Privacy Policy - Simulation Center

Introduction

Thai Medical Company 88 Limited, as a business entity, is dedicated to safeguarding your privacy. The following information outlines our approach to handling your personal data, including its collection, usage, and disclosure (collectively referred to as “data processing”). This privacy policy encompasses any data that can directly or indirectly identify you, whether obtained directly from you or through third parties (“data” or “personal data”). In addition to complying with this policy, we will adhere to the regulations, proclamations, orders, or directives issued by relevant regulatory authorities or any subsequent amendments. As the data controller for your personal data, we have developed this privacy policy as part of the terms and conditions for using our website and receiving our services. By using our services each time, you are deemed to have read and agreed to accept this privacy policy.

Collection of Personal Data

We collect your personal data to the extent necessary, and this can occur when you provide us with information directly. This includes providing information for service requests through our website or other channels. Examples of this include doctor appointments, online registrations, newsletter subscriptions, and offline transactions, such as patient registration at hospital registration counters. Additionally, we may receive your personal data from third parties, such as family members or close acquaintances, hospitals, or affiliated companies, which may include agents or service providers. This disclosure may occur with your consent or as required by law.

The personal information that we gather.

The types of personal data we gather depend on the purposes of data processing outlined in this privacy policy. These data can be collected directly from you or third parties and may include:

Identifying information: such as your name, photographs, gender, date of birth, passport, national ID number, or other identifying information.
Education, training, and work-related information: such as educational and training history, certifications or qualifications, transcripts, test scores, educational levels, language proficiency, professional licenses, etc.
Contact information: such as your address, phone number, email, and other social media.
Contractual and company-related information: including information related to contracts and associated companies.
Service usage information: including doctor appointment details, personal information of relatives, room preferences, and other additional services.
Newsletter subscriptions and marketing activity participation: such as seminar registrations, promotional event registrations, etc.
Statistical information: such as the number of patients and website visits. Data collected from website usage: such as IP addresses, cookies, and online doctor appointment records.
Health-related information: including physical and mental health reports, healthcare, test results from laboratories, and diagnosis.
Medication and allergies information.
Feedback and treatment results provided by you.
Other information, such as temperature measurements through image recording and sound through Closed-Circuit Television (CCTV) cameras, photographs, and voice recordings of conversations.
We will not collect or use sensitive information about you, such as religious beliefs or criminal records, unless required by regulations and laws or with your consent.

Purposes of Personal Data Processing

Our data processing activities are guided by specific objectives outlined in this privacy policy, and they are undertaken with your explicit consent or in compliance with contractual agreements or other lawful bases. The purposes for processing data are as follows:

Provision of Medical Services:

To facilitate and deliver our services, whether online or offline.
To schedule medical appointments, disseminate news, and recommend hospital services.
To coordinate and share information with network hospitals and other healthcare facilities to expedite patient referrals.
To verify the identity of patients.
To send appointment reminders and offer assistance.
Any additional purposes that align with the aforementioned objectives or receive periodic consent from you.

Legitimate Interests:

Recording images of individuals entering or receiving services at the hospital, including card exchanges for access to hospital premises, to ensure internal security.
Risk management, supervision, and internal organizational management, including data transfers to affiliated companies under Binding Corporate Rules for the protection of personal data.
Compliance with laws, regulations, orders, or requests from government agencies, such as court testimony or court orders, or other legitimate requests in accordance with the law.

Marketing Purposes (Consent Required):

Provision of convenience and benefit programs.
Marketing, sales promotion, and customer relationship management, including the dissemination of information on promotions, products, and services, promotional campaigns, and partnership businesses.
Customer satisfaction surveys, market research, and statistical analysis for the improvement of products and services or the development of new ones.
Communication channels for addressing questions or responding to complaints related to our services, such as service issues or any losses incurred.

Disclosure of Personal Data

We may disclose or transfer your personal data to third parties, whether located within or outside of Thailand, provided that they maintain adequate data protection standards in accordance with the legal requirements. We will take necessary and appropriate measures and comply with regulations and laws to ensure that the objectives specified in this privacy policy are upheld. The disclosure may be made to the following entities:

Network hospitals, affiliated companies, business partners, and corporate affiliates.
Representatives, service providers, or partners acting on our behalf, such as laboratory analysis service providers, radiology centers, and information technology providers.
Business partners, such as insurance companies, participating in loyalty point and benefit programs, and other relevant companies providing services or responding to the above-mentioned objectives.
Banks and payment service providers, such as credit card or debit card companies.
Officers or security and safety agencies.
Immigration agency and customs authorities.
Government agencies, regulatory bodies, and other authorized agencies in accordance with the law or as required by legal mandates.

Linking to Third-Party Websites

Our website may contain links to third-party websites. Please note that this privacy policy does not extend to third-party websites. Consequently, any processing of your personal data by third parties is beyond our control, and we disclaim any responsibility or liability for the actions of such third parties.

Retention and Security of Personal Data

Your personal data will be retained for as long as necessary for the purposes described in this privacy policy, in accordance with legal requirements, or for legal proceedings. If you no longer provide consent for us to process your personal data in the future after the aforementioned duration has elapsed, we will proceed to destroy such personal data in accordance with our data destruction procedures without undue delay. We will employ appropriate technical and managerial measures to protect and maintain the security of your personal data collected, following the information security standards laid out in the NIST Cybersecurity Framework. We will limit access to your data, whether stored electronically or in document form, to only personnel who need to process such personal data and store it in locations with limited access for individuals authorized to access personal data.

Rights of Data Subjects

You may contact us or our Data Protection Officer to exercise your rights as a data subject, including but not limited to the following:

You have the right to access your data held by us, request copies of your data, and request the transfer of your personal data to another data controller or yourself.
You have the right to object to or restrict the collection, use, or disclosure of your personal data.
You have the right to request corrections to inaccuracies or omissions in your data and may request the deletion, destruction, or disclosure of the source of your data, where applicable.
In cases where you believe that we or our personnel have processed your data in violation of your consent or legal requirements, you have the right to file a complaint with the Data Protection Committee.
You have the right to withdraw your consent for the processing of your personal data, unless there are legal or contractual limitations that require otherwise.
However, withdrawing consent may affect our ability to provide you with certain services.

Changes to Privacy Policy

We may periodically review and modify this privacy policy to align with changes in our service offerings, operations, your feedback, comments, and relevant laws. The latest version of the policy will be posted on our website to inform you of the guidelines we follow in protecting your personal data.

Contact Information

If you wish to contact us, have questions, or need further information regarding the collection, use, or disclosure of personal data, exercise your rights as a data subject, or file a complaint, you can reach our company through the following channels:

Thai Medical 88 Co., Ltd.

Contact Address: 188/72, 4^th Floor, Soi Chulalongkorn 16, Charas Mueang Road, Wang Mai Sub-District, Pathum Wan District, Bangkok 10330, Thailand

Phone: 0-2026-3848

Data Protection Officer:

Email: dpo@thaimedical88.com

Please provide the following information when contacting us:

Name, surname, national identification number, or passport number
The subject of your inquiry and details of any errors or issues
Contact phone number and address, including your email address for electronic correspondence.