RSA Foundation, Inc. (“RSA Foundation,” “We,” “us” or “our”) respects your privacy and will keep secure and confidential all personal and sensitive personal information that you may provide to RSA Foundation, and/or those that RSA Foundation may collect from you (“Personal Data”).

This privacy statement (“Statement”) provides for the Personal Data we obtain, or which you may provide through this website, https://rsafoundation.org.ph/ (“Website”), and the standards we observe in processing said Personal Data.

Please read this Statement carefully to understand how We treat Personal Data. We may update this Statement from time to time to reflect change (s) in the law and/or our internal standards. When We do so, We will notify you by posting the updated Statement in this Website for your information and reference. By accessing the Website and submitting your Concerns (defined below), or Personal Data through it, you expressly acknowledge that you have read, understood and hereby agree to all the terms of this Statement and that you provide consent for us to:

Personal Data We Collect and Process

Our Website allows you to directly reach us and provide comments, suggestions and complaints (collectively, “Concerns”) on our products and services to help us improve them. When you access our website and submit your Concerns, We may ask you to provide the following Personal Data to identify you, and enable RSA Foundation to act on your Concerns:

• Full Name
• E-mail address
• Other information necessary to provide the service that is needed.

If you do not provide any or all the foregoing Personal Data accurately, We may not be in the position to effectively address your Concerns.

Any additional Personal Data that you may provide through your correspondence(s) with RSA Foundation in connection with your Concerns shall also be considered and treated as Personal Data.

When you navigate through and interact with the Website, depending on your settings, We may use automatic data collection technologies (e.g., cookies, web beacons, small data text files or similar technologies) to obtain certain information about your equipment, browsing activities, and patterns, such as:

• Details of your visits to the Website (e.g., traffic data, location data, logs, and other communication data, and the resources that you access and use on the Website).
• Information about your computer/device and internet connection, as well as IP address, operating system, and browser type (collectively, “Collected Data”).

The Collected Data are mostly statistical data but may include other Personal Data, and We may maintain or associate them with the Personal Data that We ask you to provide to RSA Foundation in connection with your Concerns.

What We Do with Personal Data and Collected Data

Upon receiving your Concerns and the accompanying Personal Data identifying you, RSA Foundation or its duly authorized third party may use your Personal Data to get in touch with you, to attend to, further inquire about, and address your Concerns. RSA Foundation may separately contact you to confirm that RSA Foundation has acted on your Concerns, ask you for further feedback, request your participation in surveys and/or provide information on its products and services.

For the Collected Data, We use them to help us improve our Website and to deliver a better and more personalized service by enabling us to:

• Estimate our audience size and usage patterns;
• Identify whether you are interested in RSA Foundation Programs and Services;
• Store information about your preferences, allowing us to customize our Website according to your individual interests;
• Speed up your searches; and
• Recognize you when you return to our website.

Disclosure of Personal Data and Collected Data

We may disclose aggregated information about our users, and information that does not identify, or when combined with other information, does not directly and certainly identify any individual.

Further, We may disclose the Personal Data and Collected Data, subject to compliance with applicable laws and regulations, on a need-to-know basis, and in all cases only for legitimate business purposes, as follows:

• To our affiliates, pursuant to the purposes mentioned in this Statement and the legitimate business interests of the Company;
• To contractors, service providers, and other third parties We engage to support our business, and who are bound by contractual obligations to keep Customer Information, Personal Data and Collected Data confidential, and use it only for the purposes for which We disclose it to them;
• To government and law enforcement agencies and regulatory bodies for compliance to regulatory requirements;
• To applicable courts, government agencies, regulatory bodies, stock exchanges and other regulators and agencies to comply with orders;
• To our affiliates, officers, employees, or other third parties, if We believe disclosure is necessary or appropriate to protect the rights, property, or safety of RSA Foundation;
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all RSA Foundation’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by RSA Foundation about our Website users is among the assets transferred; and
• To authorized parties which conduct investigations of breaches of RSA Foundation’s internal policies, laws and regulations, enforce appropriate sanctions and pursue legal actions if necessary.

Retention of Personal Data and Collected Data

RSA Foundation and/or its duly authorized third party shall retain the Personal Data and Collected Data for a maximum period of five (5) years counted from the date you provide it to RSA Foundation, or when they were collected.

Website Visitor Under the Age of 18

No one under age eighteen (18) (“Minors”) may provide any Personal Data on the Website. RSA Foundation does not knowingly collect Personal Data from Minors. If you are a Minor, please do not use or provide any information on this Website about yourself.

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications, including advertisements, on the Website are served by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies (alone or in conjunction with web beacons or other tracking technologies) to collect information about you when you use our Website. The information they collect may be associated with your Personal Data or they may collect information, including Personal Data, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioural) advertising or other targeted content.

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

Accessing and Correcting Your Personal Data

You are entitled to certain rights in relation to the Personal Data collected from you, including the right to access, correct, request copy of, and erasure of your Personal Data, object to the processing, lodge a complaint before the Data Protection Officer (DPO) of the Company or the National Privacy Commission, and be indemnified in case of violation of your rights as data subject.

You may send us an e-mail at dpo@rsafoundation.org.ph to request access to, correction and/or deletion, copy of Personal Data that you have provided to us. Please be advised, however, that We cannot delete your Personal Data without restricting or removing our ability to effectively address your Concerns. We may not accommodate a request to correct and/or delete Personal Data if We believe the same would violate any law or legal requirement or cause the Personal Data to be incorrect.

Security of your Personal Data and the Collected Data

We have implemented technical, organizational, and physical measures to protect the confidentiality, integrity, and availability of your Personal Data and Collected Data, and secure such Data from destruction, unauthorized access, alteration, disclosure, fraudulent misuse and/or any other unlawful processing, as well as other natural and human dangers.

Contact Information

Should you have any questions and/or concerns regarding this Statement, RSA Foundation’s use of your Personal Data and the Collected Data, or your rights in relation thereto under the Data Privacy Act of 2012, please do not hesitate to contact the RSA Foundation Data Protection Officer at dpo@rsafoundation.org.ph.