Columbia Asia Group of Companies – Personal Data Protection Notice
Columbia Asia Group of Companies (“Columbia Asia”) respects and is committed to the protection of your personal information and your privacy. This Personal Data Protection Notice explains how we collect and handle your personal information in accordance with the Malaysian Personal Data Protection Act 2010 (“PDPA”). Please note that Columbia Asia may amend this Personal Data Protection Notice at any time without prior notice and will notify you of any such amendment via our website or by email.
(1) Personal information
1.1 Type of personal information
Personal information means any information which relates to you and which was collected or provided to Columbia Asia for the purposes stated in Section 2 below.
Your personal information may include your name, NRIC number, contact details, financial and banking account details, medical history and information, information in audio/video format (including voice, closed-circuit television (“CCTV”) or security recordings), images (including photographs), biometric information and location tracking or global positioning system (“GPS”) information.
1.2 Source of personal information
- Patient or potential patient/customer: Columbia Asia collects your personal information directly from you or indirectly from your legal representatives (family members or next of kin), recruitment agencies and / or employer when you, your legal representatives, recruitment agencies and / or employers send us completed enquiry, application and / or registration forms via various means, including online and physical hardcopies at public venues or in our premises. Your personal information may also be collected from cookies through the use of our website.
- Independent consultants or potential independent consultants: Columbia Asia collects your personal information directly from you or indirectly from headhunters when you and / or our headhunters send us completed enquiry and / or application forms or curriculum vitaes via various means, including online and physical hardcopies. Your personal information may also be collected from cookies through the use of our website.
- Vendor, supplier or service provider: Columbia Asia collects your personal information directly from you or indirectly from your employer or credit reference agencies when tendering for projects, when you send us completed enquiry and/or credit application forms via various means, including online and physical hardcopies. Your personal information may also be collected from cookies through the use of our website.
1.3 Obligatory personal information
All information requested for in the relevant forms is obligatory to be provided by you unless stated otherwise.
Should you fail to provide the obligatory information, we would be unable to process your request and/or provide you with relevant services.
(2) Purposes of collecting and further processing (including disclosing) your personal information
For patients or potential patients/customers, independent consultants, potential independent consultants, vendors, suppliers or service providers: Your personal information is collected and further processed by Columbia Asia as required or permitted by law and to give effect to your requested commercial transaction, including the following:
- 以处理您要求的医疗服务；
- 方便您参加任何竞赛或活动；
- 就我们的服务和/或活动进行管理并与您沟通；
- to facilitate your medical practice within Columbia Asia, including sharing your personal data with other independent consultants within Columbia Asia for purposes of peer review;
- 管理您的医疗行为并与您沟通；
- 以处理您的信用账户申请；
- 以评估您的信用价值；
- 管理和执行您的商业交易（招标、服务合同、委托协议）；
- 处理与您相关的任何付款；
- 保险；
- 以安全、可靠和符合健康与安全要求的方式经营我们的场所；
- 用于内部调查、审计或安全目的；
- 进行内部统计分析和患者个案研究分析；
- to comply with Columbia Asia’s legal and regulatory obligations in the conduct of its business;
- 就您可能感兴趣的产品、服务、即将举行的活动、促销、广告、营销和商业资料与您联系；
- 确保我们网站的内容以最有效的方式呈现在您的电脑和/或设备上；以及
- for Columbia Asia’s internal records management.
Where you have indicated your consent to receiving marketing or promotional updates from Columbia Asia, you may opt-out from receiving such marketing or promotional material at any time. You may select the relevant “unsubscribe” option as may be provided in Columbia Asia’s marketing or promotional material or you may contact Columbia Asia at the details provided in Section (5) below.
(3) Disclosure or transfer of personal information (within or outside of Malaysia)
3.1 Within Columbia Asia
Your personal information provided to us may be processed by entities (in or outside of Malaysia) within Columbia Asia (including related companies, subsidiaries, holding companies, associated companies and outsourcing partners), especially when you are an employee of any company within Columbia Asia.
Columbia Asia will ensure that:
- 只有按照合同要求根据各自的工作要求处理您的个人信息的员工才能访问您的个人信息；以及
- 只向相关员工发布必要的信息。
3.2 Classes of third parties
Your personal information may be disclosed or transferred to relevant third parties (within or outside of Malaysia) as required under law, pursuant to relevant contractual relationship (for example, where we appoint third party service providers) or for the purposes stated in Section 2 above (or directly related to those purposes).
In the event of a potential, proposed or actual sale of business, disposal, acquisition, merger or re-organisation (“Transaction”), your personal information may be required to be disclosed or transferred to a third party as a result of the Transaction. You hereby acknowledge that such disclosure and transfer may occur and permit Columbia Asia to release your personal information (only as required) to the other party and its advisers/representatives.
For patients or potential patients/customers, independent consultants, potential independent consultants, vendors, suppliers or service providers: Your personal information may be disclosed to the following classes of third parties:
- 卫生部或卫生部及其他相关政府部门或机构设立的任何其他法定或非法定当局或拥有权力或管辖权的机构；
- 相关认证机构，如马来西亚卫生质量协会（MSQH）；
- 第三方私营医疗机构或政府医疗机构；
- Our independent consultants and specialists within Columbia Asia;
- 您的保险公司
- 如果是就业前/雇员健康检查，则向未来雇主/患者的雇主提供；
- 由我们指定为我们或代表我们提供服务的第三方（如审计师、律师、公司秘书、印刷公司、委托供应商、承包商、会议/活动组织者、其他顾问和保险公司）；
- The respective foreign embassies of foreign patients who received treatment in Columbia Asia; and
- 执法机构，包括当地警方。
(4) Websites
4.1 Links to other sites
Content in Columbia Asia’s website may include links to third party websites. Columbia Asia is not responsible for the content on such linked third party websites and users should observe the separate privacy policies applicable to the respective third parties website.
4.2 Cookies
Columbia Asia may use cookies and similar tools across our websites to improve their performance and enhance your user experience. Cookies are small text files which a website may put on your computer or mobile device when you first visit a site or page. The cookie will help the website, or another website, to recognise your device the next time you visit. Cookies can function to remember your username and preferences or to analyse how Columbia Asia’s website is performing.
Certain cookies contain personal data – for example, if you click to “remember me” when logging in, a cookie will store your username. Most cookies won’t collect information that identifies you, and will instead collect more general information such as how users arrive at and use our websites, or a user’s general location. Where personal data is collected, such personal data will only be used for its intended purposes only, i.e. to respond to your message or deliver the requested services.
(5) Right to access and correct personal information
You have the right to access and correct your personal information held by us (subject always to certain exemptions). We will make every endeavour to ensure your personal information is accurate and up to date therefore we ask that if there are changes to your information you should notify us directly.
If you would like to access or correct your personal information or have any enquiries, please make your request in writing to the PDP Officer in the hospital.
(6) Private Healthcare Facilities and Services Act 1998
Please note that the manner in which Columbia Asia processes your personal data will also be subject to other industry-specific laws and guidelines e.g. Private Healthcare Facilities and Services Act 1998 (“PHFSA”), Ministry of Health guidelines, etc.
Your right to access personal data may be restricted if it is regulated under any other law. For example, access to medical records will be in accordance with the PHFSA.
(7) Conflict
In the event of any conflict between this English language Personal Data Protection Notice and its corresponding Bahasa Malaysia Personal Data Protection Notice, the terms in this English language Notice shall prevail.