Vichaiyut Hospital and Vichaiyut Medical Center, hereinafter referred to as “we,” กare currently utilizing closed-circuit television (CCTV) cameras for surveillance purposes within and around the premises of Hospital Vichaiyut and Vichaiyut Medical Center(“the Area”) to ensure the protection of lives, health, and property. In doing so, we collect personal information of staff, employees, customers, contractors, visitors, or any individuals (“you”) entering the Area through the use of the aforementioned CCTV devices.
This Privacy Notice for CCTV Usage (“Notice”) provides information about the collection, usage, and disclosure of personal information, which is any information that can identify you, as well as your rights. The details are as follows:

We process your personal data based on the following legal grounds:

• Necessity to protect against a threat to your life, body, or health, or that of another person.
• Necessity for the benefits, as recognized by law, of ourselves or other individuals, where such benefits are not outweighed by the fundamental rights in your personal data.
• Necessity for compliance with relevant laws, which govern security and environmental conditions in the workplace and our property.

We collect your personal data for the following purposes:

1. Protection of Health and Personal Safety: Including the protection of your personal property.
2. Medical Treatment in Specific Cases: Such as patients with contagious diseases or those requiring close medical supervision.
3. Protection of Buildings and Property: Safeguarding our buildings, facilities, and property from damage, interference, or other criminal activities.
4. Supporting Law Enforcement Agencies: Aiding relevant authorities in enforcing the law, including prevention, investigation, and legal proceedings.
5. Assistance in Conflict Resolution Processes: Providing support during dispute resolution processes, disciplinary proceedings, or grievance procedures.
6. Assistance in Investigations: Aiding in investigative processes or procedures related to complaint handling.
7. Assistance in Legal Proceedings: Providing support in initiating or defending against legal actions, including but not limited to employment-related legal proceedings.

We collect and use personal data for the purposes mentioned in point 2. We install CCTV cameras in visible locations, accompanied by warning signs indicating their operation at entrances, exits, and areas deemed necessary for surveillance. The collection of your personal data occurs when you enter these areas, and the types of personal data we collect include:

• Still images
• Motion images
• Sound
• Images of your property, such as vehicles, bags, hats, clothing, etc.

We will not install CCTV cameras in areas that may unduly infringe upon your fundamental rights, such as bedrooms, bathrooms, shower rooms, or areas intended for the relaxation of staff, unless we obtain your consent.

We will treat the information captured by the CCTV cameras related to you confidentially and will not disclose it unless necessary to achieve the monitoring objectives as specified in this notice. We may disclose CCTV information to the following categories of individuals or entities:

Authorized law enforcement agencies:

• We may disclose CCTV information to authorized law enforcement agencies as required by law to assist in enforcing the law, conducting investigations, or pursuing legal proceedings.น

External service providers:

• We may disclose CCTV information to external service providers when necessary to create confidence in preventing or mitigating threats to life, body, health, or property, whether yours or that of other individuals.

The Personal Data Protection Act of 2019 aims to increase your control over your personal information. When the provisions related to the rights of the data subject take effect, you will have the following detailed rights:

1. Right to access, receive copies, and request disclosure:
You have the right to access, receive copies, and request the disclosure of the origin of your personal data that we collect, except in cases where we have the legal right to reject your request, or a court order is in place. This also applies when your request may adversely affect the rights and freedoms of others.
2. Right to request correction of inaccurate or incomplete personal data:
You have the right to request the correction of inaccurate or incomplete personal data to ensure accuracy, currency, completeness, and clarity.
3. Right to suspend data processing:
You have the right to request the suspension of the processing of your personal data under the following circumstances:
3.1. During the period when we are verifying and correcting your personal data as requested by you.
3.2. When your personal data is being processed without legal consent.
3.3. When your personal data is no longer necessary for the purposes for which we have informed you, unless you request us to keep it for your rights under the law.
3.4. While we are verifying whether there are legal grounds for collecting, using, or disclosing your personal data or checking the necessity of collecting, using, or disclosing your personal data for the public interest, as a result of your opposition to the collection, use, or disclosure of your personal data.
4. Right to object to collection, use, or disclosure:
You have the right to object to the collection, use, or disclosure of your personal data, except when we have legal reasons to reject your request (e.g., when we can demonstrate that collecting, using, or disclosing your personal data is more beneficial and necessary for the public interest, for the establishment, exercise, or defense of legal claims, or for our legitimate interests).

To achieve the objectives of monitoring and observation using CCTV devices as specified in this announcement, we will retain personal data captured by the relevant CCTV cameras associated with you for a period of 30 days. After this period, we will proceed to delete and destroy your personal data.

We have measures in place to maintain the security of your personal data appropriately, both technically and in terms of management, to prevent data loss or unauthorized access, deletion, destruction, use, alteration, modification, or disclosure of personal information without permission. These measures align with our Information Security Policy. Additionally, we have established a personal data protection policy that is communicated organization-wide, along with practical guidelines to ensure the confidentiality, integrity, and availability of personal data. We regularly review and update these policies, including the disclosure in this notice, as deemed necessary.

We have specified that only authorized personnel with relevant responsibilities are allowed to access, use, or disclose personal data collected in connection with this processing activity. We will ensure strict compliance with this policy by all personnel.

In the process of improvement or modification, we may consider revising and changing this statement as deemed necessary. We will notify you of any such changes through the website www.vichaiyut.com. However, we recommend that you regularly check for updates to be informed of the latest version, especially before accessing our area.

By entering your area, you acknowledge and accept the terms of this statement. Please refrain from entering the area if you disagree with the terms outlined in this statement. If you continue to access the area after this statement has been modified and posted through the aforementioned channels, it will be deemed that you are aware of and accept these changes.

You can contact us for inquiries regarding this statement at:

1. Data controller:
• Name: Data controller, Vichaiyut Company Limited
• Contact Address: 53 Setsiri Road, Phyathai, Bangkok 10400
• Contact Channels: Phone: 02-265-7777, Email: medcenter@vichaiyut.com
2. Data Protection Officer (DPO):
• Name: Data Protection Officer, Vichaiyut Hospital and Vichaiyut Medical Center (Mr. Rapeephon Kunjara Na Ayudhaya)
• Contact Address: 53 Setsiri Road, Phyathai, Bangkok 10400
• Contact Channels: Phone: 02-265-7777, Email: medcenter@vichaiyut.com