<Personal Information Handling Policy>

U&U Plastic Surgery Clinic (hereinafter referred to as ‘the clinic’) attaches great importance to the protection of your personal information and complies with 『Personal Information Protection Act
The clinic informs you through its privacy policy of how the personal information you provide is being used and what measures are being taken to protect your personal information.
The order of the personal information handling policy is as follows.

1. Items and collection methods of personal information collected
2. Purpose of collection and use of personal information
3. Retention and use period of personal information
4. Personal information destruction procedures and methods
5. Provision and sharing of personal information
6. Entrustment of handling of collected personal information
7. Rights of users and legal representatives and methods of exercising them
8. Withdrawal of consent/withdrawal of membership
9. Matters related to installation/operation and rejection of automatic personal information collection devices
10. Personal information manager
11. Measures to ensure the safety of personal information
12. Notification obligation due to policy changes

 

1. Items and collection methods of personal information collected

The clinic collects only the minimum amount of personal information required to use the service when registering as a member.
In order for you to use the clinic’s services, there are required and optional items when registering as a member, and even if you do not enter optional items such as whether to receive emails, there are no restrictions on using the service.
A. [Medical Information] – Collection items: name, date of birth, address, contact information, medical record
※ In accordance with the Medical Service Act, it is mandatory to retain unique identification information and medical treatment information (separate consent not required).
B. [Items collected when registering as a member of the website]
– Required Items: name, ID, password, address, contact information (phone number, mobile phone number), email address
– Optional Items: birthday, whether to receive text messages, whether to receive emails, areas of interest
– The following information may be automatically generated and collected during the service use process or service provision process. : Service usage records, access logs, cookies, access IP information
C. [Personal information collection method] – Personal information is collected in the following methods.
･ Website, written form, fax, phone, consultation bulletin board, email

 

2. Purpose of collection and use of personal information

The clinic uses the collected personal information for the following purposes.
All information provided by users will not be used for purposes other than those necessary for the following purposes, and prior consent will be sought if the purpose of use changes.
A. [Medical Information] – Providing medical services for diagnosis and treatment and administrative services such as billing, payment, and refund.
B. [Homepage Member Information]
– Required Information: Reservation of treatment through the website, provision of reservation inquiry and membership services, writing of posts on online bulletin boards (1:1 consultation/private consultation/post-surgery consultation/review, etc.)
– Optional Information: Hospital news, disease information, surveys, disability handling and personalized services for individual members, statistical collection on service use, new services and information via email. However, the clinic does not collect sensitive personal information that may violate users’ basic human rights.
– Optional Information: Hospital news, disease information, surveys, disability handling and personalized services for individual members, statistical collection on service use, new services and information via email. However, the clinic does not collect sensitive personal information that may violate users’ basic human rights.

3. Retention and use period of personal information

The clinic destroys your personal information without delay when the purpose of collecting or providing personal information has been achieved.
A. [Medical Information] – Stored in accordance with the medical record storage standards specified in the Medical Service Act
B. [Homepage Member Information]
– When you withdraw from membership or are expelled from membership. However, even if the purpose of collection or provision has been achieved, your personal information may be retained if there is a need to preserve it pursuant to the provisions of laws such as the Commercial Act.
– Records of consumer complaints or dispute resolution : 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
– Records of collection/processing and use of credit information, etc. : 3 years (Act on Use and Protection of Credit Information)
– Records of Identity Verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.)
– Records of Visits : 3 months (Communication Secrets Protection Act)

 

4. Personal information destruction procedures and methods

The clinic destroys personal information immediately after 『Purpose of collection and use of personal information』 is achieved. Destruction procedures and methods are as follows.
A. [Destruction Procedure] The information entered by the user for membership registration is immediately destroyed by the destruction method after the purpose has been achieved.
B. [Destruction method] Personal information stored in electronic file format is deleted using a technical method that renders the record unrecoverable.
Personal information printed on paper is destroyed by shredding or incineration.

 

5. Provision and sharing of personal information

The clinic will not, under any circumstances, use your personal information beyond the scope notified by 『Purpose of collection and use of personal information』 or provide it to any other person or company or institution, except with your consent or in accordance with the provisions of relevant laws and regulations.
– Submission of medical records to the Health Insurance Review and Assessment Service to claim nursing care benefits in accordance with the National Health Insurance Act.
– If necessary for statistical writing or academic research, it is processed and provided in a form that does not identify specific individuals.
– Submission when requested by an investigative agency in accordance with the procedures and methods prescribed by law, etc.

 

6. Entrustment of handling of collected personal information

The clinic entrusts personal information as follows to provide services, and stipulates necessary matters to ensure that personal information is safely managed when entering into a consignment contract in accordance with relevant laws and regulations.
The clinic’s personal information consignment processing agency and consignment details are as follows.
Trustee: YourDev
Consignment work details: Homepage maintenance, access records, management, member management
Entrusted personal information items: Name, address, phone number
Personal information retention and use period: Until the end of the consignment contract

 

7. Rights of users and legal representatives and methods of exercising them

Membership registration for children under the age of 14 (hereinafter referred to as “children”) is done through a separate form written in plain language that is easy for children to understand, and the consent of a legal representative is always obtained when collecting personal information.
The clinic collects minimum information from children, such as the name and contact information of the legal representative, in order to obtain the consent of the legal representative, and obtains the consent of the legal representative in accordance with the method stipulated in the personal information handling policy.
Children’s legal representatives may request to view, correct, and delete children’s personal information. If you wish to view, correct, or delete children’s personal information, after clicking Edit Member Information and going through the legal representative confirmation process, the legal representative can directly view, correct, or delete the child’s personal information, or contact the personal information protection manager in writing, by phone, or fax, and the necessary actions will be taken.
The clinic does not provide or share information about children with third parties, and if a legal representative requests correction of an error in personal information collected from children, the clinic prohibits the use or provision of such personal information until the error is corrected.
※ Personal information that is required to be stored by law cannot be modified or deleted within the retention period, even upon request.

 

8. Withdrawal of consent/withdrawal of membership

You may withdraw your consent to the collection, use and provision of personal information when registering as a member at any time. To withdraw the membership, If you apply for membership withdrawal directly by clicking 『Membership Withdrawal』 in My Page on the homepage, the personal information manager will confirm the withdrawal request and withdrawal will be completed within 10 days from the date of application. Alternatively, if you contact the personal information manager in writing, by phone, or fax, the clinic will take necessary measures, including destroying your personal information, without delay.

 

9. Matters related to installation/operation and rejection of automatic personal information collection devices

The clinic operates ‘cookie’ that store and retrieve your information from time to time. A cookie is a very small text file that the server used to run our website sends to your browser and is stored on your computer’s hard disk. The clinic uses cookies for the following purposes.
You have the option to install cookies. Therefore, by setting options in your web browser, you can allow all cookies, confirm each time a cookie is saved, or refuse to save all cookies.
If you refuse to install cookies, it may be difficult to provide some services.

 

10. Personal information manager

In order to protect your personal information and handle complaints related to personal information, the clinic has a personal information manager as listed below.
Name : Kim Ki-gap
Position : Representative Director
Affiliation : U&U Plastic Surgery Clinic
Contact: 02-544-6996
You can report all personal information protection-related complaints that arise while using our services to the personal information manager.
The clinic will promptly and sufficiently respond to user reports.
If you need to report or consult about other personal information infringements, please contact the organizations below.
･ Personal Information Dispute Mediation Committee (http://www.1336.or.kr / 1336)
･ Information Protection Mark Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533~4)
･ Supreme Prosecutors’ Office Cyber Crime Investigation Team (http://www.spo.go.kr / (02) 3480-3573)
･ National Police Agency Cyber Terror Response Center ( http://www.ctrc.go.kr / (02) 392-0330)

 

11. Measures to ensure the safety of personal information

When handling users’ personal information, the clinic is taking the following technical/administrative measures to ensure safety and prevent personal information from being lost, stolen, leaked, altered or damaged.
A. [Password Encryption] The password you set when signing up for the site is encrypted, stored and managed, so only you know it, and personal information can only be checked and changed by the person who knows the password. However, if you request changes directly to the personal information protection manager due to difficulties in use, you can change your information after verifying your identity in writing, by phone, fax, or email.
B. [Measures against hacking, etc.] The clinic is doing its best to prevent members’ personal information from being leaked or damaged by hacking or computer viruses.
The clinic regularly backs up data in preparation for damage to personal information, and uses the latest anti-virus programs to prevent users’ personal information or data from being leaked or damaged. Also, the clinic encrypts and stores users’ important personal information (resident registration number, etc.) and safely transmits personal information over the network through encrypted communication. The clinic uses an intrusion prevention system to control unauthorized access from the outside, and strives to equip all possible technical devices to systematically secure security.
[Minimization and training of employees handling personal information] The clinic’s staff handling personal information is limited to the person in charge, a separate password is given for this purpose, which is updated regularly, and regular/occasional training is provided to the person in charge.
However, the clinic is not responsible for any problems arising from leakage of personal information such as phone number, password, or resident registration number due to the user’s carelessness or Internet problems.

 

12. Notification obligation due to policy changes

This personal information handling policy was revised on the date specified below and if there are additions, deletions, or modifications to content due to changes in laws, policies, or security technology, the clinic will notify the reason and content of the change on the clinic’s website at least 7 days prior to the implementation of the changed personal information handling policy.

･ Effective date: June 15, 2020