Gangdong Samsung Rehabilitation Hospital (the “Hospital”) establishes and discloses the following personal information processing policy in accordance with Article 30 of the Personal Information Protection Act, in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
Article 1 — Purpose of collecting and using personal information
Gangdong Samsung Rehabilitation Hospital (the “Hospital”) uses the personal information it collects for the following purposes. Collected information is not used for any other purpose, and if the purpose of use changes, the Hospital will take the necessary measures, such as obtaining prior consent, in accordance with Article 18 of the Personal Information Protection Act.
- Appointment booking and guidance: receiving online appointment requests; confirming, changing or cancelling appointments; guidance before your visit.
- Online consultation and complaint handling: answering medical enquiries submitted through the website, and handling questions and complaints.
- Information on new services and news (with optional consent): information on the Hospital’s new services, events and notices.
Article 2 — Items of personal information collected
The Hospital collects the minimum personal information needed to provide website services.
- Required: name, date of birth (or the first seven digits of the resident registration number), mobile phone number.
- Optional: e‑mail address, home address, requested treatment details.
- Automatically generated and collected during use of the service: IP address, cookies, date and time of visit, service usage records.
Article 4 — Right to refuse consent and resulting disadvantages
You have the right to refuse consent to the collection and use of personal information. However, if you refuse consent to the collection of required items, use of appointment booking and online consultation services through the website may be restricted. Refusing optional items does not restrict use of basic services.
Article 5 — Provision of personal information to third parties
The Hospital processes personal information only within the scope specified in Article 1 and provides it to third parties only where this falls under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or under special provisions of law. The Hospital does not currently provide personal information to outside third parties without the consent of the data subject.
Article 6 — Rights of data subjects and legal representatives, and how to exercise them
① Data subjects may at any time exercise the following rights in relation to the Hospital: request to access personal information; request to correct errors; request deletion; request suspension of processing.
② These rights may be exercised in writing, by telephone, e‑mail or fax, and the Hospital will act without delay.
③ Where a data subject requests correction or deletion of errors in personal information, the Hospital will not use or provide that information until the correction or deletion is complete.
④ These rights may be exercised through a legal representative or an authorized agent, in which case a power of attorney in the form prescribed by the Enforcement Rules of the Personal Information Protection Act must be submitted.
Article 7 — Destruction of personal information
① When personal information becomes unnecessary, for example because the retention period has expired or the purpose of processing has been achieved, the Hospital destroys it without delay.
② Where personal information must be retained under other laws despite the expiry of the agreed retention period or achievement of the purpose, it is moved to a separate database or stored in a different location.
③ Personal information stored in electronic form is permanently deleted so that it cannot be restored; information recorded on paper is shredded or incinerated.
Article 8 — Measures to ensure the security of personal information
- Administrative measures: establishing and implementing an internal management plan, regular staff training.
- Technical measures: managing access rights to personal‑information processing systems, installing access‑control systems, encrypting unique identifying information, installing security software.
- Physical measures: access control to computer rooms and data storage rooms.
Article 9 — Installation, operation and refusal of automatic collection devices
① The Hospital uses “cookies”, which store and retrieve usage information, in order to provide individualized services.
② A cookie is a small amount of information that the server operating the website sends to the user’s browser and is stored on the user’s PC or mobile device.
③ Users can allow or block cookies through their web‑browser settings; however, refusing cookies may make it difficult to use personalized services.
Article 10 — Personal information protection officer and department
The Hospital has designated the following officer and department to take overall responsibility for personal‑information processing and to handle related complaints and remedies.
- Department: Administration Team
- Officer: Head of Administration
- Contact: +82‑2‑488‑7114
Article 11 — Remedies for infringement of rights
- Personal Information Dispute Mediation Committee: 1833‑6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr/minwon/main)
Article 12 — Effective date and changes
This privacy policy applies from 1 August 2026.