Privacy Policy
FiltaGlobal Philippines, Inc. (the ‘Company’ or ‘we’, ‘our’, ‘us’) respects and values your privacy and employs reasonable measures to protect your personal information in accordance with the Data Privacy Act of 2012 (‘DPA’), its Implementing Rules and Regulations, and related issuances from the National Privacy Commission (‘Commission).
In order for us to provide quality services, we rely heavily on personal information, whether it be the information of our customers, our employees, or any other individual in connection with any matter that we handle.
Given the importance of privacy to all concerned parties, we are committed to the highest standards of privacy and data protection compliance and expect everyone in our Company to adhere to these standards. We demand the highest standards of ethics and compliance with applicable laws and rules from our management, employees, and third party suppliers and service providers.
This Privacy Policy will help you understand: (i) what Personal Information we collect; (ii) how we collect, hold, use and disclose that information; and (iii) the purposes of such collection, holding, use and disclosure.
Service Description
For its Members, Core Members, and Applicants/Candidates
The Company collects personal information and sensitive personal information throughout the application process and the tenure of their employment, as the case may be, for various purposes—for application assessment, transactional purposes, offering benefits, compliance with labor requirements, to name a few.
For Clients, Customers, and Clients’ Customers
The Company collects information in order to provide our products and/or services to you.
For Vendors and Suppliers
We collect information in order to transact with you or the entity you represent as our vendor/supplier.
Data Collected and Processed, and Legal Basis for Each
The Company collects the following categories of data:
For its Members, Core Members, and Applicants/Candidates
Personal Data | Legal Basis |
|
Pursuant to our legitimate interest as an employer, and the fulfillment of a contract |
|
Pursuant to our legal and statutory obligations as an employer under the law and consent |
For Clients, Customers, and Clients’ Customers
Data | Legal Basis |
|
Pursuant to our legitimate interest, and the fulfillment of the Master Services Agreement: |
|
With your consent |
For Vendors and Suppliers
Data | Legal Basis |
|
Pursuant to our legitimate interest, and the fulfillment of a contract |
|
Pursuant to our legitimate interest, and the fulfillment of a contract |
Methods of Collection
For its Members, Core Members, and Applicants/Candidates
We collect your personal data from any documents or communications that you may have submitted to us either directly or through third party platforms, from publicly available information (including your social media accounts), or from third parties. This may include any references that you have provided, such as present and past employers, educational institutions, associations, family members.
Once you become an employee/member/core member of the Company, you will inevitably be referred to in many Company documents and records that are produced by you and your colleagues in the course of carrying out your duties and the business of the Company. Your personal data relevant to your role in the Company, including your participation in Company events and activities, may be made public through different media such as Company newsletters, website, and social media accounts.
You may inform us of the specific personal data you do not want to be processed beyond the requested purpose. We will respect your request in so far as it is feasible to fulfill the purposes for which the personal data was collected.
Where you have provided us with the personal data of individuals other than yourself, you warrant that you have obtained their consent for the disclosure, in accordance with the DPA.
For Clients, Customers, and Clients’ Customers
We collect only the necessary company and business details of our clients. Additionally, we gather your personal data from any documents or communications that you may have directly submitted to us, from publicly available information, or from third parties. This may include any information you have disclosed to our representatives in the course of our supply contract. Beyond this, we do not collect personal data or any other form of data from our clients or their customers.
With respect to the management of information within our clients’ systems, all customer data is maintained within the clients’ own data processing systems. Our clients are entirely responsible for managing this information, which may include customer identifiers, payment details (such as credit card and bank information), location and address data, contact details, and other relevant information that could identify a customer.
We do not store any of our clients' customer information. This responsibility lies solely with our clients, enabling them to maintain full operational control and management over their data.
You may inform us of the specific personal data you do not want to be processed beyond the requested purpose. We will respect your request in so far as it is feasible to fulfill the purposes for which the personal data was collected.
Where you have provided us with the personal data of individuals other than yourself, you warrant that you have obtained their consent for the disclosure, in accordance with the DPA.
For Vendors and Suppliers
We collect your personal data from any documents or communications that you may have directly submitted to us, from publicly available information, or from third parties. This may include any information that you have disclosed to our representatives in the course of our supply contract.
You may inform us of the specific personal data you do not want to be processed beyond the requested purpose. We will respect your request in so far as it is feasible to fulfill the purposes for which the personal data was collected.
Where you have provided us with the personal data of individuals other than yourself, you warrant that you have obtained their consent for the disclosure, in accordance with the DPA.
Methods of Processing
Your personal data may be processed both by way of computer media and on paper, in compliance with the rules in relation to personal data protection, therein including those relating to data security.
Purpose
For its Members, Core Members, and Applicants/Candidates
Your personal data shall be processed for the following purposes:
- Applicants
- To assess applicant’s eligibility for the position and knowledge
- For verification of the accuracy, authenticity and validity of the documents submitted and other background information provided
- To review and approve the application
- For future urgent requirements
- To be able to contact applicant in case there are future vacancies
- Employees/Members/Core Members
- To assess employee’s qualifications and skills
- To monitor attendance and evaluate performance of the employees
- To facilitate the training of employees
- To implement different administrative policies of the Company regarding leave conversions, benefits, disciplinary action, resignation, termination and retirement
- To manage and monitor the Company’s assets and inventory assets released to employees for the fulfillment of their duties and responsibilities
- To manage and streamline the operations of the Company
- To register, report, and remit, as may be necessary, to the applicable government agencies
- To process salaries, payroll and cash disbursements
- To process final pay and clearance
- For security and safety purposes
- To conduct marketing activities and promote the Company as a workplace
- For compliance with applicable government regulations
The Company will not process the personal information of its applicants and employees/members/core members in ways incompatible with the above-stated purposes.
For Clients, Customers, and Clients’ Customers
Your personal data shall be processed for the following purposes:
- To perform the services of the Company to the client
- To facilitate the delivery of our products and services
- To prepare reports
- To respond to inquiries
- To comply with contractual obligations
- For marketing and promotional purposes
- To establish, exercise and defend legal claims, especially those arising out of contract
- Fulfill any other purposes directly related to the above-stated purposes
The Company will not process the personal information of its suppliers in ways incompatible with the above-stated purposes.
For Vendors and Suppliers
Your personal data shall be processed for the following purposes:
- To facilitate purchase of goods or services from vendors/suppliers
- To facilitate payment to vendors/suppliers
- To ascertain your identity as our contracting counterparty
- To establish, exercise and defend legal claims, especially those arising out of contract
- Fulfill any other purposes directly related to the above-stated purposes
The Company will not process the personal information of its suppliers in ways incompatible with the above-stated purposes.
Transfers and Disclosures
For its Members, Core Members, and Applicants/Candidates
Your personal information may be disclosed to the Company’s partners and third parties for the following purposes:
- To identify and hire quality candidates/applicants;
- To assist in the processing of insurance and medical benefits in coordination;
- To process payroll of the employee;
- To store data;
- To enroll and process employee benefits, including external training, conferences, and other external learning events;
- To comply with statutory requirements;
- To facilitate security evacuation and medical evacuation in case of emergencies;
- To facilitate visa processing, flight bookings, hotel reservations, and/or travel logistics, safety and security;
- To establish, exercise, or defend legal claims; and
- Fulfill any other purposes directly related to the above-stated purposes.
To verify the accuracy of the information you provided, particularly your identity, qualifications, and employment history, the Company (or its authorized representatives and/or service providers) will conduct background checks, which necessarily include verification with third parties such as educational institutions and previous employers, where applicable. You expressly authorize the Company (or its authorized representatives and/or service providers) to verify such information and procure copies of relevant records and documents from these third parties.
When the processing of your personal data is outsourced by the Company to a third party, the processing will be subject to written agreements between the Company and the third parties processing the data. These written agreements specify the rights and obligations of each party and will provide that the third party has adequate security measures in place and will only process your personal information on the specific written instructions of the Company.
The Company may also transfer your personal information to third parties as required by law or legal instrument, to protect the Company’s rights or assets, to facilitate acquisition or disposition of the Company’s businesses, and in emergencies where the health or safety of a person is endangered.
The Company will not sell, rent, share, trade, or disclose any of your personal data to any other party without your prior written consent, with the exception of entities within the Company and any third-party service providers which the Company has engaged, whose services necessarily require the processing of your personal data.
The following are the third parties to whom your personal data may be disclosed:
- Government Agencies and Local Authorities
- Third party service providers
- Emergency contact
For Clients, Customers, and Clients’ Customers
For Vendors and Suppliers
Your personal information may be disclosed to the Company’s affiliates and third parties for the following purposes:
- To facilitate payments;
- To store data;
- To process inquiries and concerns;
- To comply with contractual obligations;
- To establish, exercise, or defend legal claims; and
- Fulfill any other purposes directly related to the above-stated purposes.
When the processing of your personal data is outsourced by the Company to a third party, the processing will be subject to written agreements between the Company and the third parties processing the data. These written agreements specify the rights and obligations of each party and will provide that the third party has adequate security measures in place and will only process your personal information on the specific written instructions of the Company.
The Company may also transfer your personal information to third parties as required by law or legal instrument, to protect the Company’s rights or assets, to facilitate acquisition or disposition of the Company’s businesses, and in emergencies where the health or safety of a person is endangered.
The Company will not sell, rent, share, trade, or disclose any of your personal data to any other party without your prior written consent, with the exception of entities within the Company and any third-party service providers which the Company has engaged, whose services necessarily require the processing of your personal data.
Data Retention
For its Members, Core Members, and Applicants/Candidates
Your personal data will be retained or stored for as long as the purposes for which they are being processed have not been satisfied. The Company will retain and use your personal information as necessary to comply with its legal obligations, resolve disputes, and enforce its agreements:
- For Job Applicants who are not hired, we will retain the documents you have submitted for six (6) months so we can contact you about future job openings.
- For hired Employees/Members/Core Members, we will retain your documents in your individual file while you remain employed with the Company and for a period of up to six (6) years from termination of your employment.
- Where personal data is necessary in order to comply with legal obligations, resolve disputes, and enforce agreements, we will retain the data until these matters are resolved.
- Hardcopies of the forms you have submitted, as well as all records that shall be relevant to your tenure as an employee/member/core member of the Company may be stored in the Company premises in a secure cabinet.
- Forms and documents which contain your personal data will be digitized and stored on the Company’s information management system hosted by the Company on-site or in the premises of an authorized third-party service provider.
- The Company shall ensure, using contractual and other reasonable means, that the Third-Party Service Provider implements proper safeguards to ensure the confidentiality, integrity and availability of the personal data processed, prevent its use for unauthorized purposes, and comply with the requirements of the DPA, its Implementing Rules and Regulations, and other applicable laws for processing of personal data, and other issuances of the Commission.
- Personal Information provided to us shall be disposed of or discarded in a secure manner that would prevent further processing, unauthorized access, or disclosure to any other party, or prejudice your interests.
For Clients, Customers, and Clients’ Customers
For Vendors and Suppliers
Your personal data will be retained or stored for as long as the purposes for which they are being processed have not been satisfied. The Company will retain and use your personal information as necessary to comply with its legal obligations, resolve disputes, and enforce its agreements:
- Hardcopies of the forms you have submitted, as well as all records that shall be relevant to your experience with representatives of the Company may be stored in the Company premises in a secure cabinet.
- Forms and documents which contain your personal data will be digitized and stored on the Company’s information management system hosted by the Company on-site or in the premises of an authorized third-party service provider.
- The Company shall ensure, using contractual and other reasonable means, that the Third-Party Service Provider implements proper safeguards to ensure the confidentiality, integrity and availability of the personal data processed, prevent its use for unauthorized purposes, and comply with the requirements of the DPA, its Implementing Rules and Regulations, and other applicable laws for processing of personal data, and other issuances of the NPC.
Data Protection Measure
The Company has put in place physical, electronic, and managerial procedures designed to help prevent unauthorized access, to maintain data security, and to correctly use the Information we collect online. These safeguards vary based on the sensitivity of the Information that we collect and store.
Access
For its Members, Core Members, and Applicants/Candidates
The Company encourages its employees to keep their personal information current and updated. Subject access requests may be made by emailing the data protection officer. The Company may take reasonable steps to confirm the requestor's identity as a data subject before granting access to the personal information and allowing updates thereto.
For Clients, Customers, and Clients’ Customers
For Vendors and Suppliers
Subject access requests may be made by emailing the data protection officer. The Company may take reasonable steps to confirm the requestor's identity as a data subject before granting access to the personal information and allowing updates thereto.
Data Subject Rights
You have the following rights under the DPA, which you may exercise at your discretion:
- The right to access personal information
Under the DPA, it is possible for individuals to request access to any of their personal data held by the Company, subject to certain restrictions. A request for disclosure of such information is called a subject access request. Any such requests should be addressed to the Data Protection Officer.
- The right to make corrections to personal information
The DPA requires the Company to take reasonable steps to ensure that any personal data it processes is accurate and up-to-date. It is your responsibility to inform us of any changes to the personal information that you have supplied to us during the course of your engagement.
- The right to object to the processing of personal information
You have the right to object to the processing of your personal information, including processing for direct marketing, automated processing or profiling. You shall also be notified and be given an opportunity to withhold consent to the processing in case of changes or any amendment to the information supplied or declared to you in this Data Privacy Notice. Please note that some of the personal data you have provided to us is necessary for us to comply with statutory and regulatory requirements, as well as the Company’s administrative policies and is thus mandatorily required to be collected and processed. Withholding of your consent to the processing of certain personal data may prevent you from availing of certain benefits.
- The right to erasure or blocking of personal information
You have the right to suspend, withdraw or order the blocking, removal or destruction of your personal information from our filing system.
- The right to be informed of the existence of processing of personal information
You have the right to be informed whether personal information pertaining to you shall be, is being, or have been processed, including the existence of automated decision-making and profiling.
- The right to damages
Upon presentation of a valid decision, the Company recognizes your right to be indemnified for actual and verifiable damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal information, taking into account any violation of your rights and freedoms as a data subject.
Changes to this Notice
This Data Privacy Notice may be updated from time to time. You will be notified whenever there are any updates that will significantly affect your rights.
Third Party Links And Cookies
Cookies are small text files (typically made up of letters and numbers) placed in the memory of your browser or device when you visit a website or view a message. They allow us to recognize a particular device or browser and help us to personalize the content to match your preferred interests more quickly, and to make the Website more convenient and useful to you. You may be able to manage and delete cookies through your browser or device settings. For more information on how to do so, visit the help material of your browser or device.
Occasionally, at our discretion, we may include or offer third party products or services on our Website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
We or our authorized service providers may use cookies and other similar technologies for storing data to help provide you with better, faster, safer, and personalized experiences when you use the services or access the Website. When you visit the Website through your computer, mobile device, or any other device with internet connectivity, our servers may automatically record data that your browser sends whenever you visit a website. This data include:
- your computer or device’s IP address;
- browser type;
- webpage you were visiting before you came to the Platform;
- the pages within the Platform which you visit; and
- the time spent on those pages, items and data searched for on the Platform, access times
- and dates, and other statistics.
This data is collected for analysis and evaluation for the purposes stated in this policy and in order to help us improve our Website and the services and products we provide.
Concerns and Questions
In case of complaints, concerns, or questions regarding the processing of your personal information, or if you wish to exercise your data subject rights, you may address them through email at legal@filtaglobal.com.
Last updated: September 2024