privacy

Privacy

Privacy

Loving Care Clinic(hereinafter “the Clinic”) regards users’ personal information as important and complies with the “Personal Information Protection Act” and the “Act On Promotion Of Information And Communications Network Utilization And Information Protection”

병원은 개인정보처리방침을 통하여 귀하께서 제공하시는 개인정보가 어떠한 용도와 방식으로 이용되고 있으며, 개인정보보호를 위해 어떠한 조치가 취해지고 있는지 알려드립니다.

The order of this Personal Information Management Policy is as follows:

  1. Personal Information Collected and Method of Collection
  2. Purpose of Use and Collection of Personal Information
  3. Period of Personal Information Retention and Use
  4. Procedure and Method of Personal Information Destruction
  5. Provision and Sharing of Personal Information
  6. Management Entrustment of Collected Personal Information
  7. Rights of Users and Their Legal Representatives and Methods of Exercising Rights
  8. Methods of Withdrawal of Consent/Deleting Account
  9. Matters Concerning Installation/Operation of Automatic Personal Information Collection System and Users’ Right to Decline
  10. Matters Concerning the Operation/Management of Visual Data Processing Devices
  11. Personal Information Protection Manager
  12. Measures to Secure the Safety of Personal Information
  13. Duty of Notice due to Policy Changes

1. Personal Information Collected and Method of Collection

The Clinic collects the minimum level of personal information required to enable users to benefit from its services of the Clinic’s website.
There are required items and optional items that must be entered when users sign up for membership. Even if users do not enter optional items, there are no restrictions on using the services.

[Personal Information Items Collected on the Website]
  • Items Collected when Signing up for General Membership
    • Required Items: Login ID, password, name, date of birth, gender, email address, mobile phone number
      * In case of collecting personal information on a short-term basis (for non-members) for other specific purposes (registration and management of posts), it shall be notified separately and collected.
    • Optional Items: Telephone number, address, agree/disagree of receiving email and SMS (consent to use personal information-updating of member information)
      * It is an optional item that allows you to sign up for membership without agreeing to the collection and use of personal information for any purpose other than intended ones. If users agree to it, they will receive medical information and promotional materials via e-mail and SMS.
    • The following information may be automatically generated and collected in the course of using the service or providing the service.
      : Service usage data, access log, cookies, and access IP information
[Items Collected during Consultation]
Required Items : Hospital registration number, name (Korean), resident registration number, residence card number (only for foreigners), address
Optional Items : Mobile phone number, email address
Health Information : Personal health information, such as medical history and family history, which is deemed necessary by medical staff to provide medical services
[Collected Items during Payment for the Service]]
Payment by credit card : Credit card authorization information such as card issuer, card number, etc
[Method of Collection]
- We collect personal information of users in a way of followings
: Website, written form, Fax, telephone calling, counseling board, e-mailing, event registration

2. Purpose of Use and Collection of Personal Information

The Clinic uses the collected personal information of users for the following purposes.
The information provided by users shall not be used for any purpose other than intended ones. If there is any change to the purpose, we shall seek prior approval from users.

  • To provide consultation services for diagnosis and treatment
  • To use as supporting materials for consultation such as processing the payment/refund procedure etc.
  • To use as materials necessary for education, research, and/or further investigation of treatment results
  • To use as baseline data for conducting contracted tests and clinical trial reviews
  • To provide healthcare contents and clinical research
  • To conduct statistical research on service use
  • To deliver payment receipts, certificates, and packages related to medical checkups
  • To register membership and identify individuals for the service of the website
  • To register and check(edit / delete) posts on the website
  • To enable users to make online appointments and confirm appointments, and to provide membership services
  • To deliver news and notices
  • To provide users with more convenient communication channel
  • Tvo provide online counseling and inform appointment confirmations (•cancellations)
  • To use as data for developing new services and providing personalized services
  • To collect “information on dangers and injuries” in accordance with the Article 52 of “Framework Act On Customers”

3. Period of Personal Information Retention and Use

Period of personal information management and retention is until the moment of user’s deletion of his/her account.
The Clinic immediately destroy users’ information when its purpose of collection or provision is achieved.
However, even after its purpose of collection or provision is achieved, some of information shall be retained the case the law requires us to maintain personal information.

  • - Records of customer complaint or dispute : 3 years (Act on The Consumer Protection In Electronic Commerce)
  • - Records of collecting, processing and using credit information : 3 years (Credit Information Use And Protection Act)
  • - Records on identity verification : 6 months (Act On Promotion of Information and Communications Network Utilization and Information Protection)
  • - Records of visits : 3 months (Protection of Communications Secrets Act)

4. Procedure and Method of Personal Information Destruction

The Clinic immediately destroys personal information when the “Purpose of Collection and Use of Personal Information” is achieved. The procedure and method of destruction are as follows.

[Destruction Procedure]
The information entered by users when they sigh up for the website is immediately destroyed when the purpose is achieved by the destruction method.
[Destruction Method]
  • - Personal information stored in electronic file format is deleted by using technical method making that information not restored.
  • - Hard copies of personal information are destroyed by shredding or incineration.

5. Provision and sharing personal information

The Clinic shall not use collected personal information beyond the scope provided for in “Purpose of Use and Collection of Personal Information” nor shall the Clinic provide it to a third party or other companies/organizations under any circumstances, except when users consent to provision in advance or provision is required by relevant laws and regulations.

However, information provision shall be exception only if there is users’ approval. And also the following exceptions apply.

  • - When necessary, personal information is provided in an individually unidentifiable form to conduct statistical / academic study.
  • - Personal information is provided to the investigative agencies for detecting crimes in accordance with the procedure and method as prescribed in the laws and regulations.

6 Management Entrustment of Collected Personal Information

The Clinic entrusts the management of personal information as follows. Pursuant to Article 26 of Personal Information Act, the Clinic specifies, in the documents such as outsourcing contract, prohibition of personal data processing for any purposes other than performing entrusted work; technical/managerial protection safeguards;restriction on re-entrustment; management and supervision of service provider; and compensation for damage, and oversees whether the service provider handles personal information in a secure manner.
In case of any change to entrusted tasks or a service provider, we will notify of the change through this Personal Information Management Policy without delay.

The Clinic’s contracted service providers and their entrusted items are as below.

Service Provider Contracted Items Entrusted Personal
Information		 Retention Period
BIT Computer HIRA claims transmitting program All the collected personal information including patient's name, Resident registration number(Korean), health info., etc. Until termination of entrustment contract
GC Labs Entrusted testings Patient's name, randomly granted identification number, testing number, testing title Until termination of entrustment contract
LabGenomics Entrusted testings Patient's name, randomly granted identification number, testing number, testing title Until termination of entrustment contract
Labcare NK cell activity testings Patient's name, randomly granted identification number, testing number, testing title Until termination of entrustment contract
Hugenbio Genetic testings(DNA mutation) Patient's name, randomly granted identification number, testing number, testing title Until termination of entrustment contract
TechHeim Pacs medical video storage Name, tester's video info. Until termination of entrustment contract

7. Rights of Users and Their Legal Representatives, and Methods of Exercising Rights

Membership registration for a child under the age of 14 (hereinafter “the Child”) is done using a separate form written in simple expressions easy for children to understand, and the consent of his/her legal representative must be obtained when collecting his/her personal information.

In order to obtain the consent of his/her legal representative, the Clinic collects minimum information necessary, such as name and contact information, from the Child, and obtains the consent of his/her legal representative in accordance with the method stated in this Personal Information Management Policy.

The legal representative of the Child may request access, correction, and deletion of the Child’s personal information. When his/her legal representative wish to access, correct, or delete the Child's personal information, he/she may directly access, correct, or delete on the member information editing page after going through the legal representative verification procedure . Or when the request received via written form, phone call, or fax, personal information protection manager shall take measures necessary.

The Clinic shall not provide or share the Child’s personal information to or with the third party. When his/her legal representative request to correct any errors in the personal information collected from the Child, use and provision of the information are prohibited until the errors are corrected.

Users and their legal representatives may exercise their rights to inspect, etc., the relevant personal information by contacting the Clinic via the internet, phone call, written request, etc., and the Clinic shall take measures necessary without delay.

8. Methods of Withdrawal of Consent/Deleting Account

A member may withdraw consent on personal information collection, use, and provision made to sign up for the website at any time. A member may delete his/her membership account by clicking “Delete Account” on the member information editing page of the Clinic’s website after going through the identification procedure. Or when the request received via written form, phone call, or email, personal information protection manager shall take measures necessary, such as personal information destruction, etc., without delay.

9. Matters Concerning Installation/Operation of Automatic Personal Information Collection System and Users’ Right to Decline

What are cookies?

The Clinic uses Cookies to save and retrieve user’s information anytime to provide personalized and customized services.

Cookies are very small text files that the server which is used to operate the website sends to the user’s browser, which is saved on the user’s hard drive. When the user subsequently visits the website, the website server reads the contents of cookies stored on the user's hard disk and uses them to maintain the user's preferences and provide customized services.

Cookies do not automatically/actively collect personally identifiable information, and the users may refuse cookies to be stored or delete them at any moment.

The Clinic’s Purpose for Using Cookies
  • -Use of the website services
  • -Member classification in accordance with login
  • -Keeping track of the users’ size and type
Installation/Operation or Rejection of Cookies

The users have an option for cookies installation. Therefore, the users may either allow all cookies by setting option in web browser, make each cookie checked whenever it is saved, or refuse all cookies to be saved.

Provided that, if the users reject the installation of cookies, it may be difficult to use the services which require login.

How to Allow or Block Cookies in Internet Explorer:
  • ① Click [Tools] and select [Internet Options].
  • ② Click on [Privacy] tab.
  • ③ Select options of your choice on [Advanced Privacy Settings] window.

10. Matters Concerning the Operation/Management of Visual Data Processing Devices

The Clinic operates/manages visual data processing devices as follows.

[Installation Ground and Purpose of Installation]
Safety for the patients and facilities, prevention of fire and crime, etc.
[Number of Installed Devices, Locations of Installation, and Scope of Filming]
Number of installed devices: 7
Locations of installation and scope of filming: Nurse station, patients’ waiting area, waiting room for checkup, hallways
[Department in Charge and Access Authority]
Department in charge: Administration Team
Contact Number : 031-8017-0101
[Duration of Filming, Retention Period, Retention Place, and Processing Method of Visual Data]
Duration of filming: 24 hours (when there is movement)
Retention period: 5 months
Processing Method: Matters concerning the requests for use of visual data for other purposes that the initial ones; inspection on the third party’s activities; destruction of or access to visual data, and etc., are recorded and managed. When retention period expired, visual data is deleted automatically. (No separate backup)
[How and Where to View Personal Visual Data]
How to view: Visit and request, after contacting us in advance (if there is lawful ground, request is approved)
Where to view: Administration office
[Measures for Requests of Access Visual Data, etc. from Data Subject]
If you wish, you may request access to or existence confirmation of your personal visual data from visual data processing device operator at any time. Provided that, it is limited to personal visual data containing you, and personal visual data obviously necessary for the urgent benefit of the data subject’s life, body, and property.

Notwithstanding the request of access, etc. from the data subject, the requests of access to personal visual data, etc. may be denied in the following cases.
1) Where personal visual data is destroyed as retention period expired
2) Where there is a justifiable reason to deny the request such as access by other data subjects’ data
[Technical, Administrative, and Physical measures to Protect Visual Data]
Visual data processed by the Clinic is managed securely by encrypt measure, etc. Furthermore, the Clinic discriminately grants access authority to personal data and lawfully manages accessed persons, access dates, access purposes, etc. as well as prevents forgery. Also, visual data is physically managed by encrypting access to the system.
[Matters Concerning Changes to Personal Information Processing Policy]
When the policy of the operation/management of visual data processing devices is added, deleted, or modified pursuant to the changes in ordinances, policies, or security technologies, we will notify the revised contents and reasons of revision through this website at least 7 days of before the implement.

11. Personal Information Protection Manager

In order to protect your personal information and deal with complaints regarding personal information, the Clinic has a personal information manager as below.

[Personal Information Protection Manager]
Name: Yang, In Soo
Affiliation: Loving Care Clinic
Contact Number : 031-8017-0101
e-mail : ericyang.erom@gmail.com

You can file any complaints regarding personal information protection to the personal information protection manager. The Clinic will present prompt and sufficient responds to the filed complaints. When you need to report or consult on other personal information infringement, please contact the following organizations.

12. Measures to Ensure the Safety of Personal Information

The Clinic takes technical and administrative measures necessary to protect personal information so that the personal information may not be lost, stolen, leaked, altered, or damaged.

Technical measure

  • - Personal information is protected using password.
  • - We take measures required using encrypted algorithm such as SSL so that personal information may be safely transmitted over the network.
  • - Using antivirus software, we prevent server viruses from damaging in advance. Antivirus software is updated periodically, and when infected with a virus, it is treated as soon as vaccine is released to prevent personal information from being infringed.
  • - By building web application firewall, we prevent your personal information from being leaked by hacking, etc., and block and monitor intrusions 24 hours a day.

Administrative measure

  • - The Clinic minimizes personal information handlers, controls access authority. Personal information handlers are trained to observe relevant laws and regulations.
  • - Personal information handlers are as follows.
    The persons who conduct business, dealing with members directly or indirectly

13. Duty of Notice due to Policy Changes

When the contents of this personal information processing policy are added, deleted, or modified pursuant to the changes in ordinances, policies, or security technologies, we will notify the revised contents and reasons of revision through the Clinic’s website prior to implement of revised policy.


  • Announcement date : June 28, 2019
  • Implement date : July 1, 2019