Privacy Policy
4EVER Medical Clinic (hereinafter referred to as 'the Clinic') considers the protection of personal information online to be extremely important and does its best to ensure that any personal information provided by users when using the Clinic is protected.
Accordingly, the Clinic establishes and complies with its privacy policy based on relevant laws, such as the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Act on Promotion of Information and Communications Network Utilization, which must be observed by information and communication service providers.
This privacy policy may be updated at any time due to changes in government laws or guidelines or due to changes to the Clinic's internal policies. The Clinic promptly reflects any changes on the homepage's initial screen where the privacy policy is posted.
Through this privacy policy, you will understand for what purposes and methods the collected personal information is used and how it is being safely protected.
Accordingly, the Clinic establishes and complies with its privacy policy based on relevant laws, such as the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Act on Promotion of Information and Communications Network Utilization, which must be observed by information and communication service providers.
This privacy policy may be updated at any time due to changes in government laws or guidelines or due to changes to the Clinic's internal policies. The Clinic promptly reflects any changes on the homepage's initial screen where the privacy policy is posted.
Through this privacy policy, you will understand for what purposes and methods the collected personal information is used and how it is being safely protected.
Purpose of Processing Personal Information
The Clinic processes only the minimum amount of personal information necessary for the following purposes.The personal information being processed will not be used for purposes other than the following, and should there be any changes to the purposes, the Clinic will take the necessary actions, such as obtaining separate prior consent according to Article 18 of the Personal Information Protection Act.
• Used for patient/medical examination reservation, reservation inquiry, and personal identification in relation to membership service use • Information on clinic use and new services and event information from the clinic • Mobile notifications regarding medical treatment, reservations, scheduled admissions and examinations • Delivery of medical bills, statements, certificates and dispatch of pharmaceuticals/examination items and results • Services for diagnosis and treatment (sharing of necessary personal and medical information for joint consultations), billing, payment, and refund-related administrative services • Minimal analysis data necessary for education, research, and medical services • Basic data for online/offline consignment, external tests, and clinical trial reviews • Channels for communication for handling complaints/grievances • Providing information required by medical law, criminal law and other related laws • Providing information about pre and post services related to examinations
※ For smooth business operations related to the above items, personal information processing may be outsourced to external professional companies, and the details will be disclosed within the privacy policy.
Collection Methods for Personal Information
The Clinic’s personal information collection items are as follows. Collected information is divided into required and optional fields. Even if you do not enter the optional items, there will be no restrictions in using services such as membership registration and medical treatment.| Medical Appointment (Phone) | Required | Name, mobile phone number, email |
|---|---|---|
| When receiving treatment | Required |
Examiner's name, resident registration number, contact information, address, health information * Health Information: Medical history, family history, and other personal details needed for clinical purposes as determined by medical staff |
| Optional | Optional Address, agreement to marketing use, clinic visit channel | |
| Medical Fee Payment | Required | In case of credit card payment: card company name, card number, and other payment approval information |
| Application for Income Deduction Certificate | Required | Applicant's name, patient’s name, date of birth, gender, email, phone number, mobile phone number |
| Request for Copy of Medical Records | Required |
(Applicant Info) Name, date of birth, mobile phone, relationship to patient (Patient Info) Name, hospital registration number, mobile phone |
| Optional |
(Applicant Info) Phone number, email (Patient Info) Gender, date of birth, phone number, email | |
| Website Membership Registration | Required | ID, password, name, contact information |
| Optional | Email address, gender | |
| Bulletin Board: Online Consultation | Required | Name, contact information, password, consultation category |
| Optional | ||
| Bulletin Board: Online Reservation | Required | Field of interest, name, contact information, reservation date and time, gender |
| Optional | Medical consultation status, inquiry details | |
| Bulletin Board: Partnership Reservation | Required | Reservation date, reservation time, company name, name, contact information, gender |
| Optional | Type of treatment | |
| Bulletin Board: Quick Reservation | Required | Reservation date, reservation time, name, contact information |
| Optional | Type of treatment | |
| Inquiry Form: Voice of the Customer | Required | Title, content |
| Optional | Name, contact information | |
| Inquiry Form: Recruitment | Required | Name, contact information, email, department applied for, resume upload |
| Inquiry Form: Partnership Application | Required | Name, contact information, job title, company name, title, consultation content |
| Optional | Company contact, email | |
| Inquiry Form: Quick Consultation | Required | Name, contact information |
| Inquiry Form: Phone Consultation | Required | Name, contact information |
| Inquiry Form: KakaoTalk Consultation (web/mobile) | Required | Name, contact information |
| Inquiry Form: Easy Consultation (mobile) | Required | Name, contact information |
* If personal information is collected for a specific purpose on a short-term basis, it will be announced separately. This includes not only the information at the time of registration but also information changed by modifications.
Disclosure of Providing Personal Information to Third Parties
The Clinic, in principle, processes users’ personal information only within the scope stated for processing purposes and does not provide users’ personal information to external parties as a general rule. However, the following are exceptions.• When separate consent is received from the data subject
• When special regulations exist in law
• When the data subject or his/her legal representative is unable to indicate their intention, or prior consent cannot be obtained due to unknown address, etc., and if it is clearly deemed necessary for the urgent benefit of the data subject or a third party in terms of life, body, or property
• When it is necessary for statistics or academic research purposes, provided that the information is provided in a way that the specific individual cannot be identified
Except for the above, if any case of providing personal information to a third party arises, we will notify through the privacy policy.
Outsourcing of Personal Information Processing Duties
The Clinic outsources personal information processing duties as follows for efficient business operations.When entering into a consignment contract, our clinic specifies in documents such as the contract, according to Article 26 of the Personal Information Protection Act, matters regarding the prohibition of processing personal information outside the purposes of consigned tasks, technical and administrative protection measures, restriction on sub-consignment, management and supervision of consignees, compensation for damages, and supervises whether the consignee safely processes personal information.
If the contents or consignee of the consigned tasks change, we will announce it promptly through this personal information processing policy.
| Consigned company | Contents of the consigned task | Consigned personal information | Personal information retention period |
|---|---|---|---|
| Coament | Website development and operation | Name, email, phone number | Until the end of the consignment contract |
| Poever Clinic | Website development and operation | Name, email, phone number | Until the end of the consignment contract |
Processing and retention period of personal information
The clinic processes and retains personal information within the retention and usage period as consented to by the individual or as stipulated by law when collecting personal information.Each processing and retention period for personal information is as follows. Personal information is retained and used for the above usage purposes from the date of consent for collection/use until the purpose is achieved.
| Item | Retention period |
|---|---|
| Website membership information |
Deleted immediately upon withdrawal If the account is inactive for one year after signing up, it will be processed as a dormant account. |
| Personal information collected for surveys, events, etc. | When the survey, event, etc. ends |
| Personal information collected for medical treatment purposes |
In accordance with medical law standards - Patient registry: 5 years - Medical records: 10 years - Prescriptions: 2 years - Surgical records: 10 years - Test content and test finding records: 5 years - Radiographs (including images) and findings: 5 years - Nursing records: 5 years - Obstetric records: 5 years - Copies of diagnosis certificates, etc.: 3 years |
| Preservation according to relevant statutes |
In accordance with relevant statutory standards - Important documents related to business (Commercial Act, 5 years) - Records regarding contracts or withdrawal of offers, etc. (Consumer Protection Act in E-commerce, 5 years) - Records on payment and supply of goods, etc. (Consumer Protection Act in E-commerce, 5 years) - Electronic financial transaction records (Electronic Financial Transactions Act, 5 years) - Records of consumer complaints or dispute resolution (Consumer Protection Act in E-commerce, 3 years) - Records on advertisements (Consumer Protection Act in E-commerce, 6 months) - Website visit records (Communications Privacy Protection Act, 3 months) |
Procedures and methods of destroying personal information
Personal information is destroyed immediately after the purpose for which it was collected and used has been achieved. The destruction procedures and methods are as follows.A. Destruction procedure
Information entered by users when signing up for membership, etc., is promptly destroyed via the destruction method below after the purpose is achieved.B. Time of destruction
If the retention period of a user's personal information has expired, the information is destroyed within five days from the end date of the retention period. If the processing purpose is achieved, the service is discontinued, or the business is closed, the information is destroyed within five days from the date it is recognized as no longer necessary.C. Destruction method
Personal information stored as digital files is deleted using technical methods that make recovery impossible.Personal information printed on paper is destroyed by shredding or incineration.
Matters regarding the rights and obligations of information subjects and how to exercise them
If a customer requests access, correction, or deletion of personal information, we respond sincerely and process it without delay. To protect personal information, procedures for access, correction, and deletion by methods other than a visit (i.e., phone, mail, FAX, etc.) are not provided.A. Access to personal information
Customers may visit the hospital to request access to or verification of personal information. To better protect the personal information provided by customers, verification or access is not provided by means other than a visit (phone, mail, FAX, etc.).B. Correction/deletion of personal information
• If a customer requests correction or deletion of personal information, the hospital verifies the identity and takes necessary action without delay.• When the customer requests access to or verification of his/her personal information, the hospital verifies identity through ID documents such as a resident registration card, passport, or new driver’s license.
• If an agent visits and requests access or verification, the hospital verifies the authenticity of the agent through a power of attorney, the customer’s seal certificate, and the agent’s ID.
• Even if the customer has consented to provide personal information to a third party, if a correction request is received, provision to the third party is suspended until the correction is made; if incorrect information was already provided, both the third party and the customer are notified and necessary action is taken.
• If there is a legitimate reason to refuse full or partial access, verification, or correction of personal information, the hospital will notify the customer of the reason.
• Customers may request withdrawal of consent (subscription/cancellation) to the collection/use or provision of personal information as follows, and the hospital will take prompt action.
C. Customers may withdraw consent to the collection, use or provision of personal information.
D. The legal representative may withdraw consent to the collection, use, or provision of personal information of a child under 14 years of age, and may request access to or correction of errors in personal information provided by a child under 14 years of age.
Protection of children's personal information
• The hospital takes protective measures to ensure that neither children under 14 (hereafter 'children') nor their legal representatives suffer disadvantages due to personal information provided by children.• In this hospital, when performing the activities below regarding a child's personal information, the consent of the child's legal representative must be obtained.
A. In cases where personal information is collected for the purpose of a child's service subscription, or when using or providing a child's personal information to a third party beyond the scope indicated at the time of subscription or as specified in the service terms of use.
B. In cases where a recipient of the child's personal information uses it for purposes other than those for which consent was given, or provides it to a third party.
• In order to obtain consent from the legal representative, this hospital may request only the minimum necessary information such as the legal representative's name and phone number. In such cases, the collection, use, or provision purposes of the personal information and the need for the legal representative's consent will be clearly explained to the child in easy-to-understand terms.
• The personal information of the legal representative collected to obtain their consent will not be used for purposes other than confirming the consent, nor provided to a third party.
Withdrawal of Consent • How to Withdraw Membership
You may withdraw your consent to the collection, use, and provision of personal information at any time, even after agreeing at the time of membership registration.You can withdraw consent (membership withdrawal) by clicking 『Withdraw Membership』 on the homepage and completing the personal identification process, or by contacting the personal information officer. We will promptly take necessary actions such as destroying your personal information without delay.
Matters concerning the installation/operation and refusal of automatic personal information collection devices
This hospital uses 'cookies' to store and frequently retrieve users' information for providing specialized customized services. Cookies are small pieces of information sent by the website to the user's web browser, and may be stored on the PC hard disk.A. What are cookies?
• Cookies are very small text files sent from a server used to operate a website to a user's browser and are stored on the hard disk of the user's computer. When a user visits the website again, the server reads the contents of the cookie stored on the user's hard disk to maintain their environment settings and provide customized services.• Cookies do not automatically or actively collect personally identifiable information, and users can refuse or delete cookie storage at any time.
B. Purpose of cookie use by the company
• To provide users with optimized and customized information, including advertisements, by understanding the patterns of users' visits and use of each of the hospital's services and websites, secure connection status, and user scale.C. Refusing the installation and operation of cookies
• Users have the right to choose regarding cookie installation. Therefore, users can allow all cookies, confirm each time a cookie is sent, or refuse all cookies by configuring the options in their web browser.• However, if a user refuses the cookie installation, there may be difficulties in providing the service.
• The method to specify cookie installation permissions (in case of Internet Explorer) is as follows.
[At the top of the web browser: ‘Tools’ 〉Internet Options 〉Privacy 〉Set privacy handling level]
Matters concerning measures to ensure the safety of personal information
A. Minimization and training of personal information handling staff
We minimize the designation of personnel handling personal information and conduct regular training.B. Periodic self-inspection
We conduct self-inspections at least once a year to secure stability related to personal information handling.C. Establishment and implementation of internal management plan
For the safe handling of personal information, we establish and implement an internal management plan.D. Encryption of personal information
Among the user's personal information, passwords are encrypted for storage and management so only the user knows them, and important data is secured using separate security features such as encrypting files and transmission data.E. Technical measures against hacking, etc.
To prevent leakage or damage of personal information due to hacking or computer viruses, security programs are installed, regularly updated and checked, and the system is installed in areas controlled from outside access, with monitoring and blocking both technically and physically.F. Restriction of access to personal information
We take necessary measures to control access to personal information by granting, changing, or deleting access rights to database systems that handle personal information, and by using intrusion prevention systems to block unauthorized external access.G. Control of access to unauthorized persons
We maintain physical storage locations for personal information systems separately, and establish and operate access control procedures for these locations.Matters concerning the management/operation of video information processing devices
Through our management policy for video information processing devices, we inform you about the purposes and methods of use and management of video information processed by the hospital.A. Basis and purpose of video information processing device installation
In accordance with Article 25, Paragraph 1 of the Personal Information Protection Act, this hospital installs and operates video information processing devices for the following purposes.• Facility safety and fire prevention
• Crime prevention for customer safety
B. Number of installed devices, installation locations, and recording scope
The number, location, and recording scope of video information processing devices are as follows.| Installation location | Recording scope | Number of devices |
|---|---|---|
| Total | ||
C. Manager and authorized personnel
To protect the data subject's video information and address complaints related to personal video information, we designate personal video information protection officers as below.| Category | Name | Position | Department | Contact |
|---|---|---|---|---|
| Manager | ||||
| Authorized personnel |
D. Matters concerning video recording time and storage period of video information
| Recording time | Storage period | Storage location |
|---|---|---|
| 24 hours | Within 30 days from the date of recording | Server room |
E. Matters on the method and place to view personal video information
• Viewing method: By contacting the video information management officer in advance and visiting the hospital, viewing is possible.• Confirmation location: Hospital server room
B. Actions in response to the data subject's request to view video information, etc.
If the data subject wishes to view, verify the existence of, or delete personal video information, they may request this at any time from the operator of the video information processing equipment. However, this is limited to the personal video information in which you appear and clearly necessary for the urgent protection of the data subject's life, body, or property interests.If a request to view, verify the existence of, or delete personal video information is made, the hospital will take the necessary actions promptly without delay.
Notwithstanding the data subject’s request to view, etc., personal video information may be denied in the following cases. In such cases, the data subject will be notified in writing of the reason for refusal and how to appeal within 10 days.
• When the retention period has expired and the personal video information has been destroyed
• Other justifiable reasons exist to refuse the request to view, etc., by the data subject
C. Video information security measures
Video information handled at this hospital is securely managed through measures such as encryption. In addition, as a managerial measure for the protection of personal video information, the hospital grants different levels of access authority to personal information and records the generation date and time, viewing purposes, viewer, and viewing date and time to prevent alteration or forgery of personal video information. Locking devices are installed for the secure physical storage of personal video information.Personal Information Protection Officer and Staff
To protect customers’ personal information and handle related complaints, this institution has designated a Personal Information Protection Officer.If you have any inquiries regarding personal information, please contact the Personal Information Protection Officer below. We will respond quickly and sincerely to your inquiries.
A. Personal Information Manager
| Management items | Name | Telephone number | Email address |
|---|---|---|---|
| Personal Information Manager | Lee Hohyun | 010-9428-9543 | privacy@4-ever.co.kr |
| Customer Service Manager | Lee Hohyun | 010-9428-9543 | privacy@4-ever.co.kr |
| Homepage Service Manager | Lee Hohyun | 010-9428-9543 | privacy@4-ever.co.kr |
Remedies for Data Subject Rights Infringement
You may report any privacy complaints arising from the use of our services to the Personal Information Manager.We will provide prompt and sufficient answers to all user reports.
If you need to report or consult about other personal information infringement, please contact the institutions below.
Personal Dispute Mediation Committee (http://www.1336.or.kr / 1336)
Supreme Prosecutors' Office Cyber Crime Investigation Division (http://www.spo.go.kr / (02) 3480-3573)
Cyber Terror Response Center, National Police Agency (http://www.ctrc.go.kr / (02) 392-0330)
Duty to Notify of Policy Changes
This Privacy Policy was established on March 24, 2021, and if there are any additions, deletions, or modifications due to changes in laws, policies, or security technology, we will notify you of the reasons and content of the changes at least 7 days prior to implementation through our homepage.Announcement date: March 24, 2021
Enforcement date: March 24, 2021