[Privacy Policy]
Eversame Clinic (hereinafter referred to as “the Clinic”) places the highest priority on protecting your personal information and complies with the Personal Information Protection Act of the Republic of Korea.
Through this Privacy Policy, the Clinic informs you of how the personal information you provide is used and managed, and what measures are taken to protect your personal data.
The contents of this Privacy Policy are organized as follows:
Items of personal information collected and methods of collection
Purpose of collection and use of personal information
Retention and use period of personal information
Procedures and methods for destruction of personal information
Provision and sharing of personal information
Outsourcing of personal information processing
Rights of users and legal representatives and how to exercise them
Withdrawal of consent / Membership withdrawal
Installation, operation, and refusal of automatic personal information collection devices
Person in charge of personal information management
Measures to ensure the security of personal information
Obligation to notify changes to the policy
1. Items of Personal Information Collected and Methods of Collection
The Clinic collects only the minimum personal information necessary to provide services at the time of membership registration.
While there are required and optional items during registration, optional items such as email subscription preferences do not restrict service use if not provided.
[Medical Information]
Collected items: Name, resident registration number, address, contact information, medical records
※ Medical information and unique identification information must be retained in accordance with the Medical Service Act (separate consent not required).
[Website Membership Registration]
Required items: Name, ID, password, email, contact information (telephone number, mobile phone number)
Optional items: Email subscription preference
The following information may be automatically generated and collected during service use or processing: service usage records, access logs, cookies, IP address information.
[Methods of Collection]
Personal information is collected through the following methods:
Website, written forms, fax, telephone, consultation boards, email
2. Purpose of Collection and Use of Personal Information
The Clinic uses collected personal information only for the purposes listed below.
Personal information will not be used for purposes other than those stated, and prior consent will be obtained if the purpose changes.
[Medical Information]
Provision of medical services for diagnosis and treatment, billing, payment processing, and refunds
[Website Membership Information]
Required information: Online appointment booking, appointment inquiries, and membership-based services
Optional information: Delivery of hospital news, medical information via email, and surveys
3. Retention and Use Period of Personal Information
The Clinic destroys personal information without delay once the purpose of collection or provision has been achieved.
[Medical Information]
Retained in accordance with medical record retention standards specified by the Medical Service Act
[Website Membership Information]
Until membership withdrawal or expulsion
However, personal information may be retained if required by applicable laws even after the purpose has been achieved:
Records related to consumer complaints or dispute resolution: 3 years
(Act on Consumer Protection in Electronic Commerce, etc.)
Records related to credit information collection, processing, and use: 3 years
(Act on the Use and Protection of Credit Information)
Records of identity verification: 6 months
(Act on Promotion of Information and Communications Network Utilization and Information Protection)
Access records: 3 months
(Protection of Communications Secrets Act)
4. Procedures and Methods for Destruction of Personal Information
The Clinic immediately destroys personal information after the purpose of collection and use has been achieved.
[Destruction Procedure]
Information entered by users for membership registration is destroyed immediately after the purpose is fulfilled.
[Destruction Method]
Electronic files are deleted using technical methods that prevent data recovery.
Printed personal information is shredded or incinerated.
5. Provision and Sharing of Personal Information
The Clinic does not use or provide personal information beyond the scope stated in this policy without user consent, except where required by law.
Submission of medical records to the Health Insurance Review and Assessment Service for insurance claims
Provision of anonymized data for statistical analysis or academic research
Submission to investigative authorities upon lawful request
6. Outsourcing of Personal Information Processing
The Clinic does not outsource the processing of collected personal information to external organizations.
7. Rights of Users and Legal Representatives and How to Exercise Them
Membership registration for children under the age of 14 is conducted using separate forms written in plain language, and consent from a legal guardian is required.
Legal guardians may request access, correction, or deletion of a child’s personal information.
Requests can be made through account information updates after identity verification, or by contacting the Personal Information Manager via written request, telephone, or fax.
The Clinic does not provide or share children’s personal information with third parties.
If a legal guardian requests correction of errors, use and provision of the information will be suspended until corrected.
※ Personal information required to be retained by law cannot be modified or deleted during the mandatory retention period.
8. Withdrawal of Consent / Membership Withdrawal
Users may withdraw consent for the collection, use, and provision of personal information at any time.
Membership withdrawal can be completed through “Membership Withdrawal” in My Page after identity verification, or by contacting the Personal Information Manager by written request, phone, or fax.
The Clinic will promptly destroy the personal information upon withdrawal.
9. Automatic Personal Information Collection Devices (Cookies)
The Clinic uses cookies to store and retrieve information.
Cookies are small text files sent by the server and stored on the user’s device.
Cookies are used for service operation purposes.
Users may allow all cookies, require confirmation upon saving, or refuse all cookies through browser settings.
Refusal of cookies may limit some services.
10. Personal Information Management Officer
To protect personal information and handle related complaints, the Clinic appoints a Personal Information Management Officer as follows:
[Personal Information Management Officer]
Name:
Position: Chief Director
Affiliation: Eversame Clinic
Phone:
Email:
Users may report all personal information-related complaints to the above officer, and the Clinic will respond promptly and sincerely.
For further assistance, please contact the following organizations:
Personal Dispute Mediation Committee: http://www.1336.or.kr
/ 1336
Korea Information Security Mark Certification Committee: http://www.eprivacy.or.kr
/ +82-2-580-0533~4
Supreme Prosecutors’ Office Cyber Crime Investigation Division: http://www.spo.go.kr
/ +82-2-3480-3573
National Police Agency Cyber Terror Response Center: http://www.ctrc.go.kr
/ +82-2-392-0330
11. Measures to Ensure the Security of Personal Information
The Clinic implements various technical safeguards, including firewall-protected security systems, to protect personal information.
Administrative measures include strict access control, minimizing personnel handling personal information, ongoing security training, user authentication systems, and regular password updates.
12. Obligation to Notify Policy Changes
This Privacy Policy was established on August 13, 2023.
If any additions, deletions, or modifications occur due to changes in laws, policies, or security technologies, the Clinic will provide advance notice on the website at least 7 days prior to implementation.
Announcement Date: August 13, 2023
Effective Date: August 13, 2023
