Privacy Policy
'SINSANG Plastic Surgery' (hereinafter 'the Clinic') values your personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection. Through this Privacy Policy, the Clinic informs you of the purposes and methods for which the personal information you provide is used and what measures are being taken to protect personal information.
1. Items of Personal Information Collected and Method of Collection
The Clinic collects only the minimum personal information necessary to use the service during consultation. There are input fields during consultation for using the Clinic's services, but there is no restriction on using the service even if you do not enter your email, contact information, etc. The Clinic collects the following personal information for membership registration, consultation, service applications and more.
- Items collected: Name, login ID, password, email, contact information (telephone number, mobile phone number), date of birth
- If you sign up with easy login (Kakao/Naver), the year of birth and birthday information provided by that service is received and used as your date of birth (limited to the items the user has agreed to provide).
The following information may be automatically generated and collected in the course of using the service or processing service provision: service usage records, access logs, cookies, access IP information
- Method of collecting personal information: Website, written or electronic forms, fax, telephone, consultation board, email, etc.
2. Purpose of Collection and Use of Personal Information
The Clinic uses the collected personal information for the following purposes. All information provided by users will not be used for any purpose other than those necessary for the purposes below, and prior consent will be obtained if the purpose of use changes.
- Website member information: Booking appointments through the website, checking bookings and providing member services, sending clinic news and disease information by email, and surveys
- Use for marketing and advertising: Delivering promotional information such as events, identifying access frequency, or statistics on members' use of services
- Date of birth: To verify the membership restriction for children under 14, and for usage statistics by age group
3. Retention and Use Period of Personal Information
In principle, the Clinic destroys personal information without delay once the purpose of its collection and use has been achieved. However, even after the purpose has been achieved, if it is necessary to retain the information under laws such as the Commercial Act for clinic news, disease information and surveys sent by email, your personal information may be retained for the period specified below.
The period of use of personal information and the procedure and method of destruction are as follows.
- Retention and use period of personal information
3 years from the date of collection of personal information (destroyed immediately upon request to withdraw consent to provide personal information or upon membership withdrawal)
- Date of birth: Destroyed without delay upon membership withdrawal.
4. Procedure and Method for Destruction of Personal Information
[Destruction Procedure]
Information you entered for membership registration, etc. is transferred to a separate DB (or a separate filing cabinet for paper) after its purpose has been achieved, stored for a certain period in accordance with internal policies and other information protection grounds under relevant laws (see Retention and Use Period), and then destroyed. Personal information transferred to a separate DB is not used for any purpose other than retention unless required by law.
[Destruction Method]
Personal information stored in electronic file form is deleted using technical methods that make the records unrecoverable.
Personal information printed on paper is destroyed by shredding or incineration.
5. Provision and Sharing of Personal Information
Except with your consent or as required by relevant laws, the Clinic will under no circumstances use your personal information beyond the scope notified in the "Purpose of Collection and Use of Personal Information" or provide it to other persons, companies or institutions.
- Submission of medical records to the Health Insurance Review & Assessment Service to claim medical care benefit costs under the National Health Insurance Act
- When necessary for statistics or academic research, provided in a form that cannot identify a specific individual
- Submission at the request of investigative agencies in accordance with procedures and methods prescribed by law, etc.
6. Outsourcing of the Handling of Collected Personal Information
The Clinic outsources personal information as follows to provide its services, and in accordance with relevant laws, specifies the necessary matters in the outsourcing contract so that personal information is managed safely. The Clinic's personal information processing contractors and outsourced tasks are as follows.
[Outsourced Tasks: IT-related work]
-Outsourcer: SINSANG Plastic Surgery
-Contractor: Jeonneung IT
-Outsourced personal information items: Name, hospital registration number, date of birth, phone number, photos taken at the clinic, consultation details, etc.
-Retention and use period of personal information: Until the end of the outsourcing contract
[Outsourced Tasks: Website management, operation and maintenance, booking system]
-Outsourcer: SINSANG Plastic Surgery
-Contractor: Eeum Creative
-Outsourced personal information items: Name, hospital registration number, date of birth, phone number, event application details, etc.
-Retention and use period of personal information: Until the end of the outsourcing contract
① In accordance with the contract, "Eeum Creative" performs the following personal information processing tasks for the purpose of promoting SINSANG Plastic Surgery's services or soliciting sales.
1. Searching and using patients' personal information collected through SINSANG Plastic Surgery events, etc.
2. Searching and using patients' personal information for in-person consultations and booking confirmations, etc.
② In accordance with the contract, "Eeum Creative" performs the following personal information processing tasks for the purpose of handling bookings on behalf of SINSANG Plastic Surgery's patients.
1. Searching and using the personal information of patients who wish to make a booking, etc.
2. Searching and using patients' personal information recorded in SINSANG Plastic Surgery's booking system, etc.
3. Creating, recording, storing, searching and correcting patients' personal information to handle booking tasks such as confirming, recording and modifying bookings in the booking system
[Overseas Transfer of Personal Information and Use of Automated Input Prevention (Google reCAPTCHA)]
The Clinic uses Google LLC's reCAPTCHA service to prevent automated input (spam) when submitting consultation requests and Real Model applications. In this process, the user's device and browser information, IP address and screen usage information may be transmitted to and processed by Google, and Google's Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms) apply to that information.
-Recipient: Google LLC (USA)
-Items transferred: Device and browser information, IP address, screen usage information
-Time and method of transfer: Transmitted over the network when using the consultation request or Real Model application screens
-Purpose of transfer: Prevention of automated input (spam)
-Retention and use period: In accordance with Google's policies
7. Rights of Users and Legal Representatives and How to Exercise Them
When a patient requests access to, correction or deletion of personal information, the Clinic responds sincerely to the request and processes it without delay. To protect personal information, procedures for access to, correction or deletion of a patient's personal information by telephone, mail, FAX or other application methods other than an in-person visit are not provided.
A. Access to Personal Information
① Patients may visit the Clinic to request access to their personal information, and the Clinic will respond promptly.
B. Correction and Deletion of Personal Information
① When a patient requests correction or deletion of personal information and it is recognized that correction or deletion is necessary, such as when the personal information is found to contain errors, the Clinic will correct or delete it without delay. The Clinic may request supporting documents necessary to verify the facts of the correction or deletion.
② When a patient requests access to, correction or deletion of their personal information, the Clinic verifies their identity by checking an identification document such as a resident registration card, passport or driver's license.
③ If the Clinic has a legitimate reason to refuse access to, correction or deletion of all or part of personal information, it will notify the patient and explain the reason.
④ The legal representative of a child under the age of 14 may request access to, correction, deletion or suspension of processing of the child's personal information, and must submit proof of their relationship with the child and identification.
[Correction and Deletion of Personal Information on the Website]
- To view or modify their personal information, users may click 'Change Personal Information' (or 'Edit Member Information', etc.), and to cancel membership (withdraw consent), click "Withdraw Membership"; after completing identity verification, they can directly view, correct or withdraw.
Alternatively, if you contact the Personal Information Management Officer in writing, by phone or by email, we will take action without delay.
- If you request correction of an error in your personal information, the personal information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, the result of the correction will be notified to the third party without delay so that the correction can be made.
- Personal information terminated or deleted at the user's request is processed in accordance with the "Retention and Use Period of Personal Information Collected by the Clinic," and the Clinic ensures it cannot be viewed or used for any other purpose.
8. Personal Information Protection Officer
The Clinic has security devices in place as technical measures to protect users' personal information. All information provided by users is safely protected and managed by security equipment such as firewalls. In addition, as administrative measures to protect users' personal information, the Clinic has established procedures necessary for access to and management of users' personal information, limits the personnel who process users' personal information to a minimum, and provides ongoing security training.
In addition, we designate users of systems that process personal information, assign user passwords and renew them regularly.
[Personal Information Management Officer]
- Officer in Charge: Lee Young-jae
- Contact: 02-546-0560
- E-MAIL : shinsangps@naver.com
If you need to report or consult about other personal information infringements, please contact the following organizations.
Personal Information Infringement Report Center (Tel: 1336) http://www.cyberprivacy.or.kr
Supreme Prosecutors' Office Internet Crime Investigation Center (Tel: 02-3480-3600) http://icic.sppo.go.kr
Korean National Police Agency Cyber Terror Response Center (Tel: 02-392-0330) http://www.ctrc.go.kr