Privacy Policy
NEXT Plastic Surgery (hereinafter referred to as ”the Hospital”) values your personal information highly and complies with the 『Personal Information Protection Act』.
The Hospital informs you through this Privacy Policy about the purposes and methods for which the personal information you provide is being used, as well as the measures being taken to protect personal information.
The order of this Privacy Policy is as follows:
1. Items of Personal Information Collected and Collection Methods
2. Purpose of Collection and Use of Personal Information
3. Retention and Use Period of Personal Information
4. Procedures and Methods for Destruction of Personal Information
5. Provision and Sharing of Personal Information
6. Entrustment of Collected Personal Information Processing
7. Rights of Users and Legal Representatives and How to Exercise Them
8. Method of Withdrawing Consent / Canceling Membership
9. Matters regarding the installation/operation of automatic personal information collection tools and the refusal thereof
10. Chief Privacy Officer
11. Measures to Secure the Safety of Personal Information
12. Obligation to Notify in Case of Policy Changes
1. Items of Personal Information Collected and Collection Methods
The Hospital collects only the minimum personal information necessary to use services during consultations. While there are input fields during consultations for you to use the Hospital’s services, there are no restrictions on service use even if you do not enter an email address or contact number.
[Medical Treatment Information]
- Collected items: Name, Resident Registration Number, address, contact information, medical records
※ The retention of unique identification information and medical treatment information is mandatory under the Medical Service Act (separate consent is not required).
[Items Collected During Website Consultation]
- Required items: Name, ID, password, email, contact information (telephone number, mobile phone number)
- Optional Item: Whether to receive emails
- The following information may be automatically generated and collected in the course of using services or processing service provision tasks: service usage records, access logs, cookies, access IP information.
[Personal Information Collection Method]
- Personal information is collected through the following methods:
Website, written form, fax, telephone, consultation board, email
2. Purpose of Collection and Use of Personal Information
The clinic uses the collected personal information for the following purposes:
All information provided by the user will not be used for purposes other than those stated below, and prior consent will be sought if the purpose of use changes.
[Medical Treatment Information]
- Provision of medical services for diagnosis and treatment, and administrative services such as billing, payment, and refunds
[Website Consultation Information]
- Provision of consultation services, delivery of clinic news and disease information via email, surveys
3. Retention and Use Period of Personal Information
The clinic destroys your personal information without delay once the purpose of collecting or receiving the personal information has been achieved.
[Medical Treatment Information]
- Stored in accordance with medical record retention standards specified in the Medical Service Act
[Website Consultation Information]
- Even after the purpose of collection or the provided purpose has been achieved, your personal information may be retained if there is a necessity to preserve it in accordance with the provisions of relevant laws, such as the Commercial Act.
- Records on consumer complaints or dispute settlements: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)
- Records on the collection, processing, and use of credit information: 3 years (Use and Protection of Credit Information Act)
- Records on personal identification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.)
- Records on visits: 3 months (Protection of Communications Secrets Act)
4. Procedures and Methods for Destruction of Personal Information
The Hospital immediately destroys personal information after the 『Purpose of Collection and Use of Personal Information』 has been achieved. The destruction procedures and methods are as follows:
[Destruction Procedure]
Information entered by users for membership registration, etc., is destroyed immediately after its purpose has been achieved, in accordance with the destruction method.
[Destruction Method]
Personal information stored in electronic file format is deleted using technical methods that prevent the records from being reproduced.
Personal information printed on paper is destroyed by shredding with a paper shredder or by incineration.
5. Provision and Sharing of Personal Information
Except where your consent has been obtained or as provided by relevant laws and regulations, the Hospital shall never use your personal information beyond the scope notified in the 『Purpose of Collection and Use of Personal Information』 or provide it to other individuals, companies, or institutions under any circumstances.
- Submission of medical records to the Health Insurance Review and Assessment Service for medical benefit cost claims under the National Health Insurance Act
- Provided in a form that cannot identify specific individuals when necessary for statistical compilation or academic research
- Submission, etc., in cases where an investigative agency makes a request in accordance with the procedures and methods stipulated by laws and regulations
6. Entrustment of Collected Personal Information Processing
To fulfill services, the Hospital entrusts personal information as follows and stipulates necessary matters in accordance with relevant laws to ensure that personal information is managed safely during the entrustment contract.
The institutions entrusted with personal information processing and the details of the entrusted tasks of our clinic are as follows:
- Consignee: Now Design
- Consigned Tasks: Website management, operation, and maintenance
- Consigned Personal Information Items: Customer personal information within the website
- Period of Retention and Use of Personal Information: Until the termination of the consignment contract
7. Rights of Users and Legal Representatives and How to Exercise Them
Membership registration for children under the age of 14 (hereinafter referred to as ”children”) is conducted through a separate form written in plain language that is easy for children to understand, and the consent of a legal representative is strictly required when collecting personal information.
The hospital collects the minimum necessary information, such as the legal representative’s name and contact details, from the child in order to obtain the legal representative’s consent, and obtains the legal representative’s consent in accordance with the methods prescribed in the privacy policy.
A child’s legal representative may request to access, correct, or delete the child’s personal information. If you wish to access, correct, or delete a child’s personal information, the legal representative may directly access, correct, or delete the child’s personal information after going through the legal representative verification process by clicking ”Edit Member Information,” or by contacting the Privacy Officer in writing, by phone, or by fax, and the necessary measures will be taken.
The hospital does not provide or share information about children with third parties, and if a legal representative requests the correction of errors in personal information collected from a child, the use and provision of such personal information are suspended until the errors are corrected.
※ Personal information that is legally required to be retained cannot be modified or deleted during the retention period, even upon request.
8. Method of Withdrawing Consent / Canceling Membership
You may withdraw your consent to the collection, use, and provision of personal information provided during registration at any time.
To withdraw membership, you can click ”Withdraw Membership” on the My Page of the hospital website and complete the identity verification process to withdraw directly, or contact the Privacy Officer in writing, by telephone, or by fax, and we will take necessary actions such as destroying your personal information without delay.
9. Matters regarding the installation/operation of automatic personal information collection tools and the refusal thereof
The hospital operates ”cookies” that frequently store and retrieve your information. Cookies are very small text files sent to your browser by the server used to operate the hospital’s website and are stored on your computer’s hard drive. The hospital uses cookies for the following purposes:
You have choices regarding the installation of cookies. Therefore, by configuring your web browser options, you can accept all cookies, be prompted each time a cookie is saved, or refuse the storage of all cookies.
If you refuse the installation of cookies, there may be difficulties in providing some services.
10. Chief Privacy Officer
To protect your personal information and handle complaints related to personal information, the hospital designates a Privacy Officer as follows:
[Privacy Officer]
Name: Jae-soo Lee
Affiliation: Next Plastic Surgery
Position: Director / Chief Doctor
Phone Number: 02-2052-1011
E-mail: webmaster@nextplastic.co.kr
You may report all personal information protection-related complaints arising from using the hospital’s services to the Privacy Officer. The hospital will provide prompt and sufficient answers to users’ reports. If you need to report or consult on other personal information infringements, please contact the agencies below.
Personal Information Dispute Mediation Committee (http://www.1336.or.kr / 1336)
Cyber Crime Investigation Division of the Supreme Prosecutors’ Office (http://www.spo.go.kr / (02) 3480-3573)
Cyber Terror Response Center of the National Police Agency (http://www.ctrc.go.kr / (02) 392-0330)
11. Measures to Secure the Safety of Personal Information
The hospital implements various security devices as technical measures to protect users’ personal information. All information sent by users is securely stored and managed in a security system protected by a firewall device.
In addition, as an administrative measure to protect users’ personal information, the hospital establishes procedures necessary for accessing and managing users’ personal information, limits the personnel handling users’ personal information to a minimum, and conducts ongoing security training. We will also designate users of the system that processes personal information, grant user passwords, and renew them regularly.
12. Obligation to Notify in Case of Policy Changes
This Privacy Policy was enacted on January 9, 2017. If there are any additions, deletions, or modifications to the contents due to changes in laws, policies, or security technologies, we will notify you of the reasons and contents of the changes through the hospital website at least 7 days before implementing the amended Privacy Policy.
Notice Date: January 9, 2017
Effective Date: January 16, 2017
