Privacy Notice

At Human Rights Violations Victims’ Memorial Commission (HRVVMC), we understand that you expect us to protect your personal data and use it fairly and lawfully. HRVVMC, and its personnel are committed in complying with its obligations under Republic Act No. 10173 or the Data Privacy Act of 2012, its Implementing Rules and Regulations, issuances of the National Privacy Commission, and other relevant laws, rules, and regulations. (these shall collectively be referred to as the “Philippine Data Protection Laws“) to ensure that your personal data is secure.

This statement outlines the privacy policies of HRVVMC in processing your personal/ sensitive personal information.

Collection of Personal / Sensitive Information

We only collect and process personal data that is reasonably necessary to fulfill the identified purpose(s) of processing. This means that we do not collect personal data that is not relevant and/or potentially excessive in light of our planned data processing.

Except in cases allowed by the Philippine Data Protection Laws, we shall ensure that your consent has been properly and lawfully obtained prior to the processing and disclosure of your personal data. In this regard, we may provide you with separate forms that should be read together with this privacy statement and our privacy policies, so that you are provided with the necessary information on the processing of your personal data and for purposes of obtaining your consent.

We may collect personal/sensitive personal information when:

• • • Requesting for assistance in any Division.
    • Applying for a position for employment with our agency.
    • Participating in activities, programs or any related events to fulfill HRVVMC’s mandate which you decide to join in.
    • Participating in research, surveys, analysis and other similar activities that you have agreed to join in.
    • Visiting the office.
    • Joining any procurement activities or service engagement.
    • Requesting data or assistance from the HRVVMC.
    • Employed in HRVVMC.

Purpose for Processing Personal and Sensitive Personal Information

Where required by Philippine Data Protection Laws, we shall identify the purposes for which personal/sensitive personal information will or may be used prior to collecting that in the applicable consent forms.

These purposes may include the following:

• • • To register you as participant in any of surveys, analysis or activities
    • To register you as a supplier, vendor, distributor or retailer, of supplies or services to HRVVMC;
    • To assess and process requests made by you with respect to our agencvs function;
    • To communicate with you in relation to your requests or with respect to our agency’s function/mandate;
    • To carry out human resources and other related functions (if you are an applicant or employee of HRVVMC );
    • Any other purpose required by a legal obligation or upon which you have provided your consent.

We will only retain your personal data for as long as it is still relevant for the purposes for which it was collected. In this regard, we will put in place measures so that your personal data in our possession or under our control is properly destroyed and/or anonymized as soon as it is reasonable to assume that (a) the purpose for which that personal/sensitive personal information was collected is no longer being served by the retention of such personal data; and (b) retention is no longer necessary for any other legal purposes

Sharing and Disclosure of Personal / Sensitive Personal Information

In some cases, HRVVMC may need to disclose or transfer your personal data to third parties for any one or more of the above purposes or in line with HRVVMC ‘s mandate. In this regard, the disclosure or transfer of personal data shall generally be made upon your consent and, when required by law, in accordance with a data sharing agreement between HRVVMC and such third parties. Should personal data be transferred to our third-party service providers, the necessary outsourcing agreement shall be executed to protect personal data transferred to these parties.

Security Measures

We shall implement reasonable and appropriate organizational, physical, and technical security measures to ensure the availability, integrity, and confidentiality of your personal and sensitive personal information. These security measures shall guard against risks such as accidental loss or destruction, and human dangers such as unlawful access, fraudulent misuse, unlawful destruction, alteration, and contamination of personal data.

Rights and Freedoms as Data Subjects

HRVVMC understands and recognizes your rights as data subjects in accordance with the Philippine Data Protection Laws, which include your rights to information, object, access, rectification, erasure or blocking, lodging a complaint, damages, and data portability. You may exercise any of your rights as recognized by the Philippine Data Protection Laws by submitting your written request to our Compliance Officer for Privacy through any of the following modes: