About us

Data Protection Policy
Company: Thonburi Thawiwatthana Hospital Public Co., Ltd.

Thonburi Thawiwatthana Hospital ("Hospital") has established a Data Protection Policy regarding personal data provided to the hospital during service requests, website visits, or the use of applications from or related to the hospital. This policy includes various information related to you that has been disclosed by third parties.

Personal data refers to "information about an individual that can identify that person, whether directly or indirectly, but excluding information about the deceased specifically."

Collection of Personal Data
1. The hospital collects your personal data, which can directly or indirectly identify you, for your benefit during the necessary and appropriate period for service provision. In cases where you provide information to the hospital or request services from the hospital through its website, applications, or other channels, such as scheduling medical appointments, conducting online transactions, subscribing to newsletters, requesting special assistance, as well as offline transactions like patient registration at the hospital's registration counter, or voluntarily participating in surveys or email communications, and providing information for job applications or other communication channels between the hospital and you.
2. The hospital may also receive your personal data from third parties such as affiliated businesses, agents, distributors, or service providers of the hospital, as well as government agencies.

Personal Data Collected by the Hospital
The types of personal data collected by the hospital from you depend on the circumstances of collection and the type of services requested from the hospital. Your personal data will be used to facilitate online or offline transactions or services that you have requested successfully completed. The personal data collected by the hospital directly from you or from third parties may include:

1) Identity information, such as name, photograph, gender, date of birth, passport, national ID, or other identifying numbers.
2) Contact information, such as address, phone number, and email.
3) Payment information, including billing details, credit or debit card information, and bank account details.
4) Service utilization data, such as medical appointment details, personal information of relatives, preferences for accommodations, meals, and other additional services.
5) Marketing activity data, such as registration information for participating in activities with the hospital.
6) Statistical information, including the number of patients and website visits.
7) Data from accessing the hospital's website.
8) Health-related information, reports on physical and mental health, healthcare details, test results from laboratories, and diagnoses.
9) Information related to your medication usage and allergies.
10) Feedback and treatment results provided by you. We will not collect and use sensitive details about you, such as ethnicity, religious beliefs, criminal history, unless required by regulations and laws or with your explicit consent.

Use of Personal Data
The hospital will use your personal data for the following purposes:
1) Providing or delivering hospital services.
2) Scheduling medical appointments, sending notifications, and recommending hospital services. 3) Coordinating and forwarding information to expedite patient referrals.
4) Verifying the identity of patients.
5) Sending appointment reminders or offering assistance from the hospital.
6) Providing convenience and presenting various benefits to you.
7) Marketing purposes, promoting sales, and customer relationship management, such as sending information about promotions, products, and services, promotional campaigns, and business partnerships.
8) Serving as a communication channel to respond to questions or complaints.
9) Customer satisfaction surveys, market research, statistical analysis, and reporting to improve products and services or create new ones for the benefit of service users.
10) Accounting or financial purposes, such as verifying credit card payments, billing, and refund requests.
11) Ensuring security, including security during hospital stays.
12) Employment-related purposes, such as job applications, being an employee, or other relevant purposes.
13) Compliance with hospital rules.
14) Compliance with laws, regulations, rules, or requests from government agencies, such as complying with witness subpoenas or court orders.
15) Other purposes that support the aforementioned objectives or have temporary consent from you.

Disclosure of Personal Data
The hospital may disclose or transfer your personal data to third parties, whether within or outside the jurisdiction, and will do so in accordance with necessary and appropriate measures, regulations, and laws for the purposes specified above. This disclosure may be made to:

1) Business partners, such as insurance companies, partners participating in loyalty programs, and medical centers or other relevant companies involved in service provision.
2) Banks and payment service providers, such as credit or debit card companies.
3) Security and safety personnel.
4) Immigration and customs authorities.
5) Government agencies, regulatory bodies, and other authorized entities as permitted by law or stipulated.

Linking to Third-Party Websites
The hospital's website and mobile applications may contain links to third-party websites. If you follow these links, please be aware that this Privacy Policy does not apply to those third-party websites. Note that the hospital cannot be held responsible for the use of your personal data by those third parties as they are outside the control of the hospital.

Storage of Personal Data and Security
1. Your personal data will be stored for as long as necessary for various purposes as described in this Privacy Policy, under legal obligations, or for legal proceedings.
2. The hospital will implement security measures and appropriate management practices to prevent and maintain the security of your personal data collected by the hospital.

Rights of Personal Data Owners
1. Right to withdraw consent: You have the right to withdraw your consent for the processing of personal data that you have previously given to the hospital throughout the period your personal data is with the hospital.
2. Right of access: You have the right to access your personal data and request the hospital to provide a copy of such personal data, including disclosing the sources from which the personal data was obtained if you did not provide it to the hospital.
3. Right to rectification: You have the right to request the hospital to correct inaccurate information or complete incomplete personal data.
4. Right to erasure: You have the right to request the hospital to delete your data under certain circumstances.
5. Right to restriction of processing: You have the right to request the suspension of the processing of your personal data under certain circumstances.
6. Right to data portability: You have the right to receive your personal data provided to the hospital and transfer it to another data controller or yourself under certain circumstances.
7. Right to object: You have the right to object to the processing of your personal data under certain circumstances. You can request access or request updates and corrections to your personal data, along with the rights mentioned above or rights under data protection laws that may apply, such as requesting a copy of your personal data or requesting the suspension or disclosure of your personal data if you believe it is being used beyond the stated purposes or without your consent.