‘Polestar Healthcare Co., Ltd.’ (http://www.polestarhc.com, hereinafter referred to as the “Company”) values your personal information and strives to protect it with the utmost care.
To this end, the Company complies with major privacy-related laws, including the “Act on Promotion of Information and Communications Network Utilization and Information Protection” and the “Personal Information Protection Act.” The Company has established and disclosed this Privacy Policy on its website to inform you of how and for what purposes your personal information is used, allowing you to access it at any time.
This Privacy Policy may be amended due to changes in relevant laws or internal operational policies. Please check the Company’s website periodically for the latest version. The order of this Privacy Policy is as follows:
- Items and methods of personal information collection
- Purpose of collecting and using personal information
- Retention and use period of personal information
- Procedures and methods for destruction of personal information
- Entrustment of collected personal information
- Provision of personal information to third parties
- Rights of users and legal representatives and how to exercise them
- Installation, operation, and rejection of automatic data collection devices
- Other policies regarding the handling of personal information
- Personal information manager and inquiry/reporting process
- Changes to the Privacy Policy
This policy has been effective since December 22, 2014.
1. Items and Methods of Collecting Personal Information
(1) Items of Personal Information Collected
The Company collects the following personal information from users for consultation and service applications.
- Items collected: Name, organization, department, position, office phone number, mobile phone number, and email address.
Additionally, information such as service usage records, access logs, and cookies may be automatically generated and collected during service use or business processing.
※ The Company does not collect sensitive information that may significantly infringe upon a user’s privacy (e.g., beliefs, political opinions, union or political party membership, health, or sexual life).
※ As a general rule, the Company does not collect personal information from users under the age of 14. In cases where it is unavoidable to collect such information to provide services, prior consent from the legal guardian will be obtained, and the information will be promptly destroyed after the relevant purpose has been achieved. During the process, the Company will manage the information with strict care.
2. Purpose of Collecting and Using Personal Information
The Company uses collected personal information for the following purposes:
(1) Customer Management
- Handling complaints and inquiries, delivering notices
(2) Service Provision
- Execution of service contracts and provision of content in accordance with service delivery
(3) Marketing and Advertising
- Delivering promotional or event-related information, and shipping prizes for event winners
- Developing and customizing new services, providing services and advertisements based on demographic characteristics, analyzing access frequency, and compiling service usage statistics
3. Retention and Use Period of Personal Information
In principle, personal information is destroyed without delay once the purpose of collection and use has been achieved. However, if preservation is required by applicable laws, the Company will retain the information for the period specified below, storing it separately in a different database (DB) or location.
- Item retained: Records related to collection, processing, and use of credit information
- Legal basis: Act on the Use and Protection of Credit Information
- Retention period: 3 years
4. Procedures and Methods for Destruction of Personal Information
The Company destroys personal information without delay once the purpose of collection and use has been achieved. The destruction procedures and methods are as follows:
(1) Destruction Procedures
After the purpose is achieved, users’ personal information is transferred to a separate DB (or a separate filing cabinet for paper documents) and stored for a certain period in accordance with internal policies and legal requirements before destruction. Personal information transferred to a separate DB is not used for any purpose other than retention unless required by law.
(2) Destruction Methods
Personal information stored in electronic form is deleted using technical methods that prevent recovery. Printed materials containing personal information are shredded or incinerated.
5. Entrustment of Collected Personal Information
The Company may outsource personal information processing to external professional service providers when necessary to fulfill its services. Such entrustment is limited to what is essential for each specific service. The Company specifies confidentiality obligations, prohibitions on third-party disclosure, liability in the event of accidents, retention period, and data destruction requirements, and supervises the entrusted party to ensure safe handling of personal information.
In the event of changes to the entrusted parties or scope of work, the Company will notify users through website announcements or other means such as written notices, email, phone, or SMS.
6. Provision of Personal Information to Third Parties
The Company does not disclose users’ personal information to external parties, except in the following cases:
- When required by law or upon lawful request by investigative authorities
- When necessary for billing and payment related to service provision
- When data is provided in anonymized or statistical form for research or market analysis
- When users have given prior consent
7. Rights of Users and Legal Representatives and How to Exercise Them
Users or their legal representatives may request to view, correct, delete, suspend processing, or withdraw consent for their personal information or that of a child under 14 at any time.
The Company may reject such requests in the following cases:
- When access is prohibited or restricted by law
- When disclosure could harm another person’s life, body, property, or interests
If a user requests correction of an error in personal information, the Company will not use or provide such data until the correction is complete. If incorrect information has already been provided to a third party, the Company will promptly notify them of the correction.
Personal information deleted or suspended upon user or legal representative request will be handled as specified in “3. Retention and Use Period of Personal Information” and will not be accessed or used for other purposes.
8. Installation, Operation, and Rejection of Automatic Data Collection Devices
The Company uses cookies and similar technologies to store and retrieve user information. A cookie is a small text file sent by the Company’s web server to a user’s browser and stored on the user’s hard drive.
(1) Purpose of Using Cookies
To analyze access frequency and time, identify user preferences and interests, track visits, and conduct targeted marketing.
(2) How to Reject Cookie Settings
Users have the right to choose whether to accept cookies. You can configure your web browser to allow all cookies, confirm each time a cookie is stored, or refuse all cookies. However, refusing cookies may limit certain services.
- To set cookies (Internet Explorer 8.0): Go to “Tools” → “Internet Options” → “Privacy” tab → adjust the level using “Settings.”
- To view stored cookies (Internet Explorer 8.0): Go to “Tools” → “Internet Options” → “General” tab → under “Browsing History,” click “Settings” → “View Files.”
- To block all cookies (Internet Explorer 8.0): Go to “Tools” → “Internet Options” → “Privacy” tab → set “Settings” to “Block All Cookies.”
9. Other Policies Regarding Personal Information Handling
(1) Measures to Ensure the Security of Personal Information
The Company implements the following measures to prevent loss, theft, leakage, alteration, or damage of personal information:
- Establishment and implementation of internal management plans
- The Company establishes and enforces internal management plans for the safe processing of personal information.
- The Company verifies compliance with personal information protection measures and promptly corrects any identified issues.
- Access to personal data is limited to designated personnel, who are trained in privacy protection.
- Installation and operation of access control systems
- The Company uses intrusion prevention systems to block unauthorized external access and adopts all possible technical measures to ensure security.
(2) Policy on Unauthorized Email Collection
The Company prohibits the unauthorized collection of posted email addresses using email collection programs or other technical devices. Violations are subject to punishment under the “Act on Promotion of Information and Communications Network Utilization and Information Protection.”
10. Personal Information Manager and Inquiry/Reporting
The Company designates the following departments and individuals to protect personal information and handle related complaints.
(1) Personal Information Protection Officer
Name: Yeo-Dong Yoon
Position: CEO
Tel: +82-2-521-4621
Email: privacy@polestarhc.com
Fax: +82-2-521-4821
(2) Personal Information Protection Department
Department: Research Team 1
Manager: Young-Hwan Jang, Team Leader
Tel: +82-2-521-4621
Email: privacy@polestarhc.com
Fax: +82-2-521-4821
If you contact the above departments or the Personal Information Protection Officer with complaints or opinions regarding the Company’s handling of personal information, we will respond promptly and sincerely to resolve the issue.
(3) Other Institutions
If you require further assistance regarding personal information infringement, please contact the following institutions:
- Personal Information Infringement Report Center (www.118.or.kr / 118)
- Supreme Prosecutors’ Office Cybercrime Investigation Center (www.spo.go.kr / +82-2-3480-2000)
- National Police Agency Cyber Terror Response Center (www.netan.go.kr / +82-1566-0112)
11. Changes to the Privacy Policy
This Privacy Policy is effective from the enforcement date. If there are additions, deletions, or modifications due to legal or policy changes, they will be announced at least seven (7) days prior to the effective date through the website’s notice board.
- Announcement Date: December 15, 2014
- Effective Date: December 22, 2014
