Personal Data Protection Notice

A) Source of the Personal Data

Your personal data is collected from various sources, including information you have provided us, information from third parties and information in the public domain. You are the ‘ Data subject’ and may have supplied and may continue to supply, from time to time, your personal data (including sensitive personal data) and information (“data”) by use of our healthcare services or health-related services, enquiring about us or our services, participating in our promotional activities, through business relations with us and/or for administrative purposes in compliance with any laws.

It is obligatory that you supply us with your personal data. If you fail to supply us with such personal data, we may not be able to process your data to enable us to serve you.

B) Description of the Personal Data

Your personal information may include your title, NRIC number, contact details, occupation, age, gender, marital status, weight, height, race, religion, family or next of kin information, financial and banking account details, medical history and information and other personal information including sensitive data information.

C) Obligatory personal information

Your personal information is collected and further processed by Assunta Hospital as required or permitted by law and to give effect to your requested service, including the following:-

• to process your requested medical services;
• to facilitate your participation in any forthcoming events;
• to administer and communicate with you in relation to our services and/or events;
• to facilitate your medical management within Assunta Hospital, including sharing your personal data with other independent consultants within Assunta Hospital for purposes of peer review;
• to administer and communicate with you in relation to your medical management;
• to process your credit facility application;
• to assess your credit worthiness;
• to administer and give effect to your commercial transaction (tender award, contract for service, consignment agreement, etc);
• to process any monies due to you;
• for insurance purposes to facilitate your guarantee letters;
• to operate our premises in a manner which is physically safe, secure and befitting of health and safety requirements in accordance with statutory guidelines;
• for internal investigations, audit or security purposes;
• to conduct internal statistical analysis and analysis of patient’s case studies;
• to comply with Assunta Hospital’s legal and regulatory obligations in the conduct of its business;
• to contact you regarding products, services, upcoming events, promotions, advertising, marketing and commercial materials which we may feel to be of interest to you;
• to ensure that the content from our website is presented in the most effective manner for you and your computer and /or electronic devices;
• furnishing us details of your visitors for screening purposes;
• for Assunta Hospital’s internal records management; and
• Utilising such information for purposes of debt recovery in the event of any monies due and owing from you and/or companies;

In addition, we may from time to time request for certain other personal information that may be relevant for the purpose of providing our services to you.

All information requested for in the relevant forms is obligatory to be provided by you unless stated otherwise. Should you fail to provide such information, we would not be able to process your request and/or provide you with relevant services, as stated above.

D) Disclosure of the Personal Data

Your personal data may be disclosed to the following parties, where relevant:-
1. Healthcare professional (as defined in PDPA)
3. Government agencies, local authorities, non government agencies
4. Paying and insurance agents
5. Debt collection authorities and agencies
6. Financial institutions
7. Legal firms
8. Auditors
9. Vendor/Contractor
10. Other private and public hospitals
11. Other Healthcare providers
12. Training providers
13. Family and next of kin
14. To such parties as may be required by law, court, regulator or legal process to disclose
15. To such parties as may be permitted under the laws of Malaysia
16. Any other person which Assunta Hospital may deem necessary

In relation to item 6 above, in the event of any default in payment where the amount

in default is not fully repaid on or before the due date, we may give or disclose your data to relevant debt recovery parties.

Your data held by us will be kept confidential and we do not give or disclose your data to unaffiliated third parties without your consent.

E) Access and Update of Personal Data

We shall do our best to ensure that the personal data we hold about you is accurate, complete, clear and up-to-date. If there are any changes to your personal data or if you believe that the personal data we have about you is inaccurate, incomplete, misleading or not up-to-date, please contact us so that we can make the necessary changes to your personal data.

You have the right to access your personal data. If you would like to request access to your personal data, please contact us. We recommend that your request for access to your personal data held by Assunta Hospital be made in writing. Your identity will have to be verified before your request is fulfilled.
In accordance with the PDPA:

1. Depending on the information requested, we may charge a fee as stipulated in the First Schedule (Regulation 2) of Personal Data Protection [Fees] Regulations 2013 for processing your request for access; and
2. We may refuse to comply with your request to access or make a correction in accordance with PDPA subject to other operating laws or valid reasons.

We retain data for as long as necessary for its legitimate business purposes, and as otherwise permitted by applicable law.

You may contact our Data Protection Officer for any enquiries or if you wish to lodge a complain relating to misuse or suspected misuse of your data, access your data, request to make changes or if you would like us to stop processing your data.

Contact Details:
Data Protection Officer: Anne Singgaraya
Tel No: 03-7872 3162
Email: pdpa@assunta.com.my

This Notice maybe reviewed and updated from time to time to reflect changes in the law on privacy matters.

Please check this notice occasionally to ensure that you are aware of the most recent version.

Assunta Hospital will endeavour to update this site and keep it current.

By providing us your data and the continued usage of our services, is deemed as your consent for us to collect, process and store your personal data in accordance with the above.

Where you have indicated your consent to receiving marketing or promotional updates from Assunta Hospital, you may opt-out from receiving such marketing or promotional material at any time. If you do not wish us or other parties to communicate marketing offers to you, you may email to us at the above e-mail address or contact Assunta Hospital directly.

F) Account and Personal Data Deletion

Users of the Assunta Hospital mobile application may request the deletion of their account and personal data associated with the application.

Users may submit an account deletion request through either of the following methods:

1. Through the Assunta Hospital mobile application
Go to Settings > My Account > Delete Account and follow the instructions provided.

2. By contacting Assunta Hospital
Users may also submit an account or personal data deletion request through our Contact Us page.

Assunta Hospital may require verification of the user's identity before processing a deletion request in order to protect against unauthorised deletion of accounts or personal information.

Upon successful verification, the user's application account and associated personal data will be deleted or anonymised where applicable.

Certain information may be retained where required or permitted by applicable laws, regulations, medical record retention requirements, security requirements, or other legitimate purposes. Any information retained will continue to be handled in accordance with this Personal Data Protection Notice and applicable laws.