Updated as of 03 Feb 2023
In this Notice, “we”, “us”, “our”, “Company” or “HITAP” means HEALTH INTERVENTION AND TECHNOLOGY ASSESSMENT PROGRAM FOUNDATION , “you”, “your” or “yours” means the persons to whom this Notice applies. “Personal Data” has the same meaning as that defined in the Personal Data Protection Act 2012 (the “PDPA”).
Your personal data privacy is important to us and we are highly committed in protecting and managing your Personal Data in a responsible manner in line with this Notice.
This Notice sets out the collection, use and disclosure of your Personal Data. "Personal Data" means any data or information, whether true or not, about an individual who can be identified either (a) from that data; or (b) from that data and other information to which HITAP is likely to have access to.
Personal Data excludes Business Contact Information which means an individual's name, position name or title, business telephone number, business address, business electronic mail address or business fax number and any other similar information about the individual, not provided by the individual solely for his personal purposes.
We may collect, use and disclose the following data about you:
1. When you subscribe to our services and publications or access our websites and use our online services;
2. If and when you contact HITAP (i.e., phone, email, face to face meetings, networking, interviews, SMS, fax, mail or electronic mail, internet messaging services, etc.) which we may keep a record of that correspondence;
3. If and when you respond to any of HITAP’s newsletters and other communication materials, or when you respond to our queries or request for us to contact you;
4. When you submit personal data to us to participate in our surveys, event, competition organised by HITAP or its partners;
5. When you request a third party to contact and/or make enquiries from HITAP with your personal data;
We may use the information we collect from you for any of the following purposes:
1. To perform or carry out HITAP’s legal obligations arising from any contracts entered into by HITAP;
2. To enable HITAP’s subcontractors, third-party agents, partners and service providers, to fulfil obligations/services as stipulated in contracts entered into by HITAP;
3. Evaluating your suitability for participation in HITAP projects, events, collaborations in our projects and/or employment;
4. Responding to your requests or queries including requests and queries from your authorised representatives and individuals purporting to be you;
5. Providing ad-hoc or regular information about your relationship with HITAP;
6. Verifying your identity and any information you provide to us;
7. Promoting our events and projects;
8. Providing, managing, operating, processing and administering our services to you;
9. Meeting requirements for HITAP’s operations;
10. To communicate with you to update you on HITAP’s mission, work or future changes;
11. For statistical and surveys;
12. For data matching and administrative purposes;
13. To facilitate data analysis and business planning purposes;
14. To process your enquiries and any and all other ancillary administration;
15. For vendor management and communications purposes;
16. For government, compliance, audit and other regulatory reporting purposes, including meeting requirements imposed by any law, rules, regulations, agreements imposed by the Royal Thai Government, project partners, third parties service providers, industry bodies, etc;
17. For security, safety surveillance and monitoring purposes;
18. For internal reporting and/or accounting purposes; and
19. Purposes incidental to each or all of the above.
We may also contact you by any communication means which you have given us your contact details, including but not limited to via phone, email, face to face meetings, networking, interviews, SMS, fax, mail or electronic mail, internet messaging services, etc., for the purpose of getting your feedback or for providing you with information which we believe could be of interest to you or your organisation.
We do not knowingly solicit or collect personal data from children below the age of 18. If we discover that we have accidentally collected personal data from a child below the age of 18, we will remove that child’s personal data from our records as soon as reasonably possible. However, we may collect personal data about children below the age of 18 years if authorised by the parent or legal guardian responsible over for the child.
We only collect, process, use or disclose such Personal Data, in accordance with this Notice. If you are acting as an intermediary, or otherwise on behalf of a third party, or supply us with information regarding a third party, you undertake that you are an authorised representative or agent of such third party and that you have obtained consent from such third party to our collection, processing, use and disclosure of his/her Personal Data. Because we are collecting the third party’s data from you, you undertake to make the third party aware of all matters listed in this Notice by referring the third party to our website.
You consent to the collection, use and disclosure of your Personal Data for the above-mentioned purposes and agree to be bound by the obligations it imposes on you, when you accept this Notice. You accept this Notice when you continue to browse on HITAP’s website or continuing to engage with HITAP.
When you consent to us collecting and/or processing your Personal Data, it is on you to ensure that all Personal Data submitted to us is complete, accurate, true and correct at the time of submission. You are also requested to inform us should there be any changes to the Personal Data that you had submitted to us. Failure to do so may result in our inability to provide you with products and services you have requested.
Please note that if you do not consent to any of the above business purposes, HITAP may not be able to satisfy the purposes for which the information was collected.
On occasion, we may use third party agents and service providers to assist us in the use of your Personal Data as outlined under "What purposes does HITAP Collect, Use and Disclose Personal Data?" You consent to such use of your Personal Data by continuing to browse on HITAP’s website or continuing to engage with HITAP.
HITAP will not transfer Personal Data within or outside Thailand unless we have assurance the Personal Data will be accorded a level of protection which is comparable to those of PDPA or when the individual whose Personal Data is processed gives the consent.
We will cease retaining your Personal Data, as soon as it is reasonable to assume that the purpose for collecting/processing your Personal Data has been fulfilled, and there is no other legal or business purposes to continue retaining your Personal Data.
The Personal Data that we hold about you may be stored on cloud. HITAP will ensure that there is a variety of reasonable security measures to maintain the safety of your Personal Data. All electronic storage and transmission of Personal Data is secured and stored on managed servers with controlled access and appropriate security technologies.
Although every reasonable effort has been made to ensure that all Personal Data will be so protected, HITAP cannot be responsible for any unauthorised use or misuse of such information and from risks which are inherent in all internet communications.
Your Personal Data will only be disclosed for the express purpose of delivering the product or service requested and shall not be sold or disclosed to any other company for any other reason whatsoever without your consent.
You may visit our micro-sites on various social media platforms, and as such, may choose to provide us with personal data through these social media platforms, such as through forms, account portals, interfaces, and interactions with other customer support portals/channels. By doing so, you consent to the use of this personal data in accordance with this Privacy Policy.
HITAP may receive information related or connected to an account with a third-party service that you use to sign up or log in, or when you associate that account. For instance, when you associate your account, we may receive your public profile, your friends list, your contacts, and your email address.
If you delete your profile from a third-party service, such as Facebook, information that has been shared with HITAP from that service may still be retained by HITAP. If you wish us to delete such information, please contact HITAP’s officer at comm@hitap.net.
Please contact us should you wish to have access to or seek to update, correct or withdraw the consent to collect and use your Personal Data. Your email should identify yourself and state which Personal Data and information about its use and/or disclosure is requested.
We will respond to your request as soon as reasonably possible. In the event we are not able to respond to your request within thirty (30) days after receiving your request, we will inform you before the deadline. If we are unable to provide you with any Personal Data or to make a correction you have requested, we shall inform you of the reasons unless where we are not required to do so under PDPA.
If you are concerned about the handling of your Personal Data, wish to be removed from our email subscription or contact lists, or if you have any complaints or queries related to your Personal Data or our Notice, please contact HITAP’s officer at comm@hitap.net. Please clearly identify yourself and the purpose of your query.
HITAP reserves the right to change this Notice with or without notice from time to time and will make the updated statement available on our website.
For questions and/or comments about our privacy policy, please contact us at comm@hitap.net
Health Intervention & Technology Assessment Program
6th Floor, 6th Building, Department of Health,
Ministry of Public Health, Tiwanon, Rd, Muang, Nonthaburi 11000
Tel: +662-590-4549, +662-590-4374-5
6th Floor, 6th Building, Department of Health, Ministry of Public Health, Tiwanon, Rd, Muang, Nonthaburi 11000