Terms and Conditions
Articles, text, content, images, elements, and anything appearing on the website and other communication channels of www.khonkaenram.com, including services and all parts of website usage, are intended for educational purposes for users only. Users may not use them as a substitute for medical advice, self-diagnosis, diagnosis of others, or as evidence in any legal proceedings.
Users can access medical services with specialist doctors or medical personnel at Khon Kaen Ram Hospital for disease diagnosis, treatment, or medical consultation.
The hospital reserves the right to change service rates without prior notice.
If you have personal concerns regarding your health or medical conditions, or if you have any questions about www.khonkaenram.com, you can contact us at kkram@khonkaenram.com or call 043-002-002, 24 hours a day.
Data Protection Policy
Khon Kaen Ram Hospital Co., Ltd.
1. Objectives
1.1 To collect, use, or disclose personal data on legal bases and process data solely for the specified objectives. The collected personal data will not be disclosed to third parties except in the following cases:
- For the benefit of life, health, or safety.
- For the performance of a contract binding between parties.
- For compliance with legal duties, court orders, orders of legally authorized persons, or other similar circumstances.
- For legitimate interests.
- For the performance of duties under the law.
- For the benefit of study, research, or statistical preparation.
- In cases where consent has been obtained from the data subject.
1.2 To inform all sectors about the details regarding the collection, use, or disclosure of personal data, including the transfer of personal data to affiliated hospitals both domestically and internationally, as well as measures for managing and securing personal data. This is to comply with the Personal Data Protection Act B.E. 2562 (2019), related laws, and international personal data protection standards. The hospital makes every effort to collect personal data in a limited and necessary manner, in accordance with the purposes of its use, for the benefit of providing services to the data subject, and to ensure that data is processed solely according to the specified objectives.
2. Policy
The hospital recognizes the importance of personal data protection and maintains standards for the security of personal data in accordance with appropriate and international standards. Therefore, this Privacy Policy has been created and published for the general public associated with the hospital to be informed. It applies to executives, employees, and third parties. All individuals working for the hospital must comply, and the executives of all departments are responsible for supporting, driving, and auditing operations to strictly conform with this policy and laws related to personal data protection as follows:
2.1 The collection of personal data must be limited, only as necessary, and strictly for the purposes of use. It must comply with the policies, manuals, and/or guidelines established by the hospital.
2.2 The quality of the collected personal data shall be accurate and appropriate. There must be appropriate security measures for personal data, risk management, and the creation of awareness regarding personal data security.
2.3 Promote and disseminate the policy, including practices related to personal data protection, via the hospital's website, and carry out other matters as required by law. For example, establishing measures to support the exercise of rights by data subjects, defining the responsibilities of the Data Controller and Data Processor, and appointing a Data Protection Officer (DPO), etc.
2.4 All hospital personnel must be aware and responsible, ready to protect the personal data of involved parties as if it were their own personal data.
3. Scope
The scope of enforcement of this Privacy Policy applies to personal data that the hospital may collect, use, disclose, or transfer to affiliated hospitals, both domestically and internationally, of the following groups of individuals:
- Customer group: Covering current and past hospital customers, as well as potential future customers of the hospital.
- Partner and contractor group: Covering (A) natural persons who are current or past contractors of the hospital, and potential future partners or contractors of the hospital. (B) Employees, personnel, officers, representatives, agents, authorized persons acting on behalf of juristic persons, directors, contacts, and other natural persons acting on behalf of juristic persons who are business partners or contractors of the hospital.
- Shareholders and investors group: Including any individuals interested in investing.
- Visitors and third parties group: Individuals entering the hospital's responsible premises whose personal data must be collected for security purposes within the area.
- Stakeholders in CSR activities group: Individuals whose personal data the hospital may collect in relation to social activities or other purposes.
- Personnel, employees, and job applicants group: Including family members or reference persons cited by employees or applicants.
This Privacy Policy also covers various channels between the data subject and the hospital through which the hospital receives or collects personal data. These include hospital contact channels, electronic systems, websites, call centers, customer service centers, complaint or feedback channels, online communication channels, mobile applications, various activities, public places, or communities under the hospital's responsibility for social and/or other related purposes. This Privacy Policy explains the types of personal data the hospital collects, methods, sources, and purposes for which we collect, use, disclose, and transfer personal data abroad. It also details the individuals to whom personal data may be disclosed or transferred by the hospital, the retention period for personal data, and the rights of the data subject in accordance with the Personal Data Protection Act B.E. 2562 (2019), as well as personal data security through appropriate measures.
4. Definitions
4.1 "Hospital" means Khon Kaen Ram Hospital.
4.2 "Personal Data" means any information relating to a person that enables the identification of that person, whether directly or indirectly, but not including the data of the deceased. Examples include name-surname, ID card number, passport number, social security number, taxpayer identification number, bank account number, address, email, telephone number, IP address, Cookie ID, date of birth, nationality, weight, height, educational information, financial information, employment information, etc.
4.3 "Sensitive Personal Data" means strictly personal information that is sensitive and may risk unfair discrimination, such as race, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, labor union information, genetic data, biometric data, or any other data that similarly affects the data subject.
4.4 "Processing of Personal Data" means the collection, use, or disclosure of personal data.
4.5 "Data Subject" means the natural person who is the owner of the personal data. It does not refer to the ownership of data in the sense of creating or collecting it. The data subject refers only to natural persons and excludes legally established juristic persons such as companies, associations, foundations, or any other organizations.
4.6 Cookies and Use of Cookies: Upon visiting the hospital's website, cookies may be placed on the visitor's device, automatically collecting data. Some cookies are strictly necessary for the website to function properly, while others are designed to facilitate website visitors. Further information can be found in the hospital's Cookie Policy.
5. Responsibilities
The Executive Committee is responsible for supporting, driving, and auditing operations to strictly comply with the policy and laws related to personal data protection.
5.1 All employees are obliged to comply with the rules, orders, work regulations, and/or any operational guidelines enforced by the hospital.
6. Procedures
6.1 Privacy Policy Updates
The hospital may review, update, or amend this Privacy Policy from time to time to align with relevant practices, laws, rules, and regulations. Should there be any updates or changes to this Privacy Policy, the hospital will publish the revised policy on the hospital's website and other channels accordingly.
6.2 Retention, Duration, and Security Measures
The hospital will retain personal data for as long as necessary and reasonable to achieve the objectives stated in this policy. The appropriate retention period will be considered based on contract duration, legal prescription periods, and the necessity to continue retaining personal data for required periods to comply with laws, internal and external audits, or for the establishment/exercise of legal claims. The hospital will appropriately maintain and secure personal data, whether in document form, computer systems, or various electronic systems, including tools used by the hospital to secure personal data. Please be assured of the hospital's personal data security measures, which are appropriate and meet international standards to prevent the loss, unauthorized or unlawful access, use, alteration, modification, or disclosure of personal data. The hospital limits access and uses technology to secure personal data to prevent unauthorized access to computer or electronic systems. When personal data is disclosed to external parties acting as data processors, the hospital will supervise them to ensure they act appropriately in accordance with instructions.
6.3 Rights of the Data Subject
The consent given by the data subject to the hospital for collecting, using, and disclosing personal data remains valid until the data subject withdraws consent in writing. The data subject can withdraw consent or suspend the use or disclosure of personal data for the purpose of conducting any activity by submitting a written request to the hospital or via email to kkram@khonkaenram.com. Furthermore, under the Personal Data Protection Act B.E. 2562 (2019), the data subject has the right to legally request the following:
- Right to be informed.
- Right to request the hospital to correct inaccurate data or add to incomplete data.
- Right to withdraw consent for processing personal data given to the hospital at any time the personal data remains with the hospital.
- Right to restrict the use of personal data for certain reasons.
- Right to access personal data and request a copy of it, as well as request the disclosure of the acquisition of personal data obtained without the data subject's consent.
- Right to data portability, moving personal data provided to the hospital to another Data Controller or to the data subject themselves for certain reasons.
- Right to object to the processing of personal data for certain reasons.
- Right to erasure (right to be forgotten), requesting the hospital to delete data for certain reasons under legal provisions.
- Right to lodge a complaint in the event of an infringement or non-compliance with the Personal Data Protection laws or notifications issued thereunder.
Requests per the above items must be made in writing, and the hospital will notify the result of the request consideration within 30 days, unless there are legal restrictions on the rights. However, withdrawing consent may result in insufficient data to process and achieve the stated objectives, and may cause inconvenience in receiving services, but it will not affect any rights already executed according to the objectives.
6.4 Contacting the Hospital
If you have any questions regarding this Privacy Policy or wish to exercise your rights regarding the processing of your personal data, you can contact us at:
- Address: Khon Kaen Ram Hospital, 193 Srichan Road, Nai Mueang Sub-district, Mueang District, Khon Kaen 40000
- Telephone: 043-002-002
- Email: kkram@khonkaenram.com
- Website: www.khonkaenram.com
6.5 Additional Guidelines
Executives and hospital employees should constantly question and check themselves to ensure their work is correct and compliant with policies, guidelines, manuals, and laws, verifying whether and how their operations involve personal data, and must proceed in accordance with the policy, including:
- Consistently understanding the substance of the rules, regulations, policies, and supplementary guidelines, which are considered part of the policy, including various manuals.
- Consistently understanding laws, rules, and regulations, both internal and external to the organization, related to operations and personal data protection.
- If non-compliant practices are found, report clues to the email kkram@khonkaenram.com or through the channels specified by the hospital.
6.6 Privacy Policy Review
The hospital may consider reviewing and updating the Privacy Policy or guidelines from time to time to be consistent and compliant with the law. In the event of updates, changes, or amendments, the hospital will announce and notify through the hospital's website www.khonkaenram.com.
7. Monitoring and Process Measurement
There is an audit process encompassing both internal hospital audits and process audits by external auditors, such as AACI accreditation surveys.
8. References
8.1 Personal Data Protection Act B.E. 2562 (2019)
