CIAP DATA PRIVACY NOTICE

CONSTRUCTION INDUSTRY AUTHORITY OF THE PHILIPPINES (CIAP)

DATA PRIVACY NOTICE

The Construction Industry Authority of the Philippines (CIAP) is committed to safeguarding your privacy and ensuring that all personal data collected from you are processed in accordance with the principles of transparency, legitimate purpose, and proportionality, as required by the Data Privacy Act of 2012 (R.A. 10173). We prioritize your privacy and take every step necessary to protect your personal data when you engage with us through our various channels, including our website, offices, events, and communications.

This Data Privacy Notice outlines how we collect, use, store, and protect your personal data. By interacting with CIAP, you agree to the practices described below:

OUR DATA PRIVACY COMMITMENT

• Security and Confidentiality: We will protect the confidentiality and security of your personal data.
• Limited Collection and Use: We will collect only the data necessary to fulfill our purposes and will limit its use to relevant and lawful activities.
• Access Control: Access to your personal data will be restricted to authorized personnel who are trained in handling such information.
• Non-disclosure: We will not share your data with external organizations unless required by law, necessary for our operations, or authorized by you.

WHY WE COLLECT PERSONAL DATA

CIAP collects, uses, and discloses personal data for the following purposes:

• Operational Purposes: To process your applications, requests, and transactions related to our services.
• Compliance with Legal and Regulatory Requirements: To meet obligations under Philippine laws, such as construction regulations, and other industry-specific requirements.
• Public Safety and Risk Management: To ensure the safety and security of our premises and services, including conducting security checks and surveillance.
• Customer Feedback and Service Improvement: To respond to inquiries, feedback, and complaints, and to enhance the quality of our services.
• Research and Development: To gather insights for improving services, industry standards, and regulatory frameworks.

WHAT WE MAY COLLECT FROM YOU

Depending on the nature of your interaction with CIAP, the types of personal data we may collect include, but are not limited to:

• Basic Personal Information: Name, gender, date of birth, nationality, civil status, and identification details (e.g., government IDs).
• Contact Information: Home address, mobile number, email address, and telephone number.
• Employment and Business Information: Employer or business name, job title, income, tax details, and relevant business or professional certifications.
• Images and Video Recordings: Captured through CCTV surveillance in CIAP premises.
• Transaction Information: Financial data, transaction history, and communications related to our services.

HOW WE COLLECT YOUR DATA

We collect personal data from various sources, including:

• Forms and Applications: When you fill out application forms or request services from CIAP and its implementing boards.
• Direct Interactions: Through communications with our staff via phone, email, or in-person meetings.
• Surveillance Systems: When you visit our premises and your image is captured by CCTV.
• Digital Interactions: Through our website, online platforms, or any electronic communication.
• Third Parties: When necessary, we may collect data from trusted third parties to verify your identity or business interests.

HOW WE MAY SHARE YOUR DATA

We may share your personal data with the following parties as necessary to fulfill the above-mentioned purposes:

• CIAP Stakeholders / Partners: To process your transactions and provide our services.
• Government Agencies and Regulatory Authorities: To comply with legal obligations and industry regulations.
• Service Providers and Contractors: To assist in business operations or technical services, such as data hosting or IT support, subject to strict confidentiality agreements.
• Law Enforcement and Courts: As required by law for legal processes or investigations.

We do not sell your personal data to third parties. Any sharing of data will be done in compliance with the Data Privacy Act and with appropriate safeguards.

HOW WE PROTECT YOUR DATA

CIAP implements strict technical, organizational, and physical security measures to protect your personal data against unauthorized access, loss, misuse, or disclosure. These measures include:

• Data Encryption: Use of secure servers and encryption technologies to protect personal data.
• Access Restrictions: Limiting data access to authorized personnel only.
• Employee Training: Regular training for employees on data privacy and security practices.
• Third-Party Security: Ensuring that any third-party service providers comply with our privacy and security standards.

HOW WE STORE AND DISPOSE OF YOUR DATA

CIAP retains personal data for as long as necessary to fulfill the purposes outlined in this notice, in accordance with applicable laws and regulations. Personal data may be stored in physical records or electronic databases. We dispose of data in a secure manner when it is no longer needed, following our data retention and disposal policies.

YOUR ROLE IN ENSURING THE ACCURACY AND PROTECTION OF YOUR DATA

You are responsible for ensuring that the personal data you provide to us is accurate, complete, and up-to-date. Please inform CIAP of any changes to your personal data to ensure we have accurate records. We also encourage you to take precautions in safeguarding your personal information against unauthorized access or disclosure.

YOUR DATA PRIVACY RIGHTS

Under the Data Privacy Act, you have the following rights:

• Right to be informed about the processing of your data.
• Right to access your personal data.
• Right to correct any inaccurate data.
• Right to object to the processing of your data.
• Right to request the deletion or blocking of your data.
• Right to data portability.

To exercise these rights, you may contact CIAP’s Data Protection Officer (DPO) at the contact details provided below.

HOW YOU MAY CONTACT US

For any inquiries or concerns regarding your personal data or this Data Privacy Notice, please contact:

Data Protection Officer

Construction Industry Authority of the Philippines (CIAP)
Telephone Number: 8895-6826

Email Address: ciapdpo@construction.gov.ph

CHANGES TO OUR DATA PRIVACY NOTICE

CIAP may update this Data Privacy Notice to reflect changes in our practices, legal requirements, or industry standards. Any updates will be posted on the CIAP website, and we encourage you to review this notice periodically.

CONSENT

By submitting your personal data to CIAP, you acknowledge that you have read and understood this Data Privacy Notice and consent to the processing of your personal data as described herein. You authorize CIAP to share your personal data with relevant third parties as necessary for the fulfillment of our services and legal obligations.

For more information about the Data Privacy Act, please visit the National Privacy Commission website at [www.privacy.gov.ph].