DATA PRIVACY NOTICE AND CONSENT FORM OF COLEGIO DE SANTA RITA DE SAN CARLOS, INC. Colegio de Santa Rita de San Carlos, Inc. (CSR-SCC) is compliant with the Data Privacy Act (DPA) of 2012, and its Implementing Rules and Regulations (IRR) effective since September 8, 2016 and ensures full cooperation with the National Privacy Commission (NPC). CSR-SCC respects the privacy of its data subjects with utmost importance and is committed to protecting it and ensuring the safety and security of personal data under its control and custody. This policy also aims to inform its Applicants, Students and Alumni of their rights under the Act. This Data Privacy Notice and Consent Form may be amended at any time without prior notice, and such amendments will be notified to you via CSR-SCC’s website or by email.

Privacy Notice
A. Collection of Information
CSR-SCC collects, stores, and processes personal data from its current, past, and prospective students that include application for admission, information acquired or generated upon enrollment and during the course of stay with CSR-SCC. This will include, but not limited to:

1. Personal information, such as name, address, telephone number, email address and other contact details, date and place of birth, nationality, immigration status, religion, civil status, student ID, government-issued IDs, web information, recommendations and assessment forms from previous schools attended, etc.
2. Family background, including information on parents, guardians, and siblings
3. Photographic and biometric data, such as, photos, CCTV videos, fingerprints, handwriting and signature specimens. Student's school works, including data gathered using third party online learning tools
4. Health records, psychological evaluation results, disciplinary records, and physical fitness information
5. Student Guidance Records, which includes interviews, entrance exam results, guidance assessments, special needs, exclusions/behavioral information, as well as information in connection with any disciplinary incident and its corresponding sanctions
6. Permanent Student Academic Records, including transcript of records and the academic history of the student
7. Student records for processing scholarship applications, grants, and other forms of assistance.
8. Student programs résumés, job interview forms as well as records of membership in student organizations, leadership positions and participation, and attendance in seminars and competitions
9. Financial and billing information

1. Evaluation and processing of admission application and student selection.
2. Verification of the authenticity of student records and documents.
3. Processing of scholarship applications.
4. Recording, generating and maintaining student records of academic, co - curricular and extra- curricular progress.
5. Establishing and maintaining student management systems as well as learning management systems.
6. Providing services such as health, counseling, information technology, library, sports/recreation, transportation, safety and security.
7. Processing and generating statements of accounts.
8. Investigating incidents that relate to student behavior and implementing disciplinary measures;
9. Managing and controlling access to campus facilities and equipment.
10. Official school announcements, marketing and promotional materials regarding school-related functions, events, projects and activities.
11. Participation in research and non-commercial surveys.
12. Compilation and generation of reports for statistical and research purposes.
    
    C. SHARING OF INFORMATION
    Personal data in the custody of CSR-SCC shall be disclosed only to authorized recipients. Sharing of personal data with third parties, other than parents and/or guardians on record for minors, shall necessitate the individual or parents’ consent, or when required or permitted by our policies and applicable law. Your personal information may be disclosed / shared in the following manner:
    
    1. Posting or displaying of academic and non-academic achievements within the CSR-SCC’s premises and/or its official website and social media accounts
    2. Sharing information to potential donors, funders or benefactors for purposes of scholarship, grants and other forms of assistance
    3. Processing of application for graduation and distribution of the list of graduates and awardees during commencement exercises
    4. Disclosure of information to the NPC and other government bodies or agencies (e.g., Commission on Higher Education, Department of Education)
    5. Sharing information for accreditation and university ranking purposes, professional development of teachers and staff, and research (e.g.,Philippine Accrediting Association of Schools, Colleges and Universities)
    6. Disclosure with academic institutions, companies, government agencies, private or public corporations, upon their request, scholastic ranking information or certification of good moral character for purposes of admission.
    7. Marketing or advertising to promote the school, including its activities and events, through photos, videos, brochures, website posting, newspaper advertisements, physical and electronic bulletin boards, and other media.
    8. Conducting research or surveys for purposes of institutional development and marketing or advertising to promote the school, including its activities and events, through photos, videos, brochures, website posting, newspaper advertisements, physical and electronic bulletin boards, and other media.
    9. Sharing your information to the school’s Learning Management System Provider.
    10. Sharing your directory information to the school’s alumni association.
    
    D. Data Retention
    CSR-SCC shall keep your records only for as long as necessary.
    1. The Permanent Student Academic Records are kept by the Registrar’s Office.
    2. Admission files are kept for five years.
    3. Application forms and documents of unsuccessful applicants are kept in the Directress’ Office for one year.
    4. Scholarship application forms and supporting documentation are kept by the Office of Student Services until the scholar graduates.
    5. The Student Cumulative Guidance Folders are kept in the Student Placement Center Office for five years after graduation.
    6. Student school works are kept for one school year.
    7. Student disciplinary records are kept in the Student Placement Center Office for five years after graduation.
    8. Class records are kept for three years.
    9. Non-academic records are kept for five years.
    10. Financial and billing information are kept by the Accounting Office for five years if the student has paid in full. Otherwise, these will be kept until settled.
    11. Health records are kept by the Clinic for three years after graduation.
    12. CCTV camera recordings are kept for one month from date of recording unless there is a need for it to be kept for a longer period.
    
    
    Data Protection
    We continue to implement organizational, administrative, technical, and physical security measures to safeguard your personal data. Only authorized personnel have access to your personal data. CSR-SCC’s security measures are aimed to maintain the availability, integrity, and confidentiality of personal data and are intended for the protection of personal data against any accidental or unlawful destruction, alteration, disclosure, and unlawful processing. Any data security incident or breach that comes to the knowledge of CSR-SCC shall be appropriately addressed as required by law.
    
    Right to Privacy
    As provided by the Act, you may object to the processing of your personal data, request to access your personal information, and/or have it corrected, erased, or blocked on reasonable grounds, and suspend or withdraw your personal data pursuant to the provisions of the DPA and the DPA-IRR.