GENERAL

PAL express and its affiliates (also collectively referred to as “Company”, “we”, “our” and “us”) established this Data Privacy Policy to show that we recognized and value your privacy rights.

PERSONAL INFORMATION WE COLLECT

“Personal Information” is information that identifies you as an individual which could also be considered “sensitive Personal Information”, such as:

• Name
• Age, Gender, Date and Place of Birth
• Contact Details [Permanent and Current Address, Telephone number (including home and mobile phone numbers), Email address]
• Citizenship
• Religion
• Civil Status
• Height
• Weight
• Medical Information
• Family Information
• Birth Certificate and Marriage Certificate of dependents
• Biometrics
• and such other personally identifiable information.

In addition to your Personal Information, we will also maintain records of your educational background, employment application, history with the company, areas of expertise, details of salary and benefits, bank details, performance appraisals and salary reviews, records relating to holidays and other leaves, working time records and other records pertinent to your continued employment.

If you provide us or any of our service providers any Personal Information of other people in connection with your employment, you represent that you have the authority to do so and to permit us to use the information in accordance with this Data Privacy Policy.

USE OF PERSONAL INFORMATION

We use this information for a variety of personnel administration and employee, work and general business management purposes, including administration of payroll, improvement and providing and maintenance of the administration of employee benefits, facilitate the management of work and employees, operate performance and salary reviews, operating the Company’s IT and communications systems, comply with record keeping and other legal obligations.

The Company also processes information relating to your health which may amount to sensitive Personal Information. The information the company holds relating to your health are the records of sickness absence, medical certificates and any other health and medical records.

TO WHOM DO WE SHARE YOUR PERSONAL INFORMATION

In compliance with this Data Privacy Policy, your Personal Information will be disclosed to third party service providers only in compliance with our contractual obligations.

We will also disclose your Personal Information to comply with our legal obligations, including to various law enforcement agencies, regulatory authorities, and governments in the Philippines and around the world and their service providers for security, customs and immigration purposes, upon their lawful request.

SECURITY AND RETENTION

We have established appropriate physical, technical, and organizational security measures to protect the personal information provided to us. We use several security techniques including secure servers, firewalls and encryption in safeguarding the storage of data. personal information is encrypted as it travels over the internet because we use a Security Sockets Layer (SSL) protocol. These safeguards are regularly reviewed to protect against unauthorized access, disclosure, and improper use of your information, and to maintain the accuracy and integrity of the data. We will adapt and implement the necessary changes for security measures to ensure continuous security of your personal information.

The database shall be controlled by our administrative officers who can access it electronically. The Company has security measures in place which will ensure the confidentiality of the information contained in the database and these measures will be reviewed over time and upgraded in line with technological developments. The remainder of the Personal Information shall be stored in personnel files which are kept in our Human Capital Department.

The personal information you have provided us shall be retained for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements with third parties.

RIGHTS OF DATA SUBJECT

You may contact our Data Protection Office to exercise any of the rights you are granted under applicable data protection laws as enumerated below. Kindly note that we will require you to provide us with proof of identity before responding to any requests to exercise your privacy rights.

\We will respond to your request within a reasonable time of you making the request and give you access in the manner you requested unless it is unreasonable or impracticable for us to do so.

          A. Right to Access

          You may ask us whether or not we process any of your personal information and, if so, receive access to that data in the form of a copy.

          B. Right to Rectification

          You have the right to have your data rectified in case of inaccuracy or incompleteness.

          You can ask us to stop or restrict how we process your personal information unless we need to process your information to carry out our day-to-day business functions or where we have compelling legitimate grounds for processing your information.

          C. Right to File a Complaint

          You have the right to lodge a complaint with a supervising authority (a regulator that oversees data protection law compliance) where you live or work, if you feel your privacy rights have been infringed. You may also be entitled to seek compensation if you suffered damages due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal information.

          D. Right to Data Portability

          You can ask us to help you move your personal information to other companies, where this is technically possible and only if we have collected and used your data via electronic means. Other conditions may apply to the exercise of this right.

         E. Right to Object to Processing

         You have the right to object to the processing of your personal information. You can likewise ask us to stop or restrict how we process your personal information unless we need to process your information to carry out our day-to-day business functions or where we have compelling legitimate grounds for processing your information.

         F. Right to Erasure

         You can ask us to delete your personal information unless it remains necessary for us to process your information for the purposes for which it was collected, we are required by law to retain your information, or your information is relevant to a legal dispute.

When you would like to exercise your rights, please send us a request through our Data Protection Office:

         Data Protection Officer PAL express

         PALex Admin Bldg

         PAL Gate 1, Andrews Ave., Nichols Pasay City, Philippines

         Email: PALEXDPO@pal.com.ph

We do not discriminate against employees who have chosen to exercise their privacy rights as provided under applicable data privacy and protection laws.

UPDATES TO THE PRIVACY POLICY

In the Company’s discretion, we may amend, interpret, modify, or withdraw any portion of this Privacy Policy at any time by posting updated contents on the intranet, and your continued use of our services constitutes your consent to those changes.

Last updated: March 2023