PHILIPPINE WACOAL CORPORATION
DATA PRIVACY NOTICE AND CONSENT FORM FOR CUSTOMERS
WACOAL (hereafter ‘Wacoal’ or the ‘Company’) respects and values your privacy and employs reasonable measures to protect your personal information in accordance with the Data Privacy Act of 2012 (‘DPA’), its Implementing Rules and Regulations, and related issuances from the National Privacy Commission (‘Commission’).
This Data Privacy Notice will inform you on how this website (the “Website”) process and protect your personal information. By signing this Data Privacy Notice and Consent Form, you certify that you have read and understood, and agree to, the terms below.
- SERVICE DESCRIPTION
We collect information in order to transact with you or the entity you represent as our customer.
- PERSONAL INFORMATION COLLECTED AND PROCESSED.
The Company collects the following categories of personal data:
- Personal Details: Name; title; billing address; email address; phone number; birthdate; company
- Financial Information: Credit/Debit Card information
You may also voluntarily provide other information to us such as when you provide us your resumes for job opportunities. Such resumes may contain information such as your name, contact number, email address, education information (educational institutions attended and year graduated, awards and honors obtained, degrees and courses, organizations joined and extracurricular activities), skills, and work experience (previous employment, positions held, and period thereof).
- METHODS OF COLLECTION
We collect your personal data submitted to us by you when you register on our Website, place an order, or subscribe to our newsletter, or when you submit a resume for a job opportunity.
You may inform us of the specific personal data you do not want to be processed beyond the requested purpose. We will respect your request in so far as it is feasible to fulfill the purposes for which the personal data was collected.
Where you have provided us with the personal data of individuals other than yourself, you warrant that you have obtained their consent for the disclosure, in accordance with the DPA.
- METHODS AND BASIS OF PROCESSING
Your personal data may be processed both by way of computer media and on paper, in compliance with the rules in relation to personal data protection, therein including those relating to data security.
We process your personal details and financial information to fulfill our contractual obligations to you to provide you with the services of the webstore. We process your personal data as well in accordance with your consent to specific processes such as receiving newsletters, for which you may withdraw your consent and we will stop processing your personal data for such purpose.
Your personal data shall be processed for the following purposes:
- To facilitate the creation of an account in our Website and authenticate your registration
- To perform the services of the Company available through our Website
- To process your transactions, payments, and delivery of the items purchased
- To comply with contractual obligations
- To conduct aftersales services
- To send out newsletters, conduct marketing, telemarketing, and other promotions
- To prepare reports and record services performed
- To establish, exercise and defend legal claims, especially those arising out of contract
- To process customer feedback
- To assess your qualifications for potential job opportunities (when you provide us with your resume) and to contact you with respect to such purpose
- Fulfill any other purposes directly related to the above-stated purposes
The Company will not process the personal information of its customers in ways incompatible with the above-stated purposes.
- PERSONAL INFORMATION CONTROLLER
The Company is the Personal Information Controller under the DPA, which means that it determines what purposes personal information it holds will be used for. It may also be that your personal data is disclosed to third parties pursuant to a data sharing agreement. In which case, such third parties are also the personal information controllers of your personal information.
- TRANSFERS AND DISCLOSURES
Your personal information may be disclosed to the Company’s partners and third parties for the following purposes:
- To facilitate payments;
- To report and verify payment;
- To store data;
- To comply with contractual obligations;
- To establish, exercise, or defend legal claims; and
- Fulfill any other purposes directly related to the above-stated purposes.
When the processing of your personal data is outsourced by the Company to a third party, the processing will be subject to written agreements between the Company and the third parties processing the data. These written agreements specify the rights and obligations of each party and will provide that the third party has adequate security measures in place and will only process your personal information on the specific written instructions of the Company.
The Company may also transfer your personal information to third parties as required by law or legal instrument, to protect the Company’s rights or assets, to facilitate acquisition or disposition of the Company’s businesses, and in emergencies where the health or safety of a person is endangered.
The Company will not sell, rent, share, trade, or disclose any of your personal data to any other party without your prior written consent, with the exception of entities within the Company and any third-party service providers which the Company has engaged, whose services necessarily require the processing of your personal data. However, non-personally identifiable, anonymized, or aggregated visitor information may be provided to other parties for marketing, advertising, or other uses.
The following are the third parties to whom your personal data may be disclosed:
- Government Agencies
- Third party suppliers and service providers
- Affiliates and subsidiaries
- DATA RETENTION
Your personal data will be retained or stored for as long as the purposes for which they are being processed have not been satisfied. The Company will retain and use your personal information as necessary to comply with its legal obligations, resolve disputes, and enforce its agreements.
- DATA PROTECTION MEASURES
The Company has put in place physical, electronic, and managerial procedures designed to help prevent unauthorized access, to maintain data security, and to use correctly the Information we collect online. These safeguards vary based on the sensitivity of the Information that we collect and store.
- THIRD PARTY LINKS AND COOKIES
Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
- your computer or device’s IP address;
- browser type;
- webpage you were visiting before you came to the Platform;
- the pages within the Platform which you visit; and
- the time spent on those pages, items and data searched for on the Platform, access times
- and dates, and other statistics.
This data is collected for analysis and evaluation for the purposes stated in of this policy and in order to help us improve our Website and the services and products we provide.
Cookies are small text files (typically made up of letters and numbers) placed in the memory of your browser or device when you visit a website or view a message. They allow us to recognize a particular device or browser and help us to personalize the content to match your preferred interests more quickly, and to make the Website more convenient and useful to you. You may be able to manage and delete cookies through your browser or device settings. For more information on how to do so, visit the help material of your browser or device.
Subject access requests may be made by emailing the data protection officer. The Company may take reasonable steps to confirm the requestor's identity as a data subject before granting access to the personal information and allowing updates thereto.
- DATA SUBJECT RIGHTS
You have the following rights under the DPA, which you may exercise at your discretion
- The right to access personal information
Under the DPA, it is possible for individuals to request access to any of their personal data held by the Company, subject to certain restrictions. A request for disclosure of such information is called a subject access request. Any such requests should be addressed to the Data Protection Officer.
b. The right to make corrections to personal information
The DPA requires the Company to take reasonable steps to ensure that any personal data it processes is accurate and up-to-date. It is your responsibility to inform us of any changes to the personal information that you have supplied to us during the course of your engagement.
c. The right to object to the processing of personal information
You have the right to object to the processing of your personal information, including processing for direct marketing, automated processing or profiling. You shall also be notified and be given an opportunity to withhold consent to the processing in case of changes or any amendment to the information supplied or declared to you in this Data Privacy Notice. Please note that some of the personal data you have provided to us is necessary for us to comply with statutory and regulatory requirements, as well as the Company’s administrative policies and is thus mandatorily required to be collected and processed. Withholding of your consent to the processing of certain personal data may prevent you from availing of certain benefits.
d. The right to erasure or blocking of personal information
You have the right to suspend, withdraw or order the blocking, removal or destruction of your personal information from our filing system.
e. The right to be informed of the existence of processing of personal information
You have the right to be informed whether personal information pertaining to you shall be, is being, or have been processed, including the existence of automated decision-making and profiling.
f. The right to damages
Upon presentation of a valid decision, the Company recognizes your right to be indemnified for actual and verifiable damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal information, taking into account any violation of your rights and freedoms as a data subject.
g. The right to lodge a complaint before the Commission.
- CHANGES TO THIS STATEMENT
This Data Privacy Notice may be updated from time to time. You will be notified whenever there are any updates that will significantly affect your rights.
- CONCERNS AND QUESTIONS
In case of complaints, concerns, or questions regarding the processing of your personal information, or if you wish to exercise your data subject rights, you may address them to:
ANN CHRISTINE PALISOC
DATA PROTECTION OFFICER
PHILIPPINE WACOAL CORPORATION
3F Makati Sky Plaza, 6788 Ayala Avenue, Makati City 1226
Tel. No.: +63-2-8892-5706
- VALIDITY OF CONSENT
This consent and authorization remain valid and subsisting for a limited period consistent with the purposes above or until otherwise revoked or cancelled in writing. You may inform the Company of the specific personal information you do not want to be processed beyond the requested purpose. The Company will respect the supplier/vendor’s request insofar as it is feasible to fulfill the purpose for which the personal information was collected.
Last Updated: November 3, 2022