Data Privacy

What is Data Privacy Act of 2012?

Republic Act no. 10173, also known as the Data Privacy Act of 2012 (DPA), aims to protect your personal data while ensuring free flow of information for innovation, growth, and national development.

What is personal data?

The DPA took effect on August 15, 2012, and its implementing rules and Regulations (IRR) took effect on September 10, 2016.

What is data sharing?

Data sharing is the act of disclosing or transferring personal data that is under the control of custody of a personal information controller or personal information processor, such as a company or organization, to a third party, usually with the instructions or the personal information controller.

What is processing of personal information?

Personal data can be processed in a variety of ways, including collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure or destruction. This can be done through automated means or through manual means.

What is data subject?

“Data Subject” refers to an individual whose personal, sensitive personal, or privileged information is processed.

What are the rights of the data subject?

The data subject is entitled to the following rights:

Right to be informed. The data subject whose data is being processed has the right to be informed about the processing of their personal information.
Right to Object. The data subject whose data is being processed has the right to object to said processing. If the manner in which the data is processed changes, they will be informed and provided with the opportunity to object.
Right to access. The data subject whose data is being processed has the right to reasonable access to that data. To ensure security, measures are taken to confirm their identity before granting access to the personal information.
Right to correct. The data subject whose data is being processed has the right to identify any inaccuracies in the information and to have the person or organization responsible for controlling the data to correct it promptly, unless the request is deemed unreasonable.
Right to Rectification, Erasure or Blocking. The data subject whose data is being processed has the right to request that the collection, storage, and use of their data be suspended, withdrawn, or blocked, and that the data be removed or destroyed from the records of the person or organization responsible for controlling it.
Right to damages. The individual whose data is being processed has the right to be compensated for any damages resulting from the inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of their personal data.

What can the company do with you consent?

With your consent, the company can collect, use, process, and analyze your personal information to deliver the services you signed up for, as well as to improve the products and services. This could include analyzing customer feedback and usage data, offering personalized content and services, and developing new features and products.

What happens if the data subject does not give his consent?

If the data subject does not give their consent, their information may still be processed for the purposes of service delivery, billing, etc. However, they will not receive any promotional materials loyalty rewards, raffle notices, or other promos.

Can the data subject withdraw his consent?

Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), aims to protect your personal data while ensuring free flow of information for innovation, growth, and national development.

Can the data subject request access to his personal data?

Yes, the data subject can request access to their personal data. They can do this by emailing [email protected] and providing proof and identity. Once their request is verified, they will be provided they will be provided with the necessary information.

How does company protect personal data?

The company takes organizational, physical, and technical measures to ensure the security and confidentiality of personal data. These measures include authentication and authorization procedures, encryption, and regular monitoring and testing of data security systems. Additionally, when data is disclosed to third party partners, agents and service providers, the company ensures that they adhere to the same or higher standards in the handling of the data.

How long does the company keep personal data?

The company keeps personal data for as long as required by the service for individuals with active subscriptions. For individuals who are no longer subscribed, the company keeps their data for no longer than 10 years.