- Home
- Notice Board
- Educational video
Educational video
| 온라인 의료광고 관련 법률문제 및 외국인환자 대상 마케팅 시 유의할 점 | |||
|---|---|---|---|
| Registration Date | 2021-09-12 | Count | 122 |
|
|
|||
Personal Information Processing Policy
닫기-
Article 1 (Purposes of Personal Information Processing)
① The report center processes personal information for following purposes only. When purposes of use change, necessary actions will be taken such as reception of additional agreement, etc. in accordance with Article 18 of Personal Information Protection Act.
1. Membership Joining and Management
- Personal information will be processed for various purposes such as; personal identification and verification according to the provision of membership service, maintenance and management of membership qualification, person identification according to the execution of Restrictive Identification System, confirmation of approval of legal representative at the processing of personal information, and various notice, notification, etc.
2. Execution of Matters under the Jurisdiction
- The report center is confirming and checking illegal advertisement suspected conducts in accordance with the regulations of Article 6 and Article 9 of "the Act on Supporting of Overseas Expansion of Medical Services and Attraction of International Patients (hereinafter, called "Medical Overseas Expansion Law") and Article 56 of "Medical Service Act" (attracting conducts of unregistered institutions, provision of false information, provision of medical advertisement, etc.) in advance together with Korea Health Industry Development Institute, and processes personal information in the process of performing corresponding tasks.
3. Service Evaluation and Ex Post Facto Management
- The report center processes personal information for ex post facto management such as analysis, evaluation, etc. for enhancement of report center task service
② Purposes of personal information file processing of the report center to be registered and disclosed in according to Article 32 of Personal Information Protection Act are as the followings;
신고센터 개인정보파일의 처리목적 Name of Personal Information File Operation Basis / Processing Purposes Retaining Period Reporting and Processing Details of the Report Center Reception and Processing of Foreign Patients Illegal Attracting Conducts Report 5 Years Membership Information of the Report Center Provision, Maintenance and Management of Membership Service Up To Membership Withdrawal ※ Auto Collecting Items: IP (Internet Protocol) Address (1 Year), Recordings of Contents of Use (3 Years)
Article 2 (Processing and Holding Period of Personal Information)
① The report center processes and retains personal information within retaining·utilization period of personal information by decree or within the period agreed when collecting personal information from principals of information.
② Periods of personal information processing and retaining of the Report Center are as the followings;
1. Reporting, Reception and Processing of Foreign Patients Illegal Attracting Conducts: 5 Years
2. Immediate Destruction at Membership Withdrawal
Article 3 (Provision of Personal Information to a Third Party)
The report center provides personal information of a reporter and a violator within the range of provision to a third party notified in the following personal information processing policy and will not provide personal information to a third party in excess of the same range without prior consent of the principal of information.
Recipients of Personal Information: The Government, Mayors and Governors, Registration Authorities, Competent Investigative Agency, Korea Health Industry Development Institute, etc.
Purpose of utilizing personal information of recipients: When personal information is required in the process of inquiring or investigating
- Items of Personal Information to be provided
Information of the Reporter: Mobile Phone Number, E-mail Address
Information of the Violator: Telephone Number and Mobile Phone Number, Workplace Location of the Violator
- 5 years from the provision of personal information retaining and utilization period of personal information recipient
※ You have the right of rejecting the agreement on personal information provision, and if you reject the agreement, further inquiry or investigation may not be smoothly proceeded.Article 4 (Consignment of Personal Information Processing)
The report center internally processes personal information for protection. However, in case of consigning personal information processing judging that it is necessary for rights improvement of users, information on contents of consignment or consignee or information of the trustee shall be immediately disclosed through this personal information processing policy.
1. Current state of personal information consigned or trusted in the report center based on related laws and other individual laws is as the follow;
- Consignment Organization
위탁기관 Consignment Items Consignment Organization Consigned Business Report Center of Illegal Attraction for Foreign Patients KOREA INTERNET ADVERTISING FOUNDATION Maintenance of Computing System of the Report Center - Delegated Agencies
수탁기관 Delegation Items Delegated Agencies Delegated Business Maintenance of Computing System of the Report Center DiDim365 Maintenance of Computing System of the Report Center 2. The report center specifies prohibition of personal information processing other than the purpose of executing consignment business, technical and managerial protective actions, limitation of reconsignment, management and supervision of trustees, and matters relating liability such as compensation for damages, etc. in documents such as contracts in accordance with Article 25 of Personal Information Protection Act at the conclusion of consignment contract, and supervises whether trustees safely process personal information. When there is any change in contents of consignment business or the trustee, this shall be immediately disclosed through this personal information processing policy.
Article 5 (Rights, Duty of Information Principals and Methods of Exercise)
① An information principal (in case of under the age of 14, a legal representative) may exercise the rights over one of the followings for personal information processed in the report center.
1. Request of personal information access
2. Request of correction if there is any error, etc.
3. Request of personal information deletion for documents with expired holding period
4. Request of suspension of processing
② Exercise of rights according to paragraph 1 can be done through civil complaint, e-mail, documents, facsimile, etc. according to the form of Annexed Paper No. 8 of the enforcement regulations of Personal Information Protection Act. In addition, Korea Internet Advertisement Foundation which operates the report center will immediately take an action after careful consideration over this.
③ When an information principal requests correction or deletion of personal information error, etc., corresponding personal information shall not be utilized or provided until correction or deletion is completed.
④ Exercise of rights according to paragraph 1 can be done through a proxy such as legal representative of the information principal or entrusted person. In this case, a power of attorney according to the form of Annexed Paper No. 11 of the enforcement regulations of Personal Information Protection Act shall be submitted.
⑤ In case of requesting access and processing suspension of personal information, the rights of the information principal may be limited in accordance with Article 35, Clause 4 and Article 37, Clause 2 of Personal Information Protection Act.
⑥ In case of requesting access, correction or deletion, suspension of processing according to the rights of information a principal, whether the requester of access, etc. is the very person or due deputy will be confirmed.
Article 6 (Items of Processed Personal Information)
① The report center processes the following personal information items.
신고센터 개인정보 항목 처리 Name of Personal Information File Items of Personal Information to be recorded in Personal Information File Reporting and Processing Details of the Report Center Essential: Name, Mobile Phone Number, Information of Violator (Firm Name, Contact Number, Location) Membership Information of the Report Center Essential: Name, Mobile Phone Number, E-mail Address (if necessary), ID, Password ② In the process of using internet service, following personal information items may be automatically created and collected.
- IP Address, Service Utilization Details, Visit History, etc.
③ In case of using the report center, following personal information items may be used for person identification.
- Name, Mobile Phone Number
Article 7 (Destruction of Personal Information)
① When personal information becomes unnecessary due to elapse of personal information retention period, request of the information principal, etc., the report center immediately destroys corresponding personal information.
② Procedure and method of personal information destruction are as the followings;
1. Procedure of Destruction: Destruct personal information (or personal information file) to be destructed by establishing a personal information destruction plan. Select personal information (or personal information file) having a cause of destruction and destroy personal information (or personal information file) after obtaining consent of the chief of personal information protection of the report center.
2. Method of Destruction: As for personal information recorded or stored in electronic files, destroy it so that recordings cannot be reproduced, and shred personal information recorded or stored in paper documents with a shredder or destroy them by incinerating.
Article 8 (Personal Information Safety Assurance Action)
The report center takes the following actions for safety assurance of personal information.
1. Minimization of Personal Information Handling Employees and Education: The report center minimizes the number of personal information handling personnels and performs regular education.
2. Access Restriction to Personal Information: Actions necessary for access control to personal information are taken through granting, changing and canceling of access right to database system which processes personal information, and unauthorized access from outside is controlled using firewall system and intrusion prevention system.
3. Encoding of Personal Information: Personal information is safely stored and managed through encoding, etc. In addition, for important data extra security functions such as encoding at data storing and transmission are used.
4. Installation and Periodic Checking of Security Program: In order to prevent leakage and damage of personal information owing to hacking or computer virus, etc., security program is installed and periodically updated and checked.
5. Execution of Regular Self-Inspection: In order to assure safety related with personal information handling, regular personal information protection management inspection is executed.
Article 9 (Chief of Personal Information Protection)
① The report center designates a person in charge of personal information protection in order to generalize duties relating personal information processing and perform complaint handling and damage relief of information principals in relation with personal information processing.
개인정보 보호책임자 지정 Description Department Name Contact Number Chief of Personal Information Protection Planning Office Park, Sang Yong, Head of Department 02-6263-3711 Person in charge of Personal Information Protection Advertising Watchdog Team Kim, Hee Jung, Team Leader 02-6263-3714 ② An information principal can ask for information on matters concerning all personal information protection related inquiries occurred in the process of utilizing service of the report center and complaint handling to the person in charge of personal information protection or corresponding department.
Article 10 (Remedies of Infringement on Rights and Interests)
① An information principal can ask damage relief of personal information infringement, consultation, etc. to following organizations.
- Personal Information Infringement Report Center: (without a telephone exchange number) 118 (privacy.kisa.or.kr)
- Personal Information Dispute Mediation Committee: 1833-6972 (kopico.go.kr)
- Cyber Investigation Division of Supreme Prosecutors' Office : (without a telephone exchange number) 1301 (www.spo.go.kr)
- Cyber Safety Bureau of the National Police Agency: (without a telephone exchange number) 182 (cyberbureau.police.go.kr)
② In addition, anyone who was invaded his rights or interests due to disposition or omission by the head of a public institution against request of an information principal about access, correction, deletion, processing suspension of personal information can request for administrative judgment provided by the Administrative Trial Act.
- Central Administrative Appeals Commission (http://www.simpan.go.kr)
Article 11 (Change of Personal Information Processing Policy)
This personal information processing policy applies from September 1, 2021.
Agreement of Utilization
닫기-
1. Purposes of collecting and using personal information (Article 15 of Personal Information Protection Act)
The report center collects and utilizes personal information as the followings in order to perform matters under the jurisdiction designated in related laws, etc. Collected personal information will not be used for usage other than designated purposes and if collecting purposes are changed, we will receive agreements after informing the changes in advance.
※ Related Laws, etc.: the Estate Agents Act and Enforcement Ordinance of the same law, Announcement of Detailed Standards for Monitoring of Mediation Object Indicating Advertisement using Internet, Announcement of Contents of Consignment Business and Consignment Organization Designation, etc.A. Provision of Reception·Processing·Ex Post Facto Management Service of Reporting
- Personal information included in the report shall be utilized in the report center for performing matters under the jurisdiction such as reception·processing of the report.
B. Investigation or Fact Confirmation for Information Providers who display·advertise Mediation Objects using Internet
- Requests of investigation which includes a part of personal information will be sent to the information provider to confirm illegal display·advertisement in reported mediation object.
C. Statistical Analysis and Ex Post Facto Management of the Report Center
As for details of reception and processing of the reports, ex post facto management of the results of analysis·evaluation and processing for service enhancement and policy evaluation of the report center.
2. Items of Collected Personal Information (Article 15 and Article 16 of Personal Information Act)
A. Essential Items: Name, Mobile Phone Number, E-mail Address (if necessary), Information of Violator (Firm Name, Location, Contact Number)
B. Auto Collecting Items: IP (Internet Protocol) Address, Recording of Contents of Use
In order to prepare against use of someone else's name by dishonest means, details of information utilization is automatically collected.
※ In case of using someone else's name by dishonest means, you can get punished in accordance with Article 37 of the Residents Registration Law (Penalty).
3. Periods of Retaining and Using Personal Information
In principle, the report center immediately destroys personal information when personal information retaining period elapses or purposes of processing are achieved. However if personal information shall be retained under other laws, that's not the case.
A. Details of Reporting and Processing, etc.: 5 Years
B. Membership Information: Destruction directly after Membership Withdrawal
C. IP Address among Auto Collection Items: 1 Year
4. The fact of having the rights of rejecting agreement, and contents of disadvantage according to rejection of agreement (Article 16 of Personal Information Protection Act)
At civil complaint application, you have the rights of rejecting the agreement of collection of personal information other than minimum necessary information, however civil complaint application is limited in case of rejecting the agreement of minimum personal information collection.
