PRIVACY NOTICE AND POLICY
Concepts Unlimited & DI Mktg. Corporation, including its affiliates and subsidiaries (the “Company”) values the confidentiality of personal data. This document details how the Company uses and protects personal data for the purpose of obtaining the consent of data subjects, in accordance with the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), other issuances of the National Privacy Commission (NPC) and other relevant laws of the Philippines.
As a potential customer of the Company, you are considered a data subject. Please read this document carefully to ensure informed consent.
A. What is Personal Data? Personal data refers to all types of:
1. Personal information – “any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly
ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual;”
2. Sensitive personal information – “personal information about an individual’s race, ethnic origin, marital status, age, color, religious/philosophical/political affiliations, health,
education genetic or sexual life, legal proceedings, government issued identifiers and other information specifically established by an executive order or an act of congress to be kept classified;” and
B. Why does the Company collect personal data?
The Company collects, uses, processes, stores and retains personal data when reasonable and necessary to perform its business processes effectively, safely and efficiently and in accordance with
corporate policies. In particular, the Company will collect your data in order to provide you with access to our customer relations materials and presentation for Concepts Unlimited & DI Mktg. Corp
Financial, Calls and Operating Results (the “Event”).
Personal information may be collected, with prior express consent of the data subject, through any of the following means:
1. Online forms, web platforms and email
2. Use of cookies or other digital information such as IP address
3. Letters or correspondences
4. Databases forwarded for processing, etc. Information shared through representatives are presumed given or disclosed with prior express authorization from the data subject concerned.
Concepts Unlimited & DI Mktg. Corporation ensures that all personal information are used for lawful and limited purpose in accordance with applicable privacy laws and regulations. These processes include:
1. Issue resolution and help desk concerns
2. Processing of orders
3. Targeted marketing
4. Data analytics, etc.
The Company also adopts appropriate physical, technical, organizational measures to protect personal information. Such as:
1. SSL encryption
2. Server security
3. Limited office access
4. Dedicated storage
5. Limited system access
C. What type of personal data does the Company collect and generate?
The Company will collect the following personal data:
-
Name
-
Birth date
-
Successor for Business Account
-
Relationship to Item
-
Home Address
-
Nationality
-
Gender
-
Civil Status
-
Spouse Name (If Married)
-
Spouse Birthdate (If Married)
-
TIN
-
Office Number
-
Office Fax Number
-
Home Number
-
Mobile Number
-
Email
-
Specified Username
D. How does the Company collect, acquire, or generate personal data?
The Company will collect the personal data when you accomplish and transmit your confirmation to the Event, and will generate personal data to provide you access to the Event.
E. How does the Company ensure that personal data is accurate and up-to-date?
Data subjects are primarily responsible for ensuring that all personal data submitted are accurate, complete and up-to-date. From time to time, the Company requests updated data; it is important that subjects cooperate and provide the same. The Company takes reasonable steps to make sure that the personal data it collects, generates, uses or discloses are accurate, complete, and up-to-date.
F. With whom may the Company share personal data?
As a general rule, the Company does not and will not share personal data with third parties except as necessary for the proper execution of processes related to a declared purpose, or the use or disclosure is reasonable necessary, required or authorized by or under law.
G. How does the Company protect personal data?
The Company strictly enforces its Privacy Policy. It has implemented technological, organizational and physical security measures to protect personal data from loss, misuse, unauthorized modification, unauthorized or accidental access or disclosure, alteration or destruction. The Company uses safeguards such as the following: ▪ Use of secured servers and firewalls, encryption on computing devices; ▪ Restricted access only for qualified and authorized personnel; and ▪ Strict implementation of information security policies.
H. Where and how long does the Company keep personal data?
The Company stores personal data in both local and off-shore facilities, such as data centers (on premise and databanks) and physical document storage facilities. Personal data are retained for ten (10) years. Subject to applicable laws, rules and regulations, the data subject may request personal data to be deleted from the Company’s systems, databases and hard copies within a reasonable requested date.
I. What are the rights of data subjects under the Data Privacy Act?
Data subjects have the following rights: ▪ Right to be informed; ▪ Right to object; ▪ Right to access; ▪ Right to rectify or correct erroneous data; ▪ Right to erase or block; ▪ Right to secure data portability; ▪ Right to indemnify for damages; and ▪ Right to file a complaint. The Company’s decisions to provide access, consider requests for correction or erasure, and address objection to process personal data as it appears in the Company’s official records, are always subject to applicable and relevant laws and/or the DPA, its IRR and other issuances of the NPC.
J. Who should you contact in case of inquiry, feedback or complaints?
Should you have any inquiries, feedback, and/or complaints, you may reach the Data Protection Officer (DPO) through the following contact details: Data Protection Officer Concepts Unlimited & DI Mktg. Corporation 1078 ANSA II Bldg., Don Chino Roces Ave., Makati City 1204 Philippines Tel: (632) 82459440 email address: contactus@concu-ph.com
Please ensure that you have completely read and understood the terms above before signing. You also authorize the Company to disclose your information to accredited/affiliated third parties or independent/non-affiliated third parties, whether local or foreign, in the following circumstances:
-
As necessary for the proper execution of processes related to the declared purpose;
-
The use or disclosure is reasonably necessary, required or authorized by or under law.
From time to time, it may be necessary for the Company to revise this document. Any revision made to this document shall be communicated via posting in the Company website or via email. Any change will not be applied and will not alter how the Company handles previously collected personal data without obtaining your consent, unless required by law.
All personal information is retained in accordance with local privacy laws and applicable regulations on record-keeping. All personal information are stored for a period of 10 years, unless a different mandatory record-keeping period applies. By using Concepts Unlimited & DI Mktg. Corporation website and online modules, you expressly confirm your agreement to the following policies and consent to the collection and processing of your personal information, insofar as applicable, subject to the above terms and conditions.
All rights reserved @Concepts Unlimited & DI Mtkg. Corp. 2015