Contents:

• OVERVIEW
• What kind of information do we collect?
• How do we use this information?
• How do we manage your information?
• How is this information shared?
• How do we respond to inquiries and complaints?

The Mariano Marcos State University (MMSU) is committed to the protection of Personal Information of all stakeholders. This Data Privacy Notice details the collection, processing and disclosure of your Personal Information pursuant to Republic Act No. 10173, also known as the “Data Privacy Act of 2012”.

The Act protects the privacy of individuals while making sure of free flow of information to promote innovation and growth; regulating the collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure or destruction of personal data; and making sure that Government Agencies are compliant with international standards set for data protection through the National Privacy Commission (NPC).

By availing University services or by providing your Personal Information or otherwise by acknowledging receipt of this Notice, you have read and consent and/or you are deemed to have read and consent to us using, collecting, and processing your Personal Information in the manner described in this Notice.

MMSU reserves the right to change, amend and/or vary this Notice at any time. You are advised to check this Notice from the University website from time to time for amendments or updates.

What kind of information do we collect?

The University collects only personal data of data subjects that are necessary in the course of transaction with the University. Consent is required prior to the collection and processing of personal data, subject to exemptions stipulated in the DPA and other applicable laws and regulations. The data subject must be provided with specific information regarding the purpose and extent of processing, including, where applicable, the automation processing of his personal data for profiling and data sharing.

How do we use this information?

Personal data collected shall be used by the University in a manner compatible with declared, specified and legitimate purpose. Personal data shall be processed in manner that ensures appropriate privacy and security safeguards.

How do we manage your information?

The University ensures that personal data under custody are protected against any accidental or unlawful destruction, alteration and disclosure as well as against any other unlawful processing. The University will implement appropriate security measures in storing collected personal information, depending on the nature of the information.

Due to the sensitive and confidential nature of the personal data under the custody of the University, only the data subject and the authorized representative of the University shall be allowed to access such personal data, for any purpose, except for those contrary to law, public Notice, public order or morals.

Retention of personal data shall only for as long as necessary for the fulfillment of the declared, specified, and legitimate purpose, or when the processing relevant to the purpose has been terminated. Retention of personal data shall be allowed in cases provided by law.

Personal data shall be disposed or discarded in a secure manner that would prevent further processing, unauthorized access, or disclosure to any other party or the public, or prejudice the interests of the data subjects.

How is this information shared?

All employees and personnel of the University shall maintain the confidentiality and secrecy of all personal data that come to their knowledge and possession, even after resignation, termination of contract, or other contractual relations. Personal data under the custody of the University shall be disclosed only pursuant to a lawful purpose, and to authorized recipients of such data.

How do we respond to inquiries and complaints?

Data subjects may inquire or request for information regarding any matter relating to the processing of their personal data under the custody of the University, including the data privacy and security policies implemented to ensure the protection of their personal data. They may write to the University at dpo@mmsu.edu.ph and briefly discuss the inquiry, together with their contact details for reference.

Complaints shall be filed in three (3) printed copies addressed to details below or sent to dpo@mmsu.edu.ph. The concerned department or unit shall confirm with the complainant its receipt of the complaint.

Contact Details:

Attention: Data Protection Officer

Data Protection Office

Information Technology Center, Main Library Building

Mariano Marcos State University

City of Batac, Ilocos Norte 2906

Email: dpo@mmsu.edu.ph