Data Privacy Notice
Trends Group, Inc. and its Affiliates
We commit to upholding your right to privacy. This commitment reflects the value we place on the trust and confidence reposed in us. To this end, we make every effort to comply with the relevant laws of the Philippines, particularly the Data Privacy Act of 2012 (“DPA”), its Implementing Rules and Regulations, and the circulars, memoranda, advisories, and opinions issued by the National Privacy Commission (“NPC Issuances”), as well as current international and local industry standards.
This Privacy Notice explains, among other things, how we implement our commitment and the terms and conditions under which we process (i.e., collect, use, retain, access, disclose, dispose, and/or secure) Personal Data. It likewise explains the steps you can take if you want to exercise any of your privacy rights as indicated below.
General Processing Principles
We adhere to the general processing principles of transparency, legitimate purpose, and proportionality by:
- providing an appropriate and separate privacy notice to you as the situation demands;
- processing your personal data only for and consistent with a declared, specified, and
- ensuring that only personal data relevant to and adequate for the purpose/s will be processed;
- maintaining the accuracy and quality of your personal data; and
- implementing organizational, physical, and technical measures to provide adequate protection to your personal data.
Description of Personal Data and Purpose of Processing
We process your Personal Data for us to execute transactions and perform functions in relation to the following purpose/s:
LEGEND:
Categories of Personal Data
Description of Personal Data
*1 For example – Name, Address, Contact Information, Date of Birth, Unique Regulatory Identifiers, and Employee Identification Number and ID
**2 For example – Corporate Shot
*For example – Start Date, Separation Date, Work Contact Information, Job Title, Job Description, Work Group, Working Hours, Salary and Benefits, Occupational Health Assessments such as Annual Physical Exam Results, Signature, Work Location, Signed agreements with Us such as employment contract, Emergency Contact Information, Work-related accidents/incidents, and Work History
Other Information
*(For example – Information you choose to share including answers to surveys and participation in programs)
1 * means that the processing of Personal Data may be relevant to Pre-Employment Phase, On-Boarding Phase, and Employment Phase.
2 ** means that the processing of Personal Data may be relevant to On-Boarding Phase and Employment Phase.
Data Categories
Purpose
Contact Details
Recruitment Data
Acquire talents.
Assess fitness, suitability, and qualifications of applicants.
Hire and execute employment contract with applicants.
Recruitment Data
Contact Details
Compensation and Benefit Data
Compensation and Benefits.
Provide and/or manage compensation, benefits, taxes, and work-related claims such as reimbursements and insurance claims.
Personal Details
Contact Details
Travel Data
Training and Development.
Equip employees, update skillset, and extend development opportunities.
Performance Review and Management
Review performance at work and outputs. Identify and address work performance and professional/career development needs.
Contact Details
Demographics Data
Employment Data
Recruitment Data
Compensation and Benefits Data
Performance and Management Data
Systems Use and Security Monitoring Data
Legal Requirements.
Comply with statutory and regulatory requirements (e.g., Labor laws and Tax laws).
Defend, protect, and exercise legal rights.
Investigate work-related incidents/reports and support imposed disciplinary actions.
Secure premises.
Contact Details
Compensation and Benefits
Contact Details
Employment Data
Recruitment Data
Compensation and Benefits Data
Systems Use and Security Monitoring Data
Other Information
Travel Data
Business As Usual (e.g., comply with bidding requirement or stakeholder requirements)
Secure our people, guests, assets, resources, and premises.
Provide employees with access to our assets and tools needed for day-to-day operations.
Provide corporate support services appropriate for and required by employees’ duties and responsibilities (e.g., Schedule business travels).
Manage relationships with internal and external stakeholders (e.g., fulfill deliverables to clients).
Improve operations and pursue legitimate business purposes.
Contact Details
Other Information
Employee Engagement and Inclusion Programs/Activities.
Promote overall well-being of employees.
Manage and continuously improve employee productivity and engagement.
Collection of Personal Data
We collect your personal data, either by ourselves or through agents, suppliers, service providers, or consultants. Collection may be done in person, electronically, over the phone, through forms, or through e-mail.
Basis of Processing
We process your personal data only under the circumstances provided for under the DPA and NPC Issuances, as well as applicable international and local industry standards. Primarily, your personal data is processed based on Legitimate Interest, Contractual Necessity, Legal Obligation, Consent, and/or Establishment, Exercise or Defense of Legal Claims.
Data Sharing
Your personal data may be disclosed to Our affiliates, agents, government agencies, and business partners (e.g., partner healthcare provider, CRM provider, IT solutions provider) as part of our regular business operations, to administer our working relationship with you, and comply with statutory and regulatory requirements.
Your Personal Data may be shared among TGI and its subsidiaries for the enhancement of TGI and/or its subsidirary/ies’ business operations or where a subsidiary acts on behalf of TGI or on behalf of another subsidiary of TGI. We ensure that the purpose for which the Personal Data is to be disclosed or shared is consistent with this Privacy Notice.
Security of Personal Data
We implement reasonable and appropriate organizational, physical, and technical security measures and processes for safeguarding and protecting your personal data against any accidental or unlawful destruction, alteration, and disclosure, as well as against any other unlawful processing with the aim to maintain the availability, integrity, and confidentiality of your personal data. These include:
Organizational Security Measures
Among others, we have appointed compliance officers who ensure our compliance with the DPA and NPC Issuances, conducted Privacy Impact Assessments, adopted privacy policies that are reviewed accordingly.
Physical Security Measures
Among others, we have adopted measures that limit the access to personal data to certain individuals, policies designating specific locations for storing personal data, and protocols to minimize risks of security incidents.
Technical Security Measures
Among others, we have a team that monitors incidents round-the-clock, adopted policies on incident management, breach monitoring, and regular vulnerability scanning, and utilized firewalls, masking, and cryptographic controls.
We regularly review and enhance its security policies and measures to consistently maintain a high level of security.
Retention Period
We retain your personal data as long as they are necessary for the fulfillment of the declared, specified, and legitimate purpose/s;
We shall dispose of your personal data and prevent its further processing upon the cessation or expiration of the foregoing.
Update of Personal Data
To keep your personal data up to date, you are requested to immediately inform us of any relevant change/s.
Protected Rights
Under the DPA, you have the right to be informed of the details of processing, right to reasonable access, right to object to the processing of your personal data, right to rectification of errors and inaccuracies, right to erasure or blocking of your personal data from our system, right to file a complaint and damages, and right to data portability. To know the full text of your rights under the DPA, you may refer to this: https://www.privacy.gov.ph/data-privacy-act/#16.
Notification of Changes
We reserve the right to amend this Privacy Notice at any time with or without notice. Any amendment to this Privacy Notice shall be communicated via posting in our website or via e-mail. Any change will not be applied and will not alter how we handle previously collected personal data without obtaining your consent unless such change or alteration is required by law.
Inquiries, Requests or Complaints
Should you have any questions or concerns, you may reach our Data Protection Officer at the following:
- Tel. No.: +63.2.8811.8181
- Email: Trends Group, Inc. – dpo@tgi.com.ph