Privace policy
[Personal Information Policy]
This Personal Information provides guidelines about Security and Personal Information Policy to protect personal information of clients using She’s Plastic Surgery website .
She’s Plastic Surgery(“Clinic”) values your personal information and comply with 『Personal Information Protection Act』. The clinic informs you how your personal information you provide is being taken and what it is used for and what steps are being taken to protect your personal information through privacy policy statement.
Privacy Policy statement of the clinic contains the following
Act 1
Collected personal information items and method
Act 2
Collection of personal information and purpose of use
Act 3
Period of retaining and utilizing collected personal information
Act 4
Procedure and methods of destruction of personal information
Act 5
Sharing and delivery of the collected personal information
Act 6
Consignment of the collected personal information
Act 7
The rights and exercise of the user and the legal representative
Act 8
Withdrawal of agreement / membership
Act 9
Installation, operation, and rejection of personal information auto collection devices
Act 10
Personal information management manager
Act 11
Securing safety of personal information
Act 12
Obligation to Notify Policy Change
Act 1 Collected personal information items and method
The clinic collects only the minimum personal information necessary to use the service. There are required and selective items you have to fill in to use the clinic’s service, there is no limit on using the service without filling in the selective items such as receiving emails.
[Medical Chart]
① Collection Items: Name, resident ID, address, contact, treatment history
② Health information: Any health information required by the medical staff including medical history, surgery, family history, etc.
※ Personal identification information and medical chart information must be kept in accordance with the medical law. (No additional agreement on medical chart information collection)
[Collection items to sign in]
① Collection items: name, birthday, gender, website ID, password, phone number, address, mobile phone number, email, service usage records, connection logs, Cookie, IP
② The following information can be automatically generated and collected in the process of using the service: service usage records, connection logs, Cookie, IP
[Connection method]
The clinic collects personal information in the following ways.
① Website(sign-in, online consultation, appointment making), document forms, fax, phone calls, email, mobile consultation
Act 2 Personal information collection and purpose of usage
The clinic utilizes the collected personal information for the following purpose. The personal information shall not be used for other purpose. Purpose of use changes only with prior consent.
[Medical treatment information]
① Medical treatment for diagnosis and treatment and reception service to claim, receipt, and refund
② Personal health information: as reference to provide smooth consultation and treatment
[Website membership information]
① Required information : online medical information on the website, appointment, appointment checking and membership service
② Selected information : securing communication channel for the clinic news and notice through MMS, SMS, SNS, email, disease guides, questionnaire, compliant, etc.
Act 3 Period of retaining and utilizing collected personal information
The clinic destroys the information without delay once the acquisition and utilization of the personal information is achieved.
[Medical treatment information]
① Medical treatment information will be stored according to the storage standards stated in the medical law.
[Website membership information]
① According to the commercial law or any provisions if necessary, the clinic maintains the personal information in case the acquisition and utilization is achieved on the membership withdrawal or expulsion.
② Records of client complaint or dispute resolution: 3 years (Consumer protection in electronic commerce, etc.)
③ Records of collection/handling of credit information: 3 years (the Use and protection of credit information act)
④ Records of personal identification: 6 months (promotion of information network utilization and information protection act)
⑤ Connection logs: 3 months (Protection of Communications Secrets Act)
Act 4 Procedure and methods of destruction of personal information
The clinic destroys the information without delay once the goal of utilizing personal information is achieved. The destruction procedure and method are as follows.
[Procedure and methods of destruction]
① The collected information users filled in to sign-in will be destroyed once the goal of utilizing personal information is achieved.
② Personal information stored in an electronic file format is deleted using a technique that cannot be played electronically. Personal information on paper is either shredded by a shredder or destroyed by incineration.
Act 5 Consignment of collected personal information
The clinic does not provide any personal information at no circumstances. However, in these following cases, it can provide the personal information as an exception.
1. If the users of the information agree in using the personal information in advance.
2. If there is a requirement to conduct investigation by the investigative agency for the purpose of investigation following and according to all legal processes
Act 6 Consignment of personal information
The clinic is consigning personal information as follows with necessary regulations for safe management according to relevant provisions.
Personal information is consigned to the following organization as below.
Consignment to : FIX
Service consigned : Website and system management
Consigned personal information items : Name, address, phone number, etc.
Period of retaining and utilizing personal information : Till termination of consignment agreement
Act 7 The rights and exercise of the user and the legal representative
The children aged under 14(“children”) receives a separate form with easy-to-understand expressions to sign-in with the agreement of the legal representative. The clinic requires the minimum information of the legal representative including their name and contact number from the children with the legal representative’s agreement in the way the personal information policy provides. The legal representative can ask for reading, correction and deletion of the children’s personal information. To read, correct and delete the personal information, the legal representative can either click membership information edit and go through the confirmation process or contact the personal information protection manager through document, call or Fax for necessary procedure. Any information of the children is not provided to or shared with a third party. When the legal representative requests correction for a personal information error, the information shall not be used or provided before completion of correction.
※ Personal information obliged to store cannot be corrected or deleted within the period of retaining even with a request.
Act 8 Withdrawal of agreement / membership
Users can withdraw the agreement to collection, usage and provision of personal information. Users can apply to withdraw membership either by clicking mypage-『withdrawal』 to go through the identification process or by contacting the personal information protection manager through document, call or Fax for necessary procedure.
Act 9 Installation, operation, and rejection of personal information auto collection devices
The clinic operates a device that collects personal information, such as cookies, which frequently store and locate user information. Cookies are tiny text files that the server used to run the clinic's website sends to user's browser and store on user's computer's hard disk. The company shall use cookies for the following purposes. Users have the option of installing cookies. Therefore, users can choose to accept all cookies or to verify that cookies are stored every time, or to refuse to store all cookies by setting options in a web browser. However, if the user refuses to install cookies, it may be difficult to provide services.
Act 10 Personal information management manager
To protect personal information of users and handle complaints about personal information, the clinic is responsible for appointing related departments and personal information management managers as below.
[Personal information management manager]
① Name : Hong So Yeon
② Position : She’s Plastic Surgery edit team leader
③ Working for : She’s Plastic Surgery
④ Phone number : 051.710.0788
⑤ Email : shesps@naver.com
Act 11 Securing safety of personal information
The clinic provides technical measures necessary to secure safety of personal information as follows. All personal information of user is encrypted and stored safely. The clinic is taking necessary measures to control access to personal information and minimize handling personnel with security training. The clinic also designates the personal information system with user password regularly renewed.
Act 12 Obligation to notify policy change
This personal information policy was enacted on Oct. 4, 2013. In the event that the current policy contents are added, deleted or modified due to change of regulation, policy or security technique, it provides a function to notify newly revised contents and inquire the details 7 days in advance on the website with the reason and contents.
Announcement date : Oct. 04th. 2013 / Enforcement date : Oct. 04th. 2013
Operation and Management of Image Data Processing Equipment
Basis and purpose of installation of image data processing equipment
The clinic installs and operates image data processing equipment for the following purpose according to Personal Information Protection Act 25-1.
1. Facility safety and fire prevention
2. Crime prevention for client’s safety
Act 2 Number, location, range of the equipment
The clinic is consigning personal information as follows with necessary regulations for safe management according to relevant provisions.
Personal information is consigned to the following organization as below.
1. Number of the equipment: 12
2. Location and range: waiting room, corridor, consultation room, entry, entry corridor
Act 3 Administration and access manager
To protect personal image data and handle complaints about the data, the clinic is responsible for appointing related departments and personal information management managers as below.
Role : Administration manager
Name : Hong So Yeon
Position : Team leader
Team : Promotion
Contact Number : 051.710.0788
Act 4 Working hours, period/place of retaining, process
1. Working hours: 24 hours
2. Period of retaining: 30 days from filming date
3. Place of retaining: clinic server room
※ Method of destruction: the clinic records and controls usage of the data for other purpose, a third party, destruction, reading, etc. and destroys the data at the moment of termination of the retaining period(shredding or incineration for printed data).
Act 5 Consignment of installation and management of image data processing equipment
The clinic is consigning installation and management of image data processing equipment as follows with necessary regulations for safe management according to relevant provisions.
1. Consigned to : 에스원 (SECOM)
2. Person in charge : 배태원 (Bae Tae Won)
3. Contact number : 1588-3112
Act 6 Verification method and place of personal image data
1. Verification method : Visit the clinic with an advance notice to the image data administration manger
2. Server room
Act 7 Measures to request of information principal to read image data
Users can ask for reading, verification and deletion of personal image data. However, it is only limited to the image data of the user and necessary for emergent life, physical, property benefit of the principal. The clinic takes any necessary measure in case of request for reading, verification and deletion without delay.
Act 8 Securing safety of image data
The clinic provides technical measures necessary to secure safety of image data with encryption, etc. The clinic authorizes graded access as a management measure and records the generation date, purpose of reading, reader, time, etc. to prevent forgery of the image data. The clinic also utilizes a lock for physically safe storing of the personal image data.
Act 9 Change of personal information policy
This operation and management of image data policy was enacted on Oct. 4, 2013. In the event that the current policy contents are added, deleted or modified due to change of regulation, policy or security technique, it provides a function to notify newly revised contents and inquire the details 7 days in advance on the website with the reason and contents.
Announcement date : Oct. 04th. 2013 / Enforcement date : Oct. 04th. 2013
