DATA PRIVACY STATEMENT

This Data Privacy Statement (“Statement”), which has been prepared in relation to R.A. 10173, otherwise known as the Data Privacy Act of 2012, and its implementing rules and regulations, describes how personal information are collected, processed, disclosed, and stored by Surigao Del Norte State University (“SNSU”) and is applicable to its employees and all persons who apply for or avail of any of SNSU’s products and services, or who have established or propose to establish an account with SNSU, or who have provided or propose to provide third party security to Surigao Del Norte State University (“Client”).

WHAT DATA TO BE COLLECTED FROM YOU

To provide the Client with SNSU’s products and services and/or to implement Client-requested transactions, SNSU shall collect personal information from the Client which may include, but are not limited to:

Name, Age, Date/Place of Birth, Gender, Civil Status, Nationality

Address and Contact Details

Educational Background

Family Background

If deemed necessary, SNSU may request to verify the Client’s personal information, or seek additional information from regulatory and other government agencies.

PURPOSES OF DATA PROCESSING

SNSU shall process the Client’s personal information in connection with any of the following purposes:

Create, maintain, and/or terminate user accounts;

Ease of contacting/communicating with clients;

Evaluate, approve, provide, or manage applications of educational products and services, and other transactions that the Client has requested;

Comply with know-your-customer information requirements;

Evaluate Client’s eligibility for SNSU’s products and services;

Perform profile and risk analysis;

Provide extensive and quality support to the Client;

For internal purposes, such as administrative, operational, or;

Comply with its reporting obligation to government authorities under applicable laws, rules and regulations.

SNSU’S METHOD OF PROCESSING PERSONAL DATA

Processing refers to the collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure or destruction of personal information. If necessary for the efficient delivery of SNSU’s products and services, the processing of personal data may be outsourced to third party service providers subject to compliance with this Statement and the provisions of the Data Privacy Act and its Implementing Rules and Regulations.

SNSU shall collect personal information through, but not limited to, any of the following:

Accomplishment and/or signing of forms/documents

Online enrollment through electronic channels and services (e.g. my.SNSU.edu.ph, SNSU G Suite Accounts, etc.)

WHEN DO WE COLLECT PERSONAL INFORMATION

SNSU collects information upon the Client’s application for, availment of and/or usage of SNSU’s products and services. This includes, but not limited to, student/employee account opening, signing-in to e-portal channels, etc.

RECIPIENTS OF INFORMATION

Personal information may be processed and shared with various units within SNSU to the extent necessary for any of the purposes herein declared, to credit information bureaus,or to government authorities under applicable laws, rules and regulations.

RETENTION AND DISPOSAL

Retention and disposal of personal information shall be made in accordance with the Records Disposal Policy and Records Disposition Schedule of SNSU as approved by the National Archives of the Philippines under RA 9470.

HOW WE SAFEGUARD PERSONAL INFORMATION

In accordance with the Data Privacy Act, SNSU, its employees, agents and representatives, shall handle personal information with utmost care and adhere to appropriate organizational, physical, and technical measures to maintain the confidentiality, integrity and security of all personal information in its possession.

THE CLIENT’S RIGHTS

In accordance with the Data Privacy Act, the Client has the right to:

Be informed whether their personal information shall or have been processed;

Reasonable access to their personal information;

Require SNSU to update their personal information;

Suspend, withdraw, or order the blocking, removal, or destruction of personal information if SNSU is not required to retain it by law or for legitimate business purposes and subject to the conditions for the legitimate exercise of the said rights under the Data Privacy Act and its IRR.

DATA PROTECTION OFFICER

Any inquiry or request for information regarding this Statement may be addressed to the following:

Data Protection Officer

Surigao Del Norte State University

Narciso St.