0% found this document useful (0 votes)
51 views

Data Privacy Statement

San Miguel Corporation respects the privacy of individuals and keeps personal information secure and confidential. This privacy statement outlines how SMC collects, uses, shares, and retains personal data provided by suppliers in accordance with Philippine privacy laws. SMC only collects necessary contact and professional information from suppliers to evaluate registration applications, place purchase orders, and send marketing materials. Personal data is disclosed to affiliates and third parties as needed and retained according to records policies. Suppliers can access or correct their personal data by contacting SMC.
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
51 views

Data Privacy Statement

San Miguel Corporation respects the privacy of individuals and keeps personal information secure and confidential. This privacy statement outlines how SMC collects, uses, shares, and retains personal data provided by suppliers in accordance with Philippine privacy laws. SMC only collects necessary contact and professional information from suppliers to evaluate registration applications, place purchase orders, and send marketing materials. Personal data is disclosed to affiliates and third parties as needed and retained according to records policies. Suppliers can access or correct their personal data by contacting SMC.
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 4

PRIVACY STATEMENT

Updated as of: 01 December 2017

San Miguel Corporation, its subsidiaries and affiliates ("SMC", "We", “us”
or “our”) respect your privacy and will keep secure and confidential all your
personal information and sensitive personal information and that of individuals
(“Data Subjects”) which you may provide to SMC or which SMC may collect from
you (collectively, “Personal Data”), pursuant to Republic Act No. 10173 or the
Data Privacy Act of 2012 and the implementing rules, regulations and issuances of
the National Privacy Commission.
This privacy statement (“Statement”) provides for the Personal Data we
obtain, or which you may provide through the SMG Supplier Registration Form
(“SRF”) and the SMC Supplier Central ("SSC"), as well as the standards we observe
in collecting, using, sharing, disclosing, transferring and disposing (collectively
“Processing”) of Personal Data.
Please read this Statement carefully to understand how We treat Personal
Data. We may update this Statement from time to time to reflect change(s) in the
law and/or our internal standards. When We do so, We will notify you through
electronic mail, posting in the SSC and/or courier for your information and
reference. By providing your Personal Data through SRF and SSC, you expressly
acknowledge that you have read, understood and hereby agree to all of the terms
of this Statement and that you provide consent for us to:
• Process Personal Data, as provided under applicable laws, regulations, and
our policies, for our, our subsidiaries and affiliates, contractors, service
providers, and other authorized third parties’ legitimate purpose/s; and

• Make Personal Data available for our subsidiaries and affiliates,


contractors, service providers, and other third parties.

Personal Data We Collect and Process

In connection with your accounts and transactions with, and relevant


services and products offered to and through SMC, We need to and/or require to
Process the Personal Data of Data Subjects that you shall provide, including:

1
• personal information such as name, citizenship, educational background
and membership in organizations;
• contact information such as residential address, office address, phone
numbers and email address;
• work-related information such as position in the Company, and
government issued identification numbers (Tax Identification, SEC
Certificate Registration, Business Permit, License number and similar
information); and
• such other information as it may deem reasonably necessary in order to
accomplish the above-mentioned purpose.

If you do not provide any or all of the above Personal Data accurately, We
may not be able to process your request for supplier registration, and related
transactions.

Any additional Personal Data that you may provide through your
correspondence(s) with SMC in connection with your supplier registration shall
also be considered and treated as Personal Data.

What We Do with Personal Data

Upon receiving your accomplished SRF, SMC may use any or all of the
Personal Data for the following activities
• Evaluation and approval of your application for supplier registration;
• Confirmation of your registration and accreditation;
• Providing you with invitations for bid requirements, requests for quotation
and confirmation of orders;
• Sending invitations for suppliers’ training; and

• Provide marketing and promotional materials in relation to SMC’s products


and services.

Retention of Personal Data

SMC shall retain and secure all Personal Data for the period and manner
defined in the SMC Policy on Records and Retention and/or as prescribed by
applicable law, whichever is longer.
2
Disclosure and Sharing of Personal Data

We may disclose and share Personal Data, subject to compliance with


applicable laws and regulations, on a need to know basis, and in all cases only for
legitimate business purposes, as follows:

• To our subsidiaries and affiliates for centralized supplier registration and


accreditation, and other related transactions;
• To contractors, service providers, and other third parties We engage to
support our business, and who are bound by contractual obligations to
keep Personal Data secure and confidential, and use it only for the
purposes for which We disclose it to them;
• To government and law enforcement agencies, stock exchanges to comply
with applicable orders, laws and regulations;
• To a buyer or other successor in the event of a merger, divestiture,
restructuring, reorganization, dissolution, or other sale or transfer of some
or all of SMC’s assets, whether as a going concern or as part of bankruptcy,
liquidation, or similar proceeding, in which Personal Data held by SMC
about our Suppliers is among the assets transferred; and
• To other stakeholders, including our employees, officers, and internal
auditors, on a need to know basis and when necessary to conduct
investigations of breaches of SMC’s internal policies, laws and regulations,
enforce appropriate sanction/s, pursue legal actions if necessary or if We
believe disclosure is necessary or appropriate to protect the rights,
property, or safety of SMC, our subsidiaries and affiliates, officers,
employees, customers, or other third parties.

We may further disclose and share Personal Data with our subsidiaries and
affiliates, subject to the appropriate Data Sharing Agreements, on a need to know
basis, for marketing and promotion of SMC products and services. Should you
wish not to be contacted for such purposes, you may opt out by sending an e-mail
to [email protected] or contact the SMC Corporate Procurement
Group.

Accessing and Correcting Your Personal Data

You are entitled to certain rights in relation to the Personal Data, including
the right to be informed of the processing of your Personal Data, to object to such
processing, to access and correct your Personal Data, to request deletion thereof,
3
and to lodge a complaint before the National Privacy Commission in case of
violation of your rights as Data Subject.
You may send us an e-mail at [email protected] to request
access to, correct and/or delete any Personal Data that you have provided to us.
Please be advised, however, that We cannot delete your Personal Data without
restricting or removing our ability to effectively execute your transactions with,
and relevant services and products offered to and through SMC. We may not
accommodate a request to correct and/or delete Personal Data if We believe the
same would violate any law or legal requirement or cause the Personal Data to be
incorrect.

Security of Personal Data

We have implemented technical, organizational, and physical measures


designed to protect the confidentiality, integrity, and availability of Personal Data
and secure such from unauthorized destruction, access, alteration, disclosure,
fraudulent use and/or any other unlawful processing, as well as other natural and
human dangers.

Contact Information

Should you have any questions and/or concerns regarding this Statement,
SMC’s use of your Personal Data, or your rights in relation thereto under the Data
Privacy Act of 2012, please do not hesitate to contact the SMC Data Protection
Officer at the following: [email protected] and (+632) 632-3007.

You might also like