List of active policies

Full policy

Overview 

This Privacy Notice will inform you as to how we look after your data with regards to HR activities. It is for the current and former employees of the Company, including full-time, part-time, permanent and fixed term employees, independent contractors, consultants and other outsourced non-permanent workers. It is also relevant to interns, apprentices and individuals applying for a job at the company. This Privacy Notice is in compliance with Republic Act No. 10173 or the Data Privacy Act of 2012 (DPA) which sets out principles in processing data.

In general, the processing of your personal data is indispensable in your employment, and thus, does not require your consent. The DPA nonetheless mandates to inform you of the data we collect about you and the ways we process and protect these data.

There are also instances when the Company shares your data with third parties for legitimate purposes. 

Personal information we collect and keep 

We collect, use and keep your personal information, which include but are not limited, to the following: 

• Name, age, date of birth;  

• Address and contact details;  

• Civil status;  

• Educational background;  

• Employment history;  

• Details of salary and benefits;  

• Performance appraisals and reviews; 

• SSS, Philhealth, Pag-ibig Numbers, TIN

We collected this information directly from you, from service providers and other third parties, during your job application and in the course of your employment with the company. We use this information for personnel administration and general business management purposes, which include, but are not limited to, the following:  

• administer payroll and employee benefits;  

• facilitate the management of work and employees;  

• operate performance and salary reviews;  

• Log in credentials to internal and external applications

• comply with record keeping and other legal and contractual obligations.

Sensitive personal information we collect and keep 

The Company also processes information relating to your health, which is considered as sensitive personal information under the DPA. These include, but are not limited to:  

• records of sick leaves and medical certificates;  

• pre-employment, annual and executive check-up medical reports; 

We keep your medical records for Occupational Safety and Health Compliance, HMO Insurance, monitor and manage sickness absence and comply with our statutory obligations. 

Processing 

Includes the collection, use, sharing, retention and disposal of information. 

With whom your data is shared 

Sharing with the government 

To comply with its legal and regulatory duties, the Bank submits required information to the Local Government Unit, Bureau of Internal Revenue, Department of Labor & Employment, SSS, Philhealth, HDMF, SEC and other government agencies. 

Sharing with third parties 

In the course of its operations, the Company may share certain information about you with third parties. The Company ensures that only the required minimum data is shared and only with entities that can demonstrate sufficient organizational, technical and physical security measures. 

How we secure your personal data 

Your personal data is stored in secured databases managed by the Company’s IT department. The Company has appropriate physical, technical and organizational security measures which ensure the confidentiality of your information. These measures will be reviewed over time and upgraded in line with technological developments and regulatory requirements. 

Storage, Retention and Disposal

We store files containing personal information in locked filing cabinets. We also store personal information with cloud based third party storage providers. We shall ensure that proper measures are adopted to protect your information.

Personal information shall be stored in the following manner:

Personal Data	Retention
Resume of Unsuccessful Applicants	1 year from Application
Employee 201 Files, Personal Health Record and other Employee Records	3 Years from last Entry in compliance with Divina Law
Payroll , SSS, Philhealth, BIR, Pag-ibig and other compliances	10 Years from Last Entry

Physical records shall be disposed though shredding, while digital files will be be deleted. In all instances, our manner of disposal shall ensure that the personal information shall no longer be retrieved, processed, or accessed by unauthorized persons.

Data Subject Rights

Clients of NWTI have the right to request access to their respective Personal Data that the company is processing about them.  If the Personal Data is found to be incorrect, incomplete, or irrelevant, Clients have the right to request for correction and/or destruction of their Personal Information in the custody of the company.

A detailed description of your rights as individuals under Republic Act No. 10173 (or the Data Privacy Act of 2012) can be found in: URL: https://privacy.gov.ph/know-your-rights/

These rights can be exercised by sending NWTI an e-mail.  If the request is submitted by a person other than the Client, without providing evidence that the request is legitimately made on the Client’s behalf, the request is rejected.  Please note that any identification information provided to NWTI will only be processed following the purposes stated in this Privacy Notice, and to the extent permitted by applicable laws.

Data Privacy requests, concerns, or inquiries may be sent to:

Jennie May V. Alvarez, CPA

Data Protection Officer (DPO)

Philippine Social Science Center, Commonwealth Ave.

Diliman, Quezon City, Philippines

T: (+632)8285 7450

M: +63 9175878851

E: dpo@nephilaweb.com.ph

NWTI EMPLOYEE CONSENT 

I acknowledge that I have read and understood the NWTI Human Resource Department Data Privacy Notice. I agree to the processing of my personal data in accordance with the Data Privacy Policy of the Company.