DATA PRIVACY STATEMENT

Our Company is committed to complying with and implementing the Philippine Data Privacy Act of 2012, its Implementing Rules and Regulations and relevant issuances of the National Privacy Commission, and our  data privacy and protection policies.

From time to time, it may be necessary for you to provide personal data in connection with your visits to our company website and portals and our offices, in the course of your direct or indirect dealings with our Company, our officers and employees, either as a customer, an applicant, or a third party service provider of goods or services.

THE INFORMATION WE COLLECT

We may collect and process personal data from you in the ordinary course of business which may include, to the extent necessary to respond to your requests, queries and concerns, basic information such as your name, contact details, and other relevant personal information (collectively, your “Personal Data”).

When you visit our website or use any of our mobile platforms, other information that may also constitute Personal Data, such as your browser type, operating system, IP address, domain name, number of times you visited the website or accessed the platforms, dates you visited or accessed, and the amount of time you spent browsing through the website or mobile application, may be collected via cookies and other tracking technologies, such as transparent GIF files. Aggregate Information, or non-personally identifiable and anonymous data, such as how many times you log onto our websites or mobile platforms may also be collected.

HOW WE USE THE INFORMATION WE COLLECT?

When necessary, we may request your Personal Data for us to understand your needs and provide you with a better service, and in particular for the following purposes:

• to improve our services;
• to keep an internal record for confirming, maintaining or updating our records;
• for relationship management purposes, such as updating you on our activities in connection with our services;
• for statistical analysis and internal reporting;
• for identification or verification purposes;
• for monitoring to ensure the security of visitors to our website and other online platforms; or
• to communicate or contact you.

SECURITY AND RETENTION OF PERSONAL INFORMATION

We are committed to ensuring that your Personal Data is kept secure. We have implemented suitable and adequate organizational, physical and technical security measures, policies and procedures intended to reduce the risks of accidental destruction or loss, or the unauthorized disclosure or access to such information which are appropriate and adequate to the nature of the Personal Data we collect.

We may retain your Personal Data only for as long as necessary and for legitimate business purposes, to comply with laws, regulations, or lawful court order, or to establish or defend a legal action.

THE INFORMATION WE DISCLOSE

We may share with or disclose your Personal Data to any of our affiliate or subsidiary only for the purposes we have collected your Personal Data.

Any access to Personal Data will be limited to the person who require your Personal Data to perform the functions for which personal information has been collected, and as required or allowed by law. We do not sell, trade, or otherwise transfer your Personal Data to third parties. If shared, we will, at your request, provide you with details of the companies with whom we have shared your Personal Data.

NOTIFICATION OF CHANGES

We recommend that you check this privacy notice every time you visit our website as we may update this privacy notice from time to time, by posting the amended notice on this page. Any changes will be effective when posted.

REQUESTS, ACCESS, RECOURSE AND QUESTIONS REGARDING THIS PRIVACY STATEMENT

You are entitled to request that we:

• provide you with a copy of your Personal Data that we hold and you have the right to be informed of: (a) the source of your Personal Data; (b) the purposes and methods of processing; (c) the data controller’s identity; and (d) the entities or categories of entity with whom your Personal Data may be shared;
• cease processing your Personal Data, in whole or in part, as you direct us, for any purpose, save to the extent it is lawful to do so without consent under the Data Privacy Act of 2012;
• correct any errors in your personal Data; and
• update your personal Data as required.

If you have questions, concerns or complaints regarding our compliance with the Data Privacy Act of 2012, or if you wish to exercise your rights to access, rectification, object, portability or deletion in instances allowed under the law, we encourage you to first contact us as required by the National Privacy Commission (“NPC”). We will make every reasonable effort to correct, update and respond to your request promptly, unless we require further information from you in order to fulfill your request, and in each case, subject to legal and other permissible considerations. We will also investigate and attempt to resolve complaints and disputes regarding use and disclosure of personal data in accordance with the Data Privacy Act of 2012, its Implementing Rules and Regulations, and other data privacy and protection policies we have put in place. For any complaints that cannot be resolved with us directly, you may bring your concern to the NPC and we commit to cooperate with the NPC and comply with their advice.

You may contact our Data Privacy Officer at (+632) 638 4542 or via e-mail at laras@gnpower.com or by writing to the Data Privacy Officer at Unit 1905, The Orient Square, Don Francisco Ortigas Jr. Road, Ortigas Center, Pasig City, Metro Manila for your requests, concerns, questions and complaints.