Privacy Policy

TANG:GLE Plastic Surgery Clinic (hereinafter referred to as the "Hospital") values your personal information greatly and complies with the "Personal Information Protection Act." Effective Date: November 30, 2022 The order of this Privacy Policy is as follows: 1. Items of Personal Information Collected and Collection Methods 2. Purpose of Collection and Use of Personal Information 3. Retention and Use Period of Personal Information 4. Procedures and Methods for Destruction of Personal Information 5. Provision and Sharing of Personal Information 6. Entrustment of Personal Information Handling 7. Rights of Users and Legal Representatives and How to Exercise Them 8. How to Withdraw Consent / Cancel Membership 9. Matters Concerning the Installation/Operation of Automatic Personal Information Collection Devices and Rejection Thereof 10. Privacy Officer 11. Measures to Ensure the Security of Personal Information 12. Duty of Notification Following Policy Changes 1. Items of Personal Information Collected and Collection Methods The Hospital collects only the minimum personal information necessary to use the service during consultations. In order for you to use the Hospital's services, there are input fields during consultation; however, even if you do not enter an email address or contact information, there is no restriction on using the service. [Medical Treatment Information] - Items collected: Name, Resident Registration Number, address, contact information, medical records ※ According to the Medical Service Act, unique identification information and medical records must be mandatorily retained (separate consent not required). [Items Collected During Website Consultations] - Required items: Name, ID, password, email address, contact information (telephone number, mobile phone number) - Optional items: Agreement to receive emails - The following information may be automatically generated and collected in the process of service use or service provision tasks: : Service usage records, access logs, cookies, access IP information [Methods of Collecting Personal Information] - Personal information is collected through the following methods: Website, written forms, fax, telephone, consultation bulletin boards, email 2. Purpose of Collection and Use of Personal Information The Hospital uses the collected personal information for the following purposes. All information provided by users will not be used for purposes other than those necessary below, and if the purpose of use changes, prior consent will be sought. [Medical Treatment Information] - Providing medical care services for diagnosis and treatment, as well as administrative services such as billing, payment receipt, and refunds [Website Consultation Information] - Providing consultation services, notices via email, guidance on disease information, surveys 3. Retention and Use Period of Personal Information The Hospital destroys your personal information without delay once the purpose of collecting or receiving the personal information has been achieved. [Medical Treatment Information] - Stored in accordance with the medical record retention standards specified in the Medical Service Act [Website Consultation Information] - Even when the purpose of collection or receipt has been achieved, your personal information may be retained if there is a need to preserve it pursuant to the provisions of relevant laws, such as the Commercial Act. - Records on consumer complaints or dispute handling: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.) - Records on the collection/processing and use of credit information: 3 years (Credit Information Use and Protection Act) - Records on personal identification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.) - Records on visits: 3 months (Protection of Communications Secrets Act) 4. Procedures and Methods for Destruction of Personal Information The Hospital immediately destroys personal information after the "Purpose of Collection and Use of Personal Information" is achieved. The destruction procedures and methods are as follows: [Destruction Procedure] Information entered by the user for membership registration, etc., is immediately destroyed using the destruction methods after the purpose is achieved. [Destruction Method] Personal information stored in the form of electronic files is deleted using technical methods that make the records unrecoverable. Personal information printed on paper is shredded with a shredder or incinerated. 5. Provision and Sharing of Personal Information Except with your consent or pursuant to the provisions of relevant laws, the Hospital will not in any case use your personal information beyond the scope notified in the "Purpose of Collection and Use of Personal Information" or provide it to other individuals, companies, or institutions. - Submitting medical records to the Health Insurance Review and Assessment Service to claim medical care benefit costs under the National Health Insurance Act - Providing data processed into a form that cannot identify specific individuals when necessary for statistical compilation or academic research - Submitting information upon request from investigative agencies following the procedures and methods prescribed by laws and regulations 6. Entrustment of Personal Information Handling The Hospital entrusts personal information as follows to carry out services, and defines necessary matters in the entrustment contract to ensure that personal information is safely managed in accordance with relevant laws. The Hospital’s consigned personal information processing agency and the scope of entrusted work are as follows: - Consignee: NOW DESIGN - Entrusted work details: Website management, operation, and maintenance - Entrusted personal information items: Customer personal information on the website - Retention and use period of personal information: Until the termination of the consignment contract 7. Rights of Users and Legal Representatives and How to Exercise Them Membership registration for children under the age of 14 (hereinafter referred to as "children") is conducted through a separate form written in plain language that is easy for children to understand, and consent from a legal representative is mandatory when collecting personal information. To obtain consent from the legal representative, the Hospital collects the minimum necessary information, such as the legal representative's name and contact information, from the child, and obtains the legal representative's consent in accordance with the methods prescribed in the Privacy Policy. A child's legal representative may request to inspect, correct, or delete the child's personal information. If you wish to inspect, correct, or delete a child's personal information, click "Modify Member Information" to go through the legal representative verification process, and the legal representative may directly inspect, correct, or delete the child's personal information, or contact the Privacy Officer in writing, by phone, or by fax, and necessary measures will be taken. The Hospital does not provide or share information regarding children with third parties, and if a legal representative requests the correction of errors in personal information collected from a child, the use and provision of such personal information will be prohibited until the errors are corrected. ※ Personal information required to be preserved by law cannot be modified or deleted during the retention period, even upon request. 8. How to Withdraw Consent / Cancel Membership You may withdraw your consent to the collection, use, and provision of personal information agreed upon during membership registration at any time. To cancel your membership, click "Cancel Membership" in My Page on the Hospital's website to undergo the identity verification process and directly cancel your membership, or contact the Privacy Officer in writing, by phone, or by fax, and necessary actions such as destroying your personal information without delay will be taken. 9. Matters Concerning the Installation/Operation of Automatic Personal Information Collection Devices and Rejection Thereof The Hospital operates "cookies" that store and retrieve your information from time to time. A cookie is a very small text file sent to your browser by the server used to operate the Hospital's website and is stored on your computer's hard drive. The Hospital uses cookies for the following purposes. You have the choice to allow or refuse the installation of cookies. Therefore, by configuring options in your web browser, you can allow all cookies, undergo confirmation each time a cookie is saved, or refuse the storage of all cookies. If you refuse the installation of cookies, there may be difficulties in providing some services. 10. Privacy Officer To protect your personal information and handle complaints related to personal information, the Hospital has designated a Privacy Officer as follows: [Privacy Officer] Name: Chang Hyun Oh Affiliation: TANG:GLE Plastic Surgery Clinic Position: Privacy Officer Phone Number: 02-542-8427 Email: [email protected] You may report any personal information protection-related complaints arising from using the Hospital's services to the Privacy Officer. The Hospital will provide prompt and sufficient answers to reports made by users. If you need to report or consult about other personal information infringements, please contact the following agencies: Personal Dispute Mediation Committee (http://www.1336.or.kr / 1336) Supreme Prosecutors' Office Cybercrime Investigation Department (http://www.spo.go.kr / (02) 3480-3573) National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330) 11. Measures to Ensure the Security of Personal Information The Hospital establishes various security devices as technical measures to protect users' personal information. All information sent by users is safely stored and managed in a security system protected by firewall devices. In addition, as administrative measures for the protection of users' personal information, the Hospital establishes procedures necessary for accessing and managing users' personal information, minimizes the number of personnel handling users' personal information, and conducts continuous security training. Furthermore, we designate users of the system that processes personal information, grant user passwords, and renew them periodically. 12. Duty of Notification Following Policy Changes This Privacy Policy was enacted on November 23, 2022. If there are additions, deletions, or modifications of content in accordance with changes in laws, policies, or security technologies, the reasons for and contents of the changes will be notified through the Hospital's website at least 7 days prior to the enforcement of the changed Privacy Policy. Notification Date: November 23, 2022 Effective Date: November 30, 2022