DATA PRIVACY NOTICE
THIS STATEMENT DESCRIBES HOW YOUR PERSONAL INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Our Service
West Metro Medical Center is committed to provide a delightful experience to you while receiving a quality health and related services. This policy outlines our ongoing obligations to you with respect to how we collect and manage your Personal Information that we will collect through our Patient Experience Survey. This policy aims to ensure that all appropriate standards for Personal Information protection in compliance with Republic Act No. 10173 (or the Data Privacy Act of 2012 or “DPA”), its implementing rules and regulations and other applicable and related laws and regulations, including the issuances of the National Privacy Commission (the “NPC”) (collectively, the “Privacy Laws”) are put in place and implemented efficiently and effectively. This policy establishes and communicates to you our procedures regarding the collection, use and disclosure of Personal Information we receive from our patients, customers [and/or users of this site.]
Your Personal Information under this Notice
Under the DPA, your Personal Information includes any information, whether recorded in a material form or not, from which your identity is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly identify you as an individual. These may include, but is not limited to, information which may be used for survey profiling and identification purposes (e.g. complete name, phone number), age, date of admission/hospital visit and/or other information that will be required in the survey.
Your Personal Information also includes Sensitive Personal Information, which refers to the following:
a. Your race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations;
b. Your health, education, genetic or sexual life, any proceeding for an offense committed or allegedly have been committed by you, disposal or such proceedings or the sentence of the court in such proceedings;
c. Personal identifiers issued by a government agency peculiar to you (as mentioned above); and
d. Other information established by law to be kept classified.
As a health institution, the specific Personal Information that we will obtain from you will include (but is not necessarily limited to) the following: Complete name, contact details, age, date of admission/hospital visit and/or other information that will be required in the survey.
How and when we collect your Personal Information
Your Personal Information may be obtained in many ways including online surveys, face-to-face survey interviews, survey forms and survey through telephone or cellphone calls. However, most of the Personal Information we have are those that you have given us yourself. You provide us your Personal Information when you agree to take part in our Patient Experience Survey (Removed application forms, correspondences, facsimile email or portal, and third party)
Why we collect your Personal Information
We collect your Personal Information primarily to:
1. understand your level of satisfaction and experience towards our medical care and services;
2. know your thoughts and ideas on how we can improve our care;
3. make a data-driven decision in our quality improvements and strategies;
4. contact you, if necessary, to further inquire about your response to our survey
You may withdraw your consent (subject to the applicable Privacy Laws) to the processing of your Personal Information at any time by contacting us in writing. We provide below the general categories of the purposes for which we collect and process your Personal Information.
Use and Processing of Personal Information
The following categories generally describe the ways by which the Hospital processes your Personal Information. While this is not intended to be a very specific and detailed listing of each process per category, all the ways by which we process your Personal Information fall under one of these categories:
a. For quality improvement strategies: Your Personal Information will be processed as part of our quality improvement strategies by performing statistical analysis of your response, together with other client/patients who participate in our survey, or contacting you personally for interview to further understand your survey responses, comments, and suggestions. A Patient Experience Performance Report will be the output of this process and will be shared to all department and personnel involved. Your Personal Information will not be included in the final report.
b. Data analytics and visualization: Your Personal Information will be processed by our third-party service provider to create a statistical analytics and dashboard to monitor our performance. We established a Data Sharing Agreement with our third-party service provider to ensure all appropriate standards for Personal Information protection in compliance with Republic Act No. 10173 (or the Data Privacy Act of 2012 or “DPA”).
Other uses and disclosures of your Personal Information
Outside of the purposes stated above other uses and disclosures of your Personal Information will be made only with your express authorization, unless we are otherwise permitted or required by law.
When otherwise permitted or required by law, we will inform you of our intended action prior to making such use or disclosure and will, at that time, offer you the opportunity to object. If you are not present or able to agree or object, we will use our judgment in determining whether the use or disclosure is in your best interest.
Who has access to your Personal Information
The following will have access to your Personal Information for the purposes stated above:
a. Our Customer-relation, Patient Experience, Marketing, or Customer Service representative who may contact you for further interview about your survey responses.
b. Involved departments and units in the Hospital who will need your personal information to improve the performance of their medical care, services, and standards.
A third-party Service Provider (Davao Doctors Hospital, a private institution that is part of the Metro Pacific Hospital Holdings, Inc (MPHHI) – the largest private hospital operator in the Philippines), to perform data cleaning, analytics, and visualization.
Your rights to your Personal Information
You are afforded certain rights under the Privacy Laws, particularly the DPA. We would like to ensure that we have your consent to continue to collect, use and disclose your Personal Information for the purposes identified in this Notice. You have the right to be informed of these specific rights, to object to the processing of your Personal Information, to access, update and correct the same and to withdraw your consent and/or edit your consent preferences at any time.
If you wish to have access to your Personal Information in our records, or you think that it is incomplete, not up-to-date or otherwise inaccurate, or have any queries or complaints about our Privacy Policy, you may get in touch with our Data Protection Officer through the contact details provided below.
Your rights to your Personal Information are provided in Section 34 of the DPA which you may access here https://privacy.gov.ph/data-privacy-act.
Our undertakings regarding your personal information
Pursuant to the DPA, we undertake to protect your Personal Information. The Hospital creates and maintains a record of your Personal Information in its offices and this notice applies to your Personal Information that we collect. Under the DPA, the Hospital is required to protect your Personal Information, and to process the same only in accordance with the following data privacy principles:
a. Transparency: We are obligated to inform you of the nature, purpose and extent of our processing of your Personal Information, including the risks and safeguards involved, the identity of the persons involved in the processing of your personal data, your rights as data subject, and how these rights can be exercised.
b. Legitimate purpose: We will only process your Personal Information for a legitimate purpose, compatible with our declared and specified purpose, and not contrary to law, morals and public policy.
c. Proportionality: We will process your Personal Information as adequate, relevant, suitable, necessary and not excessive in relation to the declared and specific purpose.
Your Personal Information is stored in a manner that is reasonably protected from misuse and loss and from unauthorized access, modification or disclosure. We strictly enforce our Privacy Policy and put in place technical, organizational and physical security measures that are designed to protect your personal information from unauthorized access, use, alteration and disclosure.
When your Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to dispose or discard your Personal Information in a secure manner that would prevent further processing, unauthorized access, or disclosure to any other party or the public, or prejudice your rights as a data subject. However, most of the personal information is or will be stored in files which will be kept by us for the minimum period provided under existing laws and regulations.
How to access your personal information
You may access your Personal Information and to update and/or correct it, subject to certain exceptions. If you wish to access the same, please contact us in writing and we will respond within a reasonable time. Please take note that our ability to respond to your request may also depend on the circumstances regarding our collection of your Personal Information.
We will not charge any fee for your access request but we may charge a reasonable administrative fee for providing a copy of your Personal Information.
We may be restricted by law or regulations from giving you access to your personal information.
Certification
You certify that all information you provided for yourself and / or your dependents as part of the Patient Experience Survey Process is true, complete, and accurate.
Changes to this Privacy Statement and Privacy Policy
From time to time, we may change or update our Privacy Statement, Privacy Policy and practices to comply with government and regulatory requirements, to adapt to new technologies and protocols, to align with industry practices or for other legitimate purposes.
You will be provided notice if these changes are significant and, if we are required by law, we will take steps to obtain your updated consent.
Inquiries
If you have any questions about this Notice, you may contact the Hospital’s Data Protection Officer through:
West Metro Medical Center
dpo@westmetro.com.ph
(+63) 62 991-2506 or 07
You may also contact the National Privacy Commission with the following contact details:
National Privacy Commission
5th Floor Delegation Building, PICC Complex, Roxas Boulevard
0945 153 4299 (Globe) | 0939 963 8715 (Smart)
privacy.gov.ph