Personal Data Processing Notice Regarding CCTV Use
Bangkok Hospital Ratchasima Co., Ltd.
1. About us
Bangkok Ratchasima Hospital Co., Ltd. (hereinafter referred to as “the company”) is located at 1308/9 Mittraparp Road, Mueang Sub-district, Mueang District, Nakhonratchasima Province, 30000. Website: www.bangkokhospital.com/ratchasima
The company is a healthcare facility providing medical treatment, disease diagnosis, and medical services which acts as data controller under the Personal Data Protection Act B.E. 2562. Therefore, this document is issued to inform you of the reasons and methods by which the company collects, uses, or discloses your personal data, as well as to notify you of your rights as personal data owner.
2. Objective of Data Processing
The company uses a CCTV system to record footage for the following purposes:
● To prevent or mitigate harm to the life, body, or health of individuals, such as criminal activities.
● For the legitimate interests of the company or other individuals or legal entities to prevent dangerous incidents, unusual situations, or emergencies.
3. CCTV Camera Locations
- Hundreds of CCTV cameras are installed throughout the facility.
- The locations of the CCTV cameras include the hospital’s public areas, parking lots, patient wards, all OPD departments, office areas, specific departments such as COVID patient wards, operating rooms, and Intensive Care Units.
4. Retention Period of Personal Data
- The CCTV system will capture footage of individuals within the camera’s range 24 hours a day, and the footage will be automatically deleted every 30 days.
- In case of a dangerous incident and the CCTV footage is used in the investigation process by government authorities, the footage will be retained until the investigation process is concluded.
- If the CCTV footage is required for legal proceedings in court, the footage will be retained until the court process has reached final judgement.
5. Security Measures
The company manages personal data using organizational and technical measures that meets or exceed the minimum legal requirements as well as utilizes appropriate systems to protect and secure such personal data. The data is stored in areas with restricted access control systems.
When any staff or department requests to review or obtain CCTV footage, the individual must follow below instructions.
- Complete a request form for access to CCTV footage.
- Submit the form to the Security Supervisor, who will present it to the authorized supervisor for approval.
- The CCTV control room security officer will be notified of the request by the Security Supervisor.
- If permission is granted, both the Security Supervisor and the control room security officer must present while viewing the CCTV footage.
- The details of all individuals presenting during the viewing and the results of the review must be recorded in the request form. The form must then be forwarded to the responsible manager in the Security Department for acknowledgment.
- In the case of a request for footage information by the police, written approval must be obtained from the company’s director.
6. Sharing of CCTV Footage with Third Parties
- The company might share CCTV footage to government authorities only when a written request is submitted, and such request is for the purpose of a government investigation or legal proceedings.
- The company may allow the CCTV service provider (CCTV Vendor) to access the footage solely for system maintenance with prior authorization from the company. The service provider must also have an approved personal data protection system in place as required by the company to access personal data from the CCTV system.
7. Your Rights
As the personal data owner, you have rights to request the company to process your personal data according to the scopes allowed by laws as below:
- Right to withdraw consent: you have the right to withdraw your consent for personal data processing as you have previously provided to the company anytime during the period your personal data stored with the company.
- Right of access: you have the right to access your personal data and request the company for a copy of aforementioned personal data, including request the company to disclose the acquisition of your personal data that you did not give consent.
- Right to rectification: you have the right to request the company to correct any incorrect data or add any incomplete data.
- Right to erasure: you have the right to request the company to erase your data for certain reasons.
- Right to restriction of processing: you have the right to request the company to withhold the use of your personal data for certain reasons.
- Right to data portability: you have the right to transfer your personal data maintained by the company to other data controllers or yourself for certain reasons.
- Right to object: you have the right to object to the processing of your personal data for certain reasons.
You can contact the company’s Data Protection Officer (DPO) / QPS Department to submit a request to exercise of the abovementioned rights at the following contact details:
– Email: [email protected]
– Address: 1308/9 Mittraparp Road, Mueang Sub-district, Mueang District, Nakhonratchasima 30000
– Phone : 044-015999