- Privacy policy about training

Privacy Notice for Training Participants

Siriraj Health science Education Excellence center, Education Department, Faculty of Medicine Siriraj Hospital, Mahidol University (from now on referred to as "we") places great importance on protecting your data. To ensure your confidence that we will cover and handle your data according to the laws on personal data protection, we have established this Privacy Notice regarding personal data. As a participant in our training, this is to inform you of how personal data is processed, including collection, use, and disclosure. We have also outlined your rights regarding personal data and provided contact information for inquiries.

1. Personal Data Processing Information

In general, we will collect your personal information by requesting or obtaining such information directly from you through the systems and channels we specify, such as online or paper training application forms or acknowledgment letters with the list of participants provided by your affiliated department/organization.

In this regard, we may process the collection of your personal information, including general personal data such as:

Identity Data: Information used for identification purposes, such as salutation, full name, medical professional license number, participant type, and individual photos.
Contact Data: Information related to contact details, including mobile phone number, work phone number, email, and address.
Participation Activity Data: Information related to participation in various activities, including still images, dynamic atmosphere recording, and training session videos.
Work-related Data: Information about work, including job positions, managerial roles, and affiliated units.
Opinions and Feedback Data: Information regarding opinions, expectations, and satisfaction with training participation.
Other Personal Data: Additional personal information for convenience as necessary, such as food preferences (in case of catering or lunch arrangements), vehicle brand and registration plate number (if parking is provided for training participants), etc.
Health Screening Data: Information collected as part of pandemic prevention measures (in case of onsite training)Top of FormBottom of Form

Sometimes, we may need a copy of your identification card to verify and confirm your identity. This document contains sensitive personal information, including religion and blood type.

In general, we do not intend to collect and use the information about religion and blood type that appears on the copy of your identification card for any specific purposes. If you provide us with a copy of your identification card, please redact or cover the information mentioned and sign it. Alternatively, you may authorize us to censor this information on your behalf with mutual agreement, such as refunding the registration fee.

2. Purpose of Collecting, Using, or Disclosing Personal Information

In participating in the training programs we organize, we may process your personal information for various purposes on legal bases, including but not limited to:

	The purpose of processing data	Types of Personal Data	The lawful bases for data processing
1	For use in the application process for participation in training courses organized by the Center of Excellence in Health Science Education and for storage as part of the training participant database of Siriraj Health science Education Excellence center.	Identity data, Contact data, Work-related data, and Convenience-related data	Contractual Basis
2	For use in creating certificates, both as documents or in e-Certificate format, and for compiling a directory or website of training participants.	Identity data, Contact data, Participation Activity data, and Work-related data	Contractual Basis
3	For the management and facilitation of training participants, such as designing and formatting training sessions appropriately, coordinating communication with participants, announcing the list of participants through designated channels, preparing meals and refreshments, arranging parking spaces, recording videos for participants to review later, screening following disease prevention measures (in the case of onsite training), the training process, and announcing results through the website. Participants can check their training status at any time.	Identity data, Contact data, Participation Activity data, Work-related data, Convenience-related data, and Health Screening data	1. Contractual Basis 2. Legitimate Interests
4	For legal and beneficial purposes, such as capturing still or motion images during activities for publication on the website of the Center of Excellence in Health Science Education, sending data to the unit responsible for the Internal Audit process of the Faculty of Medicine Siriraj Hospital, analyzing data for quality improvement and training process, and analyzing data in the form of reports or statistical analysis for quality assurance of the Center of Excellence in Health Science Education. In all cases, we will process personal information to prevent identification before conducting the analysis.	Identity data, Contact data, Participation Activity data, Work-related data, Opinions and Feedback data, Convenience-related data, and Health Screening data	Legitimate Interests
5	For legal compliance purposes, such as responding to requests or referring information to government agencies or authorities with legal investigative powers when necessary.	Identity data, Contact data, Participation Activity data, Work-related data,	Legal Obligation
6	For public relations and information to participants who have previously attended training sessions from Siriraj Health science Education Excellence center, we have established a method that allows participants to subscribe or unsubscribe at any time they wish.	Identity data and Contact data,	Consent

3. The duration for collecting personal data.

We will keep your data for as long as necessary to collect, use, or disclose personal information. The criteria used to determine the retention period include the duration of our relationship with you in any capacity, such as between the training service provider (us) and the training service recipient (you). Generally, we will store your data for 3 years from the end of each training session. After that, we will delete or anonymize your data to make it non-identifiable.

If the service recipient has yet to utilize the service, register for training, or purchase with Siriraj Health science Education Excellence center, we will delete their data within three years.

Additionally, we may need to retain some data indefinitely for specific courses that involve creating rosters or training records, such as identity, contact, and work-related data.

4. Disclosure of information to other organizations

Sometimes, we may utilize specific types of Cloud Service Platforms, such as Google Form, Microsoft Form, or the Siriraj Health science Education Excellence center database, solely as tools for creating registration forms and assessing online training results. There is no transmission of the personal data of the training participants to these service providers for processing. Following the completion of each training session, we will continue to store the personal data of training participants in the aforementioned Cloud Service Platform for an additional 3 years.

5. Your rights as a data owner

As the personal data owner, you have rights as specified by the Personal Data Protection Act B.E. 2562 (2019) of Thailand (PDPA). You can use your rights through the channels we provide in Section 8. Your various rights are detailed as follows:

5.1 Right to Withdraw Consent

In the case that we require your consent, such as requesting your consent for marketing communication and market information updates to individuals who have previously attended our training services, you have the right to withdraw your consent for the processing of personal data that you have previously granted to us unless the withdrawal of consent is legally restricted or there is a contractual obligation beneficial to you. It is important to note that withdrawing consent will not affect the processing of personal data you have previously consented to by the law.

5.2 Right to Access

You have the right to access and request a copy of your information under our responsibility, including asking us to disclose the acquisition of such information you have not consented to provide.

5.3 Data Portability Right

You have the right to request us to transfer the personal data you provided to another organization or entity as complied with by law.

5.4 Right to Object

You have the right to object to processing data related to you in data collection, use, or disclosure of personal information about yourself, as complied by law.

5.5 Erasure Right

You have the right to request us to delete your data as complied by law. However, please note that we may store your data electronically, and some systems may not allow for complete deletion. In such cases, we will arrange for the data to be destroyed or anonymized to make it non-identifiable.

5.6 Right to Restrict Processing

You have the right to request us to suspend the use of your data as required by law, such as:

During the period when we verify your request to correct your data to be accurate, complete, and up-to-date.
When your data is collected, used, or disclosed without legal authorization.
When your data is no longer necessary for the purposes, we have informed you of the data collection, but you wish us to continue to retain the data to maintain your legal rights.
During the period when we are providing evidence to demonstrate to you the legality of collecting, using, or disclosing your personal information or verifying the necessity of gathering, using, or disclosing your data for a public interest arising from your using the right to object to the collection, use, or disclosure of your personal information.

5.7 Rectification Right

Suppose you find our information incorrect or have changed your personal information. In that case, you can request us to correct your personal information to ensure that the personal data is accurate, up-to-date, complete, and not misleading.

However, by law, we may reject using such rights by the data owners or an authorized representative if it does not comply with legal requirements.

6. Data Security Measures

We have taken various measures to ensure the security of your data, both technically and in terms of management. These measures include defining authorized personnel to access data and preventing any unauthorized access, deletion, destruction, usage, alteration, modification, or disclosure of personal data without permission. All these measures align with our Information Security Policy and industry best practices.

We have created a policy for protecting personal data and made it available to everyone in the organization. This policy includes guidelines to keep personal data confidential, integrity, and available as needed. We have arranged for a review of the abovementioned policy, including this declaration, at the right time.

7. The modifications and changes are notified through this notification.

We may temporarily modify and update this privacy notice, and when such changes happen, we will announce it through our website and email you. If it is necessary to obtain your consent, we will seek additional authorization from you.

8. Contact Method

If you have any concerns or require further information about how we protect your personal information, how we collect, use, or disclose your data, or how you can exercise your rights, please feel free to contact us through any of the following channels:

Organization	Siriraj Health science Education Excellence center
Address	Room 309, Srisavarindira Bld. 3rd Floor, Room No. 309, 2 Wanglang Road Bangkoknoi, Bangkok 10700
Phone Number	02-419-9978
Email	sishee@mahidol.edu

or you can contact the Data Protection Officer (DPO):

Organization	Siriraj Informatics and Data Innovation Center (SiData+), Faculty of Medicine Siriraj Hospital, His Majesty the King's 80th Birthday Anniversary 5th December 2007 Building (SiMR)
Address	2 Wang Lang Road, Siriraj, Bangkok Noi, Bangkok, 10700
Phone Number	02-414-1368
Email	sidata@mahidol.ac.th

or contact the Personal Data Protection Officer, Mahidol University, via privacy@mahidol.ac.th