Privacy Notice

Saint Michael's College of Laguna is the data controller of the personal information you provide to us. This means the school determines the purposes for which, and the way, any personal data relating to students and their families are to be processed. Contact the Data Protection Officer at privacy@smcl.edu.ph.

In some cases, your data will be outsourced to a third-party processor; however, this will only be done with your consent, unless the law requires the school to share your data (The Institution are required to share some data of the students to DepEd or CHED). Where the school outsources data to a third-party processor, the same data protection standards that the Institutions' upholds are imposed on the processor. Address: Old National Road, Platero, City of Biñan, Laguna 4024 Philippines.

Data Collection (which data is collected?)

Saint Michael's College of Laguna collects, holds, and share personal data of the students and their families such as:

While most of the personal data you provide to the school are mandatory, some are provided on a voluntary basis. When collecting data, the school will inform you whether you are required to provide this data, or your consent is needed. Where consent is required, the school will provide you with specific and explicit information about to the reasons the data is being collected and how the data will be used.

Data Purpose (Why do we collect and use your information?)

Saint Michael's College of Laguna holds the legal right to collect and use personal data relating to students and their families and may also receive information regarding them from their previous school. SMCL collects and use personal data in order to meet the legal requirements and legitimate interests set out in the Data Privacy Act 2012.

In Accordance with the law, the personal data of the students and their families are collected and used for the following reasons:

• To support the students in their learning process

• To monitor and generate reports regarding the academic progress of the students

• To provide appropriate approach and pastoral care for the students

• To assess the quality of our service

• To comply with the law regarding data sharing

• To assess the medical condition of the students

While most of the personal data you provide to the school are mandatory, some are provided on a voluntary basis. When collecting data, the school will inform you whether you are required to provide this data, or your consent is needed. Where consent is required, the school will provide you with specific and explicit information about to the reasons the data is being collected and how the data will be used.

Data Retention (How long is your data stored for?)

Personal data relating to students as well as their families at SMCL is stored in line with the school's Data Privacy Policy.

• Mass electronic data are stored in servers inside the data center of the school.

• Non-Electronic data are stored in filing cabinets with lock in respective offices.

In accordance with the law, the school does not store personal data indefinitely; data is only stored for as long as necessary to complete the task for which it was originally collected.

Rights of the Data Subjects

Parents and students have the following rights in relation to the processing of their own personal data. The data subjects have the right to:

Where the processing of your data is based on your consent, you have the right to withdraw this consent any time.

Policy Changes

The School's privacy policy may need to modify or amendment if necessary and it may be reflected on our current privacy practices. We will inform the data subjects if there is any modification in our privacy policy in the future by posting changes on the school's website (www.smcl.edu.ph).

If you have any concern about our data privacy policy, you may contact our Data Protection officer at (632) 8405-5040 or send an e-mail to privacy@smcl.edu.ph.

Subject Access Request

All individuals who are the subject of personal data held by SMCL are entitled to:

• Ask what information the company holds about them and why.

• Ask how to gain access on it.

• Be informed how the company is meeting its data protection obligation.

If the individual contacts the school requesting this information, this is called subject access request.

Subject access request from individual is made upon filling up the request form from the data controller.

The data controller will always verify the identity of anyone making a subject request before handing over the information. For instance, some subject access requests will be made electronically.