Data Privacy Agreement

In Compliance with the Data Privacy Act of 2012

This agreement is issued in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and the provisions of the institution's Data Privacy Manual. By affixing their signature to this document, the student acknowledges their rights under the law and consents to the collection, processing, storage, and sharing of personal and sensitive personal data by the institution for purposes directly related to their enrollment, academic administration, and institutional requirements.

1 Purpose

The institution is responsible for collecting and processing personal and sensitive personal data to provide educational services, facilitate academic administration, and comply with legal and regulatory obligations. This agreement seeks to inform the student of the purposes for data processing, establish the legal basis for such activities, and affirm the institution's commitment to data protection in accordance with applicable laws.

2 Scope of Data Collection and Processing

The institution collects and processes personal data necessary for enrollment, academic monitoring, and administrative functions.

  • Personal data includes the student's full name, ID number, contact details, date of birth, nationality, and address.
  • Academic data includes grades, attendance, performance, and enrollment status.
  • Financial data includes payment history, scholarships, and financial aid.
  • Digital data includes logs, sessions, and cookies from institutional systems.
3 Legal Basis for Processing
  • Consent: Explicit consent of the student is required.
  • Compliance: For regulatory and legal obligations.
  • Legitimate Interests: For academic and institutional functions.
4 Retention and Disposal of Data

Personal data is retained only as long as necessary. Academic and financial records may be retained indefinitely. Digital data follows institutional IT retention policies.

Upon expiration, physical records are shredded, and digital records are permanently deleted.

5 Rights of the Data Subject

Students have the right to be informed, access their data, correct inaccuracies, object to certain processing, request deletion, obtain data portability, and file complaints. Requests should be directed in writing to the Data Protection Officer or the Guidance Office.

6 Data Sharing and Disclosure

Sharing of data is limited to lawful and necessary purposes. Internal use includes academics, finance, and IT. External sharing is only with consent or legal requirement.

7 Security Measures

The institution secures data using physical, digital, and procedural safeguards. Staff receive training, and audits are regularly conducted.

8 Responsibilities of the Institution

The institution ensures lawful and ethical data handling, regular policy reviews, and safeguards to prevent unauthorized access.

9 Consent and Agreement

By using the LMS of Universidad de Dagupan, you agree to this privacy policy and consent to data processing related to your academic activities.

For inquiries regarding data privacy, contact the Data Protection Officer:

[email protected]