VALENZUELA CITY PRIVACY NOTICE
PERSONAL INFORMATION COLLECTION
Please be advised that in order to serve you better, the CGOV are collecting the following personal information from you when you sign up, open an account, or electronically submit to us for any inquiries or requests:
For Individual Data Subject:
- Full name
- Complete Address
- Contact Number
- E-mail Address
For Public and Private Establishments (if applicable):
- Name of Establishments
- Complete Address
- Business Permit Number
- Contact Person
- Contact Number
- E-mail Address
USE AND DISCLOSURE
The collected personal information is utilized solely for processing, emergency response and documentation, and contact tracing of residents of the City in compliance with existing Laws, City Ordinance, Rules and Regulation, and is not shared with any outside parties other than the authorized PIC and PIP in compliance with Data Privacy Act, its IRR, NPC Circulars, Issuances, and Requirements. This information enables us to properly process the registration, inquiries, and/or requests, forward it to appropriate office, or the Data Privacy Officer, for appropriate action and response, and provide the clients or complainants with appropriate updates and advisories by personal service or interaction, e-mail or telephone call in an orderly and timely manner. In accordance with your communication preferences, we will occasionally contact you to provide update status of your registrations, announce new features we build for you, if any, inform you of activities and programs, and share tips and information.
PROTECTION MEASURES, STORAGE, RETENTION AND DISPOSAL
The City Government of Valenzuela does not share the registrants’ personal information with any third parties for their own advertising purposes. Only authorized personnel of the City Government of Valenzuela shall have access to personal information processed herein. The personal information collected are stored in individual offices that collected the same. For digitally processed information, the personal information is stored in City's data base.
Personal Information collected are retained and shall be deleted in our data base and in Cloud Storage immediately after the fulfillment of the declared, specified, and legitimate purpose, or when the processing relevant to the purpose has been terminated. Any information collected shall be destroyed and disposed via use of a shredder, or any other means and methods allowed by law and that the information contained therein can no longer be recovered, should be unreadable (for paper) or irretrievable (for digital records). However, information shall be archived for reference and research purposes only. Scanned information of QR Codes is transmitted and integrated to the central data base and collected in cloud storage. Scanned Information from QR Codes is deleted every thirty (30) days.
Personal data that are digitally processed using an Application Program Interface (API) imbedded and implemented on a separate site protected with an authentication and authorization method. The City secured the services of third party to conduct Vulnerability Assessment and Penctration Testing, as well as Code Review for purposes of understanding the security posture of its digital program.
It is the organization's duty to make sure that data will be disposed properly in a way that the data should be unreadable (for paper) or irretrievable (for digital records). The organization should categorize whether the data they have are high-risk or low-risk. It is recommended that the appropriate data disposal method be used.
RIGHTS OF DATA SUBJECT
You have the right to be informed, to access, to amend, to object, to erasure or blocking, to damages, to file a complaint, to rectify, and to data portability with the understanding that there are procedures, conditions, and exceptions to be complied with in order to exercise or invoke such rights. Provided, that registered personal information has not been erased.
You have the right to ask for a copy of any personal information we hold about you, as well as to ask for it to be corrected if you think it is wrong. To do so, please contact the Office involve or the ICTO Technical Support line: 8352-1000.
PRIVACY RISKS
The following privacy risks are identified during the Privacy Risk Assessment:
- Attacks on the Data Base Storage;
- Hijacking of COV's Website Cloud Storage;
- Unauthorized disclosure of GOV's personnel;
- Scanning errors related to inter-connection with other local government units; and
- Technical errors such as log-in failures, lost passwords, QR scan transmission failures and the likes.
FEEDBACK ON OUR PRIVACY NOTICE
The City Mayor, Hon. Weslie T. Gatchalian, is the Personal Information Controller of the City Government of Valenzuela being the Head of Agency pursuant to NPC Circular No. 16-01. He may be reached at Telephone No. 8352-1000 local 1144/1145 or his e-mail at info@valenzuela.gov.ph. If you have suggestions with regards to our privacy notice, you may reach the DPO through City Legal Office at 8292-1072 or email at dataprotection@valenzuela.gov.ph.