Privacy Policy

Global Privacy Policy of RS Muhammadiyah Ahmad Dahlan

1. Introduction and Scope of Policy RS Muhammadiyah Ahmad Dahlan ("The Hospital", "We", "Us") is fully committed to protecting the privacy and security of your personal and health data. This global Privacy Policy governs how We collect, use, store, and protect your information across all our healthcare operations and digital platforms.

This policy applies to our Hospital Management Information System (SIMRS), website, patient portals, and all mobile applications officially published and operated by us, including but not limited to the application RSM Ahmad Dahlan developed by IT RSM Ahmad Dahlan.

2. Information We Collect We collect information that you provide directly to us, as well as data automatically recorded in our digital ecosystems, which includes:

  • Personal Identity Data: Full name, National Identity Number (NIK), date of birth, gender, physical address, phone number, and email address.

  • Medical & Clinical Data (Electronic Medical Record / EMR): Medical history, diagnosis results, treatment records, medication prescriptions, and supporting data such as imaging and radiology results securely stored on our servers.

  • Technical Data: IP address, browser type, access time, and activity logs on our web and mobile applications for the purposes of server maintenance and security.

3. Use of Information The data collected will be managed centrally through our SIMRS and used for the following purposes:

  • Providing precise, continuous medical, administrative, and healthcare services.

  • Processing healthcare registrations, managing doctor schedules, and handling billing/insurance claims.

  • Improving service efficiency, including operational reporting and system evaluation (e.g., server load analysis and medical data management optimization).

4. Data Integration and Sharing (SATUSEHAT) We will never sell, rent, or exchange your personal data with third parties for commercial purposes. Your data will only be shared under the following conditions:

  • Legal & Regulatory Obligations: In compliance with the Regulations of the Indonesian Ministry of Health, your medical record data will be securely transmitted and automatically integrated via API (Application Programming Interface) protocols into the SATUSEHAT platform owned by the Indonesian Ministry of Health.

  • Insurance Service Partners: For the purpose of processing health insurance or BPJS (Social Security Administrator for Health) claims, subject to your explicit consent.

5. Data and Server Security We implement strict technical and organizational security standards to protect EMR data and your personal information from unauthorized access, data breaches, or unauthorized alterations. These security measures include data encryption, strict staff access rights management, and regular server monitoring to minimize downtime risks and ensure data integrity across all our digital platforms.

6. Data Storage and Retention Your personal data and medical records will be stored within our secure server infrastructure and/or data centers that comply with national security standards. We retain your data for the period mandated by Indonesian laws and regulations regarding medical archiving and record-keeping.

7. Data Deletion Process and Account Removal We respect your right to manage your personal data across our digital platforms, including our mobile applications. If you wish to delete your digital account or request the removal of your personal data associated with our mobile applications (such as RSM Ahmad Dahlan), you can submit a formal data deletion request through the following channels:

  • Email: admin@rsmadkotakediri.com

  • Phone/WhatsApp: 08113711912

  • Physical Request: Visiting the Medical Record/Administration department at RS Muhammadiyah Ahmad Dahlan.

Important Legal Disclaimer regarding Medical Records: Please be advised that while we will promptly process the deletion of your mobile app accounts and associated access credentials, your Electronic Medical Records (EMR) and clinical history cannot be entirely deleted upon request. The Hospital is legally mandated by the Indonesian Ministry of Health to retain patient medical records for a specific regulatory retention period to ensure continuity of care and legal compliance.

8. Your Rights as a User/Patient You have the right to:

  • Request access to view your profile information as recorded in our digital patient portals.

  • Request corrections or updates to your administrative identity data if there are any inaccuracies.

  • Note: Any modifications to clinical data or medical records can only be authorized and executed by designated medical personnel in accordance with established legal medical procedures.

9. Changes to the Privacy Policy This Privacy Policy may be updated from time to time to reflect upgrades in our IT infrastructure, new digital services, recent API integrations, or changes in applicable laws. We will indicate the date of the latest revision at the top of this document.