In accordance with the Personal Data Protection Act, B.E.2562 (2019) (hereinafter referred to as "PDPA"), Central Green Japanese Clinic Co. This Privacy Policy is communicated to and applies to individual patients who are our patients (hereinafter referred to as "Patients", "You" or "Your"). In order to collect, use, and disclose patient personal information (hereinafter referred to as "personal information") based on the PDPA, we notify this privacy policy and consent to the acquisition of personal information. ask for
1.1 We may collect your name, surname, nickname, email address, ID card, passport number, phone number, gender, age, date of birth, place of birth, marital status, photo, blood type, personal health information, and medicines. We may collect personally identifiable information such as usage and allergy history, personal feedback and treatment responses, payment information, images from our surveillance cameras, current addresses, and personal identification documents.
1.2 With your permission, we may contact your family or relatives, associated hospitals, clinics,We may receive personal data we collect from third parties, including companies, external organizations that perform blood tests, or external organizations that are involved to provide medical services to our patients.
1.3 This privacy policy also applies to personal information obtained when we provided medical services in the past.
2.1 We respect the privacy of our patients and are committed to safely storing our patients' personal information in accordance with this privacy policy. Personal information is highly confidential and can be changed, so it will not be used beyond the scope of the purpose of use without the patient's additional consent.
2.2 We use the information described in this Privacy Policy to verify our patients' identities, to provide health check-up services, medical services and treatments according to our patients' needs, including doctor visits and other medical appointments. We collect, store, update, use, process and disclose personal data obtained from We may also use or disclose the personal data we collect to comply with legal requirements and to assist governments, law enforcement agencies or regulatory authorities.
In addition, we may recommend products, services, or promotions that may be of interest to our patients, recommend products, services, or promotions that we believe may meet the needs of our patients, We may collect, use, and disclose your personal information to provide and update our communications and information. We may also contact you about products, services and promotions through various communication channels provided to us.
2.3 Personal information collected from patients will be used for the following purposes: Purpose of collection Personal data that may be collected, used or disclosed
1. To verify the patient's identity Identification information such as name, surname, nickname, photograph, ID card, passport number, gender, age, date of birth, place of birth, marital status, blood type, contact information such as address, telephone number, and e-mail address 2. To provide health screening services, medical services and treatment Identification information such as name, surname, nickname, photograph, ID card, passport number, gender, age, date of birth, place of birth, marital status, blood type. Contact information such as address, phone number and e-mail address. Payment information such as invoices, credit cards, debit cards and bank account information Sensitive personal information: ・Personal health information (medical history, physical health, mental health information, test results, diagnostic results, etc.) ・Information such as medication usage and history of allergies ・Personal feedback and treatment responses
3. To cooperate with affiliated hospitals, clinics, corporate groups and clinic networks in order to provide appropriate medical services and treatments ・Identification information such as name, surname, nickname, photo, ID card, passport number, gender, age, date of birth, place of birth, marital status, blood type, etc. ・Communication of address, telephone number, e-mail address, etc. ・Payment information such as invoices, credit cards, debit cards and bank account information Sensitive personal information: ・Personal health information (medical history, physical health, mental health information, test results, diagnostic results, etc.) ・Information such as medication usage and history of allergies ・Personal feedback and treatment responses 4. Implementation of health examinations by commissioned institutions ・Identification information such as name, surname, nickname, photograph, ID card, passport number, gender, age, date of birth, place of birth, marital status, blood type, etc. ・Contact information such as address, phone number and e-mail address Sensitive personal information: ・Personal health information (medical history, physical health, mental health information, test results, diagnostic results, etc.) ・Information such as medication usage and history of allergies ・Personal feedback and treatment responses 5. To notify and provide health division results via Gmail ・Identification information such as name, surname, nickname, photograph, ID card, passport number, gender, age and date of birth ・Contact information such as address, phone number and e-mail address 6. Commercial and marketing purposes to recommend products, services and promotions, and to provide and update news and information from our company ・Identification information such as name, surname, nickname, gender, age, date of birth, marital status, etc. ・Contact information such as address, phone number and e-mail address ・Opinions/impressions 7. To protect clinic property and ensure safety (prevention of crime) ・Surveillance camera footage from the clinic
2.4 We may consider changing the purpose of use set forth in the preceding paragraph to the extent that it is deemed to be reasonably relevant to the original purpose of use. Changes will be considered if they are generally in the interest of the patient or if they are consistent with the spirit of the Privacy Policy and are reasonable. In this case, we will notify the patient of the change.
2.5 The personal information stipulated in Article 2.3 is necessary for our company to achieve the purpose stipulated in the same article. If you do not provide us with all or part of the necessary personal information, or if you do not authorize us to process your personal information, we will not be able to keep records of your personal information and we will not be able to achieve the above purposes. may not be possible.
3.1 By expressing consent in writing to us, the patient expressly consents to the processing of sensitive personal data for the purposes described above or as required by law. Become.
3.2 We may obtain your sensitive personal data from other parties when permitted by law or with your consent. If we acquire personal information based on laws and ordinances, we will promptly notify the patient to that effect.
Acquired personal information will be stored by our company for 5 years from the date it was collected, the date of the latest revision, or the date the purpose was achieved, as long as it is necessary for the above purposes. This period is long enough to complete treatment of the disease and to monitor symptoms after treatment. However, the above period may be extended if the processing is legally permitted. After the above period has passed, we will destroy such data based on our data destruction guidelines. To protect personal data, we take appropriate security measures and retain it throughout the retention period.
5.1 For the above purposes, we may have to disclose your personal data to third parties such as: ・Our affiliated hospitals, clinics, corporate groups, and clinic networks to provide appropriate treatment and care plans according to patient needs ・Contracting bodies that perform blood tests or are involved in providing medical services for patients ・Google services we use to store patient personal information ・Government agencies, departments recognized by law In principle, we will not provide personal data to third parties other than for the purposes stated in this privacy policy and third parties.
5.2 However, in the following cases, personal data may be provided to third parties without the consent of the person to the extent that it does not violate applicable laws and regulations. 1) Based on laws and regulations 2) When it is necessary for the protection of human life, body or property and it is difficult to obtain the consent of the individual 3) Where compliance with law is necessary to achieve purposes of public health interest, such as preventing the spread of infectious diseases or epidemics across national borders; 4) When it is necessary to cooperate with a national agency, a local government, or a person entrusted by them in carrying out the affairs stipulated by laws and regulations, and with the consent of the person concerned, carrying out the affairs When there is a risk of interfering with
5.3 In addition, if necessary, we may transfer the collected personal information to our Japanese parent company, affiliated companies, and organizations in other countries. may not be provided. We will do our best to maintain and protect the security of our patients' personal information. We transfer your personal data to the following parent companies: DYM Co., Ltd. Address: Gate City Osaki 10F East Tower, 1-11-2 Osaki, Shinagawa-ku, Tokyo
5.4 If requested by the patient's company, our hospital will provide the patient's company with the results of the medical examination, which is the patient's personal information.
Under the PDPA, we express your rights as a data subject as follows:
1) Right to access your personal information
2) Right to obtain a copy of your personal information
3) Right to request deletion or suspension of use of your personal information
4) the right to rectify your personal data or request an update of your personal data;
5) Right to withdraw consent for personal data provided to us based on consent
6) the right to object to the collection, use or disclosure of your personal data at any time;
7) Right to be notified if your personal data is at risk
8) Right to lodge a complaint if the hospital violates or fails to comply with the PDPA
If you have any questions about the personal information we collect, please contact us at the email below and follow the patient rights procedure described in Article 6. Promptly we will correspond.
For minors under Thai law who may collect, use or disclose personal information, we will obtain parental consent before collecting, using or disclosing personal information. If the patient is incapacitated or semi-incapacitated, consent must be obtained from the parent or legal guardian, respectively, who has the authority to represent the patient.
We may amend or revise this Privacy Policy to respond to changes in our services or operating system, to respond to patient opinions and suggestions, or to comply with relevant laws. Patients will be notified through [contact@dym.co.th] if there are any changes or revisions.
This Privacy Policy shall be concluded in Japanese. The English translation of this Privacy Policy is provided for reference only and is not binding.
Patient Awareness and Consent
You authorize and agree to our company for the following operations.
・I consent to our collection, use and disclosure of Personal Data and Sensitive Personal Data for the purposes described in the Privacy Policy. You also agree that we may store your Personal Information and Sensitive Personal Information for the period described in our Privacy Policy.
・I consent to the processing of my personal data and sensitive personal data as described in the privacy policy, including possible international transfers of my personal data and sensitive personal data, if necessary. In this regard, we are aware that the personal data protection regulations in the destination country may be less than the level stipulated in Thailand's PDPA.
・If you assert any of the above rights or raise any issues with us, you acknowledge that Article 7 of the Privacy Policy will be used for formal communication with us, and we will promptly respond to your request or issue. To do.
You agree to outsource the above work to us. This consent shall remain in full force and effect unless otherwise specified or revoked in writing.