Privacy Policy

1. Introduction

Data Center College of the Philippines ("DCCP", "we", "us", or "our") is committed to protecting the privacy and security of personal information entrusted to us. This Privacy Policy describes how we collect, use, disclose, and protect personal data through the DCCP Hub ("System") in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

2. Information We Collect

2.1 Faculty Information

We collect and process the following information from faculty members:

• Full name, employee ID, and faculty identification number
• Contact information (email address, phone number, address)
• Employment details (department, position, hire date, employment status)
• Academic credentials and qualifications
• Teaching assignments and schedules
• Professional development records
• System access logs and usage data

2.2 Administrator Information

For administrative personnel, we collect:

• Full name and employee identification
• Contact information and department assignment
• Role and access level within the System
• System activity logs and audit trails

2.3 Student Information

Faculty and administrators may access student information as necessary for their duties, including:

• Student names, IDs, and enrollment information
• Academic records and grades
• Attendance records
• Contact information

2.4 Technical Data

We automatically collect:

• IP addresses and device information
• Browser type and version
• Login timestamps and session data
• Pages accessed and actions performed within the System

3. Legal Basis for Processing

Under the Data Privacy Act of 2012, we process personal information based on the following lawful criteria:

• Consent: Users provide consent when creating accounts and accepting these terms
• Contractual Necessity: Processing is necessary for employment contracts and student enrollment
• Legal Obligation: Compliance with educational regulations and government reporting requirements
• Legitimate Interests: Educational administration, institutional security, and service improvement

4. How We Use Your Information

Personal information is used for:

• Managing faculty assignments, schedules, and workloads
• Processing and maintaining academic records
• Facilitating communication between faculty, students, and administration
• Generating institutional reports for compliance and accreditation
• Ensuring system security and preventing unauthorized access
• Improving System functionality and user experience
• Complying with regulatory and legal requirements
• Supporting institutional research and planning

5. Data Sharing and Disclosure

We may share personal information with:

• Government Agencies: Commission on Higher Education (CHED), Department of Education (DepEd), and other regulatory bodies as required by law
• Accrediting Bodies: For institutional accreditation purposes
• Service Providers: Third-party vendors who assist in system maintenance and hosting, bound by confidentiality agreements
• Legal Authorities: When required by court order or legal process

We do not sell, rent, or trade personal information to third parties for marketing purposes.

6. Data Security

DCCP implements appropriate organizational, physical, and technical security measures to protect personal information, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and vulnerability testing
• Employee training on data protection
• Incident response procedures
• Physical security measures for data centers and equipment

7. Data Retention

Personal information is retained for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Specific retention periods include:

• Academic Records: Permanently retained as required by CHED regulations
• Employment Records: Retained for the duration of employment plus 10 years
• System Access Logs: Retained for 5 years
• Account Information: Retained until account deletion request or employment termination

8. Your Rights Under the Data Privacy Act

As a data subject, you have the following rights under Republic Act No. 10173:

• Right to Be Informed: You have the right to know how your personal data is being collected, used, and processed
• Right to Access: You may request access to your personal information held by DCCP
• Right to Correction: You may request correction of inaccurate or incomplete personal data
• Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements
• Right to Object: You may object to the processing of your personal data in certain circumstances
• Right to Data Portability: You may request a copy of your personal data in a commonly used electronic format
• Right to File a Complaint: You may file a complaint with the National Privacy Commission if you believe your rights have been violated

9. Exercising Your Rights

To exercise any of your data privacy rights, please submit a written request to our Data Protection Officer. We will respond to your request within 30 days. You may be asked to verify your identity before we process your request.

10. Cookies and Tracking

The System uses cookies and similar technologies to:

• Maintain user sessions and authentication
• Remember user preferences
• Analyze System usage and performance
• Enhance security

Essential cookies are required for the System to function properly. You may configure your browser to refuse cookies, but this may affect System functionality.

11. Children's Privacy

The DCCP Hub is designed for use by faculty and administrators who are adults. We do not knowingly collect personal information from individuals under 18 years of age for account creation purposes. Student information processed through the System is handled in accordance with applicable privacy laws and parental consent requirements.

12. Data Breach Notification

In the event of a personal data breach that poses a real risk of serious harm to affected individuals, DCCP will:

• Notify the National Privacy Commission within 72 hours of becoming aware of the breach
• Notify affected data subjects when required by law
• Document the breach and remediation measures taken
• Implement measures to prevent future breaches

13. Changes to This Privacy Policy

DCCP may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify users of any material changes through the System or via email. Continued use of the System after such notification constitutes acceptance of the updated Privacy Policy.

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

15. National Privacy Commission

If you believe that your data privacy rights have been violated and DCCP has not adequately addressed your concerns, you may file a complaint with:

16. Acknowledgment

By using the DCCP Hub, you acknowledge that you have read, understood, and agree to this Privacy Policy. You consent to the collection, use, and disclosure of your personal information as described herein, in accordance with the Data Privacy Act of 2012.