Data Privacy Statement
Dasmariñas Village Association Inc. (hereafter “DVA”) respects and values your privacy and employs reasonable measures to protect your personal information in accordance with the Data Privacy Act of 2012 (“DPA”), its Implementing Rules and Regulations, and related issuances from the National Privacy Commission (“NPC”).
As DVA handles matters in relation to your residence in Dasmariñas Village, it is necessary for DVA to collect and process your personal data for the purposes stated in this Data Privacy Statement.
This Data Privacy Statement will inform you on how we process and protect your personal information. By visiting our website, you certify that you have read and understood, and agree to, the terms of our Privacy Policy
Service Description
DVA, as the administrator of Dasmariñas Village, offers a variety of services for its residents and members, including, but not limited to, the maintenance of the facilities, the issuance of car stickers to facilitate the ingress to and egress from the Dasmariñas Village, and the provision of security to its residents and members.
Personal Information Collected and Processed
DVA collects the following categories of personal data:
Personal Details: Name, address, contact details, birthdate, age, civil status, occupation, ID Photo
Others: CCTV Footage, vehicle registration
When you access our websites we may also collect the following information: IP address, session information, date and time of access, cookies, device information such as model, manufacturer, operating system, browser, versions, language.
Methods of Collection
We collect your personal data from any documents or communications that you may have directly submitted to us, from publicly available information, or from third parties.
Once you become a resident of Dasmariñas Village, you will inevitably be referred to in many documents and records that are produced by you and the other members of your household in the course of your residence within the village. Your personal data relevant to your stay in the village, including your participation in community events and activities, may be made public through different media such as newsletters and social media accounts.
You may inform us of the specific personal data you do not want to be processed beyond the requested purpose. We will respect your request in so far as it is feasible to fulfill the purposes for which the personal data was collected.
Where you have provided us with the personal data of individuals other than yourself, particularly your household staff and other service providers (e.g. security, construction) you may have engaged, you warrant that you have obtained their consent for the disclosure, in accordance with the DPA.
Methods of Processing
Your personal data may be processed both by way of computer media and on paper, in compliance with the rules in relation to personal data protection, therein including those relating to data security.
Purposes
Your personal data shall be processed for the following purposes:
In relation to your residence or membership in Dasmariñas Village:
To facilitate and process your membership with DVA;
To process cash and check collections made;
To facilitate and process the billings for Association dues, when necessary;
To facilitate the use of the gym and other amenities offered to member residents;
To verify the identity of individuals before being granted permission to enter the village;
To facilitate the issuance of the appropriate security or access passes to the assigned security personnel of residents or members;
To facilitate the issuance of the appropriate security or access passes for contractors and their personnel relative to the construction and/or repair of facilities and houses within Dasmariñas Village;
To maintain and ensure the security within the village premises;
To facilitate requests for CCTV footage, as well as the monitoring and reviewing of the same;
To facilitate the issuance of car stickers;
To monitor traffic and other violations committed within the village;
To establish, exercise, or defend legal claims; and
To fulfill any other purposes directly related to the above-stated purposes.
DVA will not process the personal information of its residents in ways incompatible with the above-stated purposes.
When accessing our websites, we collect device and access information in order to improve our online services.
Personal Information Controller
DVA is the Personal Information Controller under the DPA, which means that it determines what purposes personal information it holds will be used for. It may also be that your personal data is disclosed to third parties pursuant to a data sharing agreement. In which case, such third parties are also the personal information controllers of your personal information.
Transfers and Disclosures
Your personal information may be disclosed to third parties for the following purposes:
To respond to law enforcement authority or other government regulatory bodies’ requests;
To create and maintain your account on DVA’s information technology systems;
To prevent physical harm or financial loss;
To facilitate the provision of member benefits, if applicable;
To conduct audits, including operational, risk, compliance, financial, and anti-fraud and corruption audits, and/or investigate a Complaint or security threat;
To comply with DVA’s business and management responsibilities and policies, which are necessary for the organizational functioning of DVA;
To comply with statutory requirements;
To establish, exercise, or defend legal claims; and
Fulfill any other purposes directly related to the above-stated purposes.
When the processing of your personal data is outsourced by DVA to a third party, the processing will be subject to written agreements between DVA and the third parties processing the data. These written agreements specify the rights and obligations of each party and will provide that the third party has adequate security measures in place and will only process your personal information on the specific written instructions of DVA.
DVA may also transfer your personal information to third parties as required by law or legal instrument, to protect its rights or assets and in emergencies where the health or safety of a person is endangered.
DVA will not sell, rent, share, trade, or disclose any of your personal data to any other party without your prior written consent, with the exception of any third-party service providers which DVA has engaged, whose services necessarily require the processing of your personal data.
The following are the third parties to whom your personal data may be disclosed:
Regulatory bodies/agencies and other legal bodies
Information technology services providers
Vendors or Suppliers
External auditors
External counsel
Data Retention
Your personal data will be retained or stored for as long as the purposes for which they are being processed have not been satisfied. DVA will retain and use your personal information as necessary to comply with its legal obligations, resolve disputes, and enforce its agreements:
Hardcopies of the forms you have submitted, as well as all records that shall be relevant to your tenure as a resident of the village may be stored in DVA premises in a secure cabinet or in an off-site warehouse managed by a third-party service provider.
Forms and documents which contain your personal data may be digitized and stored on DVA’s information management system hosted by DVA on-site or in the premises of an authorized third-party service provider.
DVA shall ensure, using contractual and other reasonable means, that the third-party service provider implements proper safeguards to ensure the confidentiality, integrity and availability of the personal data processed, prevent its use for unauthorized purposes, and comply with the requirements of the DPA, its Implementing Rules and Regulations, and other applicable laws for processing of personal data, and other issuances of the NPC.
Data Protection Measures
DVA has put in place physical, electronic, and managerial procedures designed to help prevent unauthorized access, to maintain data security, and to use correctly the Information we collect online. These safeguards vary based on the sensitivity of the Information that we collect and store.
Access
DVA encourages its residents to keep their personal information current and updated. Subject access requests may be made by emailing the data protection officer. DVA may take reasonable steps to confirm the requester’s identity as a data subject before granting access to the personal information and allowing updates thereto.
Data Subject Rights
You have the following rights under the DPA, which you may exercise at your discretion
a. The right to access personal information
Under the DPA, it is possible for individuals to request access to any of their personal data held by DVA, subject to certain restrictions. A request for disclosure of such information is called a subject access request. Any such requests should be addressed to the Data Protection Officer.
b. The right to make corrections to personal information
The DPA requires DVA to take reasonable steps to ensure that any personal data it processes is accurate and up-to-date. It is your responsibility to inform us of any changes to the personal information that you have supplied to us during the course of your engagement.
c. The right to object to the processing of personal information
You have the right to object to the processing of his/her personal information, including processing for direct marketing, automated processing or profiling. You shall also be notified and be given an opportunity to withhold consent to the processing in case of changes or any amendment to the information supplied or declared to you in this Data Privacy Statement. Please note that some of the personal data you have provided to us is necessary for us to comply with statutory and regulatory requirements, as well as DVA’s administrative policies and is thus mandatorily required to be collected and processed. Withholding of your consent to the processing of certain personal data may prevent you from availing of certain benefits.
d. The right to erasure or blocking of personal information
You have the right to suspend, withdraw or order the blocking, removal or destruction of your personal information from our filing system.
e. The right to be informed of the existence of processing of personal information
You have the right to be informed whether personal information pertaining to you shall be, is being, or have been processed, including the existence of automated decision-making and profiling.
f. The right to damages
Upon presentation of a valid decision, DVA recognizes your right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal information, taking into account any violation of your rights and freedoms as a data subject.
g. The right to lodge a complaint before the NPC.
Changes to This Statement
This Data Privacy Statement may be updated from time to time. The data subject will be notified whenever there are any updates that will significantly affect his/her rights.
Concerns and Questions
In case of complaints, concerns, or questions regarding the processing of your personal information, or if you wish to exercise your data subject rights, you may address them to:
Data Protection Officer
Dasmariñas Village Association Inc.
1417 Campanilla St.,
Dasmarinas Village,
Makati City 1200
+63 (2) 8843-2262
Validity of Consent
This consent and authorization remain valid and subsisting for a limited period consistent with the purposes above or until otherwise revoked or cancelled in writing. You may inform DVA of the specific personal information you do not want to be processed beyond the requested purpose. DVA will respect the Resident’s or Member’s request insofar as it is feasible to fulfill the purpose for which the personal information was collected.