As provided under the DPA, employees and subscribers have the following rights in connection with the
Processing of their Personal Data: right to be informed, right to object, right to access, right to
rectification, right to erasure or blocking, and right to damages. Employees and agents of the Company
are required to strictly respect and obey the rights of the Data Subjects.
Right to Be Informed
The Data Subject has the right to be informed when Personal Data pertaining to him shall be, are
being, or have been processed. The Data Subject shall be notified and furnished with information
indicated hereunder before the entry of his Personal Data into the records of the Company, or at the
next practical opportunity:
- Description of the Personal Data to be entered into the system;
- Basis of Processing, when Processing is not based on the consent of the Data Subject;
- Scope and method of the Personal Data Processing;
- The recipients or classes of recipients to whom the Personal Data are or may be disclosed or
shared;
- Methods utilized for automated access, if the same is allowed by the Data Subject, and the extent
to which such access is authorized, including meaningful information about the logic involved, as
well as the significance and the envisaged consequences of such Processing for the Data Subject;
- The period for which the Personal Data will be stored; and
- The existence of their rights as Data Subjects, including the right to access, correction, and to
object to the Processing, as well as the right to lodge a complaint before the National Privacy
Commission.
Right to Object
The Data Subject shall have the right to object to the Processing of his Personal Data, including
Processing for direct marketing, automated Processing or profiling. The Data Subject shall also be
notified and given an opportunity to withhold consent to the Processing in case of changes or any
amendment to the information supplied or declared to the Data Subject in the preceding paragraph. When
a Data Subject objects or withholds consent, the Company shall no longer process the Personal Data,
unless:
- The Processing is for obvious purposes, including, when it is necessary for the performance of or
in relation to a contract or service to which the Data Subject is a party, or when necessary or
desirable in the context of an employer-employee relationship between the Company and the Data
Subject; or
- The Personal Data is being collected and processed to comply with a legal obligation.
Right to Access
The Data Subject has the right to reasonable access to, upon demand, the following:
- Contents of his or her Personal Data that were processed;
- Sources from which Personal Data were obtained;
- Names and addresses of recipients of the Personal Data;
- Manner by which his or her Personal Data were processed;
- Reasons for the disclosure of the Personal Data to recipients, if any;
- Information on automated processes where the Personal Data will, or is likely to, be made as the
sole basis for any decision that significantly affects or will affect the Data Subject; and
- Date when Personal Data concerning the Data Subject were last accessed and modified.
Right to Rectification
The Data Subject has the right to dispute the inaccuracy or rectify the error in his or her Personal
Data, and the Company shall correct it immediately and accordingly, unless the request is vexatious or
otherwise unreasonable. If the Personal Data has been corrected, the Company shall ensure the
accessibility of both the new and the retracted Personal Data and the simultaneous receipt of the new
and the retracted Personal Data by the intended recipients thereof: Provided, That recipients or third
parties who have previously received such processed Personal Data shall be informed of its inaccuracy
and its rectification, upon reasonable request of the Data Subject.
Right to Erasure or Blocking
The Data Subject shall have the right to suspend, withdraw, or order the blocking, removal, or
destruction of his or her Personal Data from the Company's filing system.
- This right may be exercised upon discovery and substantial proof of any of the following:
- The Personal Data is incomplete, outdated, false, or unlawfully obtained;
- The Personal Data is being used for purpose not authorized by the Data Subject;
- The Personal Data is no longer necessary for the purposes for which they were collected;
- The Data Subject withdraws consent or objects to the Processing, and there is no other legal
ground or overriding legitimate interest for the Processing by the Company;
- The Personal Data concerns private information that is prejudicial to Data Subject, unless
justified by freedom of speech, of expression, or of the press or otherwise authorized;
- The Processing is unlawful; or
- The Data Subjects rights have been violated.
- The Data Protection Officer may notify third parties who have previously received such processed
Personal Data that the Data Subject has withdrawn his or her consent to the Processing thereof upon
reasonable request by the Data Subject.