ASSUMPTION ALUMNAE ASSOCIATION (AAA) PRIVACY NOTICE

The Assumption Alumnae Association, Inc. (“AAA”) is committed to uphold the Philippine Data Privacy Act of 2012 (DPA) in the course of processing such information. This notice explains in general terms, the purpose and legal basis for the processing of such personal information collected by the AAA from alumni like you, the measures in place to protect your data privacy and the rights that you may exercise in relation to such information.

PERSONAL INFORMATION COLLECTED FROM ALUMNI, THE PURPOSE AND LEGAL BASIS FOR COLLECTING THE INFORMATION

Personal information found in the application and other related forms of the AAA that require you to provide express consent for the processing of your information are transmitted to and processed by the AAA in relation to its activities.

Your name, contact details, information about your Assumption education are used to verify your identity and prevent identity fraud, create or update your AAA alumni record and AAA membership record, as well as provide you services.

Information about your Assumption education e.g. degree or certificate obtained or number of units earned, scholastic standing, disciplinary record, etc. are used to determine whether you are qualified to be a regular member of the AAA, if you are entitled as a matter of right to vote and/or be voted upon during the AAA elections and may also be used to determine whether you are qualified to receive awards from the Assumption and/or AAA.

Your address(es) email and telephone or cellular phone numbers are used in order to contact you in the manner that you have indicated or consented to, for the purpose of informing you of AAA events or news about the Assumption, to transmit the Assumption and/or AAA publications and messages, opportunities for making donations to the Assumption and/or AAA and/or its beneficiaries or through services/volunteer work, and/or relaying messages from other AAA members.

Health information in the form of dietary restrictions, allergies, disabilities etc. may be provided by the AAA to service providers in the course of organizing events.

The abovementioned personal and sensitive personal information may also be used by the AAA for providing you with other services such as access to the Assumption e.g. library, health services, or AAA facilities and for such other purposes that would enable AAA to carry out its mandate pursuant to the AAA By-Laws.

The AAA does not process your personal information to carry out any wholly automated decision making that affects you.

When consent is the appropriate or relevant basis for collecting your personal information, the AAA will obtain such consent in written, electronic, or recorded form at the appropriate time.

Pursuant to the DPA, you are allowed to withdraw consent at any time.

NON-DISCLOSURE OF YOUR PERSONAL INFORMATION TO THIRD PARTIES EXCEPT AS REQUIRED OR PERMITTED BY LAW

As a general rule, AAA will only disclose your personal and sensitive personal information to third parties with your consent.

Under the DPA, personal information may be processed,

e.g. collected, stored and disclosed, when it is necessary in order for AAA to comply with a legal obligation; to protect your vitally important interests including life and health; respond to a national emergency, public order, and safety; fulfill the functions of public authority the pursuant to the legitimate interests of the AAA or a third party, except where such interests are overridden by your fundamental rights.

Sensitive personal information (e.g. confidential educational records, age/birthdate, civil status, health) on the other hand may be processed, e.g. collected, stored and disclosed, when such is allowed by laws and regulations, such regulatory enactments provide for the protection of such information and the consent of the data subject is not required under such law or regulation. Sensitive personal information may also be processed when needed to protect the life and health of the data subject or another person and the data subject is unable to legally or physically express consent, in the case of medical treatment, or needed for the protection of lawful rights and interests of natural or legal persons in court proceedings, and for the establishment, exercise or

defense of legal claims or where provided to government or public authority.

HOW AAA PROTECTS YOUR PERSONAL INFORMATION

AAA put in place physical, organizational and technical measures to protect your right to privacy and is committed to reviewing and improving the same, so as to be able to comply with the DPA. As stated above AAA actively cooperates with the Assumption to protect your information.

From time to time AAA posts information on relevant sites and sends emails that explain how you can secure and maintain the confidentiality of your personal information.

Rest assured that AAA personnel are allowed to process your personal information only when such processing is part of their official duties.

ACCESS TO AND CORRECTION OF YOUR PERSONAL INFORMATION

You have the right to access personal information being processed by AAA about you.

In order for AAA to see to it that your personal information is disclosed only to you, we will require the presentation of documents that will enable the AAA to verify and confirm your identity when you apply for or renew your AAA membership. In case you process or request documents through a representative, in order to protect your privacy, AAA requires you to provide a letter of authorization specifying the purpose for the request of documents or the processing of information and your valid government- issued ID (GIID) as well as the valid GIID of your representative.

The AAA requires you to provide correct information. In the event that your information needs to be updated, the relevant AAA website and offices provide information regarding how you can request the correction of your personal information.

QUERIES REGARDING DATA PRIVACY

We encourage you to visit this AAA Website from time to time to see any updates regarding this Privacy Notice. We will alert you regarding changes to this Policy through this site and/or through written notices, e.g. email. For queries, comments or suggestions regarding this System-wide privacy notice, please contact the Assumption Alumnae Association Data Protection Officer through the following:

Via post:

THE ASSUMPTION ALUMNAE ASSOCIATION, INC.

Assumption College Compound Arnaiz Avenue

San Lorenzo Village, Makati, 1229 Metro Manila