DLSU Privacy Policy

De La Salle University (“DLSU” “We” “Us” “Our” ) collects and processes personal data of Our applicants, students, parents and/or guardians of students and applicants, university personnel, partners, collaborators, and other individuals with whom we transact as part of Our operations. We are committed to ensure that Our personal data processing activities comply with the Data Privacy Act, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (collectively, “privacy laws”). We are likewise committed to adhere to the data privacy principles of transparency, legitimate purpose, proportionality, fairness, accuracy, and security in our processing activities. We strive to protect the confidentiality, integrity, and availability of the personal data that We collect and process. We have implemented appropriate and reasonable organizational, physical, and technical security measures. These measures aim to safeguard data from
unauthorized access, use, disclosure, alteration, or destruction. We also endeavor to continuously improve our existing measures based on changes in Our processing activities and the evolving privacy landscape. DLSU respects and upholds the data privacy rights of individuals enshrined in the privacy laws, specifically:

  1. The right to be informed when their personal data will be processed. This is done via a Privacy Notice that will be presented to data subjects in their different interactions with Us;
  2. The right to object to the processing of their personal data except when the data is needed in response to a subpoena, necessary for obvious purposes such as entering a contract with DLSU, or when the personal data is needed in relation to a legal obligation;
  3. The right to access one’s personal data;
  4. The right to request the correction of inaccurate data, unless the request is vexatious or unreasonable;
  5. The right to request the blocking or erasure of personal data that is incomplete, outdated, false, or unlawfully obtained; if the data is being used for purposes not authorized by the data subject; if the data has already served the purposes for which it was collected; if the data subject withdraws consent and there is no legal ground or overriding legitimate interest to process the data; if the personal data is prejudicial to the data subject (unless justified by freedom of speech, freedom of expression, or press freedom); the processing is unlawful; or if the rights of the data subject was violated;
  6. The right to be indemnified for any damage sustained due to the inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal data, taking into account any violation of the data subject’s rights and freedoms as data subject; and
  7. The right to obtain a copy of personal data in a commonly used format.

For question about this Privacy Policy, to exercise your data privacy rights, or if you have any privacy-related concerns, please contact our Data Privacy Officer via [email protected].

Website Privacy Notice

At DLSU Manila, we are committed to safeguarding the privacy of the individuals that we interact with on a daily basis as we conduct our operations to become a leading learner-centered and research University bridging faith and scholarship, attuned to a sustainable Earth, and in the service of Church and society, especially the poor and marginalized. This privacy notice explains how we handle personal data as defined by RA10173 otherwise known as the Data Privacy Act of 2012 that we collect both directly thru our website and the third-party site that we connect to that may collect personal data as well. This privacy notice applies to our website in general, however there may be cases where there is a need to have a slightly different privacy notice. If there will be a
different privacy notice it will be made clear that that privacy notice differs from this general privacy notice. Also note that the DLSU reserves the right to change, amend and/or vary this Notice at any time. As you go thru the website please check the privacy notice in case of changes or variations for specific portions of the site and do not assume that this privacy notice applies to all.

Definition of Terms

[Source: RA 10173]

Personal information – refers to any information whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual. Sensitive personal information – refers to personal information:

(1) About an individual’s race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations;
(2) About an individual’s health, education, genetic or sexual life of a person, or to any proceeding for any offense committed or alleged to have been committed by such person, the disposal of such proceedings, or the sentence of any court in such proceedings;
(3) Issued by government agencies peculiar to an individual which includes, but not limited to, social security numbers, previous or cm-rent health records, licenses or its denials, suspension or revocation, and tax returns; and
(4) Specifically established by an executive order or an act of Congress to be kept classified.

Note: DLSU Website Privacy Notice prior to Nov 2023.

Information We Collect

1. When browsing the website in general We use cookies and other tracking technology which collect certain kinds of information when you interact with our website. Cookies are pieces of information that a web site transfers to the computer you use and may be placed on its hard disk for record-keeping purposes. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the website. “First party” cookies set by DLSU website can only be read by that site. DLSU also places “Third-party” cookies from Google Analytics. Personal information for third-party cookies are aggregated and anonymized. You may prevent the placement and storage of cookies by you browser settings by downloading and installing the free Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.

2. When accessing protected sites (e.g. Sakai, MyLasalle) Cookies are used by My.LaSalle to make use of the DLSU log-in procedure. They are not currently used to track your usage, nor are they used in any other way at this time. We do not keep track of what pages you visit except to deliver a customized service or to provide a personalized service you have requested (for example, to display new announcements).

3. When giving donations thru “Make a Gift” When visiting the link “Make a Gift”, portions of the site may collect information from the visitor thru a donation form. The form collects the following information: First name, Last name, Birthdate, Address, City, State/Province, Country, Zip, Business name, Business Address, Course, Year of Graduation, School, Email, and Mobile. These information are comprised of both personal and sensitive personal information and are collected only when the visitor decides to make a donation and submits the online donation form.

4. When accessing third-party hosted DLSU sites or pages (e.g. DLSU.Manila.100). These sites are not hosted nor maintained by DLSU and are considered to be public websites that provide services that allow institutions such as DLSU to create and host sites or pages with them (e.g. Facebook). As such, DLSU does not collect nor maintain collected information within the jurisdiction of DLSU. However, in visiting or linking to these sites thru the DLSU website, they can collect information about where you came from (e.g. IP Address), as well as personal information thru identification via cookies when the visitor is already logged in to their services (e.g. visiting Facebook page when already logged in to a Facebook account). From the position of DLSU, any information collected that can be personally identifiable are not available for use of DLSU. Only aggregated and anonymized analytical information are provided by these sites and services to DLSU in the form of reports or charts.

5. Other information collected when browsing the site Our website also makes use of technologies that collect additional information on top of what was previously mentioned. Information such as IP addresses and System Log files are collected and maintained.

An IP address is a number that is used by computers on the network to identify your computer every time you log on to the Internet. The IP (Internet Protocol) address information does not identify you personally, but rather identifies the computer you are using and may even identify your general location. The DLSU computers that serve our site keep a minimum set of system logs that allow us to tune and protect the service and to determine general usage patterns. We do not keep the information any longer than necessary to meet these objectives. The information we collect consist of: The name of the Internet domain from which you access the Internet The date and time a DLSU web site is visited The Internet address (IP number) of the web site from which you linked Selected information (like browser type) in logs can help when there are problems to be resolved.

Processing and use of the collected personal data The collected data may be used in the following manner:

  1. Assist in visualizing visitors interaction with the site thru providing information about the areas visited, time spent and any issues encountered, such as error messages.
  2. Assist in improving the design and content of the website.
  3. Assist in troubleshooting tasks and inquiries.
  4. Assist in maintaining the safety and security of the site and its visitors or users.
  5. Assist in determining demographic information on the usage of the site.
  6. Assist in enforcing regulatory requirements or claims that would govern both the visitor and the site with respect to the information provided as well as its stated purpose.
  7. Assist in communicating to the visitor the services provided by DLSU.
  8. Assist in limiting access to internal areas of the website.

Transfer and Sharing of collected information

DLSU may share the collected information for the following cases or scenarios:

  • When DLSU is required to do so by law or if such legal disclosure is reasonably necessary to comply with legal processes or respond to any claims.
  • For maintaining the safety and security of the information collected as well as that of the data subject.
  • When interacting with third-party service providers that may host or support our services and maintain databases. In such cases, the service and its provider will be subject to written agreements between DLSU and the provider, in accordance with the requirements of the Data Privacy Act of 2012. These written agreements or contracts will include the rights and obligations of each party and will include requirements for the third party to provide adequate security measures to safeguard the information a well as detailed scope of work to limit the use of the information only upon proper approval and consent.

Security of Collected Information

To ensure the confidentiality, integrity, and availability of personal data that is collected; organizational, administrative, and technical processes and procedures are put in place to safeguard the collected information from loss, misuse, unauthorized access, disclosure, alteration or destruction.

Retention of collected information

DLSU takes reasonable steps to ensure that the personal data collected and processed is reliable, accurate, and complete for its intended use as described in the Privacy Notice. DLSU retains Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Notice.

Rights of the Data Subject

[Source: RA 10173]

As the Data Subject, you are afforded the following rights as written in RA 10173 otherwise known as the Data Privacy Act of 2012.

  1. The right to be informed whether personal information pertaining to him or her shall be, are being or have been processed.
  2. The right to be furnished with the information before the entry of his or her personal information into the processing system of the personal information controller.
  3. The right to reasonable access to the data subjects information upon demand.
  4. The right to dispute the inaccuracy or error in the personal information and have the personal information controller correct it immediately and accordingly, unless the request is vexatious or otherwise unreasonable.
  5. The right to suspend, withdraw or order the blocking, removal or destruction of his or her personal information from the personal information controller’s filing system upon discovery and substantial proof that the personal information are incomplete, outdated, false, unlawfully obtained, used for unauthorized purposes or are no longer necessary for the purposes for which they were collected.
  6. The right to be indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal information.
  7. The right to data portability thru the ability to obtain from the personal information controller a copy of data undergoing processing in an electronic or structured format, which is commonly used and allows for further use by the data subject.
  8. The right to lodge a complaint before the National Privacy Commission.

Personal Information of Other Individuals

If you provide personal information to the site regarding other individuals or data subjects, it is required that you inform the data subject about the Privacy Notice of the site and obtain any legally-required consent for the collection, use, disclosure, and transfer of the personal information about the data subject in accordance with the Privacy Notice and RA10173.

Personal Information of Minors

The services on this site are generally intended for persons 18 years of age and older. In the event that information to be collected by or contributed to DLSU is that of a minor, prior consent from the parent or legal guardian should be obtained in compliance with RA10173.

Complaints, Concerns, or Questions:

For any complaints, concerns, or questions regarding the collection and use of your personal information, you can contact our Data Protection Officer at [email protected].

Privacy Notice for Applying to Study in DLSU

Welcome to De La Salle University.  You made the right choice to consider a world-class Lasallian education.  

De La Salle University and the DLSU Integrated School (collectively “DLSU” “University” “we” “us” “our”) respects your data privacy rights.  That is why we are presenting you with this Privacy Notice to inform you on how we process Personal Data.  

This Privacy Notice is intended for individuals who are 18 years old and above.  If you are under 18, please have a parent or your legal guardian read this Privacy Notice.

1. Data Subjects:
This Privacy Notice pertains to the processing of the Personal Data of Students (whether applying to, or are already studying at DLSU), their Parents/Guardians, and Alumni family members (when declared by a Student).

2. Definition of Terms:

  • Data Subject –refers to an individual whose Personal Data is processed
  • Personal Data – is the collective term used to refer to Personal Information, Sensitive Personal Information, and Privileged Information
  • Privileged Information – refers to any and all forms of data which under the Rules of Court and other pertinent laws constitute privileged communication
  • Processing – refers to any operation or any set of operations performed upon Personal Data including, but not limited to, the collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure or destruction of data
  • Personal Information – refers to any information whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual
  • Sensitive Personal Information – refers to personal information: (i)About an individual’s race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations; (ii) About an individual’s health, education, genetic or sexual life of a person, or to any proceeding for any offense committed or alleged to have been committed by such person, the disposal of such proceedings, or the sentence of any court in such proceedings; (iii) Issued by government agencies peculiar to an individual which includes, but not limited to, social security numbers, previous or current health records, licenses or its denials, suspension or revocation, and tax returns; and (iv)Specifically established by an executive order or an act of Congress to be kept classified.

3. Personal Data to be Processed:

  • During the Account Creation and Application Stages:
    • Personal identifiers (such as name, photo, identification cards, sex, learner reference number, date of birth);
    • Contact details (such as address, phone number, mobile number, email address);
    • Scholastic data (such as grades and academic standing);
    • Health information;
    • Information and documents that pertain to one’s citizenship;
    • Disciplinary information from the current school if applying for elementary, high school or undergraduate studies  (ex. Certificate of Good Moral Character issued by your school, disciplinary records, and case resolution if applicable); and 
    • Family income or proof of financial standing for determining and granting applicable privileges prescribed by law and processing scholarship applications;
  • During the Acceptance and Enrollment Stages:
    • Scholastic data created in DLSU (ex. course, program, college, department, grades, class standing, achievements, scholarships if applicable, disciplinary information, attendance data, etc.);
    • Academic identifiers (ex. unique ID numbers);
    • Image and likeness (such as photos and video captured by official cameras and by CCTV cameras located in various locations in the campus);
    • Co-curricular data (ex. organization memberships);
    • Health data; and
    • Other relevant information pertaining to a student’s stay in DLSU.

The information that will be collected during the Account Creation and Application Stages may also be processed throughout the Student’s stay in DLSU.

4. Purposes of Using Personal Data:

DLSU uses Personal Data for the purposes of: 

  • Processing applications (such as evaluating applications, issuing test permits, granting campus access, and communicating application results);
  • Establishing the identity of Students, Parents/Guardians, and Alumni;
  • Determining and granting applicable privileges and grants;
  • Delivering education to Students in line with our enrollment contact which commences when an enrollment is initiated and such is confirmed by DLSU;  
  • Organizing ceremonial events such as orientations, 
  • Awards and recognitions (evaluating, announcing, communicating, or organizing);
  • Regulating co-curricular activities;
  • Protecting health and safety;
  • Ensuring safety, security, and discipline (through access controls, investigations, hearings,  collaborations with public authority);
  • Managing systems that help in education delivery and operations;
  • Fulfilling our contractual obligations and exercising our legal rights;
  • Complying with government requirements;
  • Pursuing lawful and legitimate interests of the University (such as communicating existing or new programs; procuring products and services to improve education delivery, services, and operations; and the like.);
  • For religious practices authorized by the University; 
  • Applying to and maintaining accreditations/partnerships locally and internationally; 
  • Scientific research intended to benefit the public, subject to the requirements of applicable laws, regulations, or ethical guidelines.  When the use of Personal Data for scientific research requires consent, you will be notified and your consent will be secured prior to using the data; and
  • For official DLSU activities where there is a lawful basis to use Personal Data.

5. Disclosing Your Data

We will not disclose Personal Data to 3rd parties when there is no appropriate lawful basis.  We shall ensure that only data proportionate to a legitimate purpose will be shared. Some entities to whom data may be disclosed include the government, authorized DLSU vendors and service providers,  accreditors, principals, and partners.

6. Data Protection:

There are inherent risks to any data processing activity.  Because of this, DLSU has taken steps to minimize the risks through  reasonable and appropriate organizational, physical, and technical security measures.  Among others, these measures include appointing a Data Privacy Officer, having policies on data privacy and security, executing Non-Disclosure Agreements and data privacy agreements with our employees and vendors, limiting access to authorized personnel on a need-to-know basis, storing records in secure receptables and locations, and protecting IT resources.  We also ensure that data security requirements are enforced upon our 3rd party providers through our service contracts.  

In all instances, the use, access, disclosure, or otherwise processing of personal data shall be in accordance with the Data Privacy Act, its Implementing Rules and Regulations, the issuances from the National Privacy Commission, and DLSU policies.  

7. Retention and Destruction:

Personal Data provided to us during the Account Creation and Application stages shall be retained for one (1) year counting from the last day of admission.  Data that is needed and created in relation to acceptance and enrollment shall follow the applicable retention policies.

Data beyond the retention period shall be securely disposed such that it can no longer be used to identify an individual.

8. Rights of Data Subjects:

Under the Data Privacy Act of 2012, Data Subjects have the right to:

  • Be informed when their data will be processed;
  • Object the processing of their data (subject to legal exemptions);
  • Access one’s data;
  • Request the correction of inaccurate information;
  • Request the blocking or deletion of data that is incomplete, outdated, false, unlawfully obtained, used for unauthorized purposes, or is no longer necessary for the purposes for which it was collected;
  • Be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of one’s data;
  • Request a copy of one’s data in a commonly used format; and
  • Lodge a complaint with the entity processing their data or with the National Privacy Commission. 

9. Your Responsibilities:

Data privacy is a joint responsibility between the entity processing the information and the Data subject.  Legal-aged Data Subjects and individuals who provide data to DLSU are responsible for providing us with accurate data.  When providing us data of another person, you are responsible for informing him about DLSU’s data processing activities as described in this Privacy Notice.

10. Consent and Other Lawful Basis for Processing Personal Data:

Consent is a one of the lawful bases for processing Personal Data.

Consent is needed when a decision that may have legal effect or may significantly impact the Data Subject will solely rely on automated decision-making.  The data you will provide will not undergo an automated decision-making process.

  • Consent DOES NOT have to be taken when any of the following lawful basis applies to the processing of PERSONAL INFORMATION:
    • The use of information is necessary to fulfill our enrollment contract with the Student (or the Parent/Legal Guardian if the Student is a minor) or to take steps prior to entering into the enrollment contract;
    • To comply with a legal obligation to which DLSU is subject;
    • The use of information is necessary to protect vitally important interests of the Data Subject including life and health;
    • The use of information is necessary to respond to a national emergency, to comply with public order and safety requirements; or to fulfill the functions of public authority which necessarily includes the processing of personal data to fulfill their mandate;
  • Consent DOES NOT have to be taken when any of the following lawful basis applies to the processing of Sensitive Personal Information or Privileged Information
    • The use of information is necessary to fulfill our enrollment contract with the Student (or the Parent/Legal Guardian if the Student is a minor)
    • The use of information is allowed under existing laws and regulations that guarantee the protection of information and that consent of the Data Subject is not required by the existing law or regulation;
    • To protect the life and health of individuals and the Data Subject is unable to physically or legally express consent;
    • The use of information is necessary for medical treatment;
    • The use of information is necessary for protecting lawful rights and interests in court proceedings; necessary for establishing, exercising or defending legal claims; or when the information is provided to government or public authority in accordance with the Data Privacy Act and other applicable laws.

Apart from consent, the other lawful bases that apply to the processing of Personal Data by DLSU are Sections 10(b)I, 10(b)ii, 10(b)iii, 10(b)v, 10(c)i and 10(c)ii above.  When applicable, Personal Data will also be processed based on other lawful bases. 

11. Inquiries:

For inquiries about your application, please email: 

For Kinder to Senior High School applications: [email protected]

For Undergraduate (college) applications: [email protected]For College of Law and Graduate applications:  [email protected]

For questions about this Privacy Notice, to exercise your data privacy rights, or if you have any privacy-related concerns or complaints, please contact our Data Privacy Officer via [email protected]. 

By accepting the Terms and Conditions, you attest that you are at least 18 years old and that you fully read and understand the Archers Hub Terms & Conditions and the Privacy Notice for Applying to Study in DLSU.  You likewise consent to the use of data for the purposes stated in this Privacy Notice and attest that you understand and accept your responsibilities and shall hold DLSU free and harmless from any actions, claims, penalties, or suits arising from the failure to perform your responsibilities.

12. Version:

This Privacy Notice was updated on 19 January 2026. 

 

The use of the gender pronouns he/him/his apply to all individuals regardless of sex and gender.

Privacy Notice for Visitors

Welcome to De La Salle University.   This privacy notice aims to inform you that your personal data will be processed when you visit the DLSU campus.  

Data such as your name, proof of identification, affiliation, contact information, car details (if applicable), image and likeness (when captured by CCTV cameras), and purpose of visit will be collected and processed for the purposes of facilitating your visit and maintaining campus security.   We strive to ensure that our processing activities are compliant with Data Privacy Act, its Implementing Rules and Regulations, and that data is only used for the purposes stated herein.      

As there are inherent risks to any personal data processing activity, DLSU has taken steps to minimize risks by ensuring that reasonable and appropriate organizational, physical, and technical security measures are in place.  Among others, these measures include appointing a Data Privacy Officer, having policies on data privacy and security, executing Non-Disclosure Agreements and data privacy agreements with our employees and vendors, limiting access to authorized personnel on a need-to-know basis, storing records in secure receptables and locations, and protecting IT resources.  We also ensure that data security requirements are enforced upon our 3rd party providers through our service contracts.  Data is safely disposed of after the applicable retention period has been reached.

Should you wish to exercise your data privacy rights to access, object, correct, or block your data, or if you have any complaints or inquiries on how your data is processed, please send an email to [email protected]. 

Privacy Notice for Applicants and Employees

De La Salle University (“DLSU” or “University”) is committed to protecting your personal data and respecting your rights under the Data Privacy Act of 2012.  This Privacy Notice aims to inform you on how DLSU will process your personal data (“Data”) during the application process and in the course of your employment if you are hired by the University.

In the context of data privacy, “processing” pertains to any operation that is performed upon personal data such as, but not limited to, collecting, recording, organizing, storing, updating, modifying, retrieving, accessing, using, consolidating, blocking, erasing, deleting, or destroying.

1. Personal Data to be Processed:

a. During the Application Process:
Data such as your full name, nick name, address (permanent and current), date of birth, country of birth, citizenship, gender, contact information (e.g. telephone number, mobile number and email address), educational background, professional affiliations or certifications, religion, memberships in professional or socio-civic organizations, research outputs, information on previous employment, clearances, medical and health related documents and declarations, and any other information that may be present in

b. Upon Acceptance:
i. Data required in the DLSU personal data sheet such as your photograph and government-issued identification numbers i.e. BIR, SSS, PAG-IBIG, PhilHealth, and others
ii. Government-issued clearances such as barangay clearance, police clearance, NBI clearance, and others
iii. Government certifications such as birth and marriage certificates, medical and health related clearances
iv. Data about work performance and activities
v. Data in other documents necessary to process your employment

c. During Employment:
i. Annual physical examinations or medical and health related tests
ii. Benefit claims
iii. Performance evaluations
iv. Potential and/actual administrative or legal cases
v. Memberships to professional organizations
vi. Photos and videos directly and indirectly taken during official activities i.e. individual shots/recordings, group shots/recordings, scene shots/recordings
vii. Recording captured by CCTVs
viii. Information about your academic, professional, and research related activities, recognitions, and social engagement outputs.

In all instances, DLSU will not collect information about your political or philosophical affiliations.  If you happen to include that information in any of the documents or information that you provide to DLSU, the presence of said information in our custody is only incidental. DLSU will not use said information to make any decisions about you, nor disclose said information to other parties without asking for your consent prior to disclosure unless we are required to do so by law.

Aggregated data may be generated from your personal data for research and reporting purposes. Aggregate data does not identify an individual and is therefore not considered as Personal Data.

 

2. Purposes of Processing Personal Data

DLSU will only process your data for the following purposes:

a. In relation to your application and/or employment such as, but not limited to:

i. Validating and identifying applicants/employees
ii. Employment assessments and evaluations
iii. Health assessments
iv. Recruitment pooling
v. Background checks, educational attainment verification, and the like.
vi. Administrative matters relating to attendance, payroll, benefits, performance evaluations, employee engagement, disciplinary actions, and the like.
vii. Matters relating to the University’s information systems such as but not limited to facilitating your access to DLSU systems, monitoring usage of DLSU systems, and the like.
viii. Processing of grants or documents needed for partnerships and linkages.
ix. Promoting and supporting health and well-being, responding to emergencies, and protecting vitally important interests, life, and health of individuals.
x. Other matters related to your contract with the University.\

b. To comply with legal obligations and regulatory requirements to which the University is subject such as, but not limited to:

i. Submitting reports required by government agencies like BIR, SSS, PAG-IBIG, PhilHealth, DOLE, etc.
ii. Complying with risk management and due diligence requirements of DLSU’s partners and/or clients.

c. For the legitimate interests of the University, such as, but not limited to:

i. Processing, facilitating, or maintaining the Universities accreditations, partnerships, collaborations, or grant applications and the like
ii. Announcing activities, events, achievements, and the like on the DLSU website, various media channels (i.e. print, broadcast, billboards, etc.), and social media sites managed by DLSU. The Personal Data to be used in information dissemination activities shall be limited to names, designations, pictures, and achievements
iii. Maintaining updated staff information on the DLSU website limited to name, designation, DLSU email address, picture (optional), professional affiliations, achievements, and other information you deem professionally relevant
iv. Maintaining safety and security
v. Internal process improvement activities
vi. Monitoring purposes such as attendance, usage of DLSU systems and resources, and the like
vii. Use in religious practices as supported and sanctioned by the University
viii. Exercising DLSU’s lawful rights and interests in court proceedings, or to establish, exercise, or defend DLSU’s legal claims
ix. Other matters related to the legitimate interest of the University

d. For other purposes allowed under Philippine Laws.

 

3. Protection and Storage:
As there are inherent risks to any personal data processing activity, DLSU has taken steps to minimize risks by ensuring reasonable and appropriate organizational, physical, and technical security measures are in place. Among others, the security measures include appointing a Data Privacy Officer, having policies on data privacy and security, executing Non-Disclosure Agreements and data privacy agreements, limiting access to authorized personnel, storing physical records under lock and key, protecting IT resources, and the like.

4. Disclosure:

As needed, data proportionate to specific purposes will be disclosed to different DLSU offices, government agencies, and other 3rd parties (i.e. vendors, accreditors, other Lasallian schools, higher educational institutions, non-government organizations, government agencies, private organizations, partners, clients, and similar entities external to the University) in relation to the purposes stated in this Privacy Notice.

Data provided to vendors shall be limited to information related to the services or products they provide to DLSU where such product or service specifically requires the processing of data. These vendors include, but are not limited to, information and communication technology service providers, providers related to your benefits as employees of DLSU, and vendors engaged by DLSU for the legitimate interests of the University, and the like.

Information about the organizational structure, staff directory, official events, accomplishments, achievements, publications, and research activities that you participated in or are a part will be available to the general public when published in, or communicated via, DLSU’s website and approved media channels.

5. Retention and Disposal:

Data of applicants who were not offered a role in DLSU will be retained for a period of 1 year from the date of application.

Data of those employed by DLSU shall be maintained following below retention periods:

 

Employment records (201 files) Retained for 15 years after separation
Personnel administrative cases Retained for 7 years after finally settled except decisions which are retained permanently.
Data in official business records, research, contracts, documents where you are a signatory, and the like Retained indefinitely

After the retention period, paper records that contain data shall be destroyed chemically or via mechanical shredding and electronic data will be destroyed or removed from IT systems such that information will no longer identify individuals.

6. Your Rights under the Data Privacy Act:

a. Right to be informed whether your data is, or was, processed.
b. Right to be notified about the details of the processing of your data.
c. Right to access your data.
d. The right to dispute the inaccuracy of your data and request the correction thereof. In such
instance, DLSU will only correct the data if the request is reasonable and not vexatious.
e. Right to order the blocking, removal, or destruction of your data upon discovery and substantial
proof that the data is incomplete, outdated, false, unlawfully obtained, used for unauthorized
purposes or is no longer necessary for the purposes for which it was collected.
f. The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated,
false, unlawfully obtained, or unauthorized use of data.
g. The right to be provided with a copy of your data in a commonly used format.
h. The right to lodge a complaint before DLSU and/or the National Privacy Commission.

7. Your Responsibilities:

You are responsible for ensuring that the data you have provided and will provide to DLSU are complete and accurate; promptly notifying DLSU of any inaccurate information; and getting the consent of individuals whose data you provided to DLSU in relation to your application and/or employment in the University.

8. Inquiries:

For inquiries or to exercise your privacy rights, please send an email to [email protected].