Privacy Statement
Davao del Norte State College (DNSC) is committed to upholding the right to privacy and protecting personal data by the Republic Act No. 10173 or the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the policies set by the National Privacy Commission (NPC).
This Privacy Statement outlines DNSC’s general data collection and processing procedures. It is a foundation for all other privacy statements the College issues for specific offices, functions, or processes. In cases where more detailed information is required, a separate Privacy Notice or Data Privacy Statement will be provided for the relevant office, activity, or process.
For a comprehensive guide on the College’s privacy policies and procedures, please refer to the DNSC Data Privacy Manual.
1. Collection and Processing of Personal Data
DNSC collects and processes only the necessary and relevant personal data for its academic, administrative, and operational functions. Given the diverse nature of its stakeholders, the type and extent of personal data collected may vary depending on the specific purpose for which it is needed.
Types of Personal Data Collected
- Basic Information: Name, nationality, date of birth, home address, phone number, email address
- Academic Information: Educational background, student records, grades, course enrollments
- Employment Information: Job position, work history, salary details, performance evaluations
- Financial Information: Tuition payments, financial aid records, scholarships, bank details
- Government-issued Identifications: SSS, PhilHealth, TIN, Passport, PRC, or other IDs
- Security and Digital Information: CCTV recordings, biometric data, IP addresses, cookies, system logs
- Research-related Data: Sensitive personal information, such as political views, health records, and ethnic background, as needed for approved research studies
- Health Information: Medical records, health declarations, vaccination status, and other relevant health-related data
All personal data is collected with the express or implied consent of the data subject unless otherwise permitted or required by law.
2. Purpose of Data Collection and Processing
DNSC collects and processes personal data strictly for legitimate purposes that align with its mandate and legal obligations. These purposes include, but are not limited to:
- Verifying the identity of students, employees, and visitors
- Managing student admissions, enrollment, and academic records
- Administering faculty and staff employment records
- Generating statistical data for institutional planning and reporting
- Enhancing campus security through CCTV monitoring
- Conducting research and academic studies
- Complying with government regulations and reporting requirements
- Establishing, exercising, or defending legal claims
- Protection of the health and vital interests of the applicant, staff, personnel, or consultant
3. Data Sharing and Disclosure
DNSC upholds the principles of transparency, proportionality, and legitimate purpose when handling personal information. The College does not disclose or share personal data with third parties without the prior consent of the data subject, except in the following cases:
- Compliance with Legal and Regulatory Obligations: The College may disclose personal information to authorized government agencies such as CHED, DepEd, TESDA, DBM, DSWD, PRC, and other regulatory bodies.
- Academic and Institutional Partnerships: DNSC may share personal data with partner institutions, research collaborators, or accrediting organizations when necessary, and by a Data Sharing Agreement (DSA).
- Internal Data Sharing: Any sharing of personal information between the College units shall only be done upon a written request to the College President, ensuring proper authorization and compliance with the College's data privacy policies.
4. Data Protection and Security Measures
- Organizational Controls: Designated Data Protection Officer (DPO) oversees compliance with data privacy regulations.
- Physical Security Measures: Restricted office access, secured storage areas, and surveillance monitoring.
- Technological Safeguards: Encryption, firewalls, anti-malware systems, and secured databases.
- Administrative Controls: Continuous staff training, confidentiality agreements, and periodic privacy audits.
Access to personal information is strictly limited to authorized personnel with a legitimate need to handle such data.
5. Data Retention and Disposal
DNSC retains personal data only for as long as necessary to fulfill its stated purpose or comply with applicable laws and regulations.
When personal data is no longer needed, the College ensures its secure disposal through methods such as shredding of physical records and permanent deletion from digital storage.
6. Rights of Data Subjects
As mandated by the Data Privacy Act of 2012, individuals whose personal data is collected and processed by DNSC have the following rights:
- Right to Be Informed
- Right to Access
- Right to Object
- Right to Rectification
- Right to Erasure
- Right to Data Portability
- Right to File a Complaint
7. Contact Information
For inquiries, concerns, or requests regarding data privacy, you may contact the DNSC Data Protection Officer (DPO):
Email: dpo@dnsc.edu.ph
Office Address: 2nd Floor, IC Building, Davao del Norte State College, New Visayas, Panabo City
