개인정보 처리방침
Ppomnaege Bbae Clinic (hereinafter referred to as “the Clinic”) considers the protection of personal information on the internet to be extremely important, and does its utmost to ensure that any personal data provided by users in using our services is protected. Accordingly, the Clinic has established a personal data protection policy based on relevant laws to which providers of information and communication services must adhere, including the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Act on Promotion of Information and Communications Network Utilization and Information Protection, and we comply with that policy.
This Privacy Policy may be changed from time to time due to changes in government laws or guidelines or internal policy changes of the Clinic. In the event of any changes, the updated contents will be immediately reflected in the Privacy Policy posted on the homepage’s initial screen. Through this Privacy Policy, users will be able to understand what purposes and in what methods the collected personal information is being used, and how it is being safely protected.
The order of this Privacy Policy is as follows:
- 01.Items and Methods of Personal Data Collected
- 02.Purposes of Collection and Use of Personal Data
- 03.Retention Period and Use Duration of Personal Data
- 04.Procedures and Methods for Destruction of Personal Data
- 05.Provision and Sharing of Personal Data
- 06.Methods of Withdrawal of Consent / Membership Withdrawal
- 07.Installation / Operation of Automatic Personal Data Collection Devices and Denial Thereof
- 08.Person Responsible for Personal Data Management
- 09.Collection of User Behavior Information Online and Personalized Advertising Services
- 10.Measures to Ensure Security of Personal Data
- 11.Obligation to Notify Upon Policy Changes
- 12.Entrustment of Handling of Personal Data
01.Items and Methods of Personal Data Collected
The Clinic collects only the minimum personal data necessary for the use of our services.
[Items Collected When Submitting a Website Consultation Request]
Collected Items: Name, Contact Number, Email
The following information may be created automatically and collected in the process of using the service or in the conduct of service provision tasks: Service usage records, access logs, cookies, access IP informationMethods of Collection of Personal Data: We collect personal data by the following means (website, real‑time chat, KakaoTalk consultation, price consultation, phone consultation).
02.Purposes of Collection and Use of Personal Data
The Clinic uses the collected personal data for the following purposes. All information provided by the user will not be used for any purpose other than those stated below, and if the purpose of use is changed, prior consent will be obtained.
[Website Consultation Request Information]
- Required information: To provide medical consultation and guidance via phone, text, or KakaoTalk
Optional information: To deliver Clinic news and notices, disease information notifications, surveys, complaint handling etc., via MMS, SNS, SMS, email; to secure smooth communication channels
03.Retention Period and Use Duration of Personal Data
The Clinic will promptly destroy your personal data when the purpose of collection or provision has been fulfilled.
[Website Consultation Request Information]
- Until the consultation purpose is achieved. However, even after the purpose of collection or provision has been fulfilled, if there is a necessity to retain data under commercial law or other laws, your personal data may be retained.
Records concerning consumer complaints or dispute resolution: 3 years (per the Act on Consumer Protection in Electronic Commerce etc.)
Records concerning the collection / processing / use of credit information: 3 years (according to the Credit Information Use and Protection Act)
Records of site visits: 3 months (Protection of Communications Secrets Act)
Records for verification of identity: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection)
04.Destruction Procedures and Methods of Personal Data
After the ‘Purposes of Collection and Use of Personal Data’ have been accomplished, the Clinic will immediately destroy the personal data. The procedures and methods of destruction are as follows:
[Destruction Procedure]
- Information entered for purposes such as membership registration shall be destroyed immediately after the purpose is fulfilled.
[Destruction Method]
- Personal data stored in electronic file form will be deleted using technical methods that make record reproduction impossible. Personal data printed on paper will be destroyed by shredding or incineration.
05.Provision and Sharing of Personal Data
Except in cases where there is your consent or where required by relevant laws, the Clinic will not use or provide your personal data beyond the scope notified under ‘Purposes of Collection and Use of Personal Data’.
- Submission of medical records for the purpose of billing treatment costs to the Health Insurance Review & Assessment Service as required under the National Health Insurance Act
- Provision of processed data in a form that cannot identify specific individuals for statistical or academic research purposes
- Disclosure under the procedures and methods prescribed by law when requested by investigative authorities, etc.
06.Methods for Withdrawal of Consent / Membership Withdrawal
You may withdraw your consent for the collection, use, and provision of personal data you agreed to at any time. To withdraw membership, click ‘Membership Withdrawal’ in My Page on the Clinic’s website after completing identity verification, or contact the person responsible for personal data management by written request, phone, or fax; necessary measures such as the destruction of your personal data will be taken without delay.
07.Matters Regarding Installation / Operation of Automatic Personal Data Collection Devices and Their Refusal
The Clinic operates ‘cookies’, which are small text files sent by the server of the Clinic’s website to your browser and stored on your computer’s hard drive. The Clinic uses cookies for the following purposes. You have the choice regarding cookie installation. Therefore, you may set your browser options to allow all cookies, to confirm each time a cookie is stored, or to refuse all cookie storage. If you refuse cookie installation, some services may be difficult to provide.
08.Person Responsible for Personal Data Management
To protect your personal data and handle any complaints related to personal data, the Clinic assigns the following entity as the person responsible for personal data management.
[Personal Data Management Officer]
Person in Charge:
Handling Officer:
Position:
Affiliation:
Contact Number:
Email Address:You may report any complaints related to personal data protection arising from use of the Clinic’s services to the Data Management Officer. The Clinic will promptly provide a sufficient response to user reports. If you need consultation or reporting of personal information infringement, please contact the following organizations:
- Personal Dispute Mediation Committee
(http://www.1336.or.kr / 1336) - Information Protection Mark Certification Committee
(http://www.eprivacy.or.kr / (02) 580-0533~4) - Cyber Crime Investigation Unit of the Supreme Prosecutors’ Office
(http://www.spo.go.kr / (02) 3480-3573) - Cyber Terror Response Center of the National Police Agency
(http://www.ctrc.go.kr / (02) 392-0330)
09.Collection of Online User Behavior Information and Personalized Advertising Services
The Company permits advertising service providers listed below to collect user behavior information generated within the Company’s services via analysis tools, and to use it for the purpose of delivering personalized advertising to users.
- -
10.Measures to Ensure Security of Personal Data
As technical measures to protect the personal data of users, the Clinic implements various security devices. All information sent by users is safely stored/managed by a secure system protected by firewalls. In addition, as administrative measures, the Clinic establishes necessary procedures for access to and management of personal data, limits the personnel handling personal data to the minimum, and conducts ongoing security education. The Clinic also designates users of systems that process personal data, assigns passwords to those users, and renews them periodically.
11.Obligation to Notify Upon Policy Changes
This Privacy Policy was established on March 20, 2012, and in the event of additions, deletions or modifications due to changes in laws, policies, or security technologies, the Clinic will provide notice of the reasons and contents of the changes on the Clinic’s website at least 7 days prior to the implementation of the revised Privacy Policy.
12.Entrustment of Handling of Personal Data
For improved services, the Clinic has contracted with third‑party vendors to collect and analyze members’ personal data. As required by relevant laws, necessary stipulations are made in the entrustment agreement to ensure that personal data is managed safely.
- Details regarding the outsourcing contractors, the scope of entrusted tasks, and the types of shared information are posted via email, telephone or on the website.
During the contract period, the service provider is obligated to follow instructions regarding personal data protection, maintain confidentiality of personal data, and be prohibited from providing it to third parties. The terms of the contract are stored electronically.
Currently, the entity entrusted with personal data handling and its responsibilities are as follows:
- Recipient: CheeseDesign
- Items Provided: Name, Consultation Request Items, Phone Number
- Purpose of Use: Utilization for marketing material through analysis of request items
- Entrustment Period: From the start date of the contract through to the end date of the contract