1. General Provisions
M.I.Tech (hereinafter referred to as the "Company") actively protects the personal information of data subjects and
ensures their rights and interests in accordance with the Personal Information Protection Act.
This Privacy Policy has been established and implemented to smoothly address any concerns related to personal information.
The policy may be subject to change based on relevant laws, guidelines, or internal operational policies of the company.
Any changes to this policy will be disclosed in accordance with applicable legal requirements.
This Privacy Policy takes effect on March 1, 2025, and includes the following:
General Provisions
• Purpose of Personal Information Processing and Items Collected
• Retention and Disposal of Personal Information
• Rights and Obligations of Data Subjects and How to Exercise Them
• Rights of Legal Guardians of Children Under 14
• Measures to Ensure Security of Personal Information
• Collection of Opinions and Complaint Handling
2. Purpose of Personal Information Processing and Items Collected
[General Personal Information]
1. Required Information
• Items Collected: Name, Email, Mobile Number, Company Name
• Purpose: Service provision, customer management, sales, and marketing
• Automated Email Subscription: Used for notifications, guidance, and marketing
2. Optional Information
• Items Collected: Industry, Job Title, Address, Role, Company Phone Number
• Purpose: Service provision, customer management, sales, and marketing
3. Retention and Disposal of Personal Information
A. Retention Period
The company will promptly dispose of personal information once its purpose has been fulfilled.
However, personal information may be retained under specific legal provisions or when the data subject has provided prior consent.
B. Disposal of Personal Information
1. The company ensures that personal information is irreversibly destroyed.
2. If the company is required to retain personal information instead of disposing of it, it will store and manage the information separately.
3. If personal information is in electronic format, it is permanently deleted in a way that prevents recovery. If stored in physical form, it will be shredded or incinerated.
4. Rights and Obligations of Data Subjects and How to Exercise Them
A. Right to Access Personal Information
1. Data subjects can request access to their personal information. Requests must be submitted through a Personal Information Access Request Form or by providing proof of identity via email.
2. The company will grant access within 10 days of the request unless a legitimate reason for delay exists.
3. Access may be restricted if:
o Disclosure is prohibited by law.
o It could harm another person’s rights, such as their life, property, or other interests.
B. Request for Correction or Deletion
1. Data subjects can request corrections or deletions of their personal information by submitting a Personal Information Correction/Deletion Request Form or providing proof of identity.
2. The company will review the request within 10 days and inform the data subject of the actions taken. If deletion is denied due to legal reasons, the data subject will be notified accordingly.
3. When personal information is deleted, it is permanently removed to prevent recovery.
C. Request for Suspension of Processing
1. Data subjects may request to suspend the processing of their personal information.
2. The company may deny the request if:
o It is legally required to process the information.
o Suspension could harm another person’s rights.
o It is necessary for fulfilling a contract, and the data subject has not explicitly requested contract termination.
3. The company will act on processing suspension requests within 10 days and inform the data subject accordingly.
D. How to Exercise Rights
1. Requests for access, correction, deletion, or processing suspension may be made by the data subject or their legal representative.
2. A processing fee may be charged for these requests.
3. The company retains request records for 90 days before disposal.
5. Rights of Legal Guardians of Children Under 14
The legal guardian of a child under 14 years old has the right to request access, correction, deletion, or suspension of processing of the child's personal information.
6. Measures to Ensure Security of Personal Information
A. Internal Management Plan
The company implements the following internal management measures to safeguard personal information:
1. Designation of a Personal Information Manager
2. Responsibilities and roles of personnel handling personal information
3. Security measures for protecting personal data
4. Training for personnel handling personal information
B. Access Control and Permission Restrictions
1. The company grants system access only to authorized personnel based on job responsibilities.
2. When personnel change roles or leave the company, access is modified or revoked immediately.
3. Password regulations are in place to prevent unauthorized access.
C. Encryption and Secure Transmission
1. Unique identifiers and passwords are encrypted before transmission.
2. Passwords are stored using one-way encryption to prevent recovery.
D. Monitoring and Prevention of Security Breaches
1. The company securely stores logs of personnel access to personal data to prevent tampering or leaks.
E. Security Software Implementation
The company employs security software such as anti-virus programs and ensures:
1. Automatic updates or at least one manual update per day
2. Immediate application of security patches when vulnerabilities are identified
F. Physical Security Measures
1. Personal information is stored in designated, restricted-access facilities.
2. Documents containing personal information are stored in secure locations with locking mechanisms.
7. Collection of Opinions and Complaint Handling
Data subjects may submit any privacy-related complaints to the Personal Information Manager or the designated department. The company will promptly respond and address such concerns.
[Personal Information Manager]
Name: Byeung-gyu Park
Phone: +82-010-4304-7443
Email: bgpark@mitech.co.kr
Stay updated with the latest news and important information about M.I.Tech through our various events and announcements.
Scroll Down
2023-09-05
엠아이텍,대장·십이지장 비혈관용 스텐트 유럽 CE MDR 인증 획득
대장 15부위, 십이지장 12부위 제품 CE MDR 승인
비혈관 스텐트 제조기업 엠아이텍이 회사 주력제품인 비혈관 스텐트 대장, 십이지장 유럽 의료기기 규정(CE MDR)인증을 4일(유럽시간) 획득했다.
유럽의료기기 규정 CE MDR(Medical Device Regulation)은 기존 유럽 의료기기 지침 CE MDD (Medical Device Directive)을 대체하는 새로운 규정이다.
제품 품질과 안전성, 성능 유효성, 임상평가 등 요건이 더욱 강화됐으며, 유럽연합 및 CE 인증을 기반으로 하는 국가에서 의료기기를 판매하기 위해서는 CE MDR 인증이 필수적이다.
엠아이텍이 이번에 취득한 CE MDR은 2등급[Class IIb Implantable(이식형 의료기기, 중위험/고위험)]으로 국내 관련업계에서는 최초로 해당 인증을 받게 됐다.
엠아이텍은 이번 CE MDR 인증을 통해 10월에 예정돼 있는 유럽소화기학회(UEGW)에서 유럽지역 판매에 긍정적 영향을 주고,
향후 유럽 MS 확대 뿐만 아니라 선진기술을 보유한 비혈관용 스텐트 전문회사로서 글로벌 브랜드 인지도를 향상시킬 수 있을 것으로 기대하고 있다.
엠아이텍 관계자는 CE MDR 인증획득은 엠아이텍 제품 국제적 품질규격을 획득하기 위해 노력한 결과라며,
앞으로 식도, 담도 제품도 CE MDR 인증을 받을수 있게 지속적으로 진행할 것이라고 밝혔다.