The Company collects personal information for the purposes outlined below. Personal information is not used beyond these purposes.
If usage purposes change, consent will be obtained in accordance with Article 18 of the Personal Information Protection Act.
| Category | Purpose | Data Items | Retention & Usage Period |
|---|---|---|---|
1:1 Inquiry | To verify the identity of the inquirer, confirm | [Required] Name, Contact, Email Address, Password, | Destroyed after completion of mandated period) |
Adverse Event Reporting | Collection and reporting of adverse drug events for safety management, in accordance with laws such as the Pharmaceutical Affairs Act and regulations on drug safety | Personal Information | 10 years after product approval expires |
Pharmaceutical Distributor | issuance of wholesale system accounts | [Required] Name, Mobile Number, Email, | Destroyed upon termination of |
Issuance of accounts for data transfer | [Required] Name, Affiliation, Mobile Number, | ||
CP Management | Payment for pharmaceutical lectures/advisory | [Required] Name, Affiliation, Mobile Number, | 5 years (as required by law: Article 47-2 ofPharmaceutical Affairs Act, submission of expenditure reports for economic benefits, etc.) |
Management of product briefing participation | [Required] Name, Affiliation, Hospital Name, | ||
Daewoong Group* integrated Customer | Customer inquiry tracking, integrated | [Required] Name, Affiliation, Specialty, Mobile | Until the purpose of use is achieved |
Providing information on medical education, | |||
Clinical Trials | Organizing, analyzing, and reporting data | · Personal Information - [Required] Name | 3 years from product approval for the |
*Daewoong Group: Daewoong Pharmaceutical, Daewoong Bio, Sisbiopharm, DNC, Emsher, MDwell, idsTrust, Hanall Bio, Daewoong Pet
The company processes users' personal information strictly within the scope of the stated purpose, and only provides personal information to third parties with
the user’s consent or as required by law under the Personal Information Protection Act (Articles 17 and 18). The details of personal information provided to third parties are as follows:
| Recipient Organization | Purpose of Provision | Items Provided | Retention / Usage Period |
|---|---|---|---|
Korea Pharmaceutical & | Report to the review body by period in | Name, affiliated organization, lecture fee, | 5 years |
Ministry of Food and Drug | Verification of clinical trial procedures and | Personal and sensitive information collected | 3 years from product approval date |
Clinical Trial Hospital / | Verification of research procedures and data | ||
Drug Safety Nara | Report based on regulations on drug safety | Name, resident registration number, | semi-permanent |
Korea Institute of Drug Safety | Report to national regulatory authorities on | ① Patient Information – Country, sex, date of | 10 years |
Daewoong Partners | Provide adverse event information to | Country, sex, age, symptoms *Compliant with CIOMS forms; may vary by partner contract | 10 years |
KB Insurance | Compensation in case of adverse effects from | effects from clinical trials | Destroy immediately after achieving |
To ensure smooth handling of personal information, the company delegates the following personal information processing tasks:
| Category | Service Provider (Delegate) | Delegated Task |
|---|---|---|
Main Website Customer Support | idsTrust | Name, affiliated organization, lecture fee, lecture payment |
Clinical Trials | Hanyang University Guri Hospital, Kodae Ansan Hospital, Catholic University | Organizing, analyzing, and reporting clinical trial data |
Electronic Contracts | Modusign | Providing electronic contract services |
Wholesale Management | idsTrust | Maintaining wholesale management system |
Sales & Customer Management | idsTrust | Maintenance of sales and customer management system |
Marketing & Promotion | BearBetter | Shipping of promotional products |
The company will promptly destroy personal information when it is no longer necessary due to the expiration of the retention period or fulfillment of the processing purpose.
The procedures and methods for destroying personal information are as follows:
1) Destruction Procedure: The company selects personal information to be destroyed and separates it for a certain period in accordance with internal guidelines and related laws,
then destroys it.
2) Destruction Method: Personal information stored electronically will be destroyed so that it cannot be recovered. Personal information stored on paper will be shredded or incinerated.
However, if personal information must be retained according to other laws even after the retention period has expired or the processing purpose has been achieved,
the information will be transferred to a separate database (DB) or storage location for preservation.
| Type of Information | Retention Period | Legal Basis |
|---|---|---|
Records of economic benefits provided to medical | 5 years | Pharmaceutical Affairs Act |
Records of consumer complaints or dispute resolutions | 3 years | Framework Act on Consumers |
Website visit logs | 3 months | Telecommunications Privacy Act |
Users may exercise their rights to request access, correction, deletion, processing suspension, or restriction of their personal information at any time.
To exercise these rights, users can submit a request in writing, via email, or by fax to the person in charge of personal information protection as outlined in Section
10, "Personal Information Protection Officer and Requests for Access to Personal Information."
The company will verify the identity of the requester or their legal representative and promptly take appropriate action in accordance with the request.
However, if the correction or deletion of personal information is restricted by other laws, the company may not be able to fulfill such requests.
The company takes the following measures to ensure the security of personal information:
- Administrative Measures : Establishment and implementation of internal management plans, regular employee training
- Technical Measures : Access control for personal information processing systems, encryption of personal information, installation and updating of security programs
- Physical Measures : Access control to computer rooms and document storage areas
The company uses cookies to store and retrieve user information in order to provide customized services.
Cookies are small pieces of information sent from the server to the user’s browser when using a website and may also be stored on the user’s PC hard drive.
- Purpose of Cookies : To understand user behavior, such as visits to websites, usage patterns, popular searches, and security access, in order to provide optimized information.- How to Refuse or Manage Cookies : Users can refuse or manage cookies via the following browser settings:Internet Explorer: Right-click the top menu > [Settings] > [Internet Options] > [Privacy] > [Advanced]Chrome: Right-click the top menu [...] > [Settings] > [Privacy and Security] > [Site Settings] > [Cookies and Site Data]MS Edge: Right-click the top menu [...] > [Settings] > [Cookies and Site Permissions] > [Manage and Delete Cookies and Site Data]
In accordance with Article 15(3) and Article 17(4) of the Personal Information Protection Act (PIPA), and by taking into consideration the factors prescribed in Article 14-2 of the Enforcement
Decree of the PIPA, the Company may further use or provide personal information without the user’s separate consent.
When exercising this right to further use or provide personal information without consent, the Company will consider the following factors:
- Whether the purpose of the further use or provision has relevance to the original purpose for which the personal information was collected.
- Whether the further use or provision can be reasonably anticipated by the user, considering the context in which the personal information was collected or
customary data processing practices.
- Whether the further use or provision unfairly infringes upon the user's interests.
- Whether necessary safeguards have been taken, such as pseudonymization or encryption.
The company processes personal information collected for clinical research and clinical trials in a way that prevents identification of specific individuals.
The anonymized information is handled as follows:
| Category | Purpose of Processing | Data Items | Retention & Usage Period |
|---|---|---|---|
Clinical Trials | Organization, analysis, and reporting | Anonymized information such as name, to ensure that individuals cannot be identified. | 3 years from product approval |
| Contractor | Scope of Work | Retention & Usage Period |
|---|---|---|
Hanyang University Guri Hospital, Korea University Ansan Hospital, Catholic University | Support for clinical trial operations | 3 years from product approval |
The company is responsible for the overall management of personal information processing and has designated the following Chief Privacy Officer (CPO)
and Data Privacy Contact to handle user complaints and remedy damages related to personal information. The company will make efforts to ensure prompt communication with users
and facilitate the exercise of their rights as stipulated in Article 35 of the Personal Information Protection Act.
| Category | Information | Contact Information |
|---|---|---|
Chief Privacy Officer (CPO) | Name: Jeong Yoomi | Email: Yum7711@Daewoong-Bio.Co.Kr |
Data Privacy Department | Department: Marketing | Email: Dwibhomepage@Daewoong-Bio.Co.Kr |
The company guarantees the security of users' personal information and operates a system for consultation and redress regarding damages caused by personal information infringements.
Users can report infringements or request consultation for redress by contacting the Chief Privacy Officer (CPO) and Data Privacy Contact listed in Section 10
.Users who have suffered an infringement on their personal information and wish to receive relief can file a complaint or request consultation with the Personal Information Protection
Commission (PIPC), the Korea Internet & Security Agency (KISA) Personal Information Infringement Report Center, or the Personal Information Dispute Mediation Committee to resolve disputes.
In addition to the above, users may file a report or seek consultation for opinions on other personal information infringements through the following organizations:
1. Personal Information Dispute Mediation Committee (Kopico): 1833-6972 (www.kopico.go.kr)
2. KISA Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
4. National Police Agency: 182 (ecrm.cyber.go.kr)
This Privacy Policy will take effect on October 27, 2025.
You can review the previous versions of the Privacy Policy in advance.