[Press Release] 디지털 병리 시대 열린다…유리슬라이드 현미경으로 진단→병리PACS에서 모니터로 진단

2019-11-01

삼성서울병원-인피니트헬스케어, 국내 첫 병리PACS 구현 "환자 편리·진단 정확성·보관에 이점"

사진=삼성서울병원 조준훈 교수 디지털 병리 시연 모습.

[메디게이트뉴스 임솔 기자] 병리진단이 기존의 유리슬라이드를 현미경으로 보는 시대가 아닌, 병리PACS에 저장된 스캔 파일을 모니터에서 판독하는 ‘디지털 병리’ 시대가 열릴까. 

삼성서울병원 병리과와 인피니트헬스케어는 10일 31일 서울 양재동 더케이호텔에서 공동으로 기자간담회를 갖고, 병리 유리슬라이드를 디지털화로 전송하고 이를 판독하는 솔루션을 구축하고 있다고 밝혔다.  

디지털 병리는 유리슬라이드에서 스캐너를 사용해 디지털 영상으로 획득하고 이를 진단, 관리, 공유, 분석하는 것을 말한다. 기존에는 현미경으로 유리 슬라이드를 봤다면 디지털 병리 환경에서는 병리 PACS를 이용해 모니터 앞에서 디지털 영상을 진단한다. 2차 진단을 비롯한 협진을 할 때도 예전처럼 유리 슬라이드를 주고 받을 필요 없이 디지털 파일을 공유하게 된다. 

삼성서울병원 병리과 송상용 교수는 “아날로그 방식의 병리 진단 흐름도는 유리슬라이드, 현미경, 자문, 진단, 보관, 대출, 재염색, 운송, 현미경 판독 등의 흐름을 거친다. 하지만 디지털병리 진단 흐름도에서는 유리슬라이드, 스캐너, 자문, 진단, 판독 등이면 끝난다”라며 “컴퓨터를 이용해서 진단을 할 수 있고 중간과정이 빠지면서 프로세스가 매우 간단해진다”고 설명했다. 

 

디지털 병리의 이점, 환자가 편리하고 진단 정확성 높여

사진=삼성서울병원 병리과 송상용 교수

디지털 병리는 1991년 헝가리에서 첫 선을 보였다. 삼성서울병원은 2006년 9월 대한병리학회 월례집담회에서 디지털병리 시범사업을 발표했다. 한동안 움직임이 끊겼다가 2016년 3월 북미병리학회에서 삼성서울병원과 인공지능 기업 루닛이 공동으로 인공지능(AI)을 이용한 디지털병리 사례를 발표하기도 했다. 

그러다가 삼성서울병원은 지난해 경쟁 병원인 서울아산병원이 디지털병리 도입을 검토한다는 소식에 경영진 차원에서 한 발 먼저 과감한 의사결정을 했다. 삼성서울병원은 올해 4월 디지털 병리를 도입했고 7월에 디지털 병리를 EMR에 완전히 연동했다. 9월부터는 디지털병리와 5G를 연동하는 사업을 진행하고 있다. 삼성서울병원이 국내에서 처음으로 디지털 병리를 도입한 이후에 서울성모병원이 시작한다고 발표하는 등 국내에선 디지털 병리 시작 단계에 있다.  

디지털 병리의 이점은 병리진단을 유리슬라이드가 아닌 디지털로 저장하고 전송할 수 있다는 데 있다. 환자들에게 슬라이드가 아니라 디스크를 통한 진단 결과를 건네줄 수 있고 휴대폰이나 클라우드 시스템을 통해 전달할 수 있다. 

송상용 교수는 “환자들이 다른 병원에 의뢰될 때 보통 CD나 저장매체를 가지고 다니는데 오로지 병리 검사결과만 유리슬라이드를 준다. 어떤 병원은 보증금을 받고 슬라이드를 내주기도 하고 어떤 병원은 별도의 슬라이드를 제작해서 준다”라며 “환자 입장에선 슬라이드 제작비를 내거나, 슬라이드를 되돌려주고 보증금을 찾으러 다시 병원에 가야 한다”라고 말했다.

송 교수는 “디지털 병리가 되면 환자들은 다른 의무기록과 똑같이 저장용량이 큰 디스크에 저장하면 된다. 여기서 더 발전한다면 개인 휴대폰이나 클라우드 시스템을 통해 진단 결과를 전달할 수 있다”고 설명했다. 

디지털 병리로 발전하면 병리 의사의 진단 정확도를 높이는데도 도움이 된다. 송 교수는 “하나의 병리 슬라이드 대해 다양한 병리의사가 진단할 수 있다. 미국에서는 특정 의사가 병리 진단에 확신이 없으면 세컨드 오피니언을 통해 전문가에게 의뢰하고 검증하는 절차를 거친다. 국내에는 이런 검증 시스템이 없는데, 디지털 병리가 이런 역할을 할 것으로 기대한다”고 밝혔다.  

송 교수는 “병리과는 매우 외롭다. 영상 진단은 여러 의사가 함께 보지만 병리 진단결과는 오로지 병리의사만 보고 있다. 간혹 문제가 있는 것이 아닐까 걱정이 되기도 한다”라며 “아무도 병리과가 가진 고유의 문제를  개선하려고 하지 않는데, 디지털 병리만이 유일한 솔루션이라고 본다”라고 강조했다. 

하지만 문제는 역시 비용. 별도의 스캐너와 PACS 시스템을 구축해야 한다. 송 교수는 “디지털 병리 시대가 되면 환자 불편을 해소할 수 있고 프로세스를 개선하고 정확한 진단을 할 수 있다. 경영진 입장에서는 비용 부담이 크겠지만 분명히 가야할 방향이라는 공감대가 형성되고 있다”라고 말했다. 

 

삼성서울병원 디지털 병리, 보관과 교육 측면에서 유용 

삼성서울병원은 현재 하루에 400장 정도의 유리슬라이드를 디지털화하는 작업을 거치고 있다. 실제로 지난 6개월간 디지털병리 작업을 진행해보니 병리 PACS는 진단, 보관, 학술, 교육 등 4가지 측면에서 유용한 것으로 나타났다. 

삼성서울병원 병리과 조준훈 교수는 “디지털병리는 유리슬라이드에서 볼 때와 거의 진단이 가능하다. PACS에서 대부분 유리슬라이드와 비슷한 수준에서 진단이 가능하다고 보고 있다. 리뷰를 해봤을 때 양측의 불일치율은 거의 0%에 가까웠다”라고 말했다. 

시스템이 안정화하는 초기 단계에서 가장 유용한 것은 보관 기능이다. 조 교수는 “보관을 할 때 EMR에 고유의 DPS번호를 생성했다. 이전에는 진단을 하다가 슬라이드가 필요하면 직접 찾아오는 시스템이었다. 하지만 현재는 DPS 버튼을 누르기만 하면 바로 PACS에서 디지털 병리 영상이 열린다”라며 “병리PACS를 이용해 꾸준히 아카이브를 구축하면서 실제로 유리슬라이드를 찾는데 보내는 시간이 줄었다. 병리과의 노동력 감축에도 도움이 되고 있다”라고 설명했다. 

집담회나 교육 자료를 만드는 데도 유용하다. 이전에는 컨퍼런스를 하려면 슬라이드를 직접 들고 가거나, 사진을 찍어 파워포인트 파일을 만드는 방식이었다. 하지만 현재는 병리PACS에서 불러오기만 하면 된다. 

조 교수는 “모니터 화면에서 다양한 염색의 슬라이드를 불러들인 다음 임상의사에게 설명을 해주고 왜 그렇게 진단이 되는지 알려줄 수 있다. 수십년 간 진단하고 치료하면서 처음 알게 되는 부분이 많이 생길 수 있다. 이를 통해 병리의사와 임상의사와의 커뮤니케이션에도 도움이 된다”라고 밝혔다. 

 

디지털병리 보험수가에 반영, 다른 병원으로 확산 전망  

사진=삼성서울병원 병리과 조준훈 교수, 송상용 교수, 장기택 교수, 이진형 정보전략실 파트장, 인피니트헬스케어 김동욱 대표

대한병리학회는 디지털 병리의 필요성을 공감하면서 이를 보험수가에 반영하기 위해 노력하고 있다. 디지털 병리는 추가적으로 다른 병원에도 확산될 것으로 전망된다.  

삼성서울병원 병리과 장기택 교수는 “병리학회가 디지털 병리를 보험수가에 반영되도록 노력하고 있다. 병리PACS는 슬라이드를 만든 다음에 스캔을 해야 한다. 비용절감에서 쉽게 받아들이기가 조금 어려운 측면이 있다"라며 "하지만 환자들의 비용 절감을 위해 필요하다고 정부를 설득하고 있다”고 말했다. 

인피니트헬스케어 김동욱 대표는 “주요 대형병원들이 디지털 병리 도입을 준비하고 있다. 병리학회 차원에서 디지털병리의 보험수가를 추진하고 있어서 병리학회 전체가 알고 있다”라며 “이전에 영상 PACS를 도입했을 때 일산백병원 등이 신축을 하면서 과감하게 도입했다. 1년 뒤에 보험수가가 적용되면서 투자비용을 맞췄던 것이 기억난다”라고 말했다. 

김 대표는 “가격 모델은 두 가지를 준비하고 있다. 전체를 구매하는 구축형 모델이 있고, 월별로 가격을 매기는 구독형 모델도 준비하고 있다”라며 "눈으로 쉽게 확인할 수 있도록 열어두고 공유 목적으로 클라우드를 제공하고 있다. 초기 단계라 거부 반응이 있기 마련이다.병리 PACS를 직접 접해봐야 경계심이 낮아지는 만큼 유연하게 대처하고 있다”고 밝혔다. 

삼성서울병원이 인피니트를 선택한 이유는 표준화와 발 빠른 대응이다. 삼성서울병원 정보전략실 이진형 파트장은 “영상 PACS가 도입될 때 다양한 제조사를 표준화한 방식으로 진행했다. 디지털 병리도 어떤 스캐너라도 표준 형식으로 볼 수 있게 하는 시스템이 필요하다. 이를 위해 DICOM이라는 의료영상 표준규격에 맞게 제작해야 한다”라며 “인피니트 제품은 A, B, C사 스캐너든 하나의 뷰어에서 다 볼 수 있는 장점이 있다. 표준화가 되지 않으면 디지털 병리에서 쌓은 데이터를 공유할 수 없다”라고 밝혔다. 

송상용 교수는 “처음에 병리PACS를 구현하면 직원이 상주하면서 시스템 안정화에 적극적으로 나서야 한다. 병리 PACS는 주로 외국계 기업인데, 아무래도 국내 기업이 실시간으로 대응할 수 있는 이점이 있다고 봤다”라고 말했다. 

송 교수는 “1년 전 병리학회 때는 디지털 병리에 대한 이야기가 거의 없었다. 1년 사이에서 이슈화되면서 여러 병원이 도입을 서두르기 시작했다”라며 “앞으로 1년동안 어떤 변화가 생길지 모른다. 인공지능(AI)을 이용한 진단도 가능할 것이라고 본다. 어차피 디지털 병리 시대가 다가오는 길이라면 더 빨리 진행되지 않을까 생각한다”고 기대했다. 

기사 원문 확인하기

TOP
Contact us

UKRC 2018

Schedule a meeting with us at the upcoming exhibition.

INFINITT Healthcare (“INFINITT” or “we”) strictly abides by all domestic and overseas privacy legislations including information network laws (for encouraging use of information network and protecting the information), privacy laws, HIPAA (Health Insurance Portability and Accountability Act), GDPR (General Data Protection Regulation), etc. This is an overview of how INFINITT collects, uses, discloses and disposes personally identifiable information of visitors (“users” or “you”) of our website. We ask you to agree to our Privacy Policy and Terms & Conditions by checking “I have read and agreed to the privacy policy.” (in the Contact Us page or inquiry pop-ups). The information we collect upon your approval will be used for the management of INFINITT website. You are not to provide the personal information we request, but please note that if you choose not to, your access to services provided by INFINITT can be limited.

 

 

Collection of Personal Information

 

INFINITT collects the following information in order to provide the most appropriate and convenient services to our users.

The following information are collected from sales inquiries, product searches and exhibition scheduling, etc:

  • Contact Us
    Required(*): Full Name, Facility/Company, Country, Email Address, Phone Number
    Optional: Solution/Service of Interest, Comments
  • Case Study
    Required(*): Full Name, Facility/Company, Country, Email Address, Phone Number
    Optional: Solution/Service of Interest, Comments
  • Exhibition
    Required(*): Full Name, Facility/Company, Country, Email Address, Phone Number, Attending Exhibition, Date of Preference
    Optional: Solution/Service of Interest, Comments  

 

The following information are automatically collected from users and anonymized for any user-specific or device-specific data:

  • IP Address*, Cookies**, Records of Service Usage***, Records of Misuse, Device Information, ADID and IDFA information automatically collected from service usage.
    *IP(Internet Protocol) Address is online address information assigned to each PC or device using the internet.
    **Cookies are very small-sized text files saved in the user’s PC at the point of website access through a web browser. Next time the user accesses the website, the website server reads these cookie files and provides the same service settings as before. The user can choose to allow automatic cookie saves, to check each time a cookie is saved, or to reject cookie saves entirely. Please note that rejecting cookie saves could result in your inconvenience.
    ***Records of Service Usage are logs of: date of access, list of services used, and any normal/abnormal logs generated during usage.  

 

INFINITT uses Clicky* web analytics to log and analyze the traffic to our website. A unique ID tracking cookie is used for the legitimate purpose of identifying unique visitors. The following information are collected:

  • URL & title of pages viewed
  • URL & title of any links that are clicked on pages viewed
  • Referrer
  • Browser language
  • Screen resolution
  • x/y coordinates of mouse events
  • Unique ID tracking cookie (UID)
  • IP Address
  • Custom data**
  • *Clicky’s privacy policy here
  • **Custom data details here

 

 

Use of Personal Information

 

INFINITT uses the collected information to provide, maintain and improve our services, to develop new services, and to protect INFINITT and our users.

  • We may announce the release of new products, software updates and corporate news using the collected information.
  • We may develop, manage, provide and improve our products, services, contents and advertisements, and also prevent loss and fraud using the collected information.
  • We may identify individual users and/or appropriate services for users using the collected information.
  • We may notify important changes made to policy statements or terms and conditions using the collected information.
  • We may use the collected information for internal use such as audit, data analysis and research for the purpose of improving INFINITT products and services. All the information collected will only be used for purposes set out by this Privacy Policy. For purposes outside of this Policy, we will ask for your consent in advance.

All the information collected will only be used for purposes set out by this Privacy Policy. For purposes outside of this Policy, we will ask for your consent in advance.

 

 

Disclosure of Personal Information

 

For disclosure of personal information to third parties, INFINITT will ask for your consent in advance and notify you individually of the following: to whom the information is disclosed, their key businesses, specific items of information to be disclosed, and purpose of the disclosure.

 

For the following cases, we may disclose your personal information upon obtaining your consent through a legitimate process.

  • Partnership: we may share your personal information with strategic partners for the provision of better INFINITT services. In such cases, we will notify you individually in advance of the following information: name of the partner company, items of personal information to be disclosed, purpose of the disclosure, period of retention, and privacy protection procedures. We will never disclose any information without your consent, and we will also notify you of any changes to or termination of the partnership. Once the partnership is terminated, we will dispose of your personal information unless you agree to its retention. Even if you agree to its retention, you may withdraw your consent at anytime.
  • Subcontracting: we may subcontract the handling of your personal information for smoother business operations and provision of better services. In such cases, we will notify you in advance of the following information: name of the subcontractor, scope of personal information to be disclosed, and purpose, period and process of subcontracting.
  • Sales, M&A: in case the rights and obligations of INFINITT service provider is succeeded or transferred, we will notify you in advance and grant you the right to choose whether or not to withdraw your consent to INFINITT’s use of personal information.

 

For the following cases, we may disclose your personal information without your consent.

① When you already agreed to disclosure of your personal information.

② When you caused psychological and/or material damages to others in using INFINITT services, and there is strong enough evidence to mandate the disclosure of your personal information to enforce subsequent legal actions.

③ When we anonymize personal information for statistics, academic or market research purposes.

④ When by law, legal process and/or governmental authorities for investigative purposes.

 

 

Whom we disclose your information to

 

INFINITT may disclose your personal information to domestic and overseas branches, affiliates and partners for the provision of better INFINITT services.

 

To Whom

Purpose

Information to be disclosed

Period of Retention & Use

INFINITT Healthcare Co., Ltd.

Service

provision

Full Name, Facility/Company, Country, Email Address, Phone Number, Solution/Service of Interest, Attending Exhibition, Date of Preference, Comments

Until the cancellation of your membership or the termination of subcontract

MALGUM
CO., Ltd.

System development and operation

Full Name, Facility/Company, Country, Email Address, Phone Number, Solution/Service of Interest, Attending Exhibition, Date of Preference, Comments, IP Address, Cookies, Date of Consent, Date of Access, Period of Service Usage, Records of Service Usage, Records of Misuse, Statistics

 

 

The Rights of Users & Legal Representatives

 

Users and their legal representatives may request through email or in writing to access or modify personal information and to withdraw consent to the collection and use of personal information.

 

If you request to correct an error in your collected personal information, we will not use or disclose your information until the correction has been made. If we have already disclosed inaccurate personal information to third parties, we will notify them as soon as the correction has been made. In response to a request for disposal of information, we will handle your personal information as stipulated in the “Period of retention & use” and make sure that it is not accessed or used for any other purposes.

 

By rule, we do not collect personal information of children under the age of 14 for whom we need consent from their legal representatives. If personal information of children under the age of 14 has been collected, their legal representatives have the rights to access, modify, or withdraw the consent to the collection and use of their information.

 

 

Management of Personal Information

 

Period of retention & use

By rule, INFINITT will dispose of your personal information when you request for the disposal or once the purpose of collection and usage has been fulfilled. But when there is a need for retention due to internal policies and/or subordinate legislation, we will keep your information for the period specified in the legislation.

  • We will keep minimum information and usage history for the period set by law such as the commercial law, for cases where retention of personal information is.
  • We will keep your personal information for cases where we announced the retention period in advance and/or where we obtained your consent to retention.
  • For the following cases, we may keep your information for the specified period:

① Records on sales/product inquiries or searches, withdrawal from contracts/subcontracts, customer complaints or dispute handling: 5 years (Consumer Protection in E-commerce)

② Records on website visits: 3 months (Protection of Communications Secrets Act)

③ Records on customer complaints or dispute handlings: 3 years (Consumer Protection in E-commerce)

④ To prevent user activities based on impure motives and to secure evidential materials in case of disputes: 3 months temporary retention (from the day of consent withdrawal)

⑤ Evidential records for a violation of internal policies (i.e. Illegal usage history): 1 year

 

Disposal

By rule, INFINITT will dispose of your personal information once the purpose of collection and usage as well as the legal and business needs have been fulfilled. Paper documents containing personal information will be completely shredded. Electronic documents containing personal information will be destroyed to a point where it is impossible to technically restore the file.

 

 

Policy Changes

 

INFINITT may update its Privacy Policy from time to time. However, we do not reduce your rights stated in this Privacy Policy without your explicit consent. Any changes made to the Privacy Policy will be updated on this page.

 

 

Information Security Measures

 

INFINITT strives to provide services that you can trust and rely on. We promise to commit to the protection of your information.

  • ISO/IEC 27001:2013

Published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), ISO/IEC 27001 is the highest international standard for assessing information security management.

INFINITT received the certification for ISO/IEC 27001 in 2016 and has been qualified ever since.

  • HIPAA

HIPAA is an act enacted to strengthen privacy, security, and reliability of health information in the United States. INFINITT adheres to all of HIPAA requirements from the early stages of product design.

  • ISO 27701:2019

ISO 27701:2019 is an international management system standard for managing personal information.

In efforts to comply with GDPR and to effectively manage and protect personal information, INFINITT received the certification for ISO 27701:2019 in 2018 and has been qualified ever since.

 

 

Contact Us

 

If you have any questions or concerns regarding this Privacy Policy or INFINITT’s privacy practices, please contact us at:

 

Privacy Practice Manager

Sangwook Choi (CISO)

R&D

02-2194-1600

privacy@infinitt.com

Website Manager

Yujin Jeong

Marketing Communications

02-2194-6961

privacy@infinitt.com

 

For additional counselling on infringement of personal information, please contact the following organizations:

  • Personal Information Dispute Mediation Committee
    www.kopico.go.kr / 118 (without national code)
  • Personal Information Protection Commission
    www.pipc.go.kr / 118 (without national code)
  • Forensic Science Investigation Department, Supreme Prosecutors’ Office
    www.spo.go.kr / 02-3480-3571
  • Cyber Bureau, National Police Agency
    http://cyberbureau.police.go.kr / 182 (without national code)

 

 

Last updated on on April 3, 2019
*You can check the previous version of our privacy policyhere

I have read and agreed to the privacy policy.

닫기

Contact Us

We will get back to you as soon as possible.

INFINITT Healthcare (“INFINITT” or “we”) strictly abides by all domestic and overseas privacy legislations including information network laws (for encouraging use of information network and protecting the information), privacy laws, HIPAA (Health Insurance Portability and Accountability Act), GDPR (General Data Protection Regulation), etc. This is an overview of how INFINITT collects, uses, discloses and disposes personally identifiable information of visitors (“users” or “you”) of our website. We ask you to agree to our Privacy Policy and Terms & Conditions by checking “I have read and agreed to the privacy policy.” (in the Contact Us page or inquiry pop-ups). The information we collect upon your approval will be used for the management of INFINITT website. You are not to provide the personal information we request, but please note that if you choose not to, your access to services provided by INFINITT can be limited.

 

 

Collection of Personal Information

 

INFINITT collects the following information in order to provide the most appropriate and convenient services to our users.

The following information are collected from sales inquiries, product searches and exhibition scheduling, etc:

  • Contact Us
    Required(*): Full Name, Facility/Company, Country, Email Address, Phone Number
    Optional: Solution/Service of Interest, Comments
  • Case Study
    Required(*): Full Name, Facility/Company, Country, Email Address, Phone Number
    Optional: Solution/Service of Interest, Comments
  • Exhibition
    Required(*): Full Name, Facility/Company, Country, Email Address, Phone Number, Attending Exhibition, Date of Preference
    Optional: Solution/Service of Interest, Comments  

 

The following information are automatically collected from users and anonymized for any user-specific or device-specific data:

  • IP Address*, Cookies**, Records of Service Usage***, Records of Misuse, Device Information, ADID and IDFA information automatically collected from service usage.
    *IP(Internet Protocol) Address is online address information assigned to each PC or device using the internet.
    **Cookies are very small-sized text files saved in the user’s PC at the point of website access through a web browser. Next time the user accesses the website, the website server reads these cookie files and provides the same service settings as before. The user can choose to allow automatic cookie saves, to check each time a cookie is saved, or to reject cookie saves entirely. Please note that rejecting cookie saves could result in your inconvenience.
    ***Records of Service Usage are logs of: date of access, list of services used, and any normal/abnormal logs generated during usage.  

 

INFINITT uses Clicky* web analytics to log and analyze the traffic to our website. A unique ID tracking cookie is used for the legitimate purpose of identifying unique visitors. The following information are collected:

  • URL & title of pages viewed
  • URL & title of any links that are clicked on pages viewed
  • Referrer
  • Browser language
  • Screen resolution
  • x/y coordinates of mouse events
  • Unique ID tracking cookie (UID)
  • IP Address
  • Custom data**
  • *Clicky’s privacy policy here
  • **Custom data details here

 

 

Use of Personal Information

 

INFINITT uses the collected information to provide, maintain and improve our services, to develop new services, and to protect INFINITT and our users.

  • We may announce the release of new products, software updates and corporate news using the collected information.
  • We may develop, manage, provide and improve our products, services, contents and advertisements, and also prevent loss and fraud using the collected information.
  • We may identify individual users and/or appropriate services for users using the collected information.
  • We may notify important changes made to policy statements or terms and conditions using the collected information.
  • We may use the collected information for internal use such as audit, data analysis and research for the purpose of improving INFINITT products and services. All the information collected will only be used for purposes set out by this Privacy Policy. For purposes outside of this Policy, we will ask for your consent in advance.

All the information collected will only be used for purposes set out by this Privacy Policy. For purposes outside of this Policy, we will ask for your consent in advance.

 

 

Disclosure of Personal Information

 

For disclosure of personal information to third parties, INFINITT will ask for your consent in advance and notify you individually of the following: to whom the information is disclosed, their key businesses, specific items of information to be disclosed, and purpose of the disclosure.

 

For the following cases, we may disclose your personal information upon obtaining your consent through a legitimate process.

  • Partnership: we may share your personal information with strategic partners for the provision of better INFINITT services. In such cases, we will notify you individually in advance of the following information: name of the partner company, items of personal information to be disclosed, purpose of the disclosure, period of retention, and privacy protection procedures. We will never disclose any information without your consent, and we will also notify you of any changes to or termination of the partnership. Once the partnership is terminated, we will dispose of your personal information unless you agree to its retention. Even if you agree to its retention, you may withdraw your consent at anytime.
  • Subcontracting: we may subcontract the handling of your personal information for smoother business operations and provision of better services. In such cases, we will notify you in advance of the following information: name of the subcontractor, scope of personal information to be disclosed, and purpose, period and process of subcontracting.
  • Sales, M&A: in case the rights and obligations of INFINITT service provider is succeeded or transferred, we will notify you in advance and grant you the right to choose whether or not to withdraw your consent to INFINITT’s use of personal information.

 

For the following cases, we may disclose your personal information without your consent.

① When you already agreed to disclosure of your personal information.

② When you caused psychological and/or material damages to others in using INFINITT services, and there is strong enough evidence to mandate the disclosure of your personal information to enforce subsequent legal actions.

③ When we anonymize personal information for statistics, academic or market research purposes.

④ When by law, legal process and/or governmental authorities for investigative purposes.

 

 

Whom we disclose your information to

 

INFINITT may disclose your personal information to domestic and overseas branches, affiliates and partners for the provision of better INFINITT services.

 

To Whom

Purpose

Information to be disclosed

Period of Retention & Use

INFINITT Healthcare Co., Ltd.

Service

provision

Full Name, Facility/Company, Country, Email Address, Phone Number, Solution/Service of Interest, Attending Exhibition, Date of Preference, Comments

Until the cancellation of your membership or the termination of subcontract

MALGUM
CO., Ltd.

System development and operation

Full Name, Facility/Company, Country, Email Address, Phone Number, Solution/Service of Interest, Attending Exhibition, Date of Preference, Comments, IP Address, Cookies, Date of Consent, Date of Access, Period of Service Usage, Records of Service Usage, Records of Misuse, Statistics

 

 

The Rights of Users & Legal Representatives

 

Users and their legal representatives may request through email or in writing to access or modify personal information and to withdraw consent to the collection and use of personal information.

 

If you request to correct an error in your collected personal information, we will not use or disclose your information until the correction has been made. If we have already disclosed inaccurate personal information to third parties, we will notify them as soon as the correction has been made. In response to a request for disposal of information, we will handle your personal information as stipulated in the “Period of retention & use” and make sure that it is not accessed or used for any other purposes.

 

By rule, we do not collect personal information of children under the age of 14 for whom we need consent from their legal representatives. If personal information of children under the age of 14 has been collected, their legal representatives have the rights to access, modify, or withdraw the consent to the collection and use of their information.

 

 

Management of Personal Information

 

Period of retention & use

By rule, INFINITT will dispose of your personal information when you request for the disposal or once the purpose of collection and usage has been fulfilled. But when there is a need for retention due to internal policies and/or subordinate legislation, we will keep your information for the period specified in the legislation.

  • We will keep minimum information and usage history for the period set by law such as the commercial law, for cases where retention of personal information is.
  • We will keep your personal information for cases where we announced the retention period in advance and/or where we obtained your consent to retention.
  • For the following cases, we may keep your information for the specified period:

① Records on sales/product inquiries or searches, withdrawal from contracts/subcontracts, customer complaints or dispute handling: 5 years (Consumer Protection in E-commerce)

② Records on website visits: 3 months (Protection of Communications Secrets Act)

③ Records on customer complaints or dispute handlings: 3 years (Consumer Protection in E-commerce)

④ To prevent user activities based on impure motives and to secure evidential materials in case of disputes: 3 months temporary retention (from the day of consent withdrawal)

⑤ Evidential records for a violation of internal policies (i.e. Illegal usage history): 1 year

 

Disposal

By rule, INFINITT will dispose of your personal information once the purpose of collection and usage as well as the legal and business needs have been fulfilled. Paper documents containing personal information will be completely shredded. Electronic documents containing personal information will be destroyed to a point where it is impossible to technically restore the file.

 

 

Policy Changes

 

INFINITT may update its Privacy Policy from time to time. However, we do not reduce your rights stated in this Privacy Policy without your explicit consent. Any changes made to the Privacy Policy will be updated on this page.

 

 

Information Security Measures

 

INFINITT strives to provide services that you can trust and rely on. We promise to commit to the protection of your information.

  • ISO/IEC 27001:2013

Published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), ISO/IEC 27001 is the highest international standard for assessing information security management.

INFINITT received the certification for ISO/IEC 27001 in 2016 and has been qualified ever since.

  • HIPAA

HIPAA is an act enacted to strengthen privacy, security, and reliability of health information in the United States. INFINITT adheres to all of HIPAA requirements from the early stages of product design.

  • ISO 27701:2019

ISO 27701:2019 is an international management system standard for managing personal information.

In efforts to comply with GDPR and to effectively manage and protect personal information, INFINITT received the certification for ISO 27701:2019 in 2018 and has been qualified ever since.

 

 

Contact Us

 

If you have any questions or concerns regarding this Privacy Policy or INFINITT’s privacy practices, please contact us at:

 

Privacy Practice Manager

Sangwook Choi (CISO)

R&D

02-2194-1600

privacy@infinitt.com

Website Manager

Yujin Jeong

Marketing Communications

02-2194-6961

privacy@infinitt.com

 

For additional counselling on infringement of personal information, please contact the following organizations:

  • Personal Information Dispute Mediation Committee
    www.kopico.go.kr / 118 (without national code)
  • Personal Information Protection Commission
    www.pipc.go.kr / 118 (without national code)
  • Forensic Science Investigation Department, Supreme Prosecutors’ Office
    www.spo.go.kr / 02-3480-3571
  • Cyber Bureau, National Police Agency
    http://cyberbureau.police.go.kr / 182 (without national code)

 

 

Last updated on on April 3, 2019
*You can check the previous version of our privacy policyhere

I have read and agreed to the privacy policy.

닫기