O'Bliv Songdo Horizon Clinic (hereinafter referred to as the 'Clinic') establishes and discloses this Privacy Policy in accordance with the 「Personal Information Protection Act」 to protect the personal information of information subjects and to promptly and smoothly handle related grievances.
Article 1 (Purpose of Processing Personal Information)
The Clinic processes personal information for the following purposes.
Provision of medical services: Medical treatment, examination, appointment and confirmation of appointments, provision of various services for diagnosis and treatment, etc.
Billing for medical expenses: Medical expenses collection, payment, and health insurance benefit claims, etc.
Customer management: Identity verification, delivery of notices, handling of civil complaints, service satisfaction surveys, etc.
Fulfillment of legal obligations: Issuance and storage of evidentiary documents based on the Medical Service Act, tax-related laws, etc.
The personal information being processed will not be used for purposes other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent will be implemented in accordance with Article 18 of the 「Personal Information Protection Act」.
Article 2 (Processing and Retention Period of Personal Information)
The Clinic processes and retains personal information within the personal information retention and use period in accordance with laws and regulations, or the personal information retention and use period consented to by the information subject upon collection of personal information.
Medical Records: 10 years
Examination Result Review Report: 5 years
Prescriptions: 2 years
Customer management and marketing (upon consent): Retained until the end date of service use or withdrawal of consent, provided, however, that in the case of an ongoing investigation or inquiry due to a violation of relevant laws, it is retained until the end of the corresponding investigation or inquiry.
Article 3 (Items of Personal Information Processed)
The Clinic collects the minimum amount of personal information necessary to provide services.
Required Items: Name, Resident Registration Number, address, phone number, medical treatment information (medical history, etc.)
Optional Items: Email, consent to marketing utilization
Collection Method: Registration form filled out upon visiting the clinic, website reservation, phone consultation, etc.
The Clinic does not currently operate online automatic collection devices, and if operated via homepage, app, etc., we will collect and specify the following items.
Cookie definition, collected items (IP, visit date and time, usage history, etc.), collection purpose, rejection method (browser settings)
Article 4 (Provision of Personal Information to Third Parties)
In principle, the Clinic processes the personal information of the information subject within the scope specified in Article 1, and does not process it beyond the original scope or provide it to a third party without the prior consent of the information subject. However, the following cases are exceptions.
Where separate consent is obtained from the information subject
Where there are special provisions in the law or it is unavoidable to comply with statutory obligations
In case of emergency, i.e., where the information subject or their legal representative is unable to express their intention, or where prior consent cannot be obtained due to unknown address, and it is clearly recognized as necessary for the urgent benefit of life, body, or property of the information subject or a third party
The Clinic provides personal information processing work as follows for smooth business processing.
Article 5 (Entrustment of Personal Information Processing)
For smooth business processing, we entrust personal information processing tasks as follows.
Article 6 (Rights, duties, and exercise methods of the data subject and legal representative)
The data subject may at any time exercise rights such as requesting access to, correction of, deletion of, and suspension of processing of personal information from the Hospital.
You may exercise the rights under Paragraph 1 in writing, by email, etc., and the Hospital will take action within 10 days (or, if unavoidable, may extend by an additional 10 days in accordance with relevant laws and regulations).
The patient or guardian may request access to and issuance of copies of medical records, and the Hospital will process such requests in accordance with the Medical Service Act.
For children under the age of 14, the legal representative may exercise these rights on their behalf.
Article 7 (Destruction of Personal Information)
The Hospital will destroy the relevant personal information without delay when it becomes unnecessary, such as upon expiration of the retention period for personal information or achievement of the purpose of processing.
Even after the consent period obtained from the data subject has elapsed, medical records and other records that must be retained under other laws and regulations, such as the Medical Service Act, will be securely managed in a separate DB or storage location for the relevant period.
Article 8 (Measures to Ensure Security of Personal Information)
The Hospital is taking the following measures to ensure the security of personal information.
Article 9 (Personal Information Administrator)
The Clinic takes overall responsibility for matters related to personal information processing, and has designated a Chief Privacy Officer as follows to handle user complaints and remedy damages, etc.
Chief Privacy Officer
Kanghoon Choi / Representative Director / Obliv Songdo Horizon Clinic
Contact: 032-851-9119, obliv.contact@gmail.com
Personal Information Protection Officer
Kanghoon Choi / Representative Director / Obliv Songdo Horizon Clinic
Contact: 032-851-9119, obliv.contact@gmail.com
Article 10 (Reporting and Remedy for Personal Information Infringement)
The data subject may contact the following institutions for filing complaints, dispute resolution, or consultation if they receive an objectionable processing result from the Clinic regarding the exercise of rights under Article 38 of the Personal Information Protection Act, are denied the exercise of their rights, or suffer personal information infringement.
Personal Information Protection Commission (182 without area code) | www.pipc.go.kr
Personal Information Infringement Report Center (118 without area code) | privacy.kisa.or.kr
Personal Information Dispute Mediation Committee (1833-6972) | www.kopico.go.kr
Supreme Prosecutors' Office Cyber Investigation Division (1301 without area code) | www.spo.go.kr
National Police Agency Cyber Bureau (182 without area code) | ecrm.cyber.go.kr
Article 11 (Amendment of the Privacy Policy)
This Privacy Policy shall take effect on June 3, 2026. In the event of an amendment, it will be announced 30 days prior through available spaces such as the in-clinic bulletin board or homepage before implementation.
If there are any additions, deletions, or modifications to this Privacy Policy due to changes in laws, policies, or security technologies, the reasons and details of the changes will be announced before the revised Privacy Policy takes effect.
In the event of subsequent amendments, measures will be taken to ensure that previous versions of the Privacy Policy can also be verified.