Yonsei Future IFC Clinic (hereinafter referred to as the 'Clinic') considers the protection of personal information on the Internet to be highly important, and is fully committed to ensuring that the personal information provided by users while using the Clinic is protected. Accordingly, the Clinic has established and complies with this Privacy Policy based on relevant laws and regulations that information and communications service providers must observe, such as the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Act on Promotion of Information and Communications Network Utilization and Information Protection. This Privacy Policy may be modified from time to time due to changes in government laws and guidelines or changes in the Clinic's internal policies. In the event of any changes, the Clinic will immediately reflect the details in the Privacy Policy posted on the main screen of the website. Through this Privacy Policy, users will be able to understand the purposes and methods for which the collected personal information is used and how it is securely protected.

[The order of this Privacy Policy is as follows:]

1. 1. Items of Personal Information Collected and Collection Method
2. 2. Purpose of Collection and Use of Personal Information
3. 3. Provision and Sharing of Personal Information
4. 4. Retention and Period of Use of Personal Information
5. 5. Procedures and Methods for Destruction of Personal Information
6. 6. Rights of Users and Legal Representatives and How to Exercise Them
7. 7. Methods for Withdrawal of Consent / Membership Withdrawal
8. 8. Matters Concerning the Installation/Operation and Refusal of Automatic Personal Information Collection Devices
9. 9. Matters Concerning the Operation/Management of Video Information Processing Equipment
10. 10. Matters Concerning Measures to Secure the Safety of Personal Information
11. 11. Chief Privacy Officer
12. 12. Duty to Notify Due to Policy Changes
13. 13. Entrustment of Handling Collected Personal Information
    
    

1. Items of Personal Information Collected and Collection Method

The Clinic collects only the minimum personal information required to use the services when registering for membership. The information collected for you to use the Clinic's services includes required items and optional items entered during membership registration. Even if you do not enter optional items such as whether to receive emails, there are no restrictions on using the service.

A. Items Collected During Medical Treatment

• Required Items: Name (Korean), Address, Contact Information
• Health Information: Personal health information deemed necessary by medical staff to provide medical services, such as medical history and family history.
  ※ In accordance with the Medical Service Act, unique identification information and medical records must be mandatorily retained.
  (Separate consent is not obtained for the collection of medical records.)

B. Items Collected During Website Membership Registration

• Required Items: ID, Password, Name, Email
• Optional Items: Contact Information (Telephone number, Mobile phone number)
• Sensitive Information: Past medical history, surgery history, areas of surgical interest
• In the course of using the service or processing service provision tasks, the following information may be automatically generated and collected without the user's consent.
  (Service usage records, access logs, cookies, access IP information)
• Identity Verification (Mobile phone verification / i-PIN verification): Name, identity verification value, i-PIN number (for i-PIN members), date of birth, gender, ID, password, contact information (email address, mobile phone number), legal representative information for those under 14 years old, registration verification information

C. Items Collected During Medical Fee Payment

• Credit Card Payment: Card issuer name, card number, and other credit card payment approval information

D. Personal Information Collection Method

• Personal information is collected through the following methods:
  Website (membership registration, real-time consultation, online reservation, online consultation, etc.), written forms, fax, telephone, email

2. Purpose of Collection and Use of Personal Information

The Clinic utilizes the collected personal information for the following purposes. All information provided by the user will not be used for any purpose other than those required for the following purposes, and prior consent will be sought if the purpose of use changes.

• Identity verification procedures for medical treatment/examination/reservation inquiry and medical services
• Services for diagnosis and treatment
• Administrative services such as billing, collection, and refund of medical fees
• Sending medical fee bills, statements, certificates, and sending medicines/goods and results
• Providing medical records to other medical institutions that requested medical care or to which the patient was transferred
• Securing communication channels to assist in delivering notices, handling civil complaints/grievances, etc.
• Materials for processing responses to online consultations
• Providing information on new services and events
• Medical quality control, legal and administrative responses, and actions for the operation of the Clinic
• Minimum analysis data required for education and research
• Guidance on medical information, academic information, and Clinic information
• Use as reference material to provide smooth services during consultation and treatment
• Information collection for consumers in accordance with Article 52 of the Framework Act on Consumers

3. Provision and Sharing of Personal Information

The Clinic will not use your personal information beyond the scope notified in the 『Purpose of Collection and Use of Personal Information』 or provide it to third parties, other companies, or institutions under any circumstances, except with your consent or in accordance with the provisions of relevant laws and regulations.

However, exceptions are made in the following cases:

• When users have consented to disclosure in advance
• When requested by an investigative agency in accordance with the provisions of laws and regulations, or for the purpose of investigation in accordance with the procedures and methods prescribed by laws and regulations
• When required for statistics compilation, academic research, or market research, provided in a form that cannot identify a specific individual

4. Retention and Period of Use of Personal Information

The Clinic destroys your personal information without delay when the purpose of collection or the purpose for which it was provided is achieved.

• A. For membership registration information: When withdrawing from membership or being expelled from membership, or when 1 year has elapsed since the last login date (Article 29 of the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. and Article 16 of the Enforcement Decree of the same Act)
• B. When collected for purposes such as surveys, events, etc.: When the relevant survey, event, etc. ends
• C. When collected for medical purposes: Retained in accordance with the period specified in Article 15 "Retention of Medical Records" of the Enforcement Regulations of the 「Medical Service Act」 (Patient Roster: 5 years, Medical Record Book: 10 years), (Retention items: Name, Address, Medical records)
• D. Records on consumer complaints or dispute handling: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• E. Records on collection/processing and use of credit information: 3 years (Credit Information Use and Protection Act)
• F. Records on identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.)
• G. Records on visits: 3 months (Protection of Communications Secrets Act)
  

  ※ However, even when the purpose of collection or the purpose for which it was provided is achieved, your personal information may be retained if there is a necessity to retain it under the provisions of laws and regulations such as the Commercial Act.

5. Procedures and Methods for Destruction of Personal Information

The Clinic destroys personal information immediately after the 『Purpose of Collection and Use of Personal Information』 is achieved. The destruction procedures and methods are as follows.

• A. Destruction Procedure
  Information entered by the user for membership registration, etc., is destroyed immediately by the following destruction method after the purpose is achieved.
• B. Destruction Deadline
  The user's personal information shall be destroyed within 5 days from the end of the retention period if the retention period of personal information has expired, and within 5 days from the date when the processing of personal information is recognized as unnecessary, such as achievement of the purpose of processing personal information, abolition of the relevant service, or termination of the business.
• C. Destruction Method
  Personal information stored in electronic file format is deleted using technical methods that cannot reproduce the records. Personal information printed on paper is destroyed by shredding with a shredder or incineration.

6. Rights of Users and Legal Representatives and How to Exercise Them

When a customer requests access to, correction, or deletion of personal information, the Clinic responds sincerely to the customer's request and processes it without delay. To protect personal information, procedures for access, correction, and deletion of personal information by other application methods such as telephone, mail, FAX, etc., except for customer visits, are not provided.

• A. Access to Personal Information
  Customers can visit the Clinic to request access to their personal information, and we will respond to this promptly.
• B. Correction/Deletion of Personal Information
  
  • When a customer requests correction/deletion of personal information, the Clinic corrects/deletes it without delay if it is recognized that there is a need for correction or deletion, such as when an error is found in the personal information. The Clinic may request evidentiary materials necessary to verify the facts of the correction/deletion content. The relevant personal information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, the result of the correction processing will be notified to the third party without delay so that the correction can be made.
  • When a customer requests access to, correction, or deletion of their own personal information, the identity is verified by presenting an identification card showing the customer's identity, such as a resident registration card, passport, or driver's license.
  • When a customer's representative visits and requests access, correction, or deletion, the power of attorney and consent form of the customer, and the identification card of the representative, etc., are checked to verify whether they are a legitimate representative.
  • If there is a justifiable reason to refuse access to, correction, or deletion of all or part of the personal information, the Clinic notifies the customer of this and explains the reason.
  • Cases where access to and correction of personal information can be restricted:
  • When there is a risk of significantly harming the life, body, property, or rights and interests of the person or a third party
  • When there is a risk of significantly disrupting the business of the relevant service provider
  • When it violates laws and regulations, etc.
  • Membership registration for children under 14 years of age (hereinafter referred to as "children") is conducted through a separate form, and consent from a legal representative must be obtained when collecting personal information.
  • The Clinic collects minimum information such as the name and contact information of the legal representative from children to obtain the consent of the legal representative, and obtains the consent of the legal representative in accordance with the method prescribed in the Privacy Policy.
  • Users and legal representatives can exercise their rights regarding personal information by contacting the Clinic via Internet, telephone, written form, etc., and the hospital will take necessary measures without delay.

  ※ Personal information that is mandatory to be kept by law cannot be modified/deleted within the storage period even if there is a request.

7. Methods for Withdrawal of Consent • Membership Withdrawal

You can withdraw your consent to the collection, use, and provision of personal information given during membership registration at any time. Withdrawal of consent (membership withdrawal) can be done by clicking on 『Withdrawal of Consent (Membership Withdrawal)』 on the website, going through the identity verification procedure, and directly withdrawing consent, or by contacting the personal information manager, and we will take necessary measures such as destroying your personal information without delay.

8. Matters Concerning the Installation/Operation and Refusal of Automatic Personal Information Collection Devices

The Clinic uses 'cookies' that store and retrieve user information from time to time in order to provide specialized customized services to users. Cookies are small amounts of information sent by a website to the user's computer web browser and may be stored on the PC hard disk.

• A. Purpose of Use of Cookies
  • Cookies identify the user's computer but do not identify individual users personally. The Clinic can utilize these cookies to create more convenient services by understanding the visit and usage patterns, user scale, etc., for each service visited by users.
  • Users can choose whether to use cookies by adjusting the options of their web browser. That is, you can accept all cookies, send a notification when cookies are installed, or refuse all cookies.
  • However, users must allow cookies in order to log in (LOG-IN) and use the service after accessing the Clinic.
• B. Installation/Operation and Refusal of Cookies
  • Users have the option regarding cookie installation. Therefore, the user can allow all cookies, go through verification every time a cookie is stored, or refuse the storage of all cookies by setting options in the web browser.
  • As a method of refusing cookie settings, the user can allow all cookies, go through verification every time a cookie is saved, or refuse the storage of all cookies by selecting the options of the web browser used.
  • Example of setting method

    - For Internet Explorer: Tools menu at the top of the web browser > Internet Options > Privacy > Advanced
    - For Chrome: Settings menu on the right side of the web browser > Show advanced settings at the bottom of the screen > Content settings button in Privacy > Cookies

  • However, if you refuse to store cookies, you may experience difficulties in using some services of the Clinic that require login.

9. Matters Concerning Measures to Secure the Safety of Personal Information

The Clinic is taking the following technical and managerial measures to ensure safety so that customers' personal information is not lost, stolen, leaked, altered, or damaged.

[Minimization and Training of Employees Handling Personal Information]
We minimize the designation of personal information handlers and conduct regular training.

[Conducting Regular Self-Audits]
To ensure safety related to personal information handling, we regularly conduct self-audits at least once a year.

[Establishment and Implementation of Internal Management Plan]
We establish and implement an internal management plan for the secure handling of personal information.

[Encryption of Personal Information]
Among the user's personal information, passwords are encrypted, stored, and managed, so only the user can know them. For important data, separate security functions such as encrypting files and transmission data are used.

[Technical Countermeasures Against Hacking, etc.]
To prevent leakage and damage of personal information caused by hacking or computer viruses, security programs are installed, periodic updates and inspections are conducted, and systems are installed in areas where access from the outside is controlled, technically/physically monitored, and blocked.

[Access Restrictions to Personal Information]
Necessary measures are taken for access control to personal information through granting, changing, and canceling access rights to the database system that processes personal information, and unauthorized access from the outside is controlled using an intrusion prevention system.

[Access Control for Unauthorized Persons]
A separate physical storage location for the personal information system holding personal information is established, and access control procedures are set up and operated for it.

10. Matters Concerning the Operation/Management of Video Information Processing Equipment

The Clinic operates and manages video information processing equipment as follows.

11. Chief Privacy Officer

In order to protect your personal information and handle complaints related to personal information, the Clinic has designated a Chief Privacy Officer as follows.

[Chief Privacy Officer]

• Manager in Charge: Dong-hyun Lee
• Handler in Charge: Dong-hyun Lee
• Department: Yonsei Future IFC Examination Center
• Position: Team Leader
• Telephone Number: 051-710-2000
• Email: busanifc2024@naver.com

You can report all privacy-related complaints occurring while using the Clinic's services to the Chief Privacy Officer.
The Clinic will provide rapid and sufficient answers to user reports.

If you need to report or consult on other personal information infringements, please contact the following organizations.

• Personal Information Dispute Mediation Committee (http://www.1336.or.kr/1336)
• Supreme Prosecutors' Office Cyber Crime Investigation Unit (http://www.spo.go.kr/ (02)3480-3573)
• National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330)
• 
  

12. Duty to Notify Due to Policy Changes

This Privacy Policy was enacted on August 31, 2015. In the event of additions, deletions, or modifications to the contents in accordance with changes in laws, policies, or security technologies, notice of the reasons and contents of the change will be given through the Clinic's website at least 7 days before the implementation of the modified Privacy Policy.

13. Entrustment of Handling Personal Information

To improve services, the member's personal information is collected and analyzed by outsourced companies, and necessary matters are prescribed during consignment contracts so that personal information can be safely managed in accordance with relevant laws and regulations.

• Matters concerning the trustee, scope of consignment, scope of shared information, etc., are posted via email, telephone, or website.
• When signing a consignment contract, regulations such as strict compliance with instructions related to personal information protection by the service provider, confidentiality regarding personal information, prohibition of provision to third parties, etc., are prescribed, and the contract contents are stored electronically.

The hospital entrusts personal information as follows to fulfill services, and prescribes necessary matters during consignment contracts so that personal information can be safely managed in accordance with relevant laws and regulations. The hospital's personal information consignment processing organizations and details of entrusted work are as follows.

The hospital regulates compliance with laws and regulations related to personal information protection, confidentiality regarding personal information, prohibition of provision to third parties, burden of liability in case of accidents, consignment period, and obligation to return or destroy personal information after processing is completed through outsourced work contracts, etc., and manages them to ensure compliance.

• Announcement Date: August 01, 2021
• Effective Date: August 01, 2021