This Privacy Statement, hereinafter referred to as “Statement”, explains how we collect, protect, use, and share information when you transact with us, apply for membership and / or apply for and avail of our products and services. This Statement outlines the general practices of the BBCCC in relation to our processes and also covers our privacy practices for our members and data subjects who may transact, apply for and obtain products and services from us, such as, but not limited to, subscription and purchase of capital shares, deposits, loans, damayan, saranay, Loan Redemption Fund and other services and transactions that the BBCCC may offer and/or enter into from time to time.

The BAGUIO BENGUET COMMUNITY CREDIT COOPERATIVE (BBCCC) respects and values your rights as a Data Subject under the Data Privacy Act of 2012 (“DPA”), its Implementing Rules and Regulations (“IRR”), and issuances by the National Privacy Commission. BBCCC maintains that your privacy is an important part of the products and services that we provide. We ensure continued protection of your personal information with our organizational, physical, and technical measures for data protection, including policies for evaluation, monitoring, and review of operations and security risks.

The privacy practices described in this Statement are primarily intended for individuals in the Philippines and are designed to comply with the DPA and its implementing rules and regulations. When applying for membership, availing of our services, and/or transacting with the BBCCC, you acknowledge and agree that your information may be transferred to and processed in the Philippines following legal and regulatory standards for data protection.

BBCCC collects and processes your personal information only upon your express consent, which refers to any freely given, specific, informed indication of will, whereby you agree to the collection and processing of your personal, sensitive or privileged information. The BBCCC processes your personal information in accordance with the law, this Privacy Statement, and other legal instruments which you may have entered into with the BBCCC.

When you transact with us, apply for membership and / or avail of any service that BBCCC offers or when you interact with our employees, officers, directors, authorized representatives and agents, and as mandated by the Cooperative Development Authority (CDA) and by the Bangko Sentral ng Pilipinas (BSP), we collect your personal information, which may include, among others:

• 1. Identification information (including your name and personal particulars such as age, date and place of birth, contact details, address, education);
• 2. Specimen signatures and biometric information;
• 3. Government ID details;
• 4. Financial information (such as income, expenses, balances, investments, tax, insurance, source of funds, financial and transaction history, etc);
• 5. Employment details, profession, job, occupation, business or trade;
• 6. Business interests and assets;
• 7. Images via CCTV and other similar recording devices and processes which may be observed when visiting our offices and/or using our other facilities;
• 8. Identification information of third parties included in documents that you submit to us (including organizational or incorporation documents, list of members, stockholders, directors or officers, business licenses and permits); and
• 9. All other personal information you submit to us as part of the BBCCC’s know-your-member requirements

The BBCCC collects your personal information from the following sources: 1) your Personal Information Sheet; 2) Members / Borrowers Information Sheet; 3) Co-Makers / References Information Sheet; 4) BBCCC Updating of Records; 5) Change of Status Form; and 6) Data Rectification Form information we collect about you from interviews conducted by us, from public records and from other available sources authorized to disclose your information.

We may, when necessary, seek to verify or augment this information with third-party entities including government regulators, judicial, supervisory bodies, tax authorities or courts of competent jurisdiction and in the process, gain additional information about you.

In the course of availing of our products and services, we also collect information about your transactions and dealings which include your account activities, movements and interactions with third parties such as merchants and utility companies.

We may also collect, use and keep your personal opinions or comments made known to us via feedback or responses to surveys or any other interaction that you had with our employees, authorized representatives, agents and service providers.

When you provide us with personal information by which you can be reasonably identified, you can be assured that your personal information will be used only in accordance with this Privacy Statement and the relevant terms and conditions governing your membership with us.

We use the information collected to process your application for membership to deliver and provide our products and services that you may avail of to:

• 1. Verify identity;
• 2. Approve, facilitate, administer and process applications and transactions;
• 3. Respond to queries, requests and complaints and improve how we interact with you;
• 4. Send you statements, billings, notices and other such documents necessary for continued use of our products and services;
• 5. Conduct studies and researches for the purpose of reviewing, developing and improving our products and services;
• 6. Perform profile analysis, behavioral modeling and analytics to understand needs, preferences and market trends to be able to improve and recommend suitable products and services;
• 7. Determine the effectiveness of our marketing efforts and initiatives;
• 8. Perform certain protective safeguards against improper use or abuse of our products and services including fraud prevention;
• 9. Comply with our operational, audit, administrative, credit and risk management processes, policies and procedures, the terms and conditions governing your membership, services, facilities, the Cooperative Development Authority rules and regulations, legal and regulatory requirements of government regulators, judicial, supervisory bodies, tax authorities or courts of competent jurisdiction, as the same may be amended or supplemented from time to time.
• 10.Comply with applicable laws of the Philippines; the laws on the prevention of money laundering including the provisions of Republic Act No. 9160 (Anti-Money Laundering Act of 2001, as amended (AMLA) and the implementation of know your customer and sanction screening checks
• 11.Comply with legal and regulatory requirements such as submission of data to credit bureaus, credit information companies, the Credit Information Corporation (CIC) (pursuant to RA No. 9510 and its implementing rules and regulations) responding to court orders and other instructions and requests from any local or foreign authorities including regulatory, governmental, tax and law enforcement authorities or other similar authorities;
• 12.Perform other such activities permitted by law or with your consent.

The BBCCC ensures that only authorized employees and third party service providers, if applicable, who have undertaken to satisfy our stringent, legal, information security, and data privacy requirements, are allowed to process your personal information.

By signing in our Data Consent Form, you authorize and consent to the processing, sharing and/or transferring by the BBCCC of your Personal Information relating to your membership and or accounts with us to appropriate government agencies and regulatory bodies for the purposes of reporting, submission due to compliance requirements and other legal or contractual obligations.

Subject to the conditions and exemptions provided under the Data Privacy Laws, you have the right to:

• 1. Be informed whether your Personal Data shall be, are being, or have been processed;
• 2. Object to the processing of your Personal Data;
• 3. Reasonable access to your Personal Data;
• 4. dispute the inaccuracy or error in your Personal Data and have BBCCC correct it immediately and accordingly;
• 5. Suspend, withdraw or order the blocking, removal or destruction of your Personal Data from BBCCC’s filing system; and
• 6. Be indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your Personal Data.

You are responsible for the accuracy and correctness of any personal information you provide to BBCCC; for the consequences of disclosing your personal information to BBCCC; and for failure to provide the accurate, correct and updated personal information.

You have the right to access and to correct or update the personal information which you provided and which BBCCC collected and stored, in accordance with the conditions and requirements under the DPA and its IRR.

To access and / or correct or update such personal information, please fill-up the “Easy-to-Access Form” and/or “Data Rectification Form” (whichever is necessary) and/or you may contact the Data Protection Officer (DPO) by sending an email to Jennifer P. Valdez at [email protected] with your full name and the personal information you wish to access or to be corrected or updated. The DPO will contact you within the time required by the law and regulations. Where correction of personal information is not possible, the DPO shall explain the reason for refusing to make such correction.

Should you wish to obtain a hardcopy or printout of such personal information, any and all costs related thereto shall be to your own account.

Only authorized BBCCC personnel are granted access to personal information collected by BBCCC. Physical records of personal information are stored in locked filing cabinets and secured data base.

Your personal information shall be retained for as long as the purpose for which it was collected, and such other purposes that you may have consented to from time to time, remains in effect and until such time as it is no longer required nor necessary to keep your information for any other legal, regulatory (taxation, regulatory, etc.), or business purposes by the cooperative

The BBCCC has established mechanisms to secure disposal of data from the BBCCC’s systems after the data is no longer required by the business for any legitimate purpose and activity. After the defined retention periods, the BBCCC shall dispose your personal information in a secure manner in order to prevent further processing, unauthorized access, or disclosure to any other party.

For any queries, clarifications or requests on any aspect of this Statement, the exercise of your rights pertaining to your personal information or to provide any feedback that you may have about our processing of personal information, please visit our main office or any of our branches.

You may also write to:

JENNIFER P. VALDEZ
DATA PROTECTION OFFICER
Baguio-Benguet Community Credit Cooperative
No. 56 Cooperative Street, Corner Assumption Road,
2600 Baguio City
Philippines

This Privacy Statement shall be subject to changes in our policies and the law. We shall notify you of the changes by posting in our website, bulletin boards, and other means of communication for your information and reference.