Detailed Privacy Practices

Timing of Collection

HSG collects Personal Data from Data Subjects upon entry to the clinic or at the onset of a service, or transaction with HSG, such as medical care, medical consultation, laboratory service and health-related services.

Method of Use

HSG uses Personal Data proportionately as necessary for its legitimate purposes in accordance with HSG Policies. Personal Data are used in accordance with the Data Privacy Act of 2012, Issuance of the National Privacy Commission and the Department of Health.

Purpose of Collected Personal Data

HSG collects and processes Personal Data for the following purposes:

• Purposes necessary for HSG to perform its obligations, exercise its rights, and conduct its functions as a medical, research, and training institution
• Purposes to perform act and decisions necessary for HSG to manage and administer its internal and external affairs as a juridical entity with its own rights, interests and obligations
• Compliance with legal regulatory, administrative or judicial requirements including but not limited to audit, reporting and transparency requirements
• Purposes specific to policy in accordance with a Policy Statement related policies, rules or procedures

Storage, Location, Transmission and Transfer

Personal Data are stored in physical and electronic data processing systems managed by groups, offices, and units of HSG. Physical records are stored in folders or envelopes in drawers or shelves. Electronic records are stored in servers in the possession or control of HSG or in a cloud storage controlled or availed by HSG.

Personal Data are transmitted and transferred in accordance with Data Privacy Act of 2012 and Rule of V of its Implementing Rules and Regulations.

Data Subject Responsibilities

HSG patients, service recipients, their respective representatives and companions, and others within the scope of HSG's Privacy Policy have the following responsibilities:

• Keep the Personal Data and other information submitted to or in the protection of HSG
• Use Personal Data solely for the purpose communicated to HSG
• Report any suspected Security Incident on Personal Data Breach to HSG through the contact information of HSG Data Protection Office provided herein
• Ensure accuracy of Personal Data and other information
• Obtain the consent of the Data Subject prior to processing of personal information

Retention Period

HSG retains data in accordance with its policies on retention observing laws and government rules and regulations. In the absence of an applicable rule of retention, Personal Data shall be retained by HSG group, office, or unit in accordance with locally and internationally accepted practices and standards.

Definitions

"Personal Data" refers to all types of personal information, sensitive personal information and privileged information under the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

"Data Subject" refers to an individual whose personal information is processed.

"Personal Information" refers to any information whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual.