The Hospital creates and maintains a record of your Personal Information in its offices and this Notice applies to your Personal Information that we collect. Pursuant to the DPA, we undertake to protect your Personal Information.
The Hospital is required to protect your Personal Information, and to process the same only in accordance with the following data privacy principles:
a. Transparency: We are obligated to inform you of the nature, purpose, and extent of our processing of your Personal Information, including the risks and safeguards involved, the identity of the persons involved in the processing of your personal data, your rights as data subject, and how these rights can be exercised.
b. Legitimate purpose: We will only process your Personal Information for a legitimate purpose, compatible with our declared and specified purposes, and not contrary to law, morals, and public policy.
c. Proportionality: The processing of your Personal Information shall be adequate, relevant, suitable, and necessary, and not excessive in relation to the declared and specific purposes.
When your Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify or anonymize the same. However, most of the Personal Information are or will be stored in files which will be kept by us for the minimum period provided under existing laws and regulations.