Privacy Policy
Lunak Clinic / Mobetter Clinic (hereinafter referred to as “the Clinic”) places great importance on the protection of your personal information and complies with the Personal Information Protection Act.
Through this Privacy Policy, the Clinic informs you of how the personal information you provide is used, for what purposes, and what measures are taken to protect it.
The structure of this Privacy Policy is as follows:
1. Items of Personal Information Collected and Methods of Collection
2. Purpose of Collection and Use of Personal Information
3. Retention Period, Disposal Procedures, and Disposal Methods
4. Rights of Users and Legal Representatives and How to Exercise Them
5. Provision of Personal Information to Third Parties
6. Outsourcing of Personal Information Processing
7. Personal Information Protection Officer and Department
8. Measures for Ensuring the Security of Personal Information
9. Obligation to Notify in Case of Policy Changes
⸻
1. Items of Personal Information Collected and Methods of Collection
The Clinic collects only the minimum personal information required for medical treatment and additional services outside of treatment. Information essential for medical care is collected without separate consent as permitted by the Medical Service Act.
• For medical treatment (consent not required):
Name, resident registration number (or foreigner registration number), address, phone number, medical history, family medical history, and any other health information necessary for diagnosis and treatment
• For additional non-treatment services:
Name, date of birth, phone number, address, email
• For website membership and management:
Name, date of birth, gender, email, address, contact information
• For kiosk management (insurance claim processing, infectious disease checks)
⸻
2. Purpose of Collection and Use of Personal Information
The personal information collected by the Clinic is used only for medical treatment, additional non-treatment services, and website user management, as notified in advance and agreed upon.
If the purpose of use changes, separate prior consent will be obtained.
⸻
3. Retention Period, Disposal Procedures, and Disposal Methods
Personal information collected for medical treatment is retained in accordance with the Medical Service Act (e.g., medical records for 10 years).
Other types of personal information are retained for the period individually notified and agreed upon at the time of collection.
Even if the original purpose has been achieved, information may be retained if required by relevant laws, after which it will be destroyed without delay.
• Disposal Procedure: Immediately disposed of according to the disposal method
• Disposal Method:
• Electronic files: Permanently deleted using technical methods that prevent recovery
• Paper documents: Shredded or incinerated
⸻
4. Rights of Users and Legal Representatives and How to Exercise Them
Users and legal representatives may request access, correction, or other actions regarding personal information by phone or in writing. The Clinic will take immediate action.
※ Personal information that is required by law to be retained cannot be modified or deleted during the mandatory retention period.
⸻
5. Provision of Personal Information to Third Parties
The Clinic uses personal information only within the scope notified for its intended purposes and does not provide it to third parties beyond that scope.
However, exceptions may apply in the following cases:
1. When necessary for statistics, academic research, or market analysis after being processed so individuals cannot be identified (e.g., research groups, survey agencies, research institutions)
2. When required by laws such as the Personal Information Protection Act, Real Name Financial Transactions Act, Credit Information Act, Medical Service Act, Medical Care Assistance Act, National Health Insurance Act, Statistics Act, Consumer Protection Act, Criminal Procedure Act, Civil Procedure Act, or other applicable laws
3. When mandated by law or necessary to comply with legal obligations (e.g., administrative or investigative agencies requesting information with a warrant or a duly stamped official document)
4. When the data subject or legal representative is unable to provide consent (e.g., unconscious, unreachable), and the information is deemed necessary to protect the urgent life, body, or property of the data subject or a third party
If personal information must be provided for any purpose beyond those stated, the Clinic will notify you in advance and obtain consent.
You may refuse or withdraw consent for third-party provision at any time.
⸻
6. Outsourcing of Personal Information Processing
a. When entering into outsourcing contracts, the Clinic specifies in writing, in accordance with Article 25 of the Personal Information Protection Act, that the contractor must not process personal information for purposes other than the outsourced task, and must follow technical and administrative safeguards, restrictions on subcontracting, supervision, and liability for damages. The Clinic monitors contractors to ensure safe handling of personal information.
b. If there are any changes to the outsourced tasks or contractors, the Clinic will disclose the updated information without delay through this Privacy Policy.
⸻
7. Personal Information Protection Officer and Department
To protect customers’ personal information and handle related complaints, the Clinic designates the following Personal Information Protection Officer and department:
• Personal Information Protection Officer:
• Responsible Department:
⸻
8. Measures for Ensuring the Security of Personal Information
The Clinic implements various security measures to protect users’ personal information. All information provided by users is safely protected through firewalls and other security systems.
Administrative measures include establishing internal procedures for access and management of personal information, limiting the number of personnel authorized to process personal information, and conducting continuous security training.
User accounts accessing personal information systems are individually designated, assigned passwords, and required to update them regularly.
⸻
9. Obligation to Notify in Case of Policy Changes
This Privacy Policy was enacted on December 23, 2021.
If there are additions, deletions, or modifications due to changes in laws, regulations, or security technologies, the Clinic will announce the reasons and contents of the changes at least 7 days before implementation on the Clinic’s website.
Effective Date: December 23, 2021
