This English text is provided for convenience only. The Korean version of this document is the original and the only legally binding text; in the event of any discrepancy, the Korean version prevails. GIVE ME CLINIC (the "Clinic") establishes and publishes the following privacy policy in accordance with Article 30 of the Personal Information Protection Act, the Medical Service Act and other applicable laws, in order to protect the personal information of data subjects and to handle related enquiries promptly.
Article 1 (Items of personal information collected and method of collection)
① The Clinic collects the following items when an online consultation or booking request is submitted through the website. - Required items: name, contact number, enquiry details, reply-lookup password (stored only as a one-way hash) - Optional items: treatment of interest ② Method of collection: the consultation and booking request form on the website ③ The following information may be recorded automatically while the website is in use. - The page paths visited, the names of events such as which enquiry channel was clicked, and the time at which they occurred - These records contain no information by which an individual can be identified, such as a name or contact number. ④ The Clinic does not collect resident registration numbers through the website, and does not collect the personal information of children under the age of 14 online.
Article 2 (Purposes of collection and use)
The Clinic uses the personal information it collects only for the following purposes. - Replying to consultation requests and answering enquiries about treatment - Confirming receipt of a booking and advising on the visit schedule It is not used for any purpose beyond those above, and separate consent is obtained if the purpose changes.
Article 3 (Retention and use period)
① Consultation and booking request information: destroyed without delay once the purpose of the consultation has been fulfilled. Where the Clinic has set a separate retention period in order to keep a record of the consultation, the information is held for that period. ② Where information must be retained under applicable laws, it is held for the period those laws prescribe. ② The fact and time of consent to the collection and use of personal information are retained together as evidence of that consent.
Article 4 (Provision to third parties)
The Clinic does not provide the personal information of data subjects to third parties. It may be provided only in the cases set out in Articles 17 and 18 of the Personal Information Protection Act, such as separate consent from the data subject, a specific provision of law, or a lawful request from an investigative authority.
Article 5 (Outsourcing of personal information processing)
The Clinic may outsource system operation work such as server hosting to external parties, to the extent necessary to run the website. Where such a contract is entered into, the prohibition on processing personal information for any other purpose, technical and administrative protective measures, restrictions on further subcontracting and the management and supervision of the contractor are specified in writing and supervised accordingly. Any change to the outsourced work or to the contractor is disclosed through this policy.
Article 6 (Rights of data subjects and how to exercise them)
① A data subject may at any time request access to, correction or deletion of, or the suspension of the processing of their personal information. ② Such requests may be made by telephone or in writing to the privacy officer named below, and the Clinic will act on them without delay. ② A request may also be made through a legal representative or a duly authorised agent. ③ Where a request for correction or deletion has been received, the personal information concerned is neither used nor provided until the necessary action has been completed.
Article 7 (Procedure and method of destruction)
① Where personal information becomes unnecessary because the retention period has passed or the purpose of processing has been fulfilled, it is destroyed without delay. ② Personal information stored as an electronic file is deleted by a method that makes recovery impossible, and personal information recorded on paper is destroyed by shredding or incineration.
Article 8 (Measures to secure personal information)
The Clinic takes the following measures to prevent the loss, theft, leakage, forgery, alteration or damage of personal information. - Administrative measures: keeping the number of staff handling personal information to a minimum, establishing internal management standards and providing training - Technical measures: managing access rights to the processing system, retaining access logs, and encrypting data in transit (HTTPS) - Physical measures: access control for the places where records are held
Article 9 (Operation of automatic collection devices, and how to refuse them)
① The website of the Clinic does not use cookies for advertising or for the collection of behavioural information. ② Essential cookies that maintain a session are used only where they are strictly necessary to provide the service, such as administrator login. ② Users may refuse the storage of cookies in their web browser settings. If they do, the use of some functions may be limited.
Article 10 (Privacy officer and requests for access)
The Clinic has designated the following privacy officer to take overall responsibility for work relating to the processing of personal information and to handle related enquiries, complaints and remedies. Requests for access under Article 35 of the Personal Information Protection Act are also received at the contact below. - Name: Junsoo Lee - Position: Medical Director - Contact: 02-592-3355 - Address: 서울특별시 서초구 서초대로 77길 37, 8층
Article 11 (Remedies for infringement of rights)
Data subjects may contact the following bodies for remedy or advice regarding harm caused by an infringement of personal information. - Privacy Infringement Report Centre (Korea Internet & Security Agency): 118 (no area code) / privacy.kisa.or.kr - Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr - Cyber Investigation Division, Supreme Prosecutors' Office: 1301 (no area code) / www.spo.go.kr - National Office of Investigation (Cyber Bureau), Korean National Police Agency: 182 (no area code) / ecrm.police.go.kr
Article 12 (Changes to this privacy policy)
This policy may be added to, removed from or amended in line with changes in legislation or policy, or in the way the Clinic processes information. Where it changes, the effective date and the details of the change are announced through the website.