Privacy Policy
AB Plastic Surgery (hereinafter the "Clinic") places great importance on the protection of your personal information and complies with the Personal Information Protection Act.
Effective Date: August 20, 2020
This Privacy Policy is organized as follows.
- Items of Personal Information Collected and Collection Methods
- Purpose of Collection and Use of Personal Information
- Retention and Use Period of Personal Information
- Procedures and Methods for Destruction of Personal Information
- Provision and Sharing of Personal Information
- Rights of Users and Legal Representatives and How to Exercise Them
- Withdrawal of Consent / Membership Termination
- Installation and Operation of Automatic Personal Information Collection Devices and Their Refusal
- Personal Information Protection Officer
- Measures to Ensure the Security of Personal Information
- Duty to Notify of Policy Changes
1. Items of Personal Information Collected and Collection Methods
The Clinic collects only the minimum personal information necessary to provide services during consultation. There are input fields required to use the Clinic's services during consultation; however, not entering items such as email or contact information does not restrict service use.
[Medical Treatment Information]
- Items collected: Name, passport number, date of birth, nationality, address, contact information, messenger ID, medical records
* Unique identification information and medical records must be retained under the Medical Service Act (separate consent not required)
[Items Collected During Website Consultation]
- Items collected: Name, ID, password, email, date of birth, nationality, contact information (phone number, mobile number), chat application ID
- The following information may be automatically generated and collected during the use of the service or in the course of providing services: service usage records, access logs, cookies, access IP information
[Methods of Collecting Personal Information]
Personal information is collected through the following methods.
Website, written forms, fax, phone, consultation board, email
2. Purpose of Collection and Use of Personal Information
The Clinic uses the personal information collected for the following purposes. All information provided by users is not used for any purpose other than that necessary for the following purposes, and prior consent will be obtained if the purpose of use changes.
[Medical Treatment Information]
- Providing medical services for diagnosis and treatment, and administrative services such as billing, payment, and refunds
[Website Consultation Information]
- Providing consultation services, notices via email, guidance on medical information, and surveys
3. Retention and Use Period of Personal Information
The Clinic destroys your personal information without delay once the purpose of collection or the purpose for which it was provided has been achieved.
[Medical Treatment Information]
- Retained in accordance with the medical record retention standards specified in the Medical Service Act
[Website Consultation Information]
Even after the purpose of collection or the purpose for which it was provided has been achieved, your personal information may be retained if there is a need for preservation under laws such as the Commercial Act.
- Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
- Records of credit information collection, processing, and use: 3 years (Credit Information Use and Protection Act)
- Records of identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection)
- Records of visits: 3 months (Protection of Communications Secrets Act)
4. Procedures and Methods for Destruction of Personal Information
The Clinic destroys personal information immediately once the "Purpose of Collection and Use of Personal Information" has been achieved. The procedures and methods of destruction are as follows.
[Destruction Procedure]
Information entered by users for membership registration, etc. is destroyed immediately by the destruction method once its purpose has been achieved.
[Destruction Method]
Personal information stored in electronic file form is deleted using technical methods that make the records unrecoverable.
Personal information printed on paper is destroyed by shredding or incineration.
5. Provision and Sharing of Personal Information
Except with your consent or as provided by relevant laws and regulations, the Clinic does not use your personal information beyond the scope notified in "Purpose of Collection and Use of Personal Information," nor does it provide such information to any other person, company, or institution.
- Submission of medical records to the Health Insurance Review and Assessment Service for claiming medical care benefit costs under the National Health Insurance Act
- Provision in a form in which specific individuals cannot be identified, when necessary for statistical compilation or academic research
- Submission in accordance with procedures and methods prescribed by law when requested by an investigative agency, etc.
6. Rights of Users and Legal Representatives and How to Exercise Them
Membership registration for children under the age of 14 (hereinafter "children") is conducted through a separate form written in plain language that is easy for children to understand, and the consent of a legal representative is always obtained when collecting personal information.
The Clinic collects the minimum information necessary, such as the legal representative's name and contact information, from the child in order to obtain the legal representative's consent, and obtains such consent in accordance with the methods specified in the Privacy Policy.
The legal representative of a child may request access to, correction of, or deletion of the child's personal information. To view, correct, or delete a child's personal information, the legal representative may do so directly by clicking on "Edit Membership Information" after going through the identity verification procedure for the legal representative, or may contact the Personal Information Protection Officer in writing, by phone, or by fax, and necessary measures will be taken.
The Clinic does not provide or share information about children with third parties, and if a legal representative requests correction of an error in personal information collected from a child, the use and provision of such personal information is prohibited until the error is corrected.
* Personal information that is legally required to be retained cannot be modified or deleted within the retention period even if requested.
7. Withdrawal of Consent / Membership Termination
You may withdraw at any time the consent you gave to the collection, use, and provision of personal information at the time of membership registration.
To terminate membership, you may click "Membership Termination" in My Page on the Clinic's website and terminate your membership directly after going through the identity verification procedure, or contact the Personal Information Protection Officer in writing, by phone, or by fax, and necessary measures, including the destruction of your personal information, will be taken without delay.
8. Installation and Operation of Automatic Personal Information Collection Devices and Their Refusal
The Clinic operates "cookies" that periodically store and retrieve your information. A cookie is a very small text file sent to your browser by the server used to operate the Clinic's website, and is stored on the hard disk of your computer.
The Clinic uses cookies for the following purposes. You have the option regarding the installation of cookies. Accordingly, you may set options in your web browser to allow all cookies, to be prompted for confirmation each time a cookie is stored, or to refuse the storage of all cookies.
If you refuse to install cookies, you may experience difficulty in using some services.
9. Personal Information Protection Officer
The Clinic has designated a Personal Information Protection Officer as follows to protect your personal information and handle complaints related to personal information.
[Personal Information Protection Officer]
Name: Seung-hyun An
Affiliation: AB Clinic
Position: Personal Information Protection Officer
Phone: +82-2-512-1288
Email: [email protected]
You may report any complaints related to personal information protection that arise while using the Clinic's services to the Personal Information Protection Officer. The Clinic will provide prompt and sufficient responses to reports from users. If you need to report or consult regarding other personal information infringements, please contact the following institutions.
- Personal Information Dispute Mediation Committee (http://www.1336.or.kr / 1336)
- Supreme Prosecutors' Office Cyber Crime Investigation Division (http://www.spo.go.kr / 02-3480-3573)
- National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / 02-392-0330)
10. Measures to Ensure the Security of Personal Information
The Clinic has established various security devices as technical measures to protect users' personal information. All information you send is safely stored and managed in a security system protected by a firewall.
In addition, as administrative measures to protect users' personal information, the Clinic has established procedures necessary for access to and management of users' personal information, minimized the number of personnel handling users' personal information, and provides ongoing security training.
The Clinic also designates users of systems that process personal information, assigns user passwords, and will renew them regularly.
11. Duty to Notify of Policy Changes
This Privacy Policy was enacted on August 20, 2020, and in the event of any addition, deletion, or amendment of its contents due to changes in laws, policies, or security technology, the reasons for and details of such changes will be announced through the Clinic's website at least 7 days before the amended Privacy Policy takes effect.
Announcement Date: August 20, 2020
Effective Date: August 27, 2020
