only)
-
- Optional: Phone number, address, email
-
- Health Information: Personal health information that a healthcare provider deems necessary to provide healthcare services, such as medical and family history.
Unique identification information and medical information are mandatory under the Medical Act (separate consent is not required for medical information collection).
B. Homepage Collection Items
-
- Required: Full name, contact information (phone number, cell phone number)
-
- The following information may be automatically generated and collected in the process of using the service or in the course of service provision business. (Service usage records, access logs, cookie access, access IP information)
C. Medical billing collection items
Credit card payment: Card payment authorization information, such as card company name and card number.
D. How we collect personal information
-
- We collect personal information in the following ways
-
- Homepage (Apply for consultation), written form, fax, phone, email, Kakao channel messages.
2. Purpose of collecting and using personal information
We utilize the collected personal information for the following purposes. All information provided by users will not be used for purposes other than those required for the following purposes, and prior consent will be sought if the purpose of use is changed.
-
- We utilize the collected personal information for the following purposes. All information provided by users will not be used for purposes other than those required for the following purposes, and prior consent will be sought if the purpose of use is changed.
-
- Resources for handling online consultation responses
-
- Use of identity verification for medical appointments, appointment tracking, and membership services
-
- Ensure a seamless communication path for delivering notices, handling complaints, and notifying you of new services and offers.
-
- Sending certificates, sending dry goods
-
- Resources for delivering personalized content and developing new services
-
- Provide medical services for diagnosis and treatment, and administrative services such as billing, collections, and reimbursement.
-
- The minimum amount of analytics needed to serve education, research, and care.
-
- Fundamentals of Online Custody Testing and Clinical Trial Review
3. Providing and Sharing Personal Information
Except with your consent or in accordance with the provisions of relevant laws and regulations, we will not use your personal information beyond the scope disclosed in "Purpose of Collection and Use of Personal Information" or provide it to other companies or organizations under any circumstances, except in the following cases.
-
- Except with your consent or in accordance with the provisions of relevant laws and regulations, we will not use your personal information beyond the scope disclosed in "Purpose of Collection and Use of Personal Information" or provide it to other companies or organizations under any circumstances, except in the following cases.
-
- Users have given prior consent to disclose
-
- Submitting medical records to the Health Insurance Review and Assessment Service to claim nursing care costs under the National Health Insurance Act
-
- De-identify individuals when necessary for statistical purposes and academic research.
-
- Submission if requested by an investigative agency in accordance with the procedures and methods prescribed by law, etc.
4. Retention and use period of personal information
We retain personal information for the retention period stipulated by the Medical Act, after which we immediately destroy it.
-
- For membership: When you unsubscribe or are removed from membership.
-
- Collected for the purpose of a survey, event, etc.: When the survey, event, etc. has ended.
-
- When collected for the purpose of medical treatment: Preserved according to the period specified in Article 15 of the Enforcement Rules of the Medical Act, "Preservation of Records on Medical Treatment" (Preservation items: name, address, resident registration number, medical information)
-
- Records of consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
-
- Records on collection/processing and use of credit information: 3 years (Act on the Use and Protection of Credit Information)
-
- Records on identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.)
-
- Records of visits: 3 months (Protection of Communications Secrets Act)
-
- However, even if the purpose of collection or provision has been fulfilled, we may retain your personal information if it is necessary to preserve it in accordance with the provisions of laws and regulations such as the Commercial Code.
However, even if the purpose of collection or provision has been fulfilled, we may retain your personal information if it is necessary to preserve it in accordance with the provisions of laws and regulations such as the Commercial Code.
5. Measures to ensure the safety of personal information
Minimize and train privacy staff
We minimize the designation of data controllers and conduct regular training.
Conduct regular self-audits
We conduct regular self-audits at least once a year to ensure reliability in handling personal information.
Establish and implement an internal control plan
We have established and implemented an internal management plan for the safe handling of personal information.
Encrypting personal information
Of your personal information, passwords are stored and managed in encrypted form so only you know them, and sensitive data uses separate security features, such as encrypting file and transmission data.
Archiving and tamper-proofing access records
We keep and manage records of access to the personal information processing system for at least 6 months, and use security features to prevent access records from being falsified, stolen, or lost.
Control access for unauthorized people
Separate physical storage locations for personal information systems that store personal information and establish and operate access control procedures for them.
6. Procedures and methods for the destruction of personal information
After the purpose of collecting and using personal information is fulfilled, we will immediately destroy it. The procedure and method of destruction are as follows.
Destruction Procedures
The information entered by the user for consultation reservation, etc. is immediately destroyed by the destruction method after the purpose is achieved.
Destruction Methods
Personal information stored in electronic form is deleted using technical methods that make the records unrecoverable. Personal information printed on paper is destroyed by shredding or incineration.
7. Rights of users and legal representatives and how to exercise them
Users and their legal representatives may request access to, correction of, deletion of, suspension of processing of, or withdrawal of consent to personal information of registered users or persons under the age of 14 at any time. Please contact the person in charge of personal information management by phone or email, and we will take immediate action.
However, we may refuse to access, correct, or delete all or part of your personal information in the following cases.
-
- If access is prohibited or restricted by law
-
- If it is likely to harm the life, body, or property of another person or unreasonably infringe on the property and other interests of another person.
8. How to withdraw consent
You may withdraw your consent to the collection, use and provision of your personal information at any time. Please contact the Personal Information Protection Management Department in writing, by phone, or by fax, and we will take the necessary measures, such as destroying your personal information immediately.
9. Installation/operation of automatic personal information collection devices and refusal thereof
We may use "cookies" to store and retrieve information about you from time to time. A cookie is a string of information that a web server sends to a web browser, stores it, and sends it back to the server upon further request from the server. When you access the website, we may read the contents of the cookie on your browser, find additional information, and provide services without requiring additional input, such as your name.
The information collected through cookies is limited to the member's ID, and no other information is collected. The member's ID collected by the Company through cookies may be used for the following purposes.
-
- Deliver differentiated on-screen information based on individual interests
-
- Keep track of what you're interested in so we can personalize your next visit
-
- Analyze members' habits to gauge service changes and more
You have choices about the installation of cookies. You can choose to accept all cookies, have us notify you when a cookie is installed, or reject all cookies by going to "Tools > Internet Options > Privacy > Advanced" at the top of your web browser. If you refuse to accept cookies, you may experience some inconvenience or difficulty in using the Service or in providing the Service.
Cookies expire when you close your browser or log out.
10. privacy officer
In order to protect your personal information and handle complaints related to personal information, we have a personal information manager and handling department as follows.
Privacy Officer
-
- Name: Signer
-
- Position: President of Wonsel Medical Center
-
- Affiliation : Wonsel Medical Center
-
- Tel: 02-515-1114
-
- Email: [email protected]
You may report any privacy-related complaints arising from your use of our services to the person in charge of personal information management. We will provide a prompt and sufficient response to your report. If you need to report or consult about other privacy violations, please contact the following organizations.
-
- Individual Dispute Resolution Board (https://www.kopico.go.kr)
-
- Information Security Mark Certification Council (http://www.eprivacy.or.kr)
-
- Cybercrime Unit of the National Prosecutors' Office (http://www.spo.go.kr)
-
- National Police Agency Cyber Terrorism Response Center (http://www.cyber.go.kr)
11. Notice obligations for policy changes
In the event of any additions, deletions, or modifications to this Privacy Policy due to changes in laws, policies, or security technologies, we will notify you of the reasons and contents of the changes on our website at least 7 days prior to the implementation of the changed Privacy Policy.
Announcement Date: October 17, 2023
Effective Date: October 17, 2023