ILOCOS SUR POLYTECHNIC STATE COLLEGE (ISPSC), a higher education State Institution, takes strong commitment to protect the privacy and security of data entrusted by students (Data Subject/s) from any breaches or its unauthorized use in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), and its Implementing Rules and Regulations (IRR), as governed by the National Privacy Commission (NPC). The institution adheres to the generally accepted privacy principles of transparency, legitimate purpose, and proportionality in the data processing.
The Scholarship Services of ISPSC, as the Data Protection Controller, shall serve as the repository of the collected data and shall be responsible in securing and protecting the data of the students. It shall operate and hold data under strict confidentiality.
The following data are to be collected from the students:
- Directory Data which is the name, addresses, email addresses and contact details of the students.
- Personal Data such as the students' family background, marital status, and academic records.
- Other Information obtained from the students during interviews.
The collected and processed data of the students during their application, enrolment and admission shall be used and shared as permitted or required by law to pursue the legitimate purpose of the institution.
All data collected shall be treated as confidential and protected, and only authorized personnel shall be allowed to access.
The student as a data subject shall have the following rights:
- Right to be informed. The student as a data subject has the right to be informed of the data to be collected and processed for specified legitimate purposes. All data shall be collected and processed, provided that a consent is given by the student.
- Right to object. The student may request the blocking and restriction of his or her data. This right may be exercised upon discovery and substantial proof that the data was obtained or processed unlawfully.
- Right to access. The student may reasonably demand to have access of the contents of his or her personal data processed by the school, including sources, recipients and reasoning behind disclosures.
- Right to data portability. This is limited to the personal data that the student has actively and knowingly provided to move, copy, or transfer the student's personal educational records securely.
- Right to rectification. The student may request for the correction or update of inaccurate or incomplete information, provided that the information is not necessary for compliance with a regulatory obligation and it is not necessary to establish, exercise or defend legal claims.
- Right to file a complaint with the National Privacy Commission if any of the provisions of the Data Privacy Act regarding the security of the student's personal information, including the student's right as a data subject, are violated.
The students are mandatorily required to provide these data for their admission in the institution. All the data collected shall be used by ISPSC for carrying out its mandated duty as an educational institution, to support the learning, monitor and support the progress of the student, and to assess the institution's academic programs.
The data shall not be shared with any third party/ies without the prior consent of the data subject (student) and/or guardian on record of the student, unless the law and the policy of the institution allow.
Unless otherwise provided by law or by the policies of ISPSC, the student data will be retained indefinitely for historical and statistical purposes. Data that are subjected to a retention period as provided by law or the institution's policy shall be securely disposed of after such period.
Students may request for a copy of any personal information that ISPSC may hold upon them for the student's legal interest. For such purposes, student may contact:
This Privacy Policy Statement may be amended such amendment shall apply and supersede any and all previous version. Students shall be informed of such amendment of the Privacy Policy by the institution through publication, and their contact number or email address.