DYM Medical Clinic Indonesia (hereinafter referred to as "Our Clinic") has established this privacy policy (hereinafter referred to as "this Policy") regarding the handling of users' personal data in the services provided on this website (hereinafter referred to as the "Services"), as follows:

• Article 1 (Personal Data)

  Personal Data means personal data as defined in Law Number 27 of 2022 on Personal Data Protection (“Personal Data Protection Law”), namely data about an individual who is identified or identifiable, either separately or in combination with other information, directly or indirectly, through electronic or non-electronic systems (hereinafter referred to as "Personal Data").

• Article 2 (Lawful Basis for Processing Personal Data)

  We process personal data on the basis of:
  • Law Number 27 of 2022 on Personal Data Protection
  • Government Regulation Number 33 of 2026 on the Implementing Regulations of Law Number 27 of 2022 on Personal Data Protection
  • Law Number 17 of 2023 on Health
  • Government Regulation Number 28 of 2024 on the Implementing Regulations of Law Number 17 of 2023 on Health
  • Minister of Health Regulation Number 24 of 2022 on Medical Records
  • Minister of Health Regulation Number 36 of 2012 on Medical Confidentiality
  • The consent you provide when completing the registration form or using our digital services.

• Article 3 (Types and Methods of Collecting Personal Data)

  When an individual (hereinafter referred to as the "User") registers to use the Services, Our Clinic may request general and specific Personal Data such as name, date of birth, address, telephone number, e-mail address, bank account number, credit card number, driver's license number, and health information. In addition, Our Clinic may collect transaction records and payment information, including the User's Personal Information, between the User and our partners, including information providers, advertisers, ad distributors, and the like (hereinafter referred to as "Partners").
  
  The details and relevance of the Personal Data we collect are as follows:
  • Identity and contact data (full name, gender, date of birth, address, telephone number, e-mail address, and required identification numbers): for registration, patient identity verification, creation of medical records, and communication with the User;
  • Health data and information (complaints, medical history, examination results, diagnoses, procedures, prescriptions, and other medical notes): for examination, treatment, and preparation of medical records in accordance with laws and regulations;
  • Biometric data, fingerprints, and voiceprints: processed solely for patient registration and identity verification;
  • Insurance data: for the coverage guarantee and service fee claims process;
  • Personal financial data (bank account number, credit card number, and transaction and payment records): for billing, payment, and refunds for paid services; and
  • Technical data (IP address, device type, and access logs) recorded automatically when the User accesses the Services: for operating and securing the Services.

• Article 4 (Purposes of Collecting and Using Personal Data)

  The purposes for which we collect and use Personal Data are as follows:
  
  a) To provide and operate Our Clinic's services for Users
  b) To respond to inquiries from Users (including to verify the User's identity)
  c) To send e-mail notifications about new features, updates, campaigns, and the like for the services used by the User, as well as information about other services provided by Our Clinic, based on the User's Consent.
  d) To contact Users when necessary regarding maintenance, important notices, and the like.
  e) To identify users who have violated the Terms of Use or who attempt to use the services for unlawful or improper purposes, and to refuse their use of the services.
  f) To enable Users to view, change, or delete their own registration information, or to view the status of their use of Our Clinic's services.
  g) To fulfil legal obligations in the form of reporting to the Ministry of Health, the Health Office, and other competent authorities in accordance with laws and regulations
  h) To bill Users for paid services.
  i) For purposes related to the above purposes of use.
  
  In the event of a change in the purposes of use, Our Clinic will notify Users of the new purposes of use in the manner determined by Our Clinic or announce them on this website.

• Article 5 (Disclosure of Personal Data to Third Parties)

  We may disclose, provide access to, or share your Personal Data with other parties for the following purposes, as well as for other purposes permitted by applicable laws and regulations, including:
  
  • Medical personnel, health workers, and other health service facilities involved in the User's care or referral, to the extent necessary for the purposes of health services;
  • Insurance companies or other guarantors designated by the User, for the purposes of coverage guarantees and service fee claims;
  • Personal Data Processors that process Personal Data, which are contractually bound to protect the User's personal data and are prohibited from using it for any purpose other than providing the services required by Our Clinic.
  • The Ministry of Health, the Health Office, law enforcement authorities, courts, and other competent authorities, in order to fulfil legal obligations or pursuant to lawful requests in accordance with laws and regulations; and
  • Third-party recipients of information that are contractually bound to protect the User's personal data and are prohibited from using it for any purpose other than providing the services required by Our Clinic.
  
  With respect to every Personal Data Processor and Third Party, Our Clinic ensures that a written agreement is in place requiring the Personal Data Processor and Third Party to process Personal Data only in accordance with Our Clinic's instructions, to maintain the confidentiality and security of Personal Data, and not to engage any other processor without the written consent of Our Clinic, in accordance with the provisions of applicable laws and regulations.

• Article 6 (Access to and Copies of Personal Data)

  Users may request access to and copies of Personal Data about themselves. Copies are provided only for Personal Data that does not disclose the Personal Data of other persons. Our Clinic must refuse access to data that would endanger the security, physical health, or mental health of the User or other persons, or that conflicts with the interests of national defense and security.

• Article 7 (Personal Data Retention Period)

  Our Clinic retains Personal Data only for as long as necessary to achieve the purposes of processing and/or to fulfil legal obligations. The Retention Period for each type of Personal Data is based on the retention provisions set out in laws and regulations, in particular a minimum of 25 (twenty-five) years from the date of the User's last visit.

• Article 8 (Personal Data Security)

  Our Clinic implements technical and operational measures to protect Personal Data against unauthorized access, disclosure, and alteration, misuse, destruction, and/or loss, including data encryption, access rights restrictions, system user authentication, data backups, and logging of processing activities. All medical personnel and staff of Our Clinic are also bound by the obligation to maintain medical confidentiality.

• Article 9 (Rights of Users as Personal Data Subjects)

  Users have the following rights:
  • Right to information
  • Right to rectification
  • Right of access and to obtain copies
  • Right to end processing, delete, and/or destroy Personal Data
  • Right to withdraw consent.
  • Right to object.
  • Right to suspend or restrict processing.
  • Right to sue and receive compensation.
  • Right to data portability
  
  The exercise of users' rights shall be in accordance with applicable laws and regulations.

• Article 10 (Changes to the Privacy Policy)

  Our Clinic may amend this Policy from time to time to reflect changes in the services or applicable laws and regulations. If We decide to amend this Policy, We will notify you of such changes through Our official channels before the changes take effect.

• Article 11 (Contacting Our Clinic)

  For questions regarding this Policy, please contact:
  Address : Menara Astra, 3rd Floor, Jl. Jenderal Sudirman, Kav. 5-6, Karet Tengsin, Tanah Abang, Central Jakarta Administrative City, DKI Jakarta Province, 10220
  Name : DYM Medical Clinic Indonesia
  Unit : Customer Service
  E-mail address : info@dym.co.id
  

Address：Menara Astra, Lantai 3, Jl. Jenderal Sudirman, Kavling 5-6, Karet Tengsin, Tanah Abang, Kota Administrasi Jakarta Pusat, Provinsi DKI Jakarta, 10220
Name：DYM MEDICAL CLINIC
Department: Customer Service
E-mail address：info@dym.co.id