Privacy Policy
Handok Inc. (hereinafter, “Handok”) highly values and cares about protecting your personal information, and continues to comply with all requirements related to personal information protection specified in relevant laws and regulations, such as the Personal Information Protection Act. Furthermore, Handok informs you of the purpose(s) for which your personal information is collected and the methods by which it is used in this Privacy Policy, as well as the measures we take to help protect your personal information.
Article 1 Definition of Personal Information
Personal information is the information on a living individual, and the information that can identify the individual by the name and resident registration number included in such information (including that which may not identify an individual when taken alone, but can be easily combined with other information for identification purposes).
Article 2 Personal Information Items Collected, Purpose of Their Collection, Period of Retention and Use
Handok collects the following items of personal information.
Job applicants
Scroll left to right.
| Purpose of collection | Items collected | Period of retention and use |
|---|---|---|
| Personnel management and work allocation, career/salary management, welfare benefits, tax/insurance processing, legal compliance/contract fulfillment, compliance with foreign laws, other compliances, business support, security/contact | [Required] Name, date of birth, gender, email, nationality, address, mobile phone number, personal email address, military service, work experience, academic background, desired work area, foreign language qualifications, other qualifications, self-introduction, whether individual is a person of national merit, whether individual is subject to veterans’ compensation | Retained and used until hiring decision is made. If individual is hired, information is retained and used as specified in separate consent form for employees. |
| [Required] Name and contact information of company, institution or supervisor individual has worked for in the past, reference check results including work evaluation, past salary details, results of evaluations performed by Handok, and other documents individually submitted to Handok (resume, personal statement, transcript, etc.) and personal information disclosed in interviews | ||
| [Sensitive] Sensitive information such as disability, disability-related information, health, religion, ideology and belief, and criminal record included in submitted documents or interviews |
Healthcare Professionals
Scroll left to right.
| Purpose of collection | Items collected | Period of retention and use |
|---|---|---|
| Carrying out marketing activities such as sending out information on academic events for health professionals using various online and offline channels; sending invitations and providing notification services; disseminating or acquiring pharmaceutical information including the presentation of Handok’s products through various channels; conducting market research; collecting, communicating and calculating other marketing information; processing and recording medical information inquiries; calculating statistics of medical information inquiries and website use | [Required] Name, hospital/pharmacy name, department, email, mobile phone number, year of birth | Retained and used until the purpose of collection is achieved |
| Analysis of information on attendance registration and attendees in connection with webinars conducted by Handok | [Required] Name, hospital/pharmacy name, subject, region, mobile phone number | |
| Analysis of subscriber information on Handok’s physician membership website | [Required] Name, hospital name |
Clinical trial investigators and clinical trial staff of institutions
Scroll left to right.
| Purpose of collection | Items collected | Period of retention and use |
|---|---|---|
| Collection of information necessary to determine whether to request a clinical trial and execution | [Required] Name, institution name and address, contact information, major and position, alma mater, occupation or clinical research experience | Retained and used until the purpose of collection is achieved |
Users of 1:1 inquiry service
Scroll left to right.
| Purpose of collection | Items collected | Period of retention and use |
|---|---|---|
| Securing communication channels for inquiries, notice delivery, and complaint handling | [Required] Name, contact information, email, address, password, consultation type, disclosure status | Retained and used until the purpose of collection is achieved |
Users of Handok Ethical Management (when real name is given)
Scroll left to right.
| Purpose of collection | Items collected | Period of retention and use |
|---|---|---|
| Use for limited identity verification process | [Required] Name, general phone number, mobile phone number, email, address, password, consultation type, disclosure status | Retained and used until the purpose of collection is achieved |
Report on Adverse Event and product safety information
Scroll left to right.
| Purpose of collection | Items collected | Period of retention and use |
|---|---|---|
| Collection, evaluation, and analysis of safety information including product issues; taking measures necessary to ensure safer product use; reporting to domestic or foreign regulatory authorities in accordance with domestic or foreign laws | [Information on users who have experienced issues] Information on gender, date of birth, disease information, product used (issues experienced or safety information and related health information) [Information on users who have reported issues] [Required] Classification of reporting individuals such as physicians, pharmacists, nurses, patients, guardians, lawyers, etc. [If individual consents to the collection, retention and use of information] Name, contact information |
Stored permanently |
Comments by non-members (guests)
Scroll left to right.
| Purpose of collection | Items collected | Period of retention and use |
|---|---|---|
| Management of opinions regarding Handok website | [Required] Name, contact information, email, password | Retained and used until the purpose of collection is achieved |
Article 3. Criteria for the Determination of Additional Use and Provision of Personal Information
Handok may use or provide your personal information within the scope reasonably related to the original purpose of its collection by considering whether a disadvantage will be caused to the information subject in accordance with the Personal Information Protection Act and whether measures required to secure safety such as encryption have been taken. Specific considerations are as follows: relevant laws such as the Personal Information Protection Act, the purpose of the collection and provision of personal information, the method of use and provision of personal information, the specific items of personal information, whether the information subject has given consent, whether a notice has been made to the information subject, any impact on the information subject following its use and provision, and measures taken to protect the information subject. Handok shall comprehensively consider all of the said circumstances to carefully determine whether to use and provide personal information.
- Whether the use is relevant to the original purpose of collection
- Whether the further use or provision of personal information is foreseeable in light of the circumstances or processing practices in which it was collected
- Whether the interests of the information subject are unreasonably infringed upon
- Whether any necessary measures have been taken to ensure safety, such as pseudonymization or encryption
Article 4. Provision of Personal Information to Third Parties
In principle, Handok will process personal information within the scope specified under Article 2 of this Policy, and, unless you have given prior consent or as provided under the relevant laws, it will not be processed beyond the original scope, nor will it be provided to a third party. The status of the Handok’s provision of personal information to third parties is as follows.
Scroll left to right.
| Recipient | Purpose of providing the personal information to the recipient | Items of personal information provided | Period of retention and use of the recipient’s personal information |
|---|---|---|---|
| Domestic and foreign health authorities including the Ministry of Food and Drug Safety and Korea Institute of Drug Safety and Risk Management (KIDS), institutions specified under other laws and regulations, and domestic and overseas clinical trial registration sites such as clinicaltrial.gov | Compliance with related domestic and foreign laws, such as the Pharmaceutical Affairs Act | Health information related to safety such as issues (excluding identifying information), information of researchers participating in clinical trials (name, hospital name, contact information), etc. | Period specified under related domestic and foreign laws, such as the Pharmaceutical Affairs Act |
| Ministry of Health and Welfare | Execution of expenditure report processes in relation to the provision of economic benefits, etc. under the Pharmaceutical Affairs Act and Medical Devices Act | [Health professionals] Name, organization and address, support amount, application date, support items | Retaine and used until the purpose of collection is achieved |
| Korea Pharmaceutical and Bio-Pharma Manufacturers Association (KPBMA) | Checking compliance with quarterly reporting obligations under the KPBMA’s Fair Competition Code on Transaction of Pharmaceuticals and compliance with lecture/advisory fee standards under the Fair Competition Code | [Health professionals] Name, affiliation, amount of payment, date of lecture/consultation, location of lecture/consultation, topic of lecture/consultation | |
| Korea Medical Devices Industry Association (KMDIA) | Checking compliance with quarterly reporting obligations under the KMDIA’s Fair Competition Code of Medical Device Transactions and compliance with lecture/advisory fee standards under the Fair Competition Code | [Healthcare workers] Name, affiliated institution and address, amount of payment, date of lecture/consultation, place of lecture/consultation, topic of lecture/consultation | |
| Domestic and foreign affiliates and partners of Handok | Management and analysis of safety information such as issues, data processing and result reporting of various studies such as clinical trials, and compliance with domestic and foreign laws | Health information related to safety such as issues (excluding identifying information), various research subjects’ health information such as for clinical trials collected via subject identification code, name and contact information of the researcher in clinical trials, etc. | Retained until the date of withdrawal of consent or the purpose for which it was provided |
Article 5. Consignment of the Processing of the Collected Personal Information
For the effective processing of personal information, Handok consigns the processing of certain personal information to external professional companies, as follows.
Scroll left to right.
| Classification | Consignee | Consignment details |
|---|---|---|
| Expenditure report | Korea Mobile Certification (KMC) | Real name certification |
| Marketing | Veeva, MMK Communications, Intoon, KMS, MediC&C (Medigate), CRENOR, InnoBoost, Ins&, CSD, CRM Health Korea, Regency Communications, Aibus, Markup, Zuellig Pharma Solutions Service Korea, SPCOM, BMM Korea, Pacia, IQVIA, CASTPIA, CRM Health Korea, Newin, Keydoc, Dailypharm, Yehued, MEDIPLANNER, Markit | Handok website and customer DB management Promotion of pharmaceutical information and online/offline program related contents Management of various channels such as email, postal mail and SMS Development and management of products/diseases and event content Remote guidance on products/diseases and events hosted by Handok through Internet screen sharing |
| Operation and management of clinical trial work, clinical trial laboratory sample collection and analysis, clinical trial advertisement, etc. | CMIC Korea, BioCore, ADM Korea, C&R Research, Novotech, Dream CIS, D2S, CC&I Research, SCL Healthcare, GCCL, E.Jo Connection, Olive Healthcare | Performance of clinical trials, sample analysis and management, subject recruitment advertisement, etc. |
At the time of executing a consignment contract, Handok, in accordance with Article 26 of the Personal Information Protection Act, specifies in the contract or other pertinent documents matters of responsibility including the prohibition of processing of personal information other than for the purpose of performing the consigned work. Other matters specified are technical and administrative protection measures, restrictions on re-consignment, management and supervision of consignee, and compensation for damages. Handok constantly supervises to make sure personal information is being properly handled by consignees. Revisions to details of the consigned work or changes in consignee(s) will promptly be disclosed through this Privacy Policy.
Article 6. Matters Concerning the Destruction of Personal Information
When the collected personal information is no longer needed, such as when the purpose of its collection and use is achieved or the required period of retention and use has elapsed, Handok immediately destroys the personal information through the following procedures and methods. However, if the personal information retention period agreed upon by the information subject has elapsed or the personal information must be preserved in accordance with other laws despite the achievement of the purpose of its collection, the personal information may be moved to a separate database (DB) or stored at another location for preservation.
- Destruction procedure: Handok selects the personal information for which a reason for its destruction has formed and destroys the personal information with the approval of the personal information protection officer of Handok.
- Destruction method: Handok destroys the personal information stored in electronic file format in a manner that ensures that it cannot be recovered, while personal information stored in the form of paper documents is destroyed by shredding or incineration.
Article 7. Rights and Duties of Information Subjects and Legal Representatives and Related Methods
The information subject can exercise the right to review, correct, delete, and suspend the processing of their personal information held by Handok at any time.
- Requests for the review of personal information regarding minors under the age of 14 must be made directly by their legal representative, and information subjects who are under the age of 14 may exercise their own rights with respect to the personal information of the information subject or through a legal representative.
- In accordance with Article 41 Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, you may exercise your rights over information by contacting Handok by letter mail, email, fax, etc. and Handok will take action accordingly without any delay. Individuals who have posted messages on the Handok Transparent Management Center and Q&A board can directly review, change, and delete their information on the relevant page.
- Such rights can be exercised through an agent such as a legal representative of the information subject, or a person who has otherwise been delegated. In such a case, a power of attorney must be submitted in the form provided in Attachment No. 11 of “Notice on the Personal Information Processing Method (No. 2020-7).” Handok will confirm whether the person making a request, such as a request for review, correction or deletion, or a request for suspension of processing, is the person himself or herself or a legitimate agent according to the rights of the information subject.
- The rights of the information subject to request to review and suspend the processing of their personal information may be restricted in accordance with Article 35 Paragraph 4 and Article 37 Paragraph 2 of the Personal Information Protection Act.
- Correction or deletion of personal information cannot be requested if the personal information is specified as a collection target under other laws and regulations.
Article 8 Operation and Utilization of Cookies
Handok’s website uses “cookies” which store and retrieve your information from time to time. Cookies are very small text files that are sent to your browser by the server used to operate Handok’s website, and stored on your computer’s hard disk. Handok uses cookies for the following purposes.
- Purpose of cookies: To provide targeted marketing and personalized services by analyzing a user’s access frequency and visit times, identifying a user’s tastes and interests by tracking other activity, identifying the degree of participation in various events and number of visits, etc.
- Users have the option to allow or refuse cookies. Depending on how you choose to configure the options in your web browser, you can either accept all cookies, check each time a cookie is saved, or refuse all cookies.
※ Example of how to adjust settings (Internet Explorer): Select Tools > Internet Options > Personal Information. Please note that if you refuse to allow cookies, the provision of services may be restricted.
Article 9. Matters Concerning Measures to Secure the Safety of Personal Information
Handok takes all technical, administrative and physical measures required to secure the safety of personal information, including the following measures in accordance with Article 29 of the Personal Information Protection Act, the relevant laws and regulations, and notices.
- Technical measures: Handok is equipped with highly advanced security systems for its servers and networks. Equipped with our own double firewall, we take the utmost care to protect your privacy. In addition, various technical protection measures such as management of access rights of personal information processing systems, installation of an access control system, measures to prevent forgery and falsification of access records, and security measures using encryption technologies have been taken.
- Administrative measures: Handok limits the number of personnel who can access your personal information to the minimum, uses a password system to prevent access and misuse of your information by anyone other than the persons responsible, and conducts regular and special security education. We also employ an internal personal information security officer. In addition, internal personal information management plans are established and implemented, and regular personal information protection related education is provided to employees.
- Physical measures: Handok applies access control to personal information storage areas, such as computer rooms and data storage rooms.
※ Example of how to adjust settings (Internet Explorer): Select Tools > Internet Options > Personal Information. Please note that if you refuse to allow cookies, the provision of services may be restricted.
Article 10. Personal Information Managers and Processing of Opinions and Complaints
If you have any questions or complaints in relation to your personal information, please contact the personal information managers below. We will take immediate action and notify you of the results.
Personal Information Protection Manager Information
Name: Oh Pil-jong, Kwon Hae-joon
Department (including handling of requests for access to personal information): Human Resource, Commercial Excellence
Position: Managing director, Director
Email: privacy@handok.com
Phone: +82-2-527-5114
Fax: +82-2-527-5001
Method of Relief Against Infringement of Rights and Interests
Furthermore, if you need to report or consult on any personal information related infringement, or if you have suffered financial or psychological damages due to a personal information related infringement, you can apply for relief to the Korea Internet & Security Agency (Personal Information Infringement Report Center) or the Personal Information Dispute Mediation Commission.
- Personal Information Dispute Mediation Commission (www.kopico.go.kr/ +82 1833-6972)
- Information Protection Mark Certification Committee (www.eprivacy.or.kr/+82 2-580-0533~4)
- Internet Crime Investigation Center of Supreme Prosecutors (www.spo.go.kr/ +82 1301)
- Cyber Terror Response Center of National Police Agency (ecrm.police.go.kr / +82 1301)
Anyone whose rights or interests have been infringed upon due to a disposition or an omission by the head of a public institution may request an administrative appeal in accordance with the Administrative Appeals Act concerning matters pursuant to the provisions of Article 35 (Access to Personal Information), Article 36 (Rectification or Erasure of Personal Information), and Article 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act.
※ For more information on administrative appeals, refer to the website of the Central Administrative Appeals Commission(www.simpan.go.kr).
Article 11. Matters Concerning the Operation and Management of Video Information Processing Equipment
Handok installs and operates video information processing equipment as follows.
- Purpose of installation of video information processing equipment: Facility safety, fire prevention, and security
- Number of installations, installation locations, and filming range: 54 units installed across major facilities such as outside the office building, in the lobby, in the elevator hall and indoors, and in the underground parking lot.
- Supervisor, department in charge, and manager with access to video information: Jeong Geum-yong, HSE Team
- Video information related recording time, storage period, storage location, and processing method
· Recording time: 24 hours
· Storage period: 90 days from the date of recording
· Storage location and processing method: Stored and processed in the disaster prevention room of the HSE Team’s video information processing device - Method and place of verification of the video information: Make a request to the manager in charge. (Jeong Geum-yong, HSE Team)
- Measures related to the data subject’s request for perusal of video information, etc.: Application must be filed with a request for perusal and confirmation of existence of personal video information. Applications for perusal must be made within one year.
- Technical/administrative/physical video information protection measures: Establishment of internal management plan, access control and access right restrictions, safe storage/transmission technology application of video information, storage of processing records and measures to prevent forgery/falsification, provision of storage facilities and installation of lock device
- Matters concerning the consignment of video information processing equipment installation, management, etc.
Handok consigns the installation and management of video information processing equipment as follows, and regulates the matters necessary for the safe management of personal information in the consignment contract in accordance with the relevant laws and regulations.Organization and department Consignee Person in charge Contact HSE Team, Handok Dongwoo Yoon Jae-sool +82-2-527-5396 - Matters concerning changes in the operation and management policy of video information processing equipment
This video information processing equipment operation and management policy was enacted on July 1, 2022. If there is any addition, deletion, or modification of its content due to changes in the laws and regulations, policies, or security technology, the reason for the change and the related contents will be announced on the institution’s website without delay.
Article 12. Obligation of Notice
If the Privacy Policy is revised due to additions, deletions, or modifications to government policy or changes in security technology, the modified Privacy Policy will be announced via the website prior to such revision.
Article 13. Changes to the Privacy Policy
This Privacy Policy is effective from July 1, 2022.
- Effective on January 1, 2020
- Effective on December 1, 2016
- Effective on July 30, 2015
- Effective on July 1, 2013
- Effective on May 17, 2012
- Effective on October 20, 2006