1 Cooperative Insurance System of the Philippines Life and General Insurance

The 1 Cooperative Insurance System of the Philippines Life and General Insurance hereinafter referred to as ( “1CISP”, “we”, or “us”) is an insurance cooperative duly organized under the laws of the Philippines, with principal office address at 80 Malakas St., Brgy. Pinyahan, Central District, Diliman, Quezon City, Philippines.

This Data Privacy Notice serves as an assurance to our owner-members hereinafter referred to as (“you”) that we are taking seriously the level of data protection in processing your personal data in compliance to the principles and standards prescribed by Republic Act no. 10173, otherwise known as the “Data Privacy Act”, its implementing rules and regulations as well as other issuances of the National Privacy Commission.

We adhere to the principle of transparency. As such, this Privacy Notice seeks to inform you of our services, the purposes and the manner by which we collect, use, maintain, store, share, dispose and protect your personal data.

I. OUR SERVICES

We provide life insurance and non-life insurance products to cooperative members, whether individual or in group, including insurance for loan payments, savings incentive, accident insurance, casualty, motor vehicles, fire, surety, third-party or travel.

In order to deliver such services, we engage the services of individuals as employees, service providers, outsourced or maintenance personnel and/or consultants. We likewise deal with suppliers to provide the necessary resources of the cooperative for its effective operations.

Whether as our member-owners, personnel or suppliers, your data may be subject to processing in accordance with this Privacy Notice.

II. CONSENT

By using our website or otherwise providing us your Personal Data, you will be treated as having given your permission for our collection, use, and processing of your Personal Data, and you have accepted the policies and practices described in this Privacy Notice. If you do not allow the collection, use, and processing of your Personal Data, kindly refrain from using our website, and/or contact us for any privacy-related concerns.

III. COLLECTION

Personal Information:

1. Full Name
2. Address
3. Gender
4. Place of birth
5. Citizenship
6. Type of employment
7. Employment History
8. Industry
9. Contact Details including email address, phone numbers or any information that would allow 1CISP to contact you and evaluate your insurance application.

Sensitive Personal Information:

1. Date of birth
2. Age
3. Civil Status
4. Medical status and other health records
5. Data about your financial or economic situation
6. Usernames, passwords and other login data
7. Biometric data (e.g. signatures, thumbprints)
8. Industry
9. Copies of identification documents including licenses or unique identifiers like Philhealth, SSS, GSIS, Tax Identification numbers; or other similar information, which may be made the basis of decisions concerning you, including the grant of rights or benefits.

A. What we may collect from your beneficiary

Personal Information:

1. Name
2. Address
3. Contact details including email address, mobile phone address or any information that would allow 1CISP to contact your beneficiary and evaluate your insurance claim.

Sensitive Personal Information:

1. Date of birth
2. Proof of relation to the insured

B. How we collect your information

We collect information through the following means:

1. Submission of forms from you;
2. Agreements that we may enter with you;
3. Processing of your insurance applications;
4. When you avail of 1CISP’s services or products;
5. When you communicate with us or our employees-whether in written, verbal, or through electronic means;
6. Footage from our CCTV cameras;
7. Personal data provided through data sharing agreements with third parties and other sources which have obtained your prior consent for disclosure orsharing; or
8. When 1CISP is allowed to acquire your personal data in accordance with law.

C. Use of Cookies

We may also obtain information about you through the use of cookies. A cookie is a small file which asks permission to be placed on your computer's hard drive. It is used generally for ease of navigation through our website helps analyze web traffic or lets you know when you have visited a particular site.

Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

Once you agree, the file is added and we can use traffic log cookies to identify which pages are being used by you. This helps us analyze data about web page traffic and improve our website in order to specifically model it to your needs. We only use this information for statistical analysis purposes; after which, the data is removed from the system.

Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, this may prevent you from taking full advantage of the features and services of this site.

D. When we collect your information

In general, collection begins upon submission of documentary requirements to us or contacting us in any manner. In certain instances thereafter, when additional personal data is necessary for us to be able to provide the service or product, we may contact you to request for additional information.

Whenever you visit our site, your web browser may also automatically send us Personal Data, which may include your IP address and location, or Non-Personal Data, which may include the pages you access, the operating system you use, time spent on those pages and the name and version of your web browser. These are collected to improve your browsing experience. You may want to check your web browser to know more about the Personal Data sent to us by your web browser, and to modify your web browser settings as you see fit.

IV. PURPOSE AND USE

We only process your personal data that is needed to effectively serve you and carry out our business operations. In doing so, we likewise adhere to the principles of legitimate purpose and proportionality. Thus, we only process personal data pursuant to the following purposes:

A. In General

1. To verify your identity;
2. To provide information about our services;
3. To respond to your queries, complaints, and requests, or otherwise communicate with you;
4. To conduct research and analysis to improve our products and services;
5. To grant access to our premises and maintain security; and
6. To comply with legal, regulatory, and contractual requirements or obligations.

B. For Member-Owners

1. To perform 1CISP’s obligations under its engagement agreement with its member-owners;
2. To provide its members reliable insurance products with optimal benefits;
3. To update your records with us;
4. To assist beneficiary/ies by giving the insurance claim benefit; and
5. To assess the right applicant for vacant positions;

C. For Job Applicants

1. To evaluate your qualifications and other requirements for employment with us;
2. To conduct verification or background checks; and
3. To communicate with your regarding your application

D. For Employees, Consultants, Maintenance and Other Personnel

1. To process your payroll, benefits application, allowances and refunds processing, tax processing, retirement benefits, and other purposes that demand or require processing of your Personal Data (e.g., to execute business transactions directly related and/or incidental to your job, business travels, socials, and so on);
2. To evaluate your performance and career development;
3. To process your Personal Data for the exit interview and to prepare your final pay upon separation;
4. To provide you with assistance and to account for you in case of emergency; and
5. To perform such other processing or disclosure that may be required in the course of our business or under law or regulations.

E. For suppliers and Other Third-Parties

1. To conduct the appropriate due diligence checks;
2. To evaluate your proposal, including your technical, financial, and operational capacity, assess the viability of your proposal and process your accreditation;
3. To communicate any decision on such proposal;
4. To enter in contract or agreements with you; and
5. To perform any other action as may be necessary to implement the terms and conditions of our contract.

V. THIRD-PARTY SHARING/TRANSFER

In the course of delivering its services and fulfilling its responsibilities, 1CISP may engage the services of third-party service providers. In doing so, certain personal data is required to be disclosed for legitimate business concerns and as may be necessary to provide its members with our services.

Thus, 1CISP has entered into data sharing agreements with the following entities and purposes:

Entity	Purpose
1. Traxion Tech Inc.	Digicoop
2. Malayan Insurance Corporation	Cross-selling, marketing, and product offering of MICO to 1CISP members

Except as stated in the foregoing paragraphs or otherwise permitted under the Data Privacy Law, 1CISP will not share, sell or otherwise disclose your personal data to third-parties.

The personal data gathered or shared may be used as is or further processed solely for the purpose of performing our obligations and responsibilities to you and our owner-members.

VI. SECURITY MEASURES

We are committed to ensuring the confidentiality and security of your personal data. As such, our organizational, physical and technical security measures are maintained, enforced and implemented at all times to ensure the integrity, confidentiality and security of your personal data.

The security measures of 1CISP include, but are not limited to the following:

1. The processing of the personal data is limited to the extent necessary to deliver the services offered and/or made available by 1CISP;
2. Specific employees are assigned in keeping the physical information of 1CISP member-owners;
3. Our personnel are regularly oriented regarding the appropriate level of data privacy protection;
4. Our server is equipped with firewall, data encryption, anti-virus, and other appropriate security controls; and
5. Regular audits are conducted to ensure the security of collected personal information.

Nevertheless, there is no method of transmission over the Internet or method of electronic storage that can guarantee full security. While we use such means and methods to protect your personal data, we cannot guarantee its absolute security.

VII. STORAGE, RETENTION & DISPOSAL

All information-physical and soft copy- is kept in a secured facility in the vicinity of 1CISP main office.

In general, we keep personal data only for as long as is necessary for the fulfillment of the declared, specified, and legitimate purposes state above. We may also retain your personal data for the establishment, exercise or defense of legal claims or for other legitimate business purposes. We securely dispose of your personal data when the processing relevant to the purpose has been terminated

For member-owners and employees, we will retain your personal data only to the extent necessary for the fulfillment of the purpose/s for which it was obtained and for an additional period of ten (10) years thereafter. Thereafter, your personal data will be anonymized and utilized solely for statistical purposes.

For job applicants, we may retain your Personal Data for a maximum of two (2) years for future job opportunities that may be of interest to you.

For visitors, suppliers and other third parties, we may retain your Personal Data for a maximum of one (1) year from end of our transaction with you.

VIII. LINKS TO WEBSITES

Our site may contain links to other websites which we do not have control over. Use of these links is subject to the privacy policy or terms and conditions of that site. Therefore, we are not responsible for the protection and privacy of any personal data which you provide whilst visiting such sites and such sites are not governed by this Privacy Policy.

IX. YOUR RIGHTS AS DATA SUBJECT

In accordance with the Data Privacy Law, we shall respect and uphold your rights as data subjects:

1. Right to be informed
2. Right to access
3. Right to object
4. Right to erase
5. Right to rectify/ correct
6. Right to data portability
7. Right to complain and damages
8. Right to transmissibility

For more information about your rights, kindly refer to the National Privacy Commission’s webpage at https://www.privacy.gov.ph/know-your-rights/.

X. FOR INQUIRIES

If you have any requests, queries or complaints in exercise of your rights or concerning the processing of your personal data, or this Privacy Notice, please contact us through the following:

The Data Protection Officer
Email:[email protected]
Phone: +639175406992
Postal Address: 80 Malakas St., Brgy. Pinyahan, Central District, Diliman, Quezon City, Philippines

XI. AMENDMENTS

We keep this Privacy Policy under regular maintenance and review. 1CISP hereby reserves the right to amend this Privacy Notice to comply with government and regulatory requirements, to adapt to new technologies, to align with industry practices, or for other legitimate purposes. To update yourself of any change in the processing of your Personal Data, please regularly review this Privacy Notice. Nonetheless, rest assured that you will be apprised of any amendments.