Privacy Notice

Our Privacy Commitment

Credit Management Association of the Philippines (CMAP) is a respected credit management institution sharing center stage with other segments of the business community, the government and society, and cooperating with these segments in nurturing credit consciousness, responsibility and discipline among credit grantors and credit users in both the public and private sectors. 

As we pursue our advocacy, we ensure that the personal data we process are safeguarded and the data privacy rights of the individuals whose data we process are upheld. We ensure that the data privacy principles are embedded in our processes whenever we handle the Personal Data of our stakeholders in accordance with the requirements of the Data Privacy Act of 2012 (DPA) and other related laws.

This Privacy Notice

This Privacy Notice describes how we collect, use, store, disclose, dispose and protect your personal data.

The words “personal data”, “personal information”, “sensitive personal information”, “processing of personal data”, and other related terminologies in this Privacy Notice are used in the same context as they are found in the Data Privacy Laws. Please refer to the following definition:

  • -Personal data pertains to both personal and sensitive personal information.
  • -Personal information is any information or set of information that can be used to identify an individual or can reasonably and directly identify an individual, but are not considered as sensitive personal information.
  • -Sensitive Personal Information is any information about individual’s race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations; individual’s health or education; about any criminal, civil or administrative proceeding of an individual; unique government issued identifiers; and those established by law as classified.
  • -Processing of Personal Data refers to any operation or any set of operations performed upon personal data including, but not limited to, the collection, use, storage, disclosure or disposal.

 

Our Basis for Processing Your Personal Data

In this initiative, we process your personal data based on:

Basis for Processing Personal Information

  1. 1. your consent, in such case, you may withdraw your consent to the processing of your personal data anytime by sending your request via the contact details provided below;
  2. 2. the needs of the relevant contract;
  3. 3. the existence of a legitimate business interest;

Basis for Processing Sensitive Personal Information

  1. 1. your consent, in such case, you may withdraw your consent to the processing of your personal data anytime by sending your request to the contact details provided below;
  2. 2. for protection of lawful rights and interests in court proceedings or establishment, exercise or defense of legal claims.

 

 

The Personal Data Collected

We may collect the following personal data from you: Name, Gender, Date of Birth, Nationality, Civil Status, Address, Contact Number 

How we collect your personal data
Most of the personal data we process is provided to us directly by you through: the application, registration, and other forms that you fill-out.

We may also collect your personal data from other sources through: our members from different industries, and public information.

 

The Purpose of Collection

We only collect your personal data needed to achieve the purpose of this data processing activity. We will only use your personal data for a legitimate purpose.

Disclosure of Your Personal Data

We share your personal data outside the CMAP as may be allowed by the DPA or other Data Privacy Laws, or upon obtaining your consent, when required. When we disclose, rest assured that the personal data shared are not excessive in relation to the declared and specified purpose.

Your Personal Data Retention and Storage

We will retain your personal data for as long as necessary to fulfill the purpose/s for which they were collected. Thus, the personal data shall be retained in accordance with our Record Retention Schedule.

After expiry of the retention period, we will securely destroy your personal data in accordance with our Data Retention and Disposal Policy such as shredding the physical records, deletion or anonymization of electronic data and through such other means that would prevent further use and access.

Your personal data is securely stored in our on-premise data centers. Physical records are stored in our storage facilities within our office premises, Hostwinds, Digital Ocean, and AWS.

Securing Your Personal Data

We implement reasonable and appropriate technical, physical and organizational security measures to protect personal data from unauthorized disclosure, misuse, alteration, loss or destruction. 

We implement the following mechanisms to protect your data

  • -Use of security controls and facilities to protect all collected data in whatever form;
  • -Formulation and implementation of responsive and relevant data privacy and data security policies;
  • -Ensuring that third parties who are processing personal data for us or to whom we disclose your personal data complies with the requirements of the Data Privacy Laws through proper transfer risk management measures; and
  • -Management of Human Resources through the use and implementation of internal privacy and data protection policies, confidential contractual clauses, and regular conduct of internal trainings and awareness campaigns.

Your Data Subject Rights

Under the DPA, you have the following rights:   

  • –Right to be informed.  You have the right to be informed of how your data is collected, used, stored, shared and disposed. We provide this information through our Privacy Notices
  • –Right to object. You have the right to object to our processing of your personal data or withdrawing the same thereafter.
  • –Right of access. You have the right to ask us for information on how we use, store, disclose or protect your personal data,
  • –Right to rectification. You have the right to ask us to modify or correct your personal data when the same is inaccurate, outdated or false.
  • –Right to erasure or blocking.  You have the right to request us to delete your personal data or request us to stop using your data for specific purpose/s.
  • –Right to data portability. You have the right to ask that we transfer your personal data to another organization, or to you, in certain circumstances.
  • –Right to file a complaint and ask for damages. If you think that your rights as a data subject have been violated, or if you sustained damages due to any inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your personal data, you may escalate your concern to our Data Protection Officer (DPO) so we can assist you. In case we failed to resolve your complaint or if you are unsatisfied with the way we handle the matter, you have the right to file a complaint with the National Privacy Commission (NPC).  

                 JUDY TAGLE (Data Protection Officer)
                 Room 401 Cattleya Building Salcedo Street, Legaspi Village, 235 Salcedo, Makati City
                 tagle.judy@yahoo.com
                 (+632) 8818-2372 / 8817-8386, 0917-544-2627

​

How to exercise your data privacy rights

If you have privacy concerns, has belief that your personal data has been breached, your rights as a data subject have been violated, or if you want to exercise any of your rights or withdraw your consent to the use of your personal data, you may fill out our Data Subject Request Form . To access the form, click on the link or scan the QR Code .

How to Opt-Out

If our processing is based on your consent, you may choose to withdraw such consent by submitting a Data Subject Request Form.

This only applies if the processing is solely based on your consent and that there is no other obvious purpose for processing your personal data. Once you opted out, we will no longer process your personal data and we may not be able to provide you services or facilitate your request.

Changes to this Privacy Notice

This privacy notice is under regular review to make sure it is up to date and accurate.

This notice, and any updates, amendments or supplements thereto is available through this website page. Any changes to this privacy notice shall be on this website.

Data Privacy Notice:
Version No.: 1.0
Effectivity Date: October 04, 2024