Skip to content

Personal Data Notice

CARDIAC VASCULAR SENTRAL (KUALA LUMPUR) – CVSKL is subject to the personal data protection principle under the Personal Data Protection Act 2010 (hereafter referred to as PDPA) with effect from 15 November 2013, which regulates the processing of personal data in commercial transactions, The terms, “personal data”, “processing” and “commercial transactions” shall have the meaning provided in the PDPA.

It is obligatory that you supply us with your personal data. If you fail to supply us with such personal data, we may not able to process and/or disclose your data for the purposes provided in item C) below. This Personal Data Notice applies to any person whose personal data is belong processed by CVSKL. We Wish to inform you how your personal data is being processed by and on behalf of CVSKL

A. Sources of the Personal Data Your sources of data are collected from various sources, including information you have provided us, information from third parties and information in the public domain

B. Description of the Personal Data Your personal data processed by CVSKL may include, where relevant:- Name, date of birth, identity card or passport, name of employer/company, home, and office address, telephone/handphone number, facsimile number, email address, occupation, age, gender, marital status, weight, height, photos, race, nationality, religion, family and next of kin information, medical check-up results, medical records, medical records number, medical reports, diagnosis, personal health records, criminal history investigation results, insurance details, and any other personal data required for the processes set out in the purpose of the personal data.

C. Purpose of the Personal Data Your personal data may be processed for the following purposes,

  1. For medical and healthcare services
  2. To facilitate the patient’s personal needs
  3. To establish and manage medical records and medical reports
  4. To facilitate the payment process relating to the patients
  5. To institute debt recovery proceeding against defaulters
  6. To report the personal data to the relevant authorities and/or third parties under the governing laws relevant to the healthcare  industry
  7. To share the personal data within CVSKL Management and its related companies as defined in the Companies Act 1965
  8. To market and advertise, analysis and improvement
  9. To administer and respond to requests, queries, complaints and legal issues
  10. For education and training
  11. For any other purpose that is incidental or furtherance to the above purposes.

D. Disclosure of the Personal Data Your personal data may be disclosed to the following parties, where: –

  1. Healthcare professional (as defined in PDPA)
  2. CVSKL and its related companies
  3. Government agencies, local authorities, non-government agencies
  4. Paying and Insurance agents
  5. Debt collection authorities and agencies
  6. Financial Institutions
  7. Legal Firms
  8. Auditors
  9. Other private & public hospitals, or other healthcare providers
  10. Training providers
  11. Family and next of kin
  12. To such parties as may be permitted under the law of Malaysia
  13. To such parties as may be required by law, court, regulator or legal process to disclose
  14. Any person which Cardiac Vascular Sentral Kuala Lumpur (CVSKL) may deem necessary.

E. Access and Update the Personal Data CVSKL shall do its best to ensure that the personal data we hold about you is accurate, complete, not misleading and up-to-date. If there are any changes to your personal data, or if you believe that the personal data we have about you is inaccurate, incomplete, misleading or not up-to-date your personal data please contact our PDP Officer at 03-22767000 (ext 0003) to update your data immediately.