Ppeum Clinic (hereinafter referred to as "The Company") attaches great importance to the protection of personal information and does its best to ensure that any personal information provided to us by our users in using our site or services, is protected. The "Personal Information Protection Act" lays out general guidelines for the handling of such personal information, and we collect information in accordance with the provisions set forth by these laws and regulations. We will handle the personal information that we hold and process lawfully and appropriately in order to properly carry out business affairs and we protect the rights and interests of the subjects of any information that we collect.
In addition, the Company respects the rights and interests of the information subject such as their right to request access to, correct, delete or suspend information processing in accordance with relevant laws and regulations. The information subject may request administrative actions as prescribed by the Administrative Appeals Act in the event of infringement of the rights and interests.
In order to protect the personal information, rights, and interests of the information subject in accordance with the Personal Information Protection Act, and to facilitate the handling of any grievances related to personal information brought forth by the information subject, we will notify you via notice on our homepage, or directly, if there are any changes to the Privacy Policy.
Article 1: Collected Personal Information and Collection Methods
When collecting personal information, we will notify you in advance of the scope and purpose of collection in accordance with relevant laws and regulations and as stated in the Terms and Conditions of Use. Details of the collection of personal information are as follows:
Online consultation, items to be collected at the time of booking
- Collected information: Name, ID, password, mobile phone number, access log, cookies, IP address
- Methods of collection of personal information: Consultations when making appointments
Items to be collected when registering for membership on the website
- Items to be collected: Name, ID, password, place of residence, mobile phone number, email, access log, cookie, access IP information
- Method of collecting personal information: The following information may be automatically generated and collected during the process of using the website (membership) service or in the process of handling the business of providing the service.
- Service usage records, access logs, cookies, access IP information
Items to be collected at the time of visit
- Required items: Name, resident registration number, address, telephone number, mobile phone number, e-mail, marital status, visit route, alien registration number (for foreigners only)
- Health information: Personal information deemed necessary by medical staff to provide medical services, such as medical and family history, etc.
Items to be collected when storing payment information
- When paying by credit card: Card payment authorization information, such as the name of the cardholder, card number, etc.
Mediums of collection of personal information
- Website, written forms, faxes, phone calls, consultations, e-mails, etc.
Article 2: Purpose of Collection and Use of Personal Information
All information provided by the user will not be used for any reason other than those necessary for the following purposes, and prior consent will be sought if the purpose of use is changed. We collect personal information for the following purposes:
- Diagnosis and treatment
- Identification protocol for medical treatments and examinations, appointment bookings, and appointment inquiries
- Services such as billing, storage, and refunds
- Sending bills, statements, certificates, products, and results
- Online/offline inspection outsourcing, external inspection requests
- Securing channels of communication to assist in the handling of complaints, grievances, etc.
- Quality assurance of medical services, legal and administrative responses, and hospital operations
- Minimal analytical data required for education and research
- Provision of information for marketing purposes, location specific promotional events, new services, social media announcements, text messages, emails, KakaoTalk channels and notifications, and phone calls.
- Medical information, academic information, and hospital information
Article 3: Provision and Sharing of Personal Information
How We Use Personal Information
- For patient identification, booking appointments for treatment, cancellations, etc.
- Clinic Information, new services, promotional events, etc.
- Text messages guidance related to treatments, appointments reservation, etc.
- Items of personal information to be provided: Name, ID, password, gender, mobile phone number, e-mail, residence
How We Use Personal Information
- For patient identification, booking appointments for treatment, cancellations, etc.
- Clinic Information, new services, promotional events, etc.
- Text messages guidance related to treatments, appointments reservation, etc.
- Items of personal information to be provided: Name, ID, password, gender, mobile phone number, e-mail, residence
Period of Information Retention
- The retention period of personal information is the same as that of the information collection organization.
However, in the event of termination of contract with a personal information collection institution, the patient has the right to refuse consent.
- If consent is refused, the patient may not be able to make an appointment and the patient's convenience and satisfaction may be affected.
Article 4: Provision of Personal Information to Third Parties
The Company shall only process personal information within the scope specified in "Article 1: Collected Personal Information and Collection Methods" and provide personal information to third parties only in the event of prior consent by the user, or as specified under relevant laws and regulations.
Source |
Purpose of Information Provision |
Required Fields |
Retention Period |
Genius |
To provide medical consultations and information regarding new services and promotional events |
Name, password, areas of interest, contact information, age, gender, KakaoTalk ID |
Until a request to withdraw consent has been made |
Information provided to third parties without prior consent as stipulated by relevant laws:
- Non-personally identifying information necessary for statistical purposes, academic research, or market research.
- Requests made by government agencies in accordance with relevant laws
- Criminal investigations or a request from the Information and Communication Ethics Committee
- Any other requests that are made in accordance with relevant laws
Article 5: Entrustment of Personal Information Processing
In order to be able to provide business in a smooth manner, and provide better service and convenience for customer, the Company entrusts personal information to several third party information processing businesses as follows:
Trustee |
Purpose of Entrusted Information |
Entrusted Personal Information |
Trustee Period |
CareLabs co., Ltd. |
Database management |
Name, hospital registration number, date of birth, etc. |
Until contract expiry |
EnableSoft co., Ltd. |
Database management |
Name, hospital registration number, date of birth, etc. |
Until contract expiry |
Jeonneung IT co., Ltd |
Database management |
Name, hospital registration number, date of birth, etc. |
Until contract expiry |
Sungmin Networks co., ltd. |
Database management |
Name, hospital registration number, date of birth, etc. |
Until contract expiry |
TNH co., ltd. |
Database management |
Name, hospital registration number, date of birth, etc. |
Until contract expiry |
Genius |
Website development and operation, services and promotional events |
Name, password, areas of interest, contact information, age, gender, KakaoTalk ID |
Until contract expiry |
Article 6: Period of Data Retention and Use of Personal Information
After the purpose of collection and use of personal nformation has been achieved, the information will be destroyed without delay. However, some of the information may be retained for a specified period for the following reasons:
- Items to be preserved: Name, gender, login ID, password, home telephone number, mobile phone number, e-mail
- Basis for retention: Article 15 of the website's Terms of Use/Implementation Rules of Medical Law (Preservation of Medical Records)
- Retention period: Destruction upon withdrawal of membership / Medical records for 10 years, but even if the purpose of collection or the purpose for which it was provided is achieved, we may retain your personal information if it is necessary to preserve it in accordance with the provisions of laws and regulations such as the Commercial Law.
Article 7: Destruction of Personal Information
After the purpose of collection and use of personal information has been fulfilled, the information will be destroyed. The procedure and method of destruction are as follows:
Destruction procedure
The information entered by the user for membership registration, etc., shall be destroyed immediately after the purpose has been achieved, by the destruction methods listed below.
Method of destruction
Personal information stored in the form of electronic files is deleted using technical methods which make it impossible to reproduce or recover the information. Personal information printed on paper is shredded or incinerated.
Article 8: Rights of Users and Their Legal Representatives and How to Exercise Them
When the company is requested to access, correct, or delete personal information, the company shall respond faithfully to the customer's request and handle it without delay. In order to protect personal information, we do not provide methods to view, correct, or delete personal information by telephone, mail, fax, or any methods other than visiting our company physically.
Viewing Personal Information
Customers may request access to their personal information by visiting the company, in which we will respond promptly.
Correction and Deletion of Personal Information
- If a customer requests the correction or deletion of personal information, the company shall correct or delete the personal information without delay. If it is deemed necessary to correct or delete the personal information, such as if it is found that there is an error, we may request evidence supporting the corrections or deletions.
- If the customer requests access to, or correction or deletion of his/her personal information, an identity document such as a resident registration card, passport, driver's license, etc., indicating the identity of the customer, must be used to confirm their identity.
- If we have a legitimate reason to refuse to view, correct or delete all or part of your personal information, we will notify you and explain our reasoning.
- The legal representative of a child under the age of 14 may request access, correction, deletion or suspension of processing of the child's personal information, and must provide proof of their relationship to the child, their name, and some form of identification.
※Personal information that is obliged to be stored by law cannot be modified or deleted within the storage period even if requested.
Article 9: Withdrawal of Consent
You may withdraw your consent to the collection, use and provision of your personal information at any time when you register as a member. To withdraw your consent (Withdrawal of membership), please click "Cancel Membership" on found in the "My Page" section of our site and go through the identity verification process and withdraw your consent, or you may contact the personal information manager by phone, fax, or written request. We will then take the necessary measures to destroy your personal information as requested.
Article 10: Cookie Policy
On occasion, the Company uses "Cookies" to store and retrieve user information to provide customized services. A cookie is a small amount of information that a website transmits to a user's internet browser and is stored on the device's hard disk.
We use cookies for the following purposes:
- To analyze user visit frequency and visit time, and identify user tastes and areas of interest for the purposes of service reorganization.
- To obtain data about user's areas of interest in relation to promotional events held by our company.
Accepting cookies is optional. You may elect to accept all cookies, accept cookies on a case by case basis, or refuse all cookies, by setting the option to do so in your web browser. If one chooses to accept cookies, there may be difficulties in providing some services.
Article 11: Personal Information Protection Officer
The company has established security measures for the protection of users' personal information.
All information provided by the user is protected and managed by security software tools such as firewalls. In addition, as an administrative measure to protect user information, the company has established protocols for access to or management of user information, and has implemented security measures such as limiting the number of people who process users' personal information. Our system managers also regularly update passwords to keep personal information secure.
Article 12: Notification of Policy Changes
This privacy policy is subject to change as a result of changes to applicable laws and guidelines or changes to our internal operating policies.
If our "Privacy Policy" changes, we will notify you via our homepage (https://www.ppeum.com).
Clinic Location |
Personal Information Protection Officer |
Contact Number |
Implementation Date |
Gangnam (Sinnonhyeon) |
Jeong Heon-jin |
02-593-3344 |
11/28/2016 |
Ilsan |
Lee San-ha |
031-915-3225 |
11/15/2018 |
Hongdae |
Park Han-sol |
02-322-3366 |
05/23/2017 |
Suwon |
Baek Kyung-don |
031-253-8833 |
06/19/2017 |
Gangnam |
Cho Han-yong |
02-535-2205 |
01/11/2018 |
Bundang |
Yongjin Jung |
031-703-3010 |
03/29/2018 |
Incheon |
Kang Dong-han |
032-439-3008 |
03/09/2018 |
Beomgae |
Seo Ji-hoon |
031-476-9888 |
05/18/2018 |
Cheonho |
Lee Jin-soo |
02-471-4010 |
08/03/2018 |
Bupyeong |
Kim Jeong-hyuk |
032-505-3010 |
09/28/2018 |
Myeongdong |
Jeong Jin-goo |
02-752-8887 |
11/23/2018 |
Keondae |
Park Hwon-ham |
02-467-1177 |
12/12/2018 |
Ansan |
Ha Ui-yeon |
031-402-7717 |
05/18/2018 |
Busan |
Seon Kyung-kyung |
051-807-3400 |
12/30/2019 |
Daegu (Jungang Road) |
Kim Jeong-hong |
1644-3997 |
06/01/2020 |
Nowon |
Choi Sun-wook |
02-518-5020 |
07/18/2020 |
Dongtan |
Kim Kyung-tae |
031-377-7050 |
08/17/2020 |
Suwon Station |
Kang Seok-hoon |
031-248-9110 |
10/26/2020 |
Seoul National University Station |
Go Myeong-jin |
02-875-9930 |
12/01/2020 |
Daegu (Dongseong Road) |
Jin Ho-seong |
053-716-3996 |
12/18/2020 |
Jamsil |
Kim Seung-beom |
02-564-8881 |
01/04/2021 |
Daejeon |
Kim Bo-young |
042-487-3888 |
06/02/2021 |
Cheonan |
Byeon Je-ik |
041-557-8898 |
06/15/2021 |
Jeju |
Joo Dong-jun |
064-900-2600 |
07/08/2021 |
*Effective as of: 10/26/2020
If you need to report or inquire about other personal information infringements, please contact the following organizations:
1. Personal Dispute Mediation Committee (www.1336.or.kr/1336)
2. Information Protection Mark Certification Committee (www.eprivacy.or.kr/02-580-0533~4)
3. Supreme Prosecutor's Office Internet Crime Investigation Center (http://icic.sppo.go.kr/02-3480-3600)
4. National Police Agency Cyber Terror Response Center (www.ctrc.go.kr/02-392-0330)
Image Information Processing Operation and Management
The purpose of this section is to provide information regarding the purpose for and method of use of image information processed by the Company.
Article 1: Purpose for Installation of CCTV Cameras
In accordance with Article 25 (1) of the Personal Information Protection Act, we install and operate CCTV cameras for the following purposes:
- Facility security and fire prevention
- Crime prevention and for the safety of our customers
Article 2: Number of CCTV Camera Installations and Camera Locations
The number of CCTV cameras, as well as their locations are as follows:
Clinic Location |
Number of CCTV Cameras |
Locations |
Gangnam (Sinnonhyeon) |
47 |
Entrance, lobby, desk, waiting room, consultation room, entrance to the treatment room, treatment room, laser room, management room, nurse's room, director's room, powder room, staff room |
Ilsan |
8 |
Building lobby and hallway, entrance, etc. |
Hongdae |
8 |
Waiting room, entrance and hallway |
Suwon |
4 |
Lobby and staff room |
Gangnam |
8 |
Building lobby and hallway, entrance, etc. |
Bundang |
10 |
Lobby and consultation room, hallway, management room, staff room |
Incheon |
4 |
Lobby and staff room |
Beomgae |
10 |
Lobby and staff rooms, hallways, consultation rooms |
Cheonho |
4 |
Lobby and staff room, hallway |
Bupyeong |
4 |
Lobby and staff room, etc. |
Keondae |
11 |
Waiting room, hallway, elevator, etc. |
Myeongdong |
12 |
Building lobby and hallway, waiting room, consultation desk, etc. |
Ansan |
10 |
Lobby and staff rooms, hallways, consultation rooms |
Busan |
4 |
Lobby and staff room |
Daegu (Jungang Road) |
64 |
Lobby and staff room, hallways, entrances, etc. |
Nowon |
16 |
Lobby and staff room |
Dongtan |
5 |
Lobby and staff room, consultation room, waiting room |
Suwon Station |
4 |
Lobby and staff room |
Seoul National University Station |
16 |
Lobby and staff room, waiting room, consultation room, entrance, hallway |
Daegu (Dongseong Road) |
50 |
Entrance, lobby, consultation room, waiting room, hallway, treatment room, staff room |
Jamsil |
16 |
Entrance, lobby, waiting room, consultation room, treatment room, management room, powder room, etc |
Daejeon |
36 |
Lobby and staff room, consultation room, waiting room, entrance, etc. |
Cheonan |
8 |
Lobby and staff hallway, consultation room, waiting room, hallway |
Jeju |
29 |
Desk, aisle, consultation room, skin care room, laser room, treatment room, recovery room, staff room, director's room, dining room, etc. |
Article 3: Managers in Charge of Personal Information Protection and Data Access Information
In order to protect individual's image data and be able to handle complaints related to this data, the company has appointed a Personal Information Protection Officer at each clinic location as listed below:
Clinic Location |
Personal Information Protection Officer |
Contact Number |
Implementation Date |
Gangnam (Sinnonhyeon) |
Jeong Heon-jin |
02-593-3344 |
11/28/2016 |
Ilsan |
Lee San-ha |
031-915-3225 |
11/15/2018 |
Hongdae |
Park Han-sol |
02-322-3366 |
05/23/2017 |
Suwon |
Baek Kyung-don |
031-253-8833 |
06/19/2017 |
Gangnam |
Cho Han-yong |
02-535-2205 |
01/11/2018 |
Bundang |
Yongjin Jung |
031-703-3010 |
03/29/2018 |
Incheon |
Kang Dong-han |
032-439-3008 |
03/09/2018 |
Beomgae |
Seo Ji-hoon |
031-476-9888 |
05/18/2018 |
Cheonho |
Lee Jin-soo |
02-471-4010 |
08/03/2018 |
Bupyeong |
Kim Jeong-hyuk |
032-505-3010 |
09/28/2018 |
Myeongdong |
Jeong Jin-goo |
02-752-8887 |
11/23/2018 |
Keondae |
Park Hwon-ham |
02-467-1177 |
12/12/2018 |
Ansan |
Ha Ui-yeon |
031-402-7717 |
05/18/2018 |
Busan |
Seon Kyung-kyung |
051-807-3400 |
12/30/2019 |
Daegu (Jungang Road) |
Kim Jeong-hong |
1644-3997 |
06/01/2020 |
Nowon |
Choi Sun-wook |
02-518-5020 |
07/18/2020 |
Dongtan |
Kim Kyung-tae |
031-377-7050 |
08/17/2020 |
Suwon Station |
Kang Seok-hoon |
031-248-9110 |
10/26/2020 |
Seoul National University Station |
Go Myeong-jin |
02-875-9930 |
12/01/2020 |
Daegu (Dongseong Road) |
Jin Ho-seong |
053-716-3996 |
12/18/2020 |
Jamsil |
Kim Seung-beom |
02-564-8881 |
01/04/2021 |
Daejeon |
Kim Bo-young |
042-487-3888 |
06/02/2021 |
Cheonan |
Byeon Je-ik |
041-557-8898 |
06/15/2021 |
Jeju |
Joo Dong-jun |
064-900-2600 |
07/08/2021 |
Article 4: Video Data Recording and Retention Period
CCTV camera recording periods, data retention periods, and storage location of video data are as follows:
Clinic Location |
Recording Period |
Retention Period |
Storage Location |
Gangnam (Sinnonhyeon) |
24 hours |
14 days |
Server Room |
Ilsan |
Within operating hours |
14 days |
Server Room |
Hongdae |
24 hours |
14 days |
Server Room |
Suwon |
Within operating hours |
14 days |
Server Room |
Gangnam |
Within operating hours |
14 days |
Server Room |
Bundang |
Within operating hours |
14 days |
Server Room |
Incheon |
Within operating hours |
14 days |
Server Room |
Beomgae |
Within operating hours |
14 days |
Server Room |
Cheonho |
Within operating hours |
14 days |
Server Room |
Bupyeong |
Within operating hours |
14 days |
Server Room |
Myeongdong |
Within operating hours |
14 days |
Server Room |
Keondae |
Within operating hours |
14 days |
Server Room |
Ansan |
Within operating hours |
14 days |
Server Room |
Busan |
Within operating hours |
14 days |
Server Room |
Daegu (Jungang Road) |
Within operating hours |
14 days |
Server Room |
Nowon |
Within operating hours |
14 days |
Server Room |
Dongtan |
Within operating hours |
14 days |
Server Room |
Suwon Station |
Within operating hours |
14 days |
Server Room |
Seoul National University Station |
Within operating hours |
14 days |
Server Room |
Daegu (Dongseong Road) |
Within operating hours |
14 days |
Server Room |
Jamsil |
24 hours |
14 days |
Server Room |
Daejeon |
24 hours |
14 days |
Server Room |
Cheonan |
24 hours |
14 days |
Server Room |
Jeju |
Within operating hours |
14 days |
Server Room |
Article 5: Verifying Personal Video Information
- How to confirm: You can check with the person in charge of video information management by visiting our offices with advance notice.
- Confirmation location: Server room
Article 6: Video Data Viewing Requests
The subject of video information may request to view their video information from the video information operator at any time in order to confirm the existence of or delete the aforementioned information. However, this is limited to the personal video information relevant to the subject and personal video information that is immediately relevant to their person be it for their body or property interests.
The company will take necessary measures in the event of a request to view, confirm the existence of, or delete a video or image containing personal information. However, in spite of a request to view information, etc., a request may be refused in the following cases, and in these cases, the reason for refusal, and the method of objection shall be submitted to the subject in writing within 10 days.
- When personal image information has been destroyed because the data retention period has ended.
- In cases where there is a justifiable reason to reject the request of the video information subject.
Article 7: Video Data Safety Protocol
Any video data processed by the company is stored securely and encrypted. In addition, the company grants different access rights for personal information as an administrative measure for the protection of personal image information and records and manages video metadata and the date and time of viewing the data in order to prevent tampering. In addition, the information is stored in a locked facility for safe physical storage.
Article 8: Notification of Policy Changes
If there are any additions, deletions or modifications to the contents of this policy due to changes in laws, policies or security technology, we will notify you of the reasons for these changes and the extent of the changes via our homepage at least 7 days before implementation.
*Effective as of: 10/26/2020
If you need to report or inquire about other personal information infringements, please contact the following organizations:
1. Personal Dispute Mediation Committee (www.1336.or.kr/1336)
2. Information Protection Mark Certification Committee (www.eprivacy.or.kr/02-580-0533~4)
3. Supreme Prosecutor's Office Internet Crime Investigation Center (http://icic.sppo.go.kr/02-3480-3600)
4. National Police Agency Cyber Terror Response Center (www.ctrc.go.kr/02-392-0330)