PERSONAL DATA PROTECTION POLICY

Far East Medical Vietnam Limited ("FV Hospital”, "We" or "Our") recognise the importance of the personal data you have entrusted to us, and this Personal Data Protection Policy is intended to notify and assist you in understanding the purpose of collection, use, disclosure, transferring and protection of your personal data. This Personal Data Protection Policy applies to your use of the FV@HOME Mobile Application, or any mobile application software provided by FV Hospital, any Chatbot(s), Voice Skill(s), E-payment or Communications platform(s) made available through third-party platforms (if any), which are also subject to this Personal Data Protection Policy of that provider which you will have been asked to agree to as part of your use of the FV@HOME Mobile Application.

We are committed to protecting your personal data, and will manage and process your personal data in accordance with the requirements of the Decree 13/2023/ND-CP on Personal Data Protection issued by the Government of the Socialist Republic of Vietnam on April 17, 2023 and its amendments from time to time.

Please note that by agreeing to use our services, you are required agree with this Policy. If you do not agree, you should not use FV@HOME Mobile Application and our other app sites. During the using our FV@HOME Mobile Application and our other app sites, if you request us to stop processing your personal data, in accordance with relevant applicable laws, your account may be terminated based at FV Hospital’s discretion.

1) PERSONAL DATA

“Personal Data” refers to any type of information associated with an individual or used to identify a specific person, that we will may process.

• Basic personal data includes data you provide for registration purposes, e.g. name, demographics, ID card number, nationality, financial information and any other personal information provided by you or your relatives which will be collected when you present yourself for medical examination or treatment.
• Sensitive personal data includes all medical information, genetic characteristics, sexual orientation, banking account information, transaction information, location information and more.

As you use our app site, our services, or purchase or arrange for the delivery of products, certain information may be passively processed:

· Access Device and Browser Information: When you access our app site from a mobile phone or other device, we may collect anonymous information from that device, such as your Internet protocol address, browser type, connection speed and access times;

· Cookies (i.e. small pieces of information that a site sends to your browser while you are viewing a website): We may use both session Cookies (which expire once you close your web browser) and persistent Cookies to make our FV@HOME Mobile Application and our other app sites and services easier to use, to make our advertising better, and to protect both you and FV Hospital. You can instruct your browser, by changing its options, to stop accepting Cookies or to prompt you before accepting a Cookie from the websites you visit. If you do not accept Cookies, however, you will not be able to stay logged in to our app site. We presently do not honor “Do Not Track” requests across all parts of our FV@HOME Mobile Application and our other app sites.

· Real-Time Location: Certain features of the Platforms use GPS technology to collect real-time information about the location of your device so that the Platforms can connect you to a healthcare professional/treatment provider near your location.

· Device information: We may also collect non-personal information from your mobile device or computer. This information is generally used to help us deliver the most relevant information to you. Examples of information that may be collected and used include how you use the application(s) and information about the type of device or computer you use. In addition, in the event our application(s) crashes on your mobile device we will receive information about your mobile device model software version and device carrier, which allows us to identify and fix bugs and otherwise improve the performance of our application(s).

“Processing” refers to any activities affecting Personal Data, such as: collecting, recording, analysing, confirming, storing, editing, publicizing, combining, accessing, retrieving, revoking, encrypting, decoding, copying, sharing, transmitting, supplying, transferring, deleting, and destruction of personal data or other related actions.

2) COLLECTION, USE AND DISCLOSURE

By voluntarily providing your personal data in order to obtain medical care, it shall be deemed that you have consented to the collection, use, disclosure and Processing of your Personal Data as defined above, by FV Hospital for the purposes directly related to the provision of medical care to you, which includes referrals to other healthcare professionals, institutions and other associated purposes.

We may collect your personal data by various means:

• Through your filling of forms for example registration, admission, consent forms
• When you are examined by our doctors, undergo a procedure or an investigation, monitored using a medical monitoring device.
• By corresponding with us by phone, e-mail or otherwise.
• When you register to our FV@HOME Mobile Application and our other app sites, subscribe to any our services, participate in discussion boards or other social media functions on or linked to our FV@HOME Mobile Application and our other app sites, enter a competition, promotion or survey or carry out any other activity and when you report a problem with our FV@HOME Mobile Application and our other app sites.
• From third parties such as insurance companies, employers, relatives.
• When your images are captured by our cameras.
• When you use our services provided through online technologies.
• When you browse our websites including https://www.fvhospital.com and https://magazine.fvhospital.com/
• When you make payment or provide details to facilitate payment

We only use, disclose and/or transfer your personal data for the purposes you have been notified of and consented to or which are permitted/required under applicable laws and regulations, specifically:

• Providing to our staffs, medical professionals in order to provide our service to you
• Provision of medical services including sharing your personal data with healthcare professionals of, and other medical institutions.
• Communicate with your insurance provider or third party pay or
• Bill and receive payments for services provided to you
• Communicate with you, including providing you with information on any services available at FV Hospital.
• Manage business operations and comply with internal policies and regulations required by law
• Make reports on operations or other relevant reports required by law
• Providing to our business partner, any our supplier as well as our sub-contractors related to providing service on FV@HOME Mobile Application and our other app sites. For the performance of any transaction we enter into with you, including but not limited to your bank, your payment providing supplier.
• Analytics and search engine providers that assist us in the improvement and optimization of our app site.

Transfer of your personal data out of Vietnam:

• If we transfer your personal data to a country outside of Vietnam, we will ensure that the organisation or country provides a standard of protection to the personal data that is suitable in accordance to Vietnam’s laws;
• We also ensure to implement required formalities in respect of the cross-border transfer of Vietnamese citizens’ Personal Data in accordance with Vietnam’s law.

3) PROTECTION OF YOUR PERSONAL DATA

We take patient confidentiality very seriously. To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification or any similar risks, we have endeavoured to put in place appropriate administrative, physical and technical measures and processes such as up-to-date anti-virus protection, encryption of documents and system, and limiting access to any personal data.

Starting and ending time to process Personal Data: The Processing shall start upon the receipt of your Personal Data and will end when the Processing is completed.

Undesirable consequences and damage that may occur: Some of your rights as data subjects may only be affected in certain force majeure and unpredictable circumstances such as power failures, hardware failures, software problems, security incidents, hacking, natural disasters, storms, floods, and other circumstances that are reasonably considered as force majeure. We ensure to permanently implement measures to reduce or eliminate such risks or damage.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of FV@HOME Mobile Application and our other app sites, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to FV@HOME Mobile Application and our other app sites; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

4) RETENTION OF YOUR PERSONAL DATA

Your personal data will be retained in accordance with the Ministry of Health’s and other governmental authorities’ guidelines on the retention of patient data.

For any other personal data collected by FV Hospital we will periodically review to determine if that data is still required and will only retain it as long as the purpose for which it was collected remains and until it is no longer necessary for any other legal or business purposes.

5) YOUR OBLIGATION

It is your obligation to ensure that all personal data submitted to us is complete, accurate, true and correct.

6) YOUR RIGHTS

You may access your personal data currently in our possession. We will process your request in accordance with the law and will provide you with the relevant personal data within a reasonable time after the request has been made. A fee may be charged for processing an access request.

You may withdraw your consent for the collection, use, Processing and disclosure of your Personal Data in our possession by giving reasonable notice using the regulated form to us. You may request to correct your Personal Data. Kindly note that we are obliged to evaluate your request and that, by law, some requests cannot be accepted:

• Request for erasure and correction of medical records.
• Request for deletion of data of individuals and/or related transactions, while FV Hospital obligated to maintain records of individuals and transactions to comply with legal obligations.
• Request to conceal, or fail to provide, or incompletely provide, or falsely provide Personal Data to competent state agencies or other third party.

7) HOW TO CONTACT US

If you have any questions about our Personal Data Protection Policy or wish to contact us in relation to your personal data, please contact our Data Protection Officer at dpo@fvhospital.com.

This Personal Data Protection Policy acts as a Notification of personal data processing, which forms an integral part of your Consent.