1. About Us:

We, Bangkok Hospital Udon Company Limited is located at 111 Thong-yai Rd, Mak-Kheang, Amphur Muang, Udonthani, 41000. www.bududon.com. The company is a hospital providing examinations, treatment, and medical services, which is a personal data controller under the Personal Data Protection Act B.E. 2562. The company therefore informs you in this document about the reasons and methods by which the company collects, uses, or discloses your personal information. This includes informing you of your rights as the owner of your personal data.

2. Data processing purposes:

The hospital uses a CCTV camera system to store your motion picture for the following purposes:

• Prevent or alleviate a threat to a person's life, body, or health and well- being, such as criminal activity.

• For the legitimate interests of the company or a person or other juristic person, for example, to suppress dangerous, unusual events or emergencies.

3. Surveillance Cameras installed location:

• There are 284 CCTV cameras on our premises. (as of May 5, 2022; hospitals may increase or decrease the number as appropriate).

• The location of CCTV cameras is scattered and installed throughout the hospital where CCTV can be noticed and collected data at all service points and operational areas except the bathroom, medical examination room, inpatient rooms, and medical treatment rooms. However, the inpatient room may be equipped with CCTV cameras to monitor the patient's symptoms in special cases, which will be notified before entering the service. In addition, the CCTV camera in the finance department is a sound-recording CCTV camera.

4. Storage time for your personal information:

• A CCTV camera system will record a moving person who enters the camera's range area for 24 hours. Every 30 days, the data is automatically deleted.

• In the event of a danger, the information on the CCTV is used in the investigation process by government officials, and data from the surveillance camera will be used until the investigation process is completed.

• If the information contained in the CCTV cameras is required for use in court and trial proceedings, the information contained within the CCTV cameras will be used until the conclusion of the court.

5. Safety Measure:

The company will manage the retention of personal data with organizational and technical measures not less than the level required by applicable law and with an appropriate system to protect and secure personal information kept in a secured facility with authorized personal access only.

The following steps are required in case when authorized personal or other agencies’ personal request access to inspect or access to information from the CCTV footage.

• Fill out the form requesting data/information from the CCTV.

• In the case of requesting information from CCTV records, a copy of the daily police report must be presented to justify the need for the record.

• Submit the form to the supervisor to present it to the administrator for approval according to the hospital's policy.

• CCTV control room security guards receive the request from the supervisor to access or inspect information from the CCTV.

• In the case of permission being granted to view the information, the supervisor and security officers in the CCTV control room attended while the authorized personnel or other agencies viewed data/ information from the CCTV footage.

• A log of personnel who access and view CCTV footage must be kept along with conclusion/findings from viewing the CCTV. This log must be submitted to the manager in charge of security for acknowledgement and record keeping.

• In the event of a request for information from the police, an approval from Managing Director (or equivalent) is required.

6. Disclosure of your personal data third parties:

• We may share relevant information from CCTV footage with the government official, such as in the incident of a written request from government officials or such request is for the investigative process of government officials or litigation in court proceedings.

• The company may allow CCTV vendors access to the information for system maintenance purposes whereby explicit authorization from us is required. The vendor must access the system and CCTV with appropriate security measures and on confidential basis.

7. Your Rights:

As the owner of personal data, you have the following right pursuant to the law.

1. Right to withdraw consent: The Data Subject shall have the right to withdraw consent to the processing of his/her Personal Data given to the company at any time during the period his/her Personal Data is kept with the company.

2. Right to Access: The Data Subject shall have the right to access his/her Personal Data and request the company to make a copy of such Personal Data and provided the same to the Data Subject, as well as request the company to disclose how the Data Subject’s Personal Data was collected without his/her consent to the company.

3. Right to rectification: The Data Subject shall have the right to request the company to rectify any incorrect Personal Data or add any incomplete Personal Data.

4. Right to erasure: The Data Subject shall have the right to request the company to erase his/her Personal Data for certain reasons.

5. Right to restriction of processing: The Data Subject shall have the right to restrict the use of his/her Personal Data for certain reasons.

6. Right to data portability: The Data Subject shall have the right to require the company to transfer the Personal Data provided by the Data Subject with the company to another Data Controller or the Data Subject for certain reasons.

7. Right to object: The Data Subject shall have the right to object the processing of his/her Personal Data for certain reasons.

You can contact us for more information or exercise any rights related to personal information by e-mail dpo.bangkokhospitaludon@bdms.co.th

or Bangkok Hospital Udon, 111 Thong-yai Road, Mak-Khaeng Sub-district, Muang District, Udon Thani, 41000. Phone Number: 042-188999

to submit a petition accordance with the right above.