Asan Oreum Internal Medicine Clinic Privacy Policy

Asan Oreum Internal Medicine Clinic (hereinafter, the “clinic”) provides this Privacy Policy to protect users’ personal information in accordance with the Personal Information Protection Act and to handle inquiries and complaints related to the processing of personal information.

The clinic processes personal information for the following purposes. The personal information being processed will not be used for any purposes other than those listed below. If the purpose of use changes, the clinic will take the necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.

1. Providing clinic information: Providing information related to the clinic, medical staff, facilities, consultation hours, examinations, and medical fees

2. Receiving and responding to consultation and appointment requests: Receiving consultation and appointment requests through the website, verifying identity, confirming requests, and providing responses

3. Providing information on document issuance methods: Providing information on how to issue clinic documents and connecting users to related external services

4. Website operation: Website security, maintaining service stability, and responding to inquiries about use

Online information provision and the receipt of consultation and appointment requests through the website are distinct from actual medical services, such as consultations and examinations.

When submitting a website inquiry or appointment request, the clinic processes the name, date of birth, telephone number, inquiry details, whether consent to the collection of personal information has been given, submission language, and source classification.

The name and date of birth are used to verify the requester, the telephone number is used to provide a response, and the inquiry details are used to confirm and respond to the request. Consent status is used to confirm consent, and the submission language is used to support responses.

Please take care not to enter personal information that is not necessary to process the request, such as your resident registration number or payment information, in the inquiry field.

The clinic processes and retains personal information for the retention and use period prescribed by law or the retention and use period for which consent was obtained when the personal information was collected.

When the purpose of processing personal information has been achieved or the retention period has expired and the personal information is no longer necessary, it will be destroyed without delay. If the information must be retained under other laws, it will be retained in accordance with those laws.

Information from website inquiries and appointment requests is managed separately from medical records created during the actual medical care process.

The clinic provides personal information to third parties only with the data subject’s consent or when the requirements of Articles 17 and 18 of the Personal Information Protection Act, such as a special provision of law, are met.

The privacy policy of the relevant external service applies to information that users directly enter after following an external document-issuance link on the website.

The clinic operates its website and consultation system using MediSupporter by FIRST FLUKE.

When personal information processing tasks are entrusted, the clinic specifies in contracts or other documents matters concerning the prohibition of processing beyond the purpose, technical and administrative safeguards, restrictions on further entrustment, management and supervision, and liability for damages in accordance with Article 26 of the Personal Information Protection Act, and manages the entrusted processing to ensure that personal information is handled safely.

The clinic destroys personal information without delay when it is no longer necessary, such as when the retention period has expired or the processing purpose has been achieved.

Personal information in electronic file form is deleted in a manner that cannot be recovered or restored, and personal information recorded in paper documents is shredded or incinerated. Information that must be retained under applicable laws is stored separately from other information.

Data subjects may request access to, correction or deletion of, and suspension of processing of their personal information in accordance with the Personal Information Protection Act. Rights may also be exercised through a legal representative or an authorized representative. The clinic will verify whether the requester is the data subject or a duly authorized representative and process the request in accordance with applicable laws.

Inquiries regarding the exercise of personal information rights and processing

• Personal Information Protection Officer: Jeong Jun-yong

• Telephone: 02-6958-7070

• Mail: Asan Oreum Internal Medicine Clinic, 2nd Floor, Gwangan Building, 578 Siheung-daero, Gwanak-gu, Seoul

Requests may be restricted in accordance with applicable laws, such as when there is a legal obligation to retain the information or when exercising the request would infringe the rights or interests of another person.

The clinic uses cookies to analyze website usage and improve its services, and uses Google Analytics 4, a web log analysis tool provided by Google LLC.

• Categories collected: Cookie identifiers, pages visited and dates and times of visits, referral sources, device, browser, and operating system information, and approximate location inferred from the IP address (at the country or city level; the IP address itself is not stored)

• Purpose of use: Statistical analysis of the number of visitors and usage patterns, and website improvement

• Retention period: Automatically deleted 14 months after collection

• The clinic does not collect information that can directly identify individuals, such as names, dates of birth, telephone numbers, or inquiry details, through Google Analytics.

As a result of using Google Analytics, the above information is transferred internationally as follows.

• Recipient: Google LLC (privacy inquiries: https://policies.google.com/privacy)

• Transfer countries: The United States and other countries where Google LLC operates data centers

• Time and method of transfer: Transmitted through information and communications networks when visiting the website

• Categories, purpose, and retention period of transferred information: The same as the categories collected, purpose of use, and retention period stated above.

Users can manage the acceptance, blocking, and deletion of cookies through their web browser’s privacy or cookie settings, and can opt out of Google Analytics collection using Google’s Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout). Opting out of Google Analytics collection does not restrict website use, but blocking all cookies may restrict access to some features.

For inquiries regarding the processing of personal information on the website, please contact Personal Information Protection Officer Jeong Jun-yong at 02-6958-7070.

Website management and consultation information processing are carried out through logged-in employee accounts, and the MediSupporter management screen uses an HTTPS connection.

The clinic complies with its obligations to ensure safety under the Personal Information Protection Act, and inquiries and complaints related to personal information protection are handled through the Personal Information Protection Officer.

The clinic has designated the following Personal Information Protection Officer to oversee matters related to the processing of personal information and to handle complaints and remedies for damages related to personal information processing.

• Name: Jeong Jun-yong

• Position: Representative Director and Physician

• Contact: 02-6958-7070

Inquiries regarding personal information processing, the exercise of rights, complaint handling, and remedies for damages may be submitted using the contact information above.

Asan Oreum Internal Medicine Clinic, as the personal information controller, manages the purposes and methods of personal information processing and fulfills its obligations under the Personal Information Protection Act.

• Representative and Personal Information Protection Officer: Representative Director and Physician Jeong Jun-yong

• Contact: 02-6958-7070

• Address: 2nd Floor, Gwangan Building, 578 Siheung-daero, Gwanak-gu, Seoul

MediSupporter’s employee-facing artificial intelligence suggested-response feature may be used, and the employee reviews the suggested response before sending it.

Suggested content provided by artificial intelligence does not replace medical care, diagnosis, or prescriptions by medical professionals. Inquiries regarding personal information processing and requests to exercise rights may be submitted to the Personal Information Protection Officer.

The website contains links to external services related to online document issuance, such as My Insu Planner and Kakao Pay.

The privacy policy of the relevant service applies to personal information that users directly enter after moving to an external service. Before using an external service, please check its privacy policy and terms of use.

To seek remedies for violations of personal information, data subjects may apply for dispute resolution or consultation with organizations such as the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency Personal Information Infringement Report Center.

• Personal Information Dispute Mediation Committee: 1833-6972, https://www.kopico.go.kr

• Personal Information Infringement Report Center: 118, https://privacy.kisa.or.kr

• Supreme Prosecutors’ Office: 1301, https://www.spo.go.kr

• National Police Agency: 182, https://ecrm.police.go.kr

If this Privacy Policy is changed, the details of the changes and the effective date will be announced through the website. Changes that have a significant impact on the rights and obligations of data subjects will be notified in the manner prescribed by applicable laws.