Privacy Notice
for SOMDUL+ Application
LIFE CARE (THAILAND) CO., LTD.
Information about Data Controller
Data Controller
Name : LIFE CARE (THAILAND) CO., LTD.
Address : 214 Bang Waek Road, Khwang Bang Waek, Khet Phasi Charoen, Bangkok 10160
Contact channels :
Phone number : 02-865-8116
email : somdulplus@gmail.com
Website : http://www.orchardpolyclinic.com/
Data Protection Officer : DPO
Name : Mokepisute Ratarun
Address: 214 Bang Waek Road, Khwang Bang Waek, Khet Phasi Charoen, Bangkok 10160
Contact channels :
Phone number : 02-410-4283
email : mokepisute.r@gmail.com
Personal data for processing
- General Personal Data : name, email, identification data from Facebook or Google or Apple, date of birth, month of birth and year of birth, age, sex, photo of stand straight up include upper shoulder (Structural photo), photo of head shot with earlobes and nose on the line (Facial photo), activities taken more than 3 hours (g. using computer, using phone without hand free, using tablet, standing or working during work, driving, heavy lifting, reading), meal time, bed time, wake up time, taken food and beverage, smoking behavior, drinking behavior
- Sensitive Personal Data :
- Personal data including waist, weight, height, Body Mass Index (BMI), Systolic (top number), Diastolic (bottom number), medical condition including Diabetes Mellitus, High blood pressure, Cardiovascular diseases (such as Coronary artery diseases, Myocardial infarction), Polycystic ovarian cyst, Gestation Diabetes Mellitus, history of deliver infant more than 4 kilograms, Heart arrhythmia, other risk e.g. the risk for heart and vessels, the risk for Diabetes Mellitus, the risk for high blood pressure, the risk for obesity, Blood profile including Cholesterol, Triglyceride, High density lipoprotein (HDL), Low density lipoprotein (LDL), level of blood sugar when fasting, Uric Acid, information and photo of medicine, picture of structural equilibrium result, picture of facial equilibrium result, upper body scan results (head rotation, head tilt, shoulder balance, eyebrow, eyes size, lip angles), pain location, Dizziness, Allergy, Sinusitis, Snoring, Gastroesophageal reflux disease (GERD), Dyspepsia, Trigger finger or other symptoms or diseases
- Health history of the relative family member(s) including Diabetes Mellitus
Personal data processing period
- General Personal Data : During service period. Provided that processing period shall not less than 5 years from the date of receiving.
- Sensitive Personal Data : During service period. Provided that processing period shall not less than 5 years from the date of receiving.
Purposes of personal data processing and legal basis
Purposes of personal data processing
- The Company will collect, use and retain your personal data for researching, developing, operating of efficiency in SOMDUL+ Application. This includes improving individual health record database and Holistic Medicine knowledge database that trustworthiness and acceptable in analyzing and diagnose health problem and for improving the recommendation to the user.
- The Company will process the general health information, medical condition information, blood profile information and health history of the relative family member(s) for risk analysis for the user of SOMDUL+ Application such as the risk for heart and vessels, the risk for Diabetes Mellitus, the risk for high blood pressure, the risk for obesity.
- The Company will process the photo and scan results of imbalance upper body, pain, other symptoms or diseases, activities taken more than 3 hours for creating equation and analysis for the primary suggestion of D-Exercise to re-equilibrium the structure in SOMDUL+ Application.
- The Company will process the bedtime or wake up time or meal time for reminder and goal setting for user of SOMDUL+ Application.
- The Company will disclose your personal data with companies or medical agencies or hospitals for researching and developing the SOMDUL+ Application.
Legal Basis
The Company will process your personal data with the following legal basis:
- Contract: For general personal data processing;
- Consent: For sensitive personal data via your consent. In case of your relative’s health record, you must be obtained consent from your relatives. However, you can withdraw your consent by cancelling in SOMDUL+ Application or contact the Company via channels stated hereabove.
However, the withdrawal of consent shall not affect the processing of your personal data conducted during the period that you have already legally consented. Furthermore, the consent withdrawal may affect the processing in SOMDUL+ Application. The Application will be unable to clearly assess and analyze symptoms and health also the recommendation to patients may be incorrect.
Sources of personal data
The Company receive your personal data via 2 channels as follows:
- Direct Channel (General Personal Data and Sensitive Personal Data) on the date that you input your data in SOMDUL+ Application
- Indirect Channel from Facebook, Google, Apple (your Identification data) on the date of your identity verification and registration via those channel with SOMDUL+ Application
Personal data processing
The Company will collect, use or disclose your personal data by the following process:
❒ Collecting your personal data : The Company will retain your personal data with details as stated in “Personal data for processing” and “Retention of personal data” from the listed in SOMDUL+ Application and the photo taken or uploaded from your device researching, developing, operating of efficiency in SOMDUL+ Application. This includes improving individual health record database and Holistic Medicine knowledge database that trustworthiness and acceptable in analyzing and diagnose health problem and for improving the recommendation to the user.
❒ Using your personal data : The Company will use your personal data for assessment or analysis such as general health information, symptoms or diseases, data of your photo or face detection and link to the database for efficient analysis on the risk of diseases and healing suggestion.
❒ Disclosing your personal data : the Company will keep your personal data confidentially in accordance with law and the purpose as stated hereabove. However, the Company may disclose your personal data with companies or medical agencies or hospitals as follows;
- Companies or medical agencies or hospitals for research and development in SOMDUL+ Application.
- Any personnel whose duties are related to access personal data.
Furthermore, the Company has no necessity to transfer your personal data overseas or to international organizations.
However, in case of sharing your personal data on social media or social network is the process under your intentionally determine. The Company does not involve and support this action. You should carefully realize the security of sharing your personal data.
Retention of personal data
The Company will retain your personal data with the following details:
- Retention form : All of your personal data will be kept in electronic form.
- Data storage : The Company will keep your personal data in Cloud Storage of Google Cloud Platform (GCP) on Google Co., Ltd. Server. The accessing to the system is restricted for designated person.
- Period of retention : as stated in “Personal data processing period”
- Deletion or destroy : After the period of retention or the Company does not have the right or the legal basis for the processing of your personal data. The Company will destroy your personal data by deleting data in data storage within 30 days from the end of such period.
Rights of data subject
Your rights as a data subject are as follows;
- Right to withdraw consent: You have the right to withdraw your consent on personal data processing given to the Company at any time.
- Right of access: You have the right to request access and to obtain a copy of your personal data and to request disclosure of the acquisition of the personal data obtained without your consent.
- Right to rectification: You have the right to request correction and rectification of your data.
- Right to erasure: You have the right to request the Company to erase your personal data for certain reasons.
- Right to restriction of processing: You have the right to request the Company to suspend the use of your personal data for certain reasons.
- Right to data portability: You have the right to transfer your personal data that gave to the Company to other data controllers or to yourself for certain reasons.
- Right to object: You have the right to object the processing of your personal data for certain reasons.
You can contact DPO to comply with the rights stated above by requesting via “Data Protection Officer : DPO”.
In requesting the exercise of these rights, you will not be charged any expenses. The Company will consider and inform the decision within 30 days from the date of receiving the request.