Introduction

Aster Hospital Qatar (hereinafter referred to as “The Company”, “we”, “us”, “our”) is the “Data Controller” in respect of your Personal Data. The Company provides hospitals with advanced facilities and healthcare experts in Qatar with 15 specialties at a single facility, emerging as a single point model that will provide diagnostic and treatment for various disease conditions.
We understand the importance of protecting the Personal Data of our customers (hereinafter referred to as “customer”, “you”, “user”, “Data Subject”). This Privacy Notice outlines how we process any Personal Data collected from you by accessing, browsing and/or using the website. This Privacy Notice applies only to activities that a customer engages in on this website and does not apply to The Company’s activities that are "offline" or unrelated to the website.
Any capitalized terms used in this Privacy Policy shall have the meanings ascribed to them under applicable Data Protection laws and regulations. 

What Personal Data we collect

We collect the following categories of Personal Data which include but not limited to the following:

• Personal Identifiers: Full Name, Phone Number, Email Address, Username, Organisation Name, Designation, Password, Qatar ID.
• Account and Device Information: IP address, internet domain, browser type, device details etc.

How and When we collect your Personal Data

The methods by which we collect your Personal Data include but are not limited to the following:

• When you purchase medicines for home delivery,
• When you make bookings or purchases through the website including a doctors’ appointment for treatment, health packages, corporate services, home healthcare services or an e-consultation,
• When you register to volunteer with us,
• When you apply for a job using our job portal,
• When you provide feedback on our Feedback Form,
• When you communicate with us through email for the purpose of recruitment and /or recruitment related queries,
• When you communicate with us through social networking websites, third-party applications, or similar technologies.

Use of Your Personal Data

Your Personal Data may be used or processed for various purposes including but not limited to the following:

• (www.aster.qa) collects certain anonymous data regarding the usage of the website. This information does not personally identify users, by itself or in combination with other information, and is gathered to improve the performance of the website.
• Allowing new users to register on our website and/or allowing both new as well as existing users to book appointments.
• To advertise the products and Services of Aster Qatar and send you updates about new products, special offers, and other information that may interest you at the email address you provided,
• To perform studies, research, and analysis for improving our information, Services, and technologies and ensure that the content displayed is customized to your interests and preferences based on your feedback,
• To administer or otherwise carry out our obligations and enforce our rights arising from any agreement entered into between you and us,
• To comply with legal and regulatory requirements, including responding to court orders, or legal processes, establishing or exercising our legal rights, defending against legal claims, and investigating, preventing, or taking action regarding illegal activities, suspected fraud, violations of our terms of use, breaches of our agreement with you, or as otherwise required by law.

If you are a job applicant, your Personal Data will be collected and used by us for the following purposes, and we may disclose your personal data to third parties where necessary for the following purposes:

• Assessing and evaluating your suitability for employment in any current or prospective position within the organization; and
• Verifying your identity and the accuracy of your personal details and other information provided.

Legal Basis for Processing Your Personal Data 

We will only process your Personal Data where we have a legal basis to do so. The legal basis will depend on the purposes for which we have collected and use your Personal Data. In almost every case, the legal basis will be one of the following:

• Consent: For example, where you have provided your consent to receive certain marketing/promotional messages from us or where you have provided your explicit consent for us to process your data during live telemedicine consultation services under tele-Medcare.
• Our legitimate interest: Where it is necessary for us to understand our customers, promote our services, and effectively provide services, provided in each case that this is done in a legitimate way that does not duly affect your privacy and other rights.
• Compliance with law/agreement: Where we are subject to a legal obligation and need to use your Personal Data in order to comply with that obligation. For example, when you may purchase products/services from us, or book appointments we need to use your contact details and payment information in order to process your order.
• Vital Interests: In some limited cases, we may need to process your Personal Data where it is necessary to protect your vital interests or the vital interests of another person.

We will always take steps to ensure that the processing of your Personal Data is fair and lawful and that it does not unduly affect your privacy.

AI Usage

We may use Artificial Intelligence (AI) technologies to enhance healthcare services, including but not limited to supporting diagnostic processes, personalizing treatment recommendations, and automating certain administrative and clinical workflows. These tools are used in accordance with applicable legal and regulatory guidelines, and are subject to internal assessments to ensure accuracy, fairness, and patient safety.
Wherever applicable, separate and explicit consent will be obtained from individuals prior to the use of AI tools in processing their health data or delivering AI-assisted healthcare services.

Children’s Privacy

We are deeply committed to safeguarding the privacy of minors and ensuring compliance with applicable laws pertaining to the collection and processing of the personal data of the children. We do not intentionally gather or request personal data from individuals under the age of 18. Since information regarding minors under the age of 18 is not collected, we do not knowingly distribute Personal Data regarding minors under the age of 18. By accessing this website, you affirm and guarantee that you are 18 years of age or older. We hold no liability for any unsolicited information provided by you, and you consent to the usage of such information in accordance with this Privacy Notice. If we become aware that a person submitting personal data is under 18, we will delete all the information as soon as possible unless it is with the consent and involvement of a parent or guardian. If you believe we might have any information from or about a child under 18, please contact us via email at Privacy@asterdmhealthcare.com.

Term of storage of Personal Data

We take diligent measures to ensure that the Personal Data you provide us is retained only for as long as necessary for the purpose for which it was collected, and for satisfying any legal, accounting or reporting requirements or as required by any applicable law.
If you withdraw your consent from marketing, we will remove your credentials from the marketing database.

Sharing and Transferring of Personal Data

Basis your consent, you authorize us to exchange, transfer, share, your Personal Data within the Aster affiliates / agents / third party service providers / partners / authorities, Health Information Systems (HIS) and from your country to any other countries across the world for legal documentation, marketing purposes, or for providing our services for the purposes specified under this Notice or as may be required by applicable laws and regulations. This will be subject to applicable data localization measures, security measures and applicable regulatory measures.
Please note that, in line with regulatory requirements and basis your consent, all health-related data is securely shared with government-mandated Health Information Exchanges (HIEs) and other applicable platforms to support better care coordination and public health outcomes.
You acknowledge that some countries where we may transfer your Personal Data may not have adequate data protection regime or laws that are as stringent as the laws of your own country. You acknowledge that it is adequate that when Aster Qatar transfers your Personal Data to any other entity within or outside your country of residence, Aster Qatar will place contractual obligations along with technical and organizational measures on the transferee which will oblige the transferee to adhere to the provisions of this Notice. Where applicable, Aster Qatar follows the principle of data localization  with Qatar’s Law No. (13) of 2016 on Personal Data Privacy Protection Law, by storing Personal Data within the jurisdiction where it was collected. Thus, Personal Data is stored within the same jurisdiction as its collection to ensure the accuracy and integrity of the Personal Data.

Exceptions:

There are certain exceptions under which Patient Health Information can be transferred or shared outside the country of collection, by virtue of a decision issued by the Federal or local governmental Health authority in the State and after getting approval from the National Cyber Governance and Assurance Affairs. Such exceptions include, but are not limited to:

• Performing a task related to the public interest according to Law. 
• Fulfilling a legal obligation or order from a competent order. 
• Protecting the vital interests of the individual. 
• Achieving the purposes of scientific research conducted for the public interest.
• Collecting information necessary for investigation in any felony, based on an official request from the investigating authorities.

Your Rights and Control over your Personal Data

We will respect your legal rights in relation to your Personal Data. Aster is committed to protecting them and ensuring compliance if you wish to exercise any of the rights under the Qatar’s Law No. (13) of 2016 on Personal Data Privacy Protection Law.

• For Users in Qatar
• Right to access and review – You have a right to access your personal data available with Aster, which includes accessing it and obtaining a copy of it in a clear and readable format.
• Right to correction– You have the right to request correction of your personal data if the information is incorrect, including the right to have incomplete personal data completed.
• Right to erasure – You have right to get your personal data erased or removed at any time.
• Right to object – You have the right to object to the processing of your personal data if such processing is not necessary. 
• Right to withdraw consent – You have a right to withdraw consent at any time from further processing your data.

To exercise any of your above-mentioned rights, please contact us at     Privacy@asterdmhealtcare.com.  
We will respond to your access request as soon as reasonably possible and/or as per the applicable timeframes laid down by the respective privacy laws/regulations. Should we not be able to respond to your access request within thirty (30) days after receiving your access request, we will inform you in writing of the same as soon as practically possible. If we are unable to provide you with your Personal Data or to make a correction requested by you, we shall inform you of the reasons why we are unable to do so (except where we are not required to do so under the law).
Please note that depending on the request that is being made, we will only need to provide you with access to the Personal Data contained in the documents requested, and not to the entire documents themselves. For example, the Company may not be obliged to provide the employee with access to the disciplinary records, investigation reports, or decisions to terminate, that the organization has created for evaluative and/or investigative purposes of the employee.
You have the right to withdraw your consent at any point, provided such withdrawal of the consent is intimated to us in writing through an email at Privacy@asterdmhealtcare.com requesting the same. Once you withdraw your consent to share the Personal Data collected by us, we shall have the option not to fulfil the purposes for which the said Personal Data was sought, and we may restrict you from using our Services or the website or parts of it as the case may be.

Security

The security of your Personal Data is important to us. We have adopted and maintained reasonable technical and organizational security measures and procedures including access governance and information sharing on a need-to-know basis, password protection, encryption etc. to ensure that the Personal Data collected is secure. We restrict access to your Personal Data to our and our affiliates’ employees, agents, third-party service providers, partners, and agencies on a need-to-know basis and are absolutely limited to the purposes as specified above in this Notice.

Use of Cookies

• Cookies are small bits of data cached in a user’s browser. Aster Qatar utilises cookies to determine whether or not you have visited the home page in the past. However, no other user information is gathered. We may use non-personal "aggregated data" to enhance the operation of our website or analyse interest in the areas of our website. 
• If you would like to find out more about cookies, including how we use them and what choices are available to you, please refer to our Cookie Policy.

International Users and Personal Data

We welcome international users and respect their privacy. We encourage them to visit Aster Medical Travel https://astermedicaltravel.ae for more details on how we handle the Personal Data.

Modifications to this Privacy Notice

The website Privacy Notice and terms & conditions would be changed or updated occasionally to meet the requirements and standards. Therefore, customers are encouraged to frequently visit these sections in order to be updated about the changes on the website. Modifications will be effective on the day they are posted and the date of this Privacy Notice of when it was last updated will appear at the top of this document. Your acceptance of the amended Privacy Notice by  continuing to visit the website or using the services, shall signify your consent to such changes and agreement to be legally bound by the same.

Contact Us

If you have any questions regarding this Privacy Notice, you may contact us using the information below:
DPO Details: Privacy@asterdmhealtcare.com 
+971565037221
Or you can write to us at:
Official Address: Aspect Towers, floor 34, Business Bay, 3402 office number, Dubai, UAE