Data Privacy

Privacy policy

1. Items of personal information we collect and how we collect them
A. Items of personal information collected
1) Basic collection items
Name, gender, contact information (mobile or landline phone number, email), organisation name, address
2) Additional collection items (if you have agreed to collect additional personal information)
Age, family details (limited family personal information), medical history, occupation, interests, blood type, and other minimum information necessary for various activities, recruitment, business, and programmes conducted by the Company; however, personal information that may violate your basic human rights (such as race and ethnicity, ideology, place of birth, political affiliation and criminal records, health status, and sexual life) will not be collected unless required to be collected by law.

B. Methods of Collecting Personal Information
The Company collects personal information in the following ways.
-Through the Company's homepage or various websites operated or used by the Company for job application services, complaint handling, and other business purposes, written forms, fax, telephone, consultation boards, email, event submissions, and provision from partner companies.
-Collection through generated information collection tools

2. Purpose of collecting and using personal information
The Company uses the collected personal information for the following purposes: sales and promotion (marketing) activities of medicines and medical devices, research on medicines and other medical sciences, conducting various programmes for patients, delivering advertising information such as events, screening for recruitment and hiring, managing candidate information, and collecting and managing drug safety information.

3. Period of retention and use of personal information
The Company shall destroy personal information without delay when the purpose of collecting and using personal information is achieved or the period of retention and use has ended. However, if it is necessary to preserve it in accordance with the provisions of the relevant laws and regulations, the Company shall keep the member information for a certain period of time as prescribed by the relevant laws and regulations.

4. Destruction Procedures and Methods
In principle, the Company shall destroy the information without delay after the purpose of collecting and using personal information is achieved.
A. Destruction Procedure
-Customer's personal information is transferred to a separate DB (separate filing cabinet for paper) after the purpose is achieved and stored for a certain period of time in accordance with the Company's internal policies and other information protection reasons under relevant laws and regulations, and then destroyed.
-Personal information transferred to a separate DB will not be used for any other purpose unless required by law.
B. Destruction method
-Personal information stored in the form of electronic files will be deleted using a technical method that cannot reproduce the records.
-Personal information printed on paper will be shredded or incinerated.

5. Provision of Personal Information
The Company may provide the collected personal information of customers to each other and to domestic and foreign affiliates of the Company to the minimum extent necessary for the purposes of Paragraph 2 above. In addition, in the case of safety information such as adverse drug events, personal information and sensitive information may be provided to regulatory authorities and domestic and foreign affiliates of the Company for the purpose of drug stability management. In other cases, the Company shall not provide personal information of customers to third parties unless in accordance with relevant laws and regulations or without obtaining the necessary prior consent from customers.

6. Consignment of Collected Personal Information
The Company may entrust the personal information of customers to specialised companies for the smooth performance of various services provided by the Company. In this case, the Company will notify the entrustment on this privacy policy screen or notify the customer separately as required by laws and regulations.

7. Rights of customers and legal representatives and how to exercise them
Customers and their legal representatives (a person whose representation is effective under the provisions of the law without being delegated by the customer, such as a parent or guardian of a minor) may request access to, modification of, or deletion of their personal information or that of a child under the age of 14 at any time. If you contact the person in charge of personal information management in writing, by phone or by email, we will take action without delay. The Company will process personal information that has been cancelled or deleted at the request of the customer or legal representative as specified in the retention and use period of personal information collected by the Company, and will not allow access or use for any other purpose. However, it may be difficult to delete within the statutory retention period stipulated by the law.

8. Automatic Collection of Personal Information
A cookie is a small amount of information that a website sends to your computer browser (Netscape, Internet Explorer, etc.) and is usually encrypted and stored in the Windows\cookies directory on your hard disk. The Company does not use cookies that store and retrieve information about you from time to time. However, if you log in to this site and open another family site in a new window, you may receive abnormal cookies. However, even in this case, your personal information is not reflected in the cookies at all.

9. Technical and administrative protection measures for personal information
In processing your personal information, the Company has established internal guidelines on access, use, storage, and disposal of personal information to ensure reliability so that personal information is not lost, stolen, leaked, altered, or damaged, and requires employees to comply with them, and implements technical and administrative measures required by laws and regulations. However, the Company shall not be liable for any problems caused by the leakage of personal information due to the customer's own negligence or problems on the Internet.

10. Information on the Personal Information Protection Officer and Service Department
The Company has designated a person in charge of personal information management as follows to protect customers' personal information and handle complaints related to personal information.
Customers may report any complaints related to personal information protection related to the Company to the person in charge of personal information management. The Company will provide a prompt and sufficient response to customers' complaints.

Privacy Officer
sanofi-aventis korea corporation
Name: Jungwoo Lee 
Telephone : +82-2-2136-9000
Email : PrivacyOfficeSouthKorea@sanofi.com

Opella Healthcare Korea Corporation
Name: Ji-Eun Lee
Tel: 080-050-3535
E-mail: PrivacyOfficeCHCKorea@sanofi.com

11. Obligation to notify
If there are any additions, deletions, or modifications to the contents due to changes in laws, policies, or security technology, we will notify you of the reasons and contents of the changed privacy policy.

12. Addendum
The Company's Privacy Policy took effect on 1 January 2013 as version 1.0. This document is version 2.0 and is effective from 7 June 2018.