Privacy Policy.
ANSim Pain Clinic (the "Clinic") places great importance on protecting your personal data and complies with the Personal Information Protection Act. Through this privacy policy, the Clinic discloses how the personal data you provide is used and what measures are taken to protect it.
This is an English translation provided for convenience. In the event of any discrepancy, the Korean version prevails.
Purpose of Processing, Items Collected, and Retention and Use Period
| Purpose | Items collected | Retention and use period |
|---|---|---|
| Providing medical care and maintaining the patient register | (Required) Address, name, resident registration number, telephone number | 5 years (Article 15, Enforcement Rule of the Medical Service Act) |
| Maintaining medical records | (Required) Address, name, contact details, resident registration number, medical and family history, chief complaint, diagnostic findings or diagnosis, clinical course, treatment provided, and date and time of care | 10 years (Article 15, Enforcement Rule of the Medical Service Act) |
| Providing services such as appointment booking | (Required) Name, resident registration number, mobile telephone number | Managed in accordance with Article 15 of the Enforcement Rule of the Medical Service Act |
| Administrative services such as payment of medical fees | (Required) Payment authorization data such as card issuer and card number | Managed in accordance with Article 15 of the Enforcement Rule of the Medical Service Act |
The personal data collected is used only for duties under the Medical Service Act and the National Health Insurance Act (such as retaining care records) and for health insurance benefit claims. Should the purpose of use change, we will obtain your prior consent.
Provision of Personal Data to Third Parties
The clinic processes personal data only within the stated scope, and provides personal data to third parties only where Articles 17 and 18 of the Personal Information Protection Act apply — such as with the data subject's consent or under a special provision of law. In no other case is personal data provided to a third party.
Where any subparagraph of Article 21(3) of the Medical Service Act applies, the clinic allows records concerning the patient to be inspected, or issues copies, so that their contents may be confirmed.
Under Article 11 of the Emergency Medical Service Act, where an emergency patient is transferred to another medical institution, the clinic may provide the receiving institution with the medical records needed for their care.
Under Article 18 of the Bioethics and Safety Act, where human subject research is conducted, the clinic may provide a participant's personal data to a third party following the data subject's written consent and review by the institutional review board under that Act.
With the data subject's consent, the clinic may provide personal data as follows.
| Recipient | Purpose of provision | Items provided | Legal basis / retention and use period |
|---|---|---|---|
| Health Insurance Review and Assessment Service | Review and payment of benefit costs, eligibility confirmation, and appropriateness evaluation | Name, resident registration number, diagnosis, details of care, and similar | Articles 13, 43, and 56 of the National Health Insurance Act |
| National Health Insurance Service | Acquisition and loss of health insurance eligibility | Name, resident registration number, nationality, status of stay (for foreign nationals), contact details, and similar | Articles 7, 8, 9, and 10 of the National Health Insurance Act, among others |
Retention and Use Period, and Procedure and Method of Destruction
The clinic retains personal data for the periods prescribed by the Medical Service Act and the National Health Insurance Act, and destroys it without delay thereafter. Where the consented retention period has elapsed or the purpose of processing has been achieved but the data must still be preserved under other legislation, it is moved to a separate database or stored in a different location. On filing notice of closure or suspension of business, the clinic transfers the medical records it keeps — including medical records, midwifery records, and nursing records — to the head of the competent public health centre.
Retention periods:
Destruction procedure: destroyed by the method below once the statutory retention period has passed
Destruction method: personal data stored electronically is deleted using a technical method that renders the record irrecoverable; prescriptions printed on paper are shredded or incinerated
Rights of Users and Legal Representatives and How to Exercise Them
Users and legal representatives may exercise rights such as access to personal data by contacting the clinic in relation to their personal data by internet, telephone, or in writing, and the clinic will take the necessary measures without delay.
Prescriptions and health insurance claim materials that the clinic is required by law to retain cannot be altered or deleted during the statutory period, even at a user's request.
A representative, such as a person authorized by the data subject, may also exercise the data subject's rights — including access to records — where the request meets the requirements prescribed by Ordinance of the Ministry of Health and Welfare.
Outsourcing of Personal Data Processing
In order to manage personal data through an information system, the clinic outsources the processing of personal data to the following company.
| Processor | Outsourced task | Retention and use period |
|---|---|---|
| Seegene | - Claims software (electronic management of tasks and records) - Blood testing | Until termination of the outsourcing contract |
Data Protection Officer and Requests for Access
Data subjects may direct any enquiry, complaint, or request for redress relating to the protection of personal data arising from their use of the clinic's services to the data protection officer. The clinic will answer and act on such enquiries without delay.
| Affiliation | Name | Telephone | |
|---|---|---|---|
| ANSim Seoul Anesthesiology and Pain Medicine Clinic | Ahn, Wonsik | 02-766-3087 | hahn7208@gmail.com |
Under Article 35 of the Personal Information Protection Act, data subjects may request access to their personal data from the department below. The clinic will endeavour to process such requests promptly.
Data subjects may direct any enquiry, complaint, or request for redress relating to the protection of personal data arising from their use of the clinic's services to the data protection officer and the responsible department. The clinic will answer and act on such enquiries without delay.
Remedies for Infringement of Rights
To obtain redress for infringement of personal data, data subjects may apply for dispute resolution or counselling to bodies such as the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency's Privacy Infringement Report Centre. For other reports of, or counselling on, personal data infringement, please contact the bodies below.
The clinic works to guarantee data subjects' right to informational self-determination and to provide counselling and redress for personal data infringement. If you need to make a report or seek counselling, please contact the department below.
A person whose rights or interests have been infringed by a disposition taken, or an omission made, by the head of a public institution in response to a request under Article 35 (access to personal data), Article 36 (correction or deletion of personal data), or Article 37 (suspension of processing) of the Personal Information Protection Act may file an administrative appeal as provided by the Administrative Appeals Act. Central Administrative Appeals Commission: 110 (no area code).
Measures to Ensure the Security of Personal Data
The clinic has put a number of security systems in place as technical measures to protect users' personal data. All information you provide is safely protected and managed by security equipment such as firewalls.
The clinic also keeps the number of staff who process users' personal data to a minimum and manages that data securely by controlling access rights to the processing systems, installing access control systems, and installing and updating security software.
Criteria for Additional Use or Provision
Under Articles 15(3) and 17(4) of the Personal Information Protection Act, the clinic may additionally use or provide personal data without the data subject's consent, having regard to the matters set out in Article 14-2 of the Enforcement Decree of that Act.
| Items | Purpose of use or provision | Retention and use period |
|---|---|---|
| Name, contact details, address | Contacting the patient to inform them that they received the wrong dispensed medication | Destroyed as soon as the purpose is achieved |
Accordingly, the clinic considered the following matters before making any additional use or provision without the data subject's consent.
- Whether the purpose of the intended additional use or provision is related to the purpose for which the data was originally collected
- Whether the additional use or provision was foreseeable in light of the circumstances in which the data was collected or of processing practice
- Whether the additional use or provision unfairly infringes the interests of the data subject
Installation, Operation, and Refusal of Automatic Personal Data Collection Devices
To provide individually tailored services to users of its website, the clinic uses cookies, which supply and repeatedly retrieve usage information. A cookie is a small amount of information that the server (http) running the website sends to the user's browser, and it may be stored on the hard disk of the user's computer.
a. Purpose of cookies: cookies are used to identify how each service and website a user visits is accessed and used, popular search terms, and whether the connection is secure, so that optimally tailored information can be provided.
b. Installation, operation, and refusal of cookies: you may refuse the storage of cookies through the settings in Tools > Internet Options > Privacy at the top of your web browser.
c. if you refuse the storage of cookies, you may have difficulty using tailored services.
Obligation to Give Notice of Policy Changes
This privacy policy was last revised on 1 October 2025. Where content is added, deleted, or amended following changes in legislation, policy, or security technology, the clinic will give notice of the reason for and content of the change on its website or at its reception desk at least seven days before the amended privacy policy takes effect. You may review the privacy policy on the website or by asking at the reception desk.