Announcement of Privacy Policy Pongsak Medical Clinic Co., Ltd.

Pongsak Medical Clinic Co., Ltd. Hereinafter referred to as PSC, PSC is aware of the privacy rights of service users, so PSC and its affiliates and partners It operates responsibly for the collection of personal information of users. and will protect the privacy rights of the service users in every possible way. Although this Privacy Policy is not a contract and does not create any legal rights, it represents PSC's commitment to protecting ordinary personal data (“you”) in accordance with the Personal Data Protection Act P. 2019

This Privacy Notice applies to the following persons:

(1) Customers of “PSC

Individual customers, existing customers and current customers of "PSC” which is a natural person

(2) A person who is not a customer of “PSC

Such parties include individuals who do not use products or services with PSC but PSC It is necessary to collect, use or disclose your personal information. such as a person who has made a payment to or received money from a customer of PSC A person who has visited the website or application of PSC or use the service at any branch of PSC and legal representatives of such persons and any persons related to PSC or customers of PSC

Please note that the links appearing on the platform of PSC can lead you to third-party platforms which if you have accessed a third party platform The processing of your personal data will be in accordance with the privacy policies of that third party. PSC You are encouraged to read and understand the privacy policies of such third parties when you access such platforms.

1. How does PSC collect, use or disclose your personal information?

PSC will collect, use or disclose your personal information only if necessary or has a legal base

To collect and use personal information only This includes the collection, use or disclosure of personal data in order to comply with legal obligations.

according to the contract you have made with PSC  for the legitimate interests of PSC Processing based on your consent and/or under other legal bases by

Purpose of collecting, using or disclosing information of PSC  the following

1.1. Legal Obligations

due to PSC It is regulated and must operate in accordance with applicable laws and regulations. PSC  Therefore, it is necessary to collect, use or disclose personal information.

your person for various purposes In order to comply with the laws and regulations of the Bureau of Nursing and Art of Healing Department of Health Service Support

Ministry of Public Health and the Personal Data Protection Act Obtaining personal information that is clearly defined and within the scope of a legitimate business purpose

the law, to the extent necessary and subject to your consent and get in a fair way and by law including but not limited to the following purposes

a) to comply Personal Data Protection Act B.E. 2562 and its amendments

b) to comply with laws such as the Sanatorium Act and other laws that the PSC must comply with. This includes conducting identity verification. getting to know

Customers Customer due diligence and other investigations to comply with any law and/or

c) to comply with regulations and/or orders of authorized persons such as a court order government order The regulatory body of the PSC or the competent official who has

power

1.2. The contract you have entered into with “PSC”

PSC will collect, use or disclose your personal data to be used according to requests and/or agreements that you have entered into with PSC but not limited to the following purposes

go here

a) Verify your identity in any transaction.

b) carry out your instructions; For example, to use the service according to the program that has been purchased from PSC or responding to your inquiries

c) track or record your service visits

d) Prepare reports such as recording treatment on OPD cards or internal reports of PSC

e) Service notification

f) collect payment for the program fees that you owe to PSC  For example, in the event that you have not yet paid for goods and services.

1.3. PSC's legitimate interests

PSC Will refer to the information legally. taking into account the benefits of PSC Or of other people with basic rights in your personal data that PSC will collect, use

or disclosure, including but not limited to the following purposes

a) manage the relationship between PSC  and you, such as taking care of customers, evaluating the satisfaction of receiving the service handling complaints

b) Maintain security such as recording CCTV footage for registration, card exchange and/or recording of contacts before entering the hospital of PSC 

c) develop and improve products, services and systems of PSC  to elevate the service standards of PSC  and/or for the best interest of responding

your needs Including research and analysis of information as well as offering products, services and benefits that are suitable for you. However, if you do not wish to receive

Presentation of products, services and benefits from PSC  You can contact PSC  Call Center Tel. 081-7202900

d) record images and/or sounds relating to marketing promotion activities; and/or

1.4. Your consent

in some cases PSC Your consent may be obtained for the collection, use or disclosure of your personal data. for you to get the most benefit and/or to

PSC can provide services that respond to your needs This includes but is not limited to the following purposes.

a) It is necessary to collect and use sensitive personal data, for example using face recognition data or a photograph of a card.

your identity (In which such card will contain your sensitive personal information) to prove and verify your identity before receiving the service.

b) collect and use any personal data and information to research and analyze for the greatest benefit in developing products, treatment programs and services that respond

truly respond to your needs and/or contact you to offer products Specific services and benefits

c) Disclosure of your personal data to partners or affiliates. which may have insufficient standards of personal data protection unless it is the case that the Act

The protection of personal data requires that the processing can be performed without consent. This is for the greatest benefit in product development, treatment programs and

Services that truly respond to your needs and/or contact you to offer products services and benefits specifically tailored to and/or

d) If you are a minor incompetent person incompetent quasi Which requires consent from parents, guardians, guardians or guardians. (as the case may be), except

It is the case that the Personal Data Protection Act requires that it can be operated without consent.

1.5. Other legal bases

In addition to the above legal bases PSC May collect, use, disclose your personal information under other legal bases as follows

a) Documentation of treatment history information for the public benefit. or relating to research studies or statistics

b) prevent or suppress a danger to a person's life, body or health;

c) it is necessary for the performance of duties in the performance of missions in the public interest or for the exercise of powers by competent officials;

If the personal information PSC collected from you is necessary for compliance with the laws of PSC PSC May not be able to provide services or operate to provide services.

Further, some or all of the products or services of PSC to you if you do not provide those personal data to PSC when PSC request

2. Personal data that “PSC” collects, uses or discloses

PSC will collect information and maintain the information that the person receiving the service or giving to PSC collectively referred to as "Personal Information" Service Users can choose to provide only some information, but Customers may not be able to use all the benefits on the website. PSC and services performed by PSC Yes, personal information PSC received from service users will help PSC Fix and improve the online usage of the service users continuously. personal information PSC Collected are as follows:

2.1. Personal information such as name, photograph, facial features, gender, date of birth, nationality, passport/ID card number. passport expiration date Passport issuing country and country of residence

2.2. Contact information such as address, email address and telephone number.

2.3. Payment information, such as credit or debit card information, which includes: cardholder name, card number, issuing bank Card issuing country and expiration date including bank account details

2.4. Health information such as health problems related to the use of the advice service or medical record (OPD GARD) and medical petition form

2.5. Technical information such as IP Address numbers

When the service user uses the application produced by PSC or partner of PSC  “PSC” may collect information about addresses. And mobile device of the service recipient. The information may be used to provide appropriate services based on the location of the service recipient, such as searching for information and marketing information. The service recipient can refuse to provide personal information to PSC or turn off location services on mobile devices at any time.

3. The source of your personal data

in general PSC will collect personal information directly from you, but in some cases PSC  may obtain your personal data from other sources PSC will proceed in accordance with Personal Data Protection Act

personal information PSC  collected from other sources may include but is not limited to the following information

a) information that PSC received from companies in the hospital business group of PSC business partners and/or any other persons PSC There is also a legal relationship

b) information that PSC from people who are related to you, such as your family for recommenders

c) Information PSC Received from corporate clients as a director Authorized person to act on behalf of the authorized person or contact

d) information that PSC received from government agencies Regulatory body PSC and/or external service providers such as publicly available information

4. Your legal rights

Personal Data Protection Act Its purpose is to keep your personal information more in your control. You can start exercising your rights according to Personal Data Protection Act In relation to the subject's personal data, this applies. which has the following details

4.1. Right to access and obtain a copy of your personal data

You have the right to access and receive a copy of your personal data held by the Bank. Unless the bank has the right to deny your request by law or court order. or where your request will have an effect that may damage the rights and freedoms of others.

4.2. Right to request correction of your personal data

      You have the right to request PSC Correct or update your personal information that is inaccurate or incomplete.

4.3. Right to request deletion of your personal data

You have the right to request PSC delete or destroy your data or make your information non-personally identifiable. unless  PSC There will be legitimate grounds to refuse your request.

4.4. Right to request suspension of use of your personal data

You have the right to request PSC Suspend the use of your personal information in certain circumstances, such as PSC It is in the process of reviewing your request for the right to correct personal data or objecting to the collection, use or disclosure of your personal data, or you request. PSC Suspend the use of personal information instead of deleting or destroying personal information that is no longer needed. because you need to request PSC Retain your personal information for the establishment of legal claims, compliance or exercise of legal claims. or raising up against legal claims

4.5. Right to object to the collection, use or disclosure of your personal data

You have the right to object to the collection, use or disclosure of your personal data in the event that PSC operate under legitimate interests or for direct marketing or scientific research purposes. historical or statistical, except where PSC There are grounds for a legitimate refusal of your request, for example: PSC It can show that the collection, use or disclosure of your personal data is more legitimate or for the establishment of legal claims, compliance or exercise of legal claims. or for the public interest of PSC

4.6. Right to obtain or request to send or transfer your personal data

You have the right to obtain your personal data in the event that PSC That information can be made in a form that can be read or generally used by approved functional tools or devices, and that personal information can be used or disclosed by automated means. including the right to request PSC send or transfer your personal data to third parties unless PSC cannot be done by technical conditions or PSC There are grounds for refusing your request that are lawful.

4.7. Right to withdraw consent

You have the right to withdraw the consent you have given to PSC at any time according to the procedures and methods PSC Prescribed, except on the condition that consent cannot be withdrawn However, the withdrawal of your consent will not affect the collection, use or disclosure of your personal data for which you have given consent. before withdrawing such consent

4.8. Right to complain

You have the right to complain to the Personal Data Protection Committee or the Office of the Personal Data Protection Committee if PSC acts that are inconsistent with Personal Data Protection Act

5. Disclosure of your personal information

PSC May disclose your personal information under the rules of the Personal Data Protection Act to individuals or the following organizations

a) business partners and/or any other persons PSC There is also a legal relationship Including directors, executives, employees, employees, contractors, agents, consultants of PSC and/or of such person

b) Government and/or regulatory bodies PSC such as the Bureau of Nursing and Art of Healing Department of Health Service Support Ministry of Public Health

c) Partners, agents or other organizations such as an auditor The disclosure of your personal information will be for specific purposes. under the legal basis and appropriate safety measures

d) anti-corruption agencies, courts, agencies or any person PSC are required or authorized to disclose personal information by law regulations or orders

e) Social media service providers (in a secure format) or third-party advertising companies to show you a message and any other person about the products and services of PSC Third-party advertising companies may use information about your online activity history to tailor advertisements that may be of interest to you.

f) Any other person who provides benefits or services in connection with your products or services, such as insurance companies and/or

g) Proxy Your sub-attorney, agent or legal representative with legal authority

6. Forwarding or transfer of your personal data to other countries

sometimes PSC It is necessary to send or transfer your personal data abroad. In this case PSC will use its best efforts to transfer or transfer your personal information to business partners. service providers or data recipients of PSC That is reliable with the most secure way to keep your personal information safe. This includes the following cases:

a) Compliance with the law

b) have informed you of the inadequate personal data protection standards of the destination country and obtained your consent;

c) perform the contract you have made with PSC or at your request before entering into the contract

d) perform the contract between PSC with other persons or juristic persons for your benefit

e) prevent or suppress a danger to your life, body or health or that of another person; when you are unable to give consent at that time; or

f) carry out important public interest missions

7. Period of Retention of Personal Data

PSC will retain your personal information while you are a customer of PSC and when you end your relationship with PSC For example, you request to cancel the service ofPSC PSCwill collect your personal data for a reasonable period of time and is necessary for each type of personal data and purposes as specified by the Personal Data Protection Act

PSC will keep your personal data according to the statute of limitations or the period of time specified by the relevant laws, the Hospital Act and other laws PSC must follow both domestically and internationally. PSC It may be necessary to keep a record of the voice recording of the service provided through the Call Center for fraud prevention and security purposes, or the person involved may notify PSC

8. Use of Cookies

Cookies are small files containing information that are downloaded to the user's device. When the customer visits the website of PSC  PSCUse cookies to remember the user's preferences. Follow up on service usage of service users and increase the convenience of managing the website If the service recipient browses the website of PSC continuously without changing the settings of the web browser. or devices that control cookies The service user agrees to receive cookies when the service user uses the service on the website of PSC

Most web browsers automatically accept cookies. But if the service recipient wants The client may set their browser to not accept cookies. Most browser toolbar help sections tell you how to disable cookies. It is necessary for the client to prevent unauthorized access to the client's password and computer. Users should always log out of their accounts after using them on a public computer.

PSC uses four types of cookies on its website.

8.1. Function: These cookies allow users to use the services of PSC These cookies are necessary in order for the visitor to be able to browse our services. PSC and use some features Disabling these cookies may prevent the user from using certain parts of the Service. Without these cookies will not be able to provide services such as login, booking and payment. PSC It is stable and safe as well.

8.2. Preferences: These cookies store information such as your country, selected language and website preferences. Without such cookies, our services PSC may not be able to remember some of the things you have previously selected or customize the visitor's browsing experience by providing them with relevant information.

8.3. Analysis: These cookies collect information about how the user uses the service. PSC For example, which pages do you visit regularly? These cookies are used to provide a high-quality user experience by doing things like tracking page loads. Site response time and error message

8.4. Content/Advertising: These cookies collect information about your use of our services. PSC so that PSC can improve the experience of service users and provide relevant content and advertisements to users of the service. Such cookies remember that the visitor has visited the service. PSC and lets PSC understand the use of the service Some cookies are from third parties that collect information about users of the Services. to provide advertisements on the Services of PSC and elsewhere, based on the user's online activity. (which is called “interest-based advertising”) on its services. PSC and anywhere else online Third parties involved in interest-based advertising collect Internet browsing data (such as the websites visited, time of visit) on different websites and over time and may use the information collected on the services of PSC from PSC and other companies on the Internet

9. Use of personal data for the original purpose

PSC have the right to collect and use your personal information at PSC have collected before the date of the Personal Data Protection Act in connection with the collection Continued use and disclosure of personal data applicable for the original purpose. If you do not wish to give PSC Continue to collect and use such personal information. You can inform PSC to withdraw your consent at any time

10. Use of Collected Information

in general PSC The Client's personal information will be used for administrative purposes such as processing, confirming, responding to, and transactions and requests for services of the Client. PSC to complete If such changes PSC will notify the service recipient via e-mail, mobile chat, telephone call or SMS based on the personal information provided by the service recipient to PSC via live chat with customer relations or through the website mobile applications or counter. PSC PSC Use the personal information of the service recipient to send the service notification message to the service recipient via the service via mobile phone of the service. PSC and facilitating access to the service. PSC will use your personal information for accounting purposes (billing and auditing), provision of services and merchandising; Marketing or related marketing of goods and services Investigating Complaints and Inquiries Refunds Safety Security Crime Prevention law enforcement Statistical Analysis and Marketing information system management, system testing, maintenance and development, operation, support, customer surveys customer relations and to improve and help PSC Communicate with prospective clients, for example by identifying their needs and preferences.

11. Sharing of Collected Information

PSC may process and disclose personal information of service users to affiliates and partners and/or third parties such as credit card verification service providers data analysis marketing agency travel service provider Business related to the use of the service safety and security personnel An entity that conducts business or has a contractual arrangement with PSC and subsidiaries or affiliates and third parties who can show that the service recipient agrees to disclose the personal information that the service recipient has to PSC to such third parties

The personal information of the service recipient may be disclosed or passed on to the assignee or licensee in the future. (including its partners and affiliates) or their business, assets, or group companies. PSC or involved in a change in the structure or management of the company including structural changes to transfer business, assets and/or liabilities

if requested by the Legal Department PSC Will disclose personal information of service users to government agencies or government officials or a third party under the summons or pursuant to other legal processes.

With an effort to develop a better service PSC therefore upgrading and expanding its services PSC Continuing to fill the needs of more customers in order to realize such business goals PSC Assignment, authorization, or contact with business partners. Client personal information may be disclosed to business partners. Authorized or contractually employed third parties, service providers or advertising agencies to carry out promotions, offers, goods or services which may or may not belong to PSC but about the products or services that the service users have chosen to receive from PSC

However, to ensure that users do not receive unwanted communications. Information Disclosed to Business Partners The service provider or third party will be information related to promotions, offers, products or services related to transactions between the customer and PSC or that the service recipient has chosen Or mark it as the benefit of the service recipient in the profile file for reasons other than the privacy policy in the event that PSC Forward personal information of service users to third parties. PSC I certify that the security measures of such persons in the processing of the information of the service users are more stringent than or equal to the safety measures of PSC  This does not include cases where the law requires PSC Send your information to third parties.

in case PSC Proceed with the steps of a business transaction, such as the disposition of some or all of your assets. PSC merger or acquisition The client's information will be deemed to be part of the transaction and will be delivered.

12. LINKS TO OTHER WEBSITES

website ofPSC Contains links to other websites. (“Third Party Sites”). Please note that PSCis not responsible for the protection of personal information or the content of third-party websites. PSCWe recommend that you read the privacy statements of each website that collects information from you. before submitting personal information to that website Privacy Policy ofPSC will be used for collecting data byPSC only and will not apply to third party websites.

13. Newsletter

Subscribing to the email news service of PSC  It is considered that you are willing and agree to allow PSC Contact customers via email to keep them updated on the latest news, products and services. If the service recipient does not want to subscribe to receive news anymore Users can cancel the service in the news list in the member history list. Or you may click unsubscribe from the newsletter you receive.

14. Data storage

office of PSC located in Thailand, however PSC may forward and store personal information of service users on servers of “PSC” located in the country or abroad. The transmission of such information is in accordance with the regulations in the contract that "PSC" has made with the service user. and/or the contract of PSC made with relevant third parties

“PSC” will take care of storage security in accordance with the security standards specified in the requirements and legal standards according to the Personal Data Protection Act B.E. 2562 as follows:

a. Register who has access to the storage.

b. Control and limit access to information as appropriate.

c. Maintain access records and transfers of personal data.

d. Must ensure that all employees of “PSC” Will keep these information confidential.

e. Organize an education program on the duty of protecting personal information to employees.

f. Establish physical security procedures.

g. Third parties are responsible for the processing of personal data.

Mobile devices and cloud computing services may not be used to transfer or store personal data without executive consent. PSC

15. Security

PSC Internal security measures are in place. PSC and implementing a strict policy to keep your personal information safe. This includes data encryption and measures to prevent unauthorized access to data. PSC assign personnel of PSC and external contractors are required to adhere to appropriate privacy standards and policies. Including having to provide data protection and having appropriate measures in the use or transmission or transfer of your personal data.

16. How to contact “PSC”

If in doubt Or would like to inquire more details about the privacy policy notice of PSC or wish to exercise your rights Please contact the Corporate Governance Office of PSC  at PSC Call Center call 0817202900

In addition, you can contact the Personal Data Protection Officer. by email contact or contact the office of PSC No. 99 Esplanade Shopping Center, Floor M, Room No. ESP01LS1 M 28, ESP01LS1 M29, Ratchadapisek Road, Din Daeng Subdistrict, Din Daeng District, Bangkok 10400

17. Changes to the Privacy Notice

PSC may change or amend this Privacy Notice from time to time by PSC The current Privacy Policy will be posted on the website of PSC is  www.pongsak-clinic.com

PSC” reserves the right to change, update and/or revise this privacy policy at any time and will notify users by updating the content on the website “PSC" at www.pongsak-clinic.com (“Website”), including the display of messages. “Updated” on the “Privacy Policy” link on websites operating under such Policy for 30 days.