DATA PRIVACY NOTICE FOR DATA SUBJECTS
DATA PRIVACY POLICY STATEMENT
University of Makati recognizes its responsibility of protecting personal and sensitive information that it collects from its clients such as (a) current, former, or prospective students, (b) current, former, or prospective employees, (c) alumni, (b) guests/visitors through both online and onsite transactions, as part of its operations as a duly recognized higher education institution that is fully owned by the City Government of Makati. As such, the university instituted security measures to ensure that the information gathered from data subjects are protected and handled according to existing laws.
Now, in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, its implementing rules and regulations, and other issuances of the National Privacy Commission, and in compliance to RA 9470, otherwise known as the National Archives of the Philippines Act of 2007, and related laws, the university declares that it will collect from you, the data subject, personal information, and sensitive personal information starting from your online or onsite access to avail our academic or administrative services as found in our University campus or in our website, Facebook page, google forms, or thru other official online or onsite transactions.
WHAT PERSONAL INFORMATION WE COLLECT
Depending on the type of transaction with us, the data or information to be collected from the data subjects may include, but are not limited to the following: fullname, date of birth, email address, contact information, gender, and other personal or sensitive identifying information or personal academic or administrative records.
WHEN COLLECTING PERSONAL INFORMATION, WHO CAN ACCESS IT
The data collected and generated thru online or onsite transactions with the University, shall be processed and accessed by university personnel designated by the university as data controller and/or data processor.
HOW WE KEEP YOUR PERSONAL INFORMATION SECURE
The data collected and generated shall be processed and retained in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, its implementing rules and regulations, and other issuances of the National Privacy Commission, and in compliance to RA 9470, otherwise known as the National Archives of the Philippines Act of 2007, and related laws.
The data collected and generated are protected from accidental or unlawful destruction, alteration and disclosure, fraudulent misuse through sufficient and effective organizational, physical and technical security measures. The University’s Information Technology Center (ITC) has put in place technical securities such as DRaaS, Firewall, Data Center, and other information technology security measures for protecting your data online. Onsite, the University has installed CCTV security system and other physical measures and other security protocols for campus and office security of the data subject’s information.
RIGHTS OF THE DATA SUBJECT
As a data subject, the client has the right to be given access to his or her personal data upon request, dispute any inaccuracies or errors found, removal of personal data from data controller’s filing system found to be outdated, false or illegally obtained. For the complete details of your rights as a data subject, please feel free to email the Data Protection Officer (see email address below).
RESPONSIBILITY OF THE DATA SUBJECT
Submission of the data subject’s / client’s personal data is a requirement for the processing of the application for admission, enrollment or for other (onsite/ online) transactions with the University, thus the data subject/ client has the obligation to provide the University with the requested relevant information. Otherwise failure to do so shall invalidate the processing of the data subject/ client’s transaction with the University. Furthermore, any false or inaccurate data or information submitted to the university may also merit legal, academic or administrative consequences according to existing laws and policies.
LIMITS ON USE AND DISCLOSURE OF YOUR PERSONAL INFORMATION
We only use and disclose personal information in connection with our lawful functions and activities of administering the implementation of our University Charter and Board of Regents Resolutions.
However, when necessary, the data sharing to third parties is subjected to Data Sharing Agreements (DSA) according to existing Data Privacy policies of the National Privacy Commission (NPC). The university shall also share the data to government offices according to the legal mandate or authority of such institution, and all data sharing actions shall be subjected to the principles of transparency, legitimate purpose and proportionality without depriving the data subject of their rights.
By accessing the university of Makati website and our other electronic forms/ written forms (online and onsite transactions), your data are simultaneously collected for decision making of the university management and profiling of your information for research purposes.
DATA PRIVACY CONSENT
I hereby declare that I have read the foregoing provisions, and I am giving my consent for the University of Makati to process my personal information or sensitive personal information during my stay and transaction with the University and its official representatives, without prejudice to my rights as data subject under the existing laws.
_____________________________
Signature Over Printed Name of
Data Subject
Date Signed:
Note:
For student applicants, current students or alumni see Data Privacy Consent Form A
For prospective, current or former employees, see Data Privacy Consent Form B
For TBL Hub students (see separate data privacy consent form)
For Social Media Chatbot (see separate data privacy consent clause)