Apgujeong Eye Clinic (hereinafter referred to as 'this Clinic') highly values your personal information and complies with the Personal Information Protection Act. This Privacy Policy informs you about how the personal information you provide will be used and for what purposes, and what measures are being taken to protect your personal information. The order of this Privacy Policy is as follows:
1. Items of Personal Information Collected and Collection Methods
2. Purpose of Personal Information Collection and Use
3. Provision and Sharing of Personal Information
4. Entrustment of Personal Information Processing
5. Measures for Securing the Safety of Personal Information
6. Retention and Use Period of Personal Information
7. Procedures and Methods for Destroying Personal Information
8. Rights of Users and Legal Representatives and How to Exercise Them
9. How to Withdraw Consent / Membership
10. Installation / Operation of Automatic Personal Information Collection Devices and Refusal Thereof
11. Personal Information Protection Officer
12. Obligation to Notify of Policy Changes
1. Items of Personal Information Collected and Collection Methods
This Clinic collects only the minimum personal information necessary for service use. To use this Clinic's services, there are mandatory and optional items; even if optional items are not entered, there are no restrictions on service use.
Website Collection Items
- Mandatory items: Name, Date of Birth, ID, Password (stored encrypted)
- Optional items: Mobile phone number, Address, Visit route, Areas of interest for treatment
- Collection through information generation tools (such as visitor analysis tools)
Medical Treatment Collection Items
- Mandatory items: Name, Resident Registration Number, Alien Registration Number (for foreigners only)
※ Name and Resident Registration Number are mandatory items based on Article 14 of the Enforcement Rules of the Medical Service Act (Matters to be entered in medical records, etc.).
- Optional items: Contact information, Address, Email, Reason for visit
For short-term collection of personal information for specific purposes other than those mentioned above, separate notice will be provided, and this includes information changed by modification, as well as information at the time of subscription.
2. Purpose of Personal Information Collection and Use
This Clinic utilizes the collected personal information for the following purposes. All information provided by users will not be used for purposes other than those necessary for the purposes stated below, and prior consent will be sought if the purpose of use changes.
- Data for processing online consultation responses
- Provision of medical services for diagnosis and treatment
- Data for medical support such as billing, payment, and refunds for medical expenses
- Used for identity verification procedures for medical appointments, appointment inquiries, and membership services
- Securing smooth communication channels for delivering notices, handling complaints, and providing information on new services and events
- Sending certificates, dispatching items related to medical examinations
- Data for providing personalized content and developing new services
- Minimum analytical data required for education, research, and medical services
- Basic data for online outsourced tests and clinical trial reviews
- Provision of promotional materials such as health information and clinic newsletters
3. Provision and Sharing of Personal Information
Except with your consent or as stipulated by relevant laws and regulations, this Clinic will not use your personal information beyond the scope notified in the 'Purpose of Personal Information Collection and Use' or provide it to third parties, other companies, or institutions under any circumstances. However, exceptions are made in the following cases:
- When users have consented to disclosure in advance
- Submission of medical records to the Health Insurance Review and Assessment Service for claiming medical care benefits under the National Health Insurance Act
- When investigative agencies request information according to procedures and methods prescribed by law, etc.
4. Measures for Securing the Safety of Personal Information
- Minimization and training of personal information handlers: We minimize the designation of personal information handlers and conduct regular training.
- Regular internal audits: We conduct regular internal audits at least once a year to ensure the safety of personal information handling.
- Establishment and implementation of internal management plans: We establish and implement internal management plans for the safe processing of personal information.
- Encryption of personal information: Passwords among users' personal information are stored and managed encrypted, so only the individual can know them. Important data uses separate security functions such as encrypting files and transmitted data.
- Storage of access records and prevention of falsification/alteration: We store and manage access records to the personal information processing system for at least 6 months, and use security functions to prevent access records from being falsified, altered, stolen, or lost.
- Access control for unauthorized persons: We maintain a separate physical storage location for personal information systems that store personal information and establish and operate access control procedures for it.
5. Retention and Use Period of Personal Information
This Clinic retains personal information for the retention period stipulated by the Medical Service Act, and thereafter, destroys the personal information without delay.
- In case of membership registration: When membership is withdrawn or expelled
- In case of collection for purposes such as surveys or events: When the survey or event ends
- In case of collection for medical purposes: Retained in accordance with the period specified in Article 15 of the Enforcement Rules of the Medical Service Act, 'Preservation of Medical Records' (Retention items: Name, Address, Resident Registration Number, Medical Information)
- Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
- Records regarding the collection/processing and use of credit information: 3 years (Act on the Use and Protection of Credit Information)
- Records of visits: 3 months (Telecommunications Secret Protection Act)
However, even if the purpose of collection or the purpose for which it was provided has been achieved, your personal information may be retained if there is a need to preserve it under the provisions of laws such as the Commercial Act.
6. Procedures and Methods for Destroying Personal Information
This Clinic immediately destroys personal information once the 'Purpose of Personal Information Collection and Use' has been achieved. The procedures and methods are as follows:
- Destruction procedure: Information entered by users for membership registration, etc., is immediately destroyed by the destruction method after the purpose has been achieved.
- Destruction method: Personal information stored in electronic file format is deleted using technical methods that prevent the record from being reproduced. Personal information printed on paper is destroyed by shredding or incineration.
7. Rights of Users and Legal Representatives and How to Exercise Them
Membership registration for children under 14 years of age (hereinafter referred to as 'children') requires the consent of a legal representative when collecting personal information.
This Clinic collects minimal information from children, such as the legal representative's name and contact information, to obtain the legal representative's consent, and obtains the legal representative's consent according to the methods stipulated in the Privacy Policy.
The legal representative of a child can request access, correction, and deletion of the child's personal information. If you wish to access, correct, or delete a child's personal information, after completing the legal representative verification process, the legal representative may directly access, correct, or delete the child's personal information, or contact the Personal Information Protection Officer in writing, by phone, email, or fax, and necessary measures will be taken.
This Clinic does not provide or share information about children with third parties, and if a legal representative requests correction of errors in personal information collected from a child, the use and provision of that personal information will be prohibited until the correction is made.
8. How to Withdraw Consent / Membership
You may withdraw your consent to the collection, use, and provision of personal information at any time after membership registration. To withdraw membership, you can click on 'Membership Withdrawal' on the website, or contact the Personal Information Protection Management Department in writing, by phone, or fax, and we will take necessary measures, such as destroying your personal information, without delay.
9. Installation / Operation of Automatic Personal Information Collection Devices and Refusal Thereof
This Clinic may operate 'cookies' that frequently store and retrieve your information. A cookie refers to string information that a web server sends to a web browser, stores it, and then sends it back to the server when there is an additional request from the server. When you access the website, we can read the contents of the cookies in your browser, find additional information, and provide services without additional input such as your name upon access.
The information collected through cookies is limited to the member's ID, and no other information is collected. The member's ID collected by this Clinic through cookies may be used for the following purposes:
- Providing differentiated screen information according to individual interests
- Tracking content viewed with interest to provide personalized services on the next visit
- Analyzing members' habits to use as a basis for service reorganization, etc.
You have the option to choose whether to install cookies. In your web browser, go to 'Tools>Internet Options>Privacy>Advanced' to accept all cookies, be notified when a cookie is set, or reject all cookies. If you refuse the installation of cookies, there may be inconveniences in using the service or difficulties in providing the service. Cookies expire when the browser is closed or upon logout.
10. Personal Information Protection Officer
To protect your personal information and handle complaints related to personal information, we have a Personal Information Protection Officer or a responsible department as follows:
Personal Information Protection Officer
- Name: Kim Jun-hyun
- Position: Representative Director, Apgujeong Eye Clinic
- Affiliation: Apgujeong Eye Clinic
- Phone number: 02-3416-1001
- Email: apgujeongeyeclinic@naver.com
You may report all personal information protection-related complaints arising from your use of the company's services to the Personal Information Protection Officer or the responsible department. The company will provide prompt and sufficient answers to users' reports.
If you need to report other personal information infringements or require consultation, please contact the following organizations:
1. Personal Information Dispute Mediation Committee (www.1336.or.kr/1336)
2. Information Protection Mark Certification Committee (www.eprivacy.or.kr/02-580-0533~4)
3. Supreme Prosecutors' Office Internet Crime Investigation Center (http://icic.sppo.go.kr/02-3480-3600)
4. National Police Agency Cyber Terror Response Center (www.ctrc.go.kr/02-392-0330)
Date of Announcement: May 30, 2016 / Date of Revision: June 05, 2019
Representative Director, Apgujeong Eye Clinic
