Privacy notice

Privacy notice for User of Medical Service

PTT Public Company Limited (hereinafter referred to as “PTT” or “we” or “our”) gives highest priority to the protection of personal data of the users of medical services of the medical centers of PTT that provided data for us and in order for you to ensure that we will protect and manage your personal data in accordance with the laws concerning personal data protection, we then established this Personal Data Privacy Notice for your acknowledgement of details of the processing of personal data, whether it be the collection, use and disclosure (collectively referred to as “the processing”) that may be occurred and including to inform you of the rights on your personal data and our contact channels as follows:

1. Purposes for the collection, use and disclosure of personal data

For the provision of services of the medical centers of PTT Public Company Limited, it is necessary to collect, use, and disclose the data of the users of medical services pursuant to the following purposes:

Clause	Purposes	Lawful Basis
1	For the compliance with the agreement to provide medical services of PTT including the relevant proceedings for obtaining services and the provision of medical services such as: - Making an appointment with the physician; - Identity authentication of the service user; - Examination and treatment; - Laboratory inspection; - Management of medical treatment expenses and welfare of the employees of PTT and companies in PTT Group which shall mean to include the disbursement of medical treatment expenses, the management of relevant expenses pursuant to medical treatment welfare of employee, a member in the family of the employees including the person who is entitled to obtain medical services pursuant to the policies of PTT.	Contractual basis
2	For the proceedings and management of relevant matters in accordance with the memorandum of agreement on the provision of medical services between PTT Public Company Limited and the companies in PTT Group.	Legitimate interest basis
3	For the management concerning your heath, hygiene and safety.	Preventing or suppressing danger to a person's life, body or health (Vital Interests)
4	For the compliance with legal obligations and the request on law enforcement including the reporting of data to the government authorities pursuant to the laws or upon the receipt of a summon or writ of attachment from the police officer, government authorities, state authorities, independent organizations, or the court or public prosecutor, etc.	Legal obligation basis
5	For the establishment, compliance, exercise or defense of legal claim.	Legal obligation and legitimate interest basis
6	For the inspection and management concerning relevant complaints as a consequence of the compliance with employment agreement or the agreement for provision of medical services including the investigation, inquiry or any other legal proceeding.	Legitimate interest basis
7	For the risk management, audit supervision including for the internal audit of the internal audit office and internal management and administration in the organization, and for the establishment of standards for the provisions and the use of medical services.	Legitimate interest basis

We hereby inform you that for the processing of personal data of the user of medical services that has provided data for us, we rely on relevant lawful basis as specified herein without relying on the consent; however, there might be the processing of personal data in certain cases that we could not rely on these lawful basis such as the cases required by laws to obtain consent from the owner of personal data for the processing of sensitive personal data, etc. For such cases, PTT shall request for your express consent (please read our letter requesting for consent in addition to this document).

In case that the aforementioned personal data collected by us is the information necessary for our performance of agreements or the compliance with relevant governing laws, if you refuse to provide such necessary personal data, we may not be able to provide medical services or could not manage and administer the agreements in accordance with the purposes of the provision of services and/or this may affect the right to obtain welfare benefits or the provision of facilitation to you.

2. Personal Data which shall be collected

In general, PTT shall collect your personal data by directly requesting the data from you, for instance by having you fill in the forms determined by PTT, or inquiring data from you, or requesting you to submit documents containing your personal data to PTT; nonetheless, there may be some circumstances that PTT collects your personal data from other sources in order to fulfil the aforesaid purposes such as:

Companies in PTT Group that entered into the agreement for the provision of medical services with PTT;
Hospitals which are the contractual parties pursuant to the agreement for the provision of medical services.

In this regard, the personal data that PTT shall collect are as follows:

2.1 General personal data

Identity data such as first name, last name, identification card number, passport number, date of birth, gender, age, nationality, marriage status, weight, height, signature, photo;
Contact data such as address, phone number, email;
Employment data such as date of employment, employee ID, date of the termination of employment.

2.2 Sensitive personal data

PTT has no intention to collect and use religious and blood type data specified in your identification card for any specific purpose. In the event that you provided PTT the copy of your identification card, it is requested that you conceal such data. If you did not conceal such data, it shall be deemed that you authorized PTT to conceal those data and such document with concealed data shall be deemed valid and legally enforceable in all respects. In case that PTT is unable to conceal those data due to some technical limitation, PTT shall collect and use such data as a part of your identification documents only.

Furthermore, if it is necessary for PTT to collect other sensitive personal data for any specific purpose, PTT shall request for your prior express consent. In this regard, PTT may conduct the processing of the following sensitive personal data:

Health data;
Data regarding disability.

3. Period for retention of personal data

PTT shall retain your personal data for the period necessary for the purposes of the collection, use or disclosure of personal data set out in this Privacy Notice. The criteria used for determination of the retention period is the period that PTT still has relation with you and may further retain the data for the period necessary for the compliance with laws or the statutory prescription period, or for the establishment, compliance, exercise or defense of legal claim, or for other reasons pursuant to the internal policies and rules in the organization of PTT.

4. Disclosure of personal data

In order to carry out the proceedings for the purposes set out in this Privacy Notice, PTT may disclose your personal data to the third party as follows:

Companies in PTT Group for carrying out proceedings in order to fulfill the aforementioned purposes;
Government authorities, state authorities. independent organizations, regulatory authorities or other authorities as prescribed by laws including the officers which exercise powers according to the laws such as court, public prosecutor, and police;
Hospitals which are the contractual parties pursuant to the agreement for the provision of medical services.

5. Your rights as the owner of personal data

As the owner of personal data, you have the rights as prescribed in the Personal Data Protection Act B.E 2562 (2019). In this respect, you can exercise your relevant rights through the channels specified by PTT in Clause 7 or through PTT website, whereby you will be entitled to exercise the rights when the laws concerning personal data protection are applied to PTT. The relevant rights having details as follows:

5.1 Right to withdraw consent

In case that PTT requests for your consent, you shall have the right to withdraw the consent for the processing of your personal data that has already given to PTT unless such withdrawal of consent is restricted by laws or by the agreement that provides you the benefits.

Such withdrawal of consent shall not affect the processing of personal data legally conducted according to your prior consent.

5.2 Right to access to personal data

You have the right to request for an access to and the request for the copy of your personal data under control of PTT, including to request PTT to disclose the acquisition of such data that you have not given consent to PTT.

5.3 Right to request for the submission or the transfer of personal data

You have the right to request PTT to transfer your personal data that you have given to PTT as prescribed by laws.

5.4 Right to object the collection, use or disclosure of personal data

You have the right to object the processing of data relating to you in respect of the collection, use or disclosure of your personal data as prescribed by laws.

5.5 Right to request for the erasure of personal data

You have the right to request PTT to delete your personal data as prescribed by laws. Nevertheless, PTT may store your personal data using electronic system pursuant to which some systems may be unable to delete the data, and for such case, PTT shall destroy or cause such data to be unable to identify your identity.

5.6 Right to request the restriction of the use of personal data

You have the right to request PTT to restrict the use of your personal data as prescribed by laws.

5.7 Right to request for the rectification of personal data

If you found that the data controlled by PTT is incorrect or you have changed your personal data, you have the right to request PTT to correct your personal data so that such personal data be accurate, current, complete and not causing misunderstanding.

5.8 Right to lodge a complaint

You have the right to lodge a complaint with the competent officers under the Personal Data Protection Act B.E 2562 (2019) in case that PTT breaches or does not comply with such Act.

6. Amendment of this Privacy Notice

We may amend and update this Privacy Notice from time to time, and if there is such amendment, we will keep you posted through PTT website and/or inform you via email. If it is necessary to request for your consent, we will proceed to request additional consent from you.

7. Contact channels

If you have question or require further details concerning the protection of your personal data, the collection, use and disclose of your personal data, the exercising of your rights or if you have any complaint, you can contact PTT as per the following channels:

PTT (Public) Company Limited

Office Address : 555, Vibhavadi Rangsit Road, Chatuchak district,
Chatuchak subdistrict, Bangkok 10900
Telephone : 02-537 2300

Personal Data Protection Officer

Office Address : 555, Vibhavadi Rangsit Road, Chatuchak district,
Chatuchak subdistrict, Bangkok 10900
Telephone : 02-537 2300
Email : pttdpo@pttplc.com