[Privacy Policy]
1mm Plastic Surgery (hereinafter referred to as "the Clinic") places great importance on the protection of your personal information and complies with the Personal Information Protection Act. Through this Privacy Policy, the Clinic informs you of the purposes and methods for which the personal information you provide is used, as well as the measures being taken to protect your personal information.
The order of this privacy policy is as follows:
1. Items of personal information collected and collection method
2. Purpose of collection and use of personal information
3. Retention and use period of personal information
4. Procedure and method for destroying personal information
5. Provision and sharing of personal information
6. Handling of collected personal information
7. Rights of users and legal representatives and methods of exercising them
8. How to withdraw consent/cancel membership
9. Matters concerning the installation/operation of automatic personal information collection devices and their refusal
10. Personal Information Management Officer
11. Measures to ensure the security of personal information
12. Obligation to notify of policy changes
1. Items of personal information collected and collection method
When registering for membership, we collect only the minimum personal information necessary to use our services. To use our services, you must fill in both required and optional fields. However, optional fields, such as email subscription preferences, do not require you to enter them to use our services.
❍ [Medical Information]
- Collected items: name, resident registration number, address, contact information, medical records
※ Unique identification information and medical information must be retained by law (separate consent not required)
❍ [Items Collected Upon Website Membership Registration]
- Required items: Name, ID, Password, Email, Contact information (Phone number, Mobile number)
- Optional: Email reception
- The following information may be automatically generated and collected during the service use process or service provision process: service use records, access logs, cookies, and access IP information.
❍ [Method of Collecting Personal Information]
- We collect personal information in the following ways:
･ Website, written form, fax, phone, consultation bulletin board, email
2. Purpose of collection and use of personal information
We use the collected personal information for the following purposes.
All information provided by users will not be used for any purpose other than those required below, and prior consent will be obtained if the purpose of use changes.
❍ [Medical Information]
- Provision of clinical services for diagnosis and treatment, as well as administrative services such as billing, payment, and refund.
❍ [Website Member Information]
- Essential Information: Provision of medical appointment booking, appointment lookup, and membership services via the website,
- Optional Information: Notification of hospital news, disease information, etc. via email, surveys
3. Retention and use period of personal information
When the purpose of collecting or providing personal information has been achieved, we will destroy your personal information without delay.
❍ [Medical Information]
- Stored in accordance with the medical record storage standards specified in the Medical Act
❍ [Website Member Information]
- If you withdraw from membership or are expelled from membership; however, even if the purpose of collection or receipt has been achieved, we may retain your personal information if there is a need to preserve it in accordance with the provisions of laws such as the Commercial Act.
- Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in E-Commerce, etc.)
- Records on collection/processing and use of credit information: 3 years (Act on the Use and Protection of Credit Information)
- Records of identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.)
– Records of visits: 3 months (Communications Secrets Protection Act)
4. Procedure and method for destroying personal information
This center destroys personal information immediately after the purpose of collection and use has been achieved. The destruction procedures and methods are as follows.
❍ [Destruction Procedure]
Information entered by users for purposes such as signing up for membership will be destroyed immediately after the purpose has been achieved.
❍ [Method of Destruction]
Personal information stored in the form of electronic files is deleted using a technical method that can not reproduce the record.
Personal information printed on paper is destroyed by shredding or incineration.
5. Provision and sharing of personal information
Except with your consent or in cases stipulated by relevant laws and regulations, our center will not use your personal information beyond the scope notified in the “Purpose of Collection and Use of Personal Information” or provide it to other persons, companies, or organizations.
- Submit medical records to the Health Insurance Review & Assessment Service for claiming medical care benefits in accordance with the National Health Insurance Act
- When necessary for statistical compilation or academic research, information is provided in a form that does not identify specific individuals.
- Submission, etc. when requested by investigative agencies in accordance with the procedures and methods stipulated in the law
6. Handling of collected personal information
Our center does not entrust the collected personal information to external organizations.
7. Rights of users and legal representatives and methods of exercising them
Membership registration for children under the age of 14 (hereinafter referred to as "children") is conducted through a separate form written in simple language that is easy for children to understand, and consent from a legal representative is always obtained when collecting personal information.
In order to obtain the consent of the legal representative, we collect the minimum information from the child, such as the legal representative's name and contact information, and obtain the legal representative's consent in accordance with the method stipulated in the personal information handling policy.
A child's legal representative may request access to, correction, or deletion of their child's personal information. To access, correct, or delete a child's personal information, click "Edit Member Information" to complete the legal representative verification process. Afterward, the legal representative can directly access, correct, or delete the child's personal information. Alternatively, they can contact the Personal Information Protection Officer in writing, by phone, or by fax, and we will take the necessary action.
This center does not provide or share information about children with third parties. If a legal representative requests correction of errors in personal information collected from a child, the center prohibits the use and provision of such personal information until the errors are corrected.
※ Personal information whose retention is mandated by law cannot be modified or deleted within the retention period, even upon request. 8. How to Withdraw Consent / Withdraw Membership
You may withdraw your consent to the collection, use, and provision of your personal information at any time, provided upon registration. To withdraw your membership, click "Withdraw Membership" on the My Page of our website, complete the identity verification process, and then directly withdraw your membership. Alternatively, you may contact the Personal Information Manager in writing, by phone, or by fax. We will promptly take necessary measures, including destroying your personal information.
9. Matters Concerning the Installation/Operation of Automatic Personal Information Collection Devices and Refusal Thereof The Institute operates 'cookies' that store and retrieve your information from time to time. A cookie is a very small text file sent to your browser by the server used to operate the Institute's website and stored on your computer's hard disk. The Institute uses cookies for the following purposes. You have the right to choose regarding the installation of cookies. Therefore, by setting options in your web browser, you may allow all cookies, be prompted for confirmation whenever a cookie is stored, or refuse the storage of all cookies.
If you refuse to install cookies, you may have difficulty providing some services.
10. Personal Information Management Officer
To protect your personal information and handle complaints related to personal information, we have appointed a personal information manager as follows.
❍ [Personal Information Management Officer]
· name :
Position:
･ Affiliation :
· phone number :
· mail :
You may report any privacy-related complaints arising while using our services to the Personal Information Protection Officer. We will provide a prompt and thorough response to your reports. For other inquiries or reports regarding personal information infringements, please contact the following organizations.
･ Personal Dispute Mediation Committee (http://www.1336.or.kr / 1336)
･ Information Protection Mark Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533~4)
･ Supreme Prosecutors' Office Cybercrime Investigation Division (http://www.spo.go.kr / (02) 3480-3573)
･ National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330)
11. Measures to ensure the security of personal information
Our website implements various security measures to protect users' personal information. All information you submit is safely stored and managed within a security system protected by a firewall.
Furthermore, as an administrative measure to protect users' personal information, we have established procedures necessary for accessing and managing personal information. We also limit the number of personnel handling personal information to a minimum and provide ongoing security training. Furthermore, we designate users for the personal information processing system, assign them passwords, and regularly update them.
12. Obligation to notify of policy changes
This Privacy Policy was established on June 1, 2012. In the event of any additions, deletions, or modifications to the content due to changes in laws, policies, or security technologies, we will announce the reasons for the changes and the details on the hospital's website at least 7 days prior to the implementation of the revised Privacy Policy.
･ Announcement Date: April 2018, 08
Effective Date: April 2018, 08
