DATA PRIVACY NOTICE
NEC MPC DATA PRIVACY NOTICE
We, the NEC Multi-Purpose Cooperative sincerely value and respect the rights to protection of each of our members and affiliates. It is the duty of each and everyone in our cooperative to notify our members, business partners and other affiliates on how we collect, process, used and safekeep their personal information and to inform them about their rights on Data Privacy in accordance with the implementing rules and regulations specified in Republic Act No. 10173 also known as the “Data Privacy Act of 2012”.
HOW WE GET THE INFORMATION
We collect personal information to our members, business partners and other affiliates through the following:
- Interaction through Social Media (ex. Facebook Page, Messenger)
- Availing our products and services (such as loans, savings, time deposits, etc.)
- Verifying customer identities through CI/BI
- Answering forms (such as loan applications, survey forms, queries.)
- Emails and Letters (like proposal letters, request letters, solicitation letters, etc.)
- Information through our partners and other corporations (ex. Government Institutions, Banks, Lending Corporations, Insurance Companies, and other Cooperatives, Confederations.)
WHAT ARE THE TYPES OF INFORMATION WE COLLECT AND WHAT DO WE WITH IT
This is the following Personal Information that NEC Multi-Purpose Collect:
- Last name, First name, Middle name
- Age
- Sex
- Address (such as City and Provincial)
- Contact Number
- Occupation
- Marital Status
- Salary/Income
- Basic Expenses
- Family Members Information
- Bank account
- TIN number and other Government ID
- Company Name and Address
- Business Name and Address
All the information we collect will be used for daily business purposes, such as daily transactions, marketing, or reports that we need to comply with our partners and government institutions. It is understandable that when a person gives us the above personal information through some of our collecting channels he/she is giving us the authority to collect, use, process, keep safe, and share their information with our partners whether it is for constitutional or statutory requirements making us their Personal Information Processors (PIPs).
HOW WE STORE YOUR INFORMATION
When it comes to safe safekeeping of our member’s and partner’s personal information we don’t take it lightly. NEC Multi-Purpose ensures that to no extent personal information will be misused, modified, interfered with, lost, or disclosed to unauthorized users through the implementation of technical solutions, security practices and processes such as but not limited to the following:
- Document storage security policies;
- Security measures to control access to our systems and premises;
- Limitations on access to personal data;
- Data privacy training for our employees;
- Strict selection of third-party data processors and partners; and
- Electronic security systems, such as firewalls, data encryption and transmission of data through a secured file transfer protocol.
MEMBERS DATA PROTECTION RIGHTS
NEC Multi-Purpose Cooperative members have the rights to:
- Right to Information
- Right to Object
- Right to Access
- Right to erasure of blocking
- Right to rectification
- Right to Data Portability
- Right to damages
RIGHT TO INFORMATION
Under R.A. 10173, your personal data is treated almost literally in the same way as your own personal property. Thus, it should never be collected, processed, and stored by any organization without your explicit consent, unless otherwise provided by law. Information controllers usually solicit your consent through a consent form. Aside from protecting you against unfair means of personal data collection, this right also requires personal information controllers (PICs) to notify you if your data has been compromised, in a timely manner. As a data subject, you have the right to be informed that your personal data will be, are being, or were, collected and processed. The Right to be Informed is a most basic right as it empowers you as a data subject to consider other actions to protect your data privacy and assert your other privacy rights.
RIGHT TO OBJECT
You can exercise your right to object if the personal data processing involved is based on consent or on legitimate interest. When you object to or withhold your consent, the PIC should no longer process the personal data, unless the processing is pursuant to a subpoena, for obvious purposes (contract, employer-employee relationship, etc.), or a result of a legal obligation. In case there is any change or amendment to the information previously given to you, you should be notified and given an opportunity to withhold consent.
RIGHT TO ACCESS
This is your right to find out whether an organization holds any personal data about you and if so, gain “reasonable access” to them. Through this right, you may also ask them to provide you with a written description of the kind of information they have about you as well as their purpose/s for holding them. Under the Data Privacy Act of 2012, you have a right to obtain from an organization a copy of any information relating to you that they have on their computer database and/or manual filing system. It should be provided in an easy-to-access format, accompanied by a full explanation executed in plain language. You may demand to access the following:
- The contents of your personal data that were processed.
- The sources from which they were obtained.
- Names and addresses of the recipients of your data.
- Manner by which they were processed.
- Reasons for disclosure to recipients, if there were any.
- Information on automated systems where your data is or may be available, and how it may affect you.
- Date when your data was last accessed and modified
- The identity and address of the personal information controller.
RIGHT TO ERASURE OR BLOCKING
Under the law, you have the right to suspend, withdraw, or order the blocking, removal, or destruction of your personal data. You can exercise this right upon discovery and substantial proof of the following: Your personal data is incomplete, outdated, false, or unlawfully obtained.
- It is being used for purposes you did not authorize.
- The data is no longer necessary for the purposes for which they were collected.
- You decided to withdraw consent, or you object to its processing and there is no overriding legal ground for its processing.
- The data concerns information prejudicial to the data subject — unless justified by freedom of speech, of expression, or of the press; or otherwise authorized (by court of law)
- The processing is unlawful.
- The personal information controller, or the personal information processor, violated your rights as data subject.
RIGHT TO RECTIFICATION
You have the right to dispute and correct any inaccuracy or error in the data a personal information controller (PIC) holds about you. The PIC should act on it immediately and accordingly unless the request is vexatious or unreasonable. Once corrected, the PIC should ensure that your access and receipt of both new and retracted information. PICs should also furnish third parties with said information, should you request it.
RIGHT TO DATA PORTABILITY
This right assures that YOU remain in full control of YOUR data. Data portability allows you to obtain and electronically move, copy, or transfer your data in a secure manner, for further use. It enables the free flow of your personal information across the internet and organizations, according to your preference. This is important especially now that several organizations and services can reuse the same data. Data portability allows you to manage your personal data in your private device, and to transmit your data from one personal information controller to another. As such, it promotes competition that fosters better services for the public.
RIGHT TO DAMAGES
You may claim compensation if you suffered damages due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, considering any violation of your rights and freedoms as data subject.
THE RIGHT TO FILE A COMPLAINT WITH THE NATIONAL PRIVACY COMMISSION
If you feel that your personal information has been misused, maliciously disclosed, or improperly disposed, or that any of your data privacy rights have been violated, you have a right to file a complaint with the NPC.
To know more about this, please heck https://www.privacy.gov.ph/mechanics-for-complaints
HOW TO CONTACT US FOR DATA PRIVACY CONCERNS
If you have any queries, suggestions, and complaints regarding our Data Privacy Notice you may contact our Data Privacy Officer at:
Postal Address: Unit A & B Baron Bldg. P. Tuazon St. Cubao, Quezon City
Telephone Number: (02) 283-15-56
Data Privacy Officer: Oliver C. Jole jole
Email Address: necmpc.dpso12@gmail.com