HUINNO processes personal information for the following purposes. The personal information processed by HUINNO will not be used for any purpose other than the purposes specified below, and we will take necessary measures when any change to the purpose occurs, such as separately obtaining additional consent in accordance with Article 18 of the PIPA.
1. Processing of Inquiries
Identify customers who have made an inquiry, respond to their inquiries, and notify them of the outcome.
① HUINNO processes and retains personal information only during the period specified by relevant statutes for retaining and using personal information, or the period to which each data subject consents when HUINNO collects the data subject’s personal information.
② The period for processing and retaining each type of personal information used for a specific purpose is as follows:
1. Processing of Inquiries
Personal information related to this purpose will be retained and used for such purpose for up to three (3) years from the date of the data subject’s consent to the collection and use. However, if there is an obligation to preserve it for a certain period pursuant to relevant laws, such period will be applicable.
HUINNO processes the following personal information items:
1. Processing of Inquiries
Required Items: Name, Affiliation (Name of Hospital/Institution), Phone Number, Email, Details of Inquiry
① HUINNO destroys personal information of data subjects without any delay when such information is no longer necessary, for example after the period during which the personal information is to be retained ends, or the purposes sought for by retaining the personal information have been attained.
② If HUINNO is required by the relevant laws or regulations to retain personal information even when the agreed retention period is over or after achieving the purpose of its collection, HUINNO shall transfer the said personal information (or personal information file) to a separate database or another storage space.
③ The procedures associated with destroying personal information and the methods of destruction are as follows:
1. Procedure for Destruction
HUINNO identifies personal information (or personal information file) subject to destruction, obtains approval from the person in charge of personal information protection at HUINNO (the “Privacy Officer”), and destroys it.
2. Methods of Destruction
Personal information recorded and stored in paper form is to be destroyed through shredding or incineration.
Personal information stored in electronic file formats is to be deleted using technical means which would make the information unrecoverable.
① The data subject may exercise the rights to view, correct, delete, or suspend processing of personal information at any time against HUINNO.
② A data subject may exercise the rights specified in paragraph (1) above via written documents, e-mail, etc., pursuant to Art. 41(1) of the Enforcement Decree of the PIPA. In such instance, HUINNO will promptly take the required actions without delay.
③ A data subject may exercise his/her rights set forth in paragraph (1) above through an agent such as his/her legal representative or a person that has been designated as the data subject’s Power of Attorney (“POA”). In such cases, the POA form shall be submitted in the format set forth in Form 11 of the Attachment attached to the “Official Announcement on the Method of Processing Personal Information (No. 2020-7).”
④ The rights of the data subject to request for the personal information to no longer be available for perusal or processing may be restricted in accordance with Art. 35(4) and Art. 37(2) of the PIPA.
⑤ If the personal information is specified as being subject to collection under other laws, the personal information may not be deleted even if the data subject requests for the personal information to be revised or deleted.
⑥ HUINNO will confirm whether the person who requested access, correction, deletion, or suspension of processing based on the rights of the data subject is the data subject or the data subject’s lawful legal representative.
HUINNO has taken the following measures necessary for ensuring safety of the personal information.
1. Administrative measures: Establishment and implementation of internal management plans, operation of a dedicated organization, regular training of employees.
2. Technical measures: Management of access to systems processing personal information, installation of access control systems, encryption of personal information, and installation and renewal of security programs.
3. Physical measures: Locking device for security of documents, etc.
HUINNO does not use “cookies” that store the information used by data subjects and load such information frequently.
① HUINNO has appointed the following persons as its Privacy Officer for the coordination of all tasks related to the processing of personal information, addressing data subjects’ complaints regarding the processing of personal information, and providing remedies for damages.
Privacy Officer
Name : Sunghoon Jung
Position : CTO
Contact : shjung@huinno.com
② Please contact the Privacy Officer or the privacy department for any question, complaint, or remedy related to personal information during the use of HUINNO’s services (or its business). HUINNO will promptly respond to and process your inquiry.
A data subject may request the department in HUINNO as set forth below to permit him/her to peruse through his/her personal information pursuant to Art. 35 of the PIPA. HUINNO will strive to ensure that such requests by the data subject will be processed without delay.
Department in charge of accepting the registration for and handling the request of the data subject to be able to peruse through personal information
Department Name: Sales Team
Person in charge: Seung Ah Lee
Contact: sophie.lee@huinno.com
Please make inquiries to the following organizations if you need to report or consult with regards to personal information infringement.
1. Personal Information Dispute Mediation Committee (http://www.kopico.go.kr / (Toll Free) 1833-6972)
2. Personal Information Infringement Report Center (http://privacy.kisa.or.kr / (Toll Free) 118)
3. The Supreme Prosecutors’ Office (http://www.spo.go.kr / (Toll free) 1301)
4. The National Police Agency (ecrm.cyber.go.kr/ (Toll free) 182)
A party who has been infringed on his/her rights or profits due to the acts of the head of a public institution (the “Head”) responding to requests pursuant to the provisions of Article 35 (Perusal of Personal Information), Article 36 (Correction/Deletion of Personal Information), and Article 37 (Suspension of Processing Personal Information, etc.) of the PIPA or the nonfeasance of the Head may request an administrative trial in accordance with the provisions of the Administrative Appeals Act.
※ For more information about administrative trials, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).
This Personal Information Processing Policy is effective from June 1, 2023.
