Privacy Policy
Nawabutr Medical Center, Specialist Medical Clinic
—————————————————————————————————————
1. Introduction
Nawabutr Medical Center, Specialist Medical Clinic (Hereinafter referred to in this Policy as “Nawabutr Clinic” or “Company”) realizes the importance of personal data and other information about you (collectively referred to as “Data”). In order for you to be confident that Nawabutr Clinic is transparent and responsible in collecting, using or disclosing your data in accordance with the Personal Data Protection Act B.E. 2562 (Personal Data Protection Act) and other relevant laws, this Privacy Policy (Policy) has been prepared to provide you with details on the collection, use or disclosure (collectively referred to as “Processing”) of personal data that is operated by Nawabutr Clinic, including officers and related persons acting on behalf of or on behalf of Nawabutr Clinic, with the following contents:
2. Scope of Policy Application
This Policy applies to personal data of individuals who are currently and in the future related to Nawabutr Clinic, whose personal data is processed by Nawabutr Clinic, officers and contract employees. Business units or other entities operated by Nawabutr Clinic, including contractors or third parties that process personal data on behalf of or on behalf of Nawabutr Clinic (“Personal Data Processors“) under various products and services, such as websites, systems, applications, documents or other services controlled by Nawabutr Clinic (Hereinafter referred to as “Services“).
A person who has a relationship with Nawabutr Clinic under the first paragraph includes:
1) Individual customers
2) Officers or workers, employees
3) Business partners and service providers who are individuals
4) Directors, attorneys, representatives, agents, shareholders, employees or other persons who have a similar relationship of a legal entity that has a relationship with Nawabutr Clinic
5) Users of Nawabutr Clinic’s products or services
6) Visitors or users of the website www.nawabutrivf.com including systems, applications, devices or other communication channels controlled by Nawabutr Clinic
7) Other persons whose personal data is collected by Nawabutr Clinic, such as job applicants, staff families, guarantors, etc.
Sections 1) to 6) are collectively referred to as “you”.
In addition to this Policy, Nawabutr Clinic may provide a privacy notice (“Notice”) for Nawabutr Clinic’s products or services to inform data owners who are service users about the personal data being processed, the purposes and lawful grounds for processing, the retention period of personal data, and the rights that data owners have over their personal data in specific products or services.
In the event of any material conflict between the content of the privacy statement and this Policy, the privacy statement of that service shall apply.
3. Definitions
– Nawabutr Clinic means Nawabutr Medical Center, specialist medical clinic.
– Personal data means information about a natural person, which enables the identification of that individual directly or indirectly, but does not specifically include information about a deceased person.
– Sensitive personal data means personal data as provided in Section 26 of the Personal Data Protection Act B.E. 2562, which includes information about race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior. Criminal records, health information, disability, trade union information, genetic information, biometric information, or any other information that affects the owner of personal data in a similar manner as announced by the Personal Data Protection Committee.
– Personal data processing means any action taken with personal data, such as collecting, recording, copying, organizing, storing, updating, changing, using, retrieving, disclosing, forwarding, publishing, transferring, merging, deleting, destroying, etc.
– Personal data owner means a natural person who is the owner of personal data that Nawabutr Clinic collects, uses, or discloses.
– Personal data controller means a person or juristic person who has the authority to make decisions regarding the collection, use, or disclosure of personal data.
– Personal data processor means a person or juristic person who performs actions related to the collection, use, or disclosure of personal data in accordance with the instructions or on behalf of the personal data controller. However, the person or juristic person who performs such actions is not a personal data controller.
4. Sources of personal data collected by Nawabutr Clinic
Nawabutr Clinic collects or obtains various types of personal data from the following sources:
4.1) Personal data that Nawabutr Clinic collects directly from the owner of the personal data through various service channels, such as the application process, registration, job application, signing contracts, documents, completing surveys or using products, services or other service channels controlled by Nawabutr Clinic, or when the owner of the personal data contacts Nawabutr Clinic at the office or through other contact channels controlled by Nawabutr Clinic, etc.
4.2) Data that Nawabutr Clinic collects from the owner of the personal data accessing the website, products or other services under the contract or mission, such as tracking the behavior of the user of the website, products or services of Nawabutr Clinic by using cookies or from software on the owner of the personal data’s device, etc.
4.3) Personal data that Nawabutr Clinic collects from sources other than the owner of the personal data, where such sources have the authority, have legal reasons or have received consent from the owner of the personal data to disclose the data to Nawabutr Clinic, such as linking services to the owner of the personal data themselves. Notification of personal data to government agencies as Nawabutr Clinic has a duty under the mission to provide information, including from the necessity to provide services under the contract that may exchange personal data with the contracting agency.
This also means the case where you provide personal data of an external person to Nawabutr Clinic as follows: You are responsible for informing such person of the details according to this policy or the announcement of the product or service, as the case may be, and requesting consent from such person if it is a case that consent is required to disclose information to Nawabutr Clinic.
In the case that the owner of personal data refuses to provide information necessary for the service of Nawabutr Clinic, it may result in Nawabutr Clinic being unable to provide such service to the owner of such personal data, in whole or in part.
5. Legal basis for collecting personal data
Nawabutr Clinic considers determining the legal basis for collecting your personal data as appropriate and in the context of the service. The legal basis for collecting personal data that Nawabutr Clinic uses includes:
Legal basis for data collection |
Details |
To carry out the missions according to the missions that Nawabutr Clinic has received. |
To enable Nawabutr Clinic to exercise state power and carry out its missions in accordance with the Nawabutr Clinic mission, which is stipulated by law, such as the Committee for the Protection of Children Born Using Assisted Reproductive Technology, including related rules, regulations, orders and resolutions, etc. |
To perform duties in accordance with the law. |
To enable Nawabutr Clinic to comply with the laws governing it, such as:Personal Data Protection Act B.E. 2562Protection of Children Born from Assisted Reproductive Technology Actincluding compliance with court orders, etc. |
It is necessary for legitimate interests. |
For the legitimate interests of Nawabutr Clinic and others, which are no less important than the fundamental rights of the data subject in personal data, such as maintaining the security of Nawabutr Clinic’s premises or processing personal data for the organization’s internal affairs, etc. |
It is necessary to prevent or suppress danger to life, body or health of a person. |
To prevent or suppress danger to life, body or health of a person. |
For the performance of the contract. |
To enable Nawabutr Clinic to perform its duties under the contract or to perform any necessary actions for entering into a contract to which you are a party, such as hiring, hiring for work, making a memorandum of understanding or other forms of contract, etc. |
For the preparation of important documents or statistics. |
To enable Nawabutr Clinic to prepare or support the preparation of documents or statistics as Nawabutr Clinic may be assigned, such as preparing pregnancy statistics to send information to the Health Promotion Foundation, etc. |
Your consent. |
Your consent for the collection, use or disclosure of personal data in cases where Nawabutr Clinic is required to obtain your consent by having been informed of the purpose of the collection, use or disclosure of personal data before requesting consent, such as collecting sensitive personal data for purposes that do not comply with the exceptions of Section 24 or 26 of the Personal Data Protection Act B.E. 2562 or presenting or publicizing products and services of a contractor or business partner to you, etc. |
In the event that Nawabutr Clinic needs to collect your personal data for the performance of a contract, the performance of legal duties or the necessity of entering into a contract, if you refuse to provide personal data or object to the processing according to the purpose of the activity, it may result in Nawabutr Clinic being unable to perform or provide the services you request, in whole or in part.
6. Types of personal data collected by Nawabutr Clinic
Nawabutr Clinic may collect or obtain the following information, which may include your personal data, depending on the services you use or the context of your relationship with Nawabutr Clinic, including other considerations affecting the collection of personal data. The types of data specified below are only a general framework for Nawabutr Clinic’s collection of personal data. However, only information related to the products or services you use or have a relationship with will be applicable.
Types of personal data |
Details and examples |
Personal Information. |
Information indicating your nickname or information from official documents that identify you personally, such as title, first name, last name, middle name, nickname, signature, ID card number, nationality, driver’s license number, passport number, house registration information, business license number, professional license number (for each occupation), insured person identification number, social security number, etc. |
Information about personal characteristics. |
Personal details such as date of birth, gender, height, weight, age, marital status, military service status, photograph, spoken language, behavioral information, preferences, information on bankruptcy, information on being disabled or quasi-disabled, etc. |
Contact information. |
Contact information for you, such as home telephone number, mobile telephone number, fax number, email, home mailing address, social media usernames (Line ID, MS Teams), accommodation location map, etc. |
Information about work and education. |
Employment details, including work history and education history, such as employment type, occupation, rank, position, duties, expertise, work permit status, reference information, taxpayer identification number, job position history, work history, salary information, start date, end date, evaluation results, welfare and benefits, materials in the worker’s possession, achievements, bank account numbers, educational institutions, educational qualifications, educational results, graduation date, etc. |
Insurance Policy Information. |
Details of workers’ compensation insurance policies, such as insurer, insured, beneficiary, policy number, policy type, coverage amount, claim information, etc. |
Information about social relationships. |
Your social relationship information, such as political status, political positions, directorships, relationships with Nawabutr Clinic staff, contractual information with the organization, stakeholder information in business dealings with the organization, etc. |
Information about using the services of Nawabutr Clinic. |
Details regarding products or services of Nawabutr Clinic, such as username, password, PIN number, Single Sign-on (SSO ID) information, OTP code, computer traffic information, location information, photographs, videos, audio recordings, usage behavior information (websites under the care of Nawabutr Clinic, such as www.nawabutrivf.com or various applications), browsing history, cookies or similar technologies, device number (Device ID), device type, connection details, browser information, language used, operating system used, etc. |
Sensitive personal data. |
Your sensitive personal data, such as race, religion, disability, political opinions, criminal history, biometric data (facial image data), health information, etc. |
7. Cookies
Nawabutr Clinic collects and uses cookies and other similar technologies on websites under the supervision of Nawabutr Clinic, such as www.nawabutrivf.com or on your device depending on the service you use. This is for the purpose of providing security services of Nawabutr Clinic and to provide you, the user, with a convenient and good experience in using Nawabutr Clinic’s services. This information will be used to improve Nawabutr Clinic’s website to better meet your needs. You can set or delete cookies yourself from your web browser settings.
8. Personal information of minors, incompetent persons and quasi-incompetent persons
In the event that Nawabutr Clinic learns that personal information that requires consent to be collected belongs to the owner of the personal information who is a minor, incompetent person or quasi-incompetent person, Nawabutr Clinic will not collect such personal information until it has received consent from the person exercising parental authority to act on behalf of the minor or the guardian or custodian, as the case may be, in accordance with the conditions stipulated by law.
In the event that Nawabutr Clinic does not know in advance that the owner of the personal information is a minor, incompetent person or quasi-incompetent person and later found that Nawabutr Clinic has collected the data of the owner of such personal data without receiving consent from the person exercising parental authority who has the power to act on behalf of the minor or the guardian or the custodian as the case may be. As such, Nawabutr Clinic will proceed to delete such personal data as soon as possible if Nawabutr Clinic has no other lawful reason other than consent to collect, use or disclose such data.
9. Purpose of collecting personal data
Nawabutr Clinic collects your personal data for various purposes, which depend on the type of products or services or activities you use, as well as the nature of your relationship with Nawabutr Clinic or considerations in each context. The purposes specified below are only a general framework for Nawabutr Clinic’s use of personal data. However, only the purposes related to the products or services you use or have a relationship with will be applicable to your data.
1) To provide and manage the services of Nawabutr Clinic, both services under the contract with you or according to the mission of Nawabutr Clinic.
2) For the transaction of Nawabutr Clinic.
3) Control, use, monitor, inspect and manage the services to facilitate and meet your needs.
4) To store and update information about you, including documents referring to you.
5) Create a record of personal data processing as required by law.
6) Analyze data, including solving problems related to Nawabutr Clinic’s services.
7) To perform actions necessary for internal management of the organization, including recruitment, selection of directors or people holding various positions, qualification assessment.
8) Prevent, detect, avoid and investigate fraud, security breaches or prohibited or illegal actions that may cause damage to both the organization and the owner of personal data.
9) Verify identity, verify identity and verify information when you apply for Nawabutr Clinic’s services or contact to use services or exercise rights under the law.
10) Improve and develop the quality of products and services to be up-to-date.
11) Evaluate and manage risks.
12) Send notifications, confirm orders Contact and inform you.
13) To prepare and deliver relevant and necessary documents or information.
14) Verify identity, prevent spam or unauthorized or illegal activities.
15) Check how the owner of personal data accesses and uses the services of Nawabutr Clinic, both in general and individually.
16) Take action as necessary to comply with the duties that Nawabutr Clinic has to the regulatory authorities, tax authorities, law enforcement or legal obligations.
17) Take action as necessary for the legitimate interests of Nawabutr Clinic or of other persons or other legal entities related to the operation of the organization.
18) Prevent or stop dangers to life, body or health of individuals, including epidemic surveillance.
19) Prepare documents for services using assisted reproductive technology or compile statistics that Nawabutr Clinic is assigned to operate.
20) To comply with laws, announcements, orders in effect or to proceed with litigation, to proceed with data in accordance with court orders, including exercising rights regarding your data.
10. Types of persons to whom Nawabutr Clinic discloses your personal data
Under the purposes specified in Section 9 above, Nawabutr Clinic may disclose your personal data to the following persons. The types of recipients of data specified below are only a general framework for Nawabutr Clinic’s disclosure of personal data. Only recipients of data related to the products or services you use or have a relationship with will be applicable.
Type of person receiving information |
Details |
Government agencies or authorities that Nawabutr Clinic must disclose information for the purpose of carrying out legal procedures or other important purposes. |
Law enforcement agencies or agencies with regulatory authority or other important objectives, such as the Committee for the Protection of Children Born from Assisted Reproductive Technology and the Department of Health Service Support, etc. |
Various committees involved in the legal operations of Nawabutr Clinic. |
Nawabutr Clinic may disclose your information to persons who hold positions on various committees, such as the Committee for the Protection of Children Born from Assisted Reproductive Technology and the Department of Health Service Support, etc. |
Contractual parties that operate on welfare of employees of Nawabutr Clinic. |
External parties that Nawabutr Clinic procures to carry out welfare activities include insurance companies, hospitals, payroll companies, banks, telephone service providers, etc. |
Business partners. |
Nawabutr Clinic may disclose your information to persons working with Nawabutr Clinic for the purpose of providing services to you, such as medical laboratories, etc. |
Service Provider. |
Nawabutr Clinic may assign other persons to provide services on behalf of or support the operations of the organization, such as data storage service providers (e.g. cloud), system developers, software, applications, websites, document delivery service providers, payment service providers, internet service providers, telephone service providers, digital ID service providers, social media service providers, risk management service providers, external consultants, transportation service providers, etc. |