This statement provides for the Personal Data that we collect or which you may provide through this Website, and describes when and where your Personal Data is collected, why it is collected, how it may be used and disclosed, and how you can exercise your rights as a Data Subject

1. Our Service
Our Lady of Lourdes Hospital-EHMC (the "Hospital") is committed to providing quality health and related services to you and this policy outlines our ongoing obligations to you in respect of how we manage your personal information. In order to ensure the safety and confidentiality of your personal data, the Hospital has developed a Privacy Statement that aims to ensure that all appropriate standards for personal data protection in accordance with Republic Act No. 10173 (or the Data Privacy Act of 2012 or "DPA"), its implementing rules and regulations and other applicable and related laws and regulations, including the issuances of the National Privacy Commission (the "NPC") (collectively, the "Privacy Laws") are put in place and implemented efficiently and effectively. This Privacy Statement ("Statement") seeks to notify and inform you of our policies regarding the collection, use, and disclosure of the personal data we receive from our Website's visitors.
2. Your Personal Data under this Notice
Under the DPA, Personal Data includes all types of Personal Information. Your Personal Information includes any information, whether recorded in a material form or not, from which your identity is apparent or can be reasonably and directly ascertained by the entity holding the information. Your Personal Information also includes Sensitive Personal Information.

When you visit or transact through this Website, the Hospital collects any of the following Personal Data:

Your name, email address, and any other personal information that you may provide through your correspondence with the Hospital;
Details of your visits to the Website (e.g., traffic data, location data, logs, and other communication data, and the resources that you access and use on the Website); and
Information about your computer/device and internet connection, as well as IP address, operating system, and browser type.
3. How and when we collect your Personal Data
This Website allows you to directly reach the Hospital and provide comments, suggestions and complaints on the hospital's services to help improve them. When you access this Website and submit your concerns, we collect Personal Data to identify you and enable the Hospital to act on your concerns.

Any additional Personal Data that you may provide through your correspondence with the Hospital in connection with your concerns shall also be considered and treated as Personal Data.

When you navigate through and interact with the Website, depending on your settings, we may use automatic data collection technologies (e.g., cookies, web beacons, small data text files or similar technologies) to obtain certain information about your equipment, browsing actions, and patterns (See OLLH Website's Cookie Policy ).

4. Why we collect your Personal Information
We collect your Personal Data through this Website primarily to effectively address your concerns and to improve your Website experience.

We will only use your Personal Data for other purposes with your consent or if there is a legal requirement to do so. For information that may identify you, we will only use them in accordance with the Data Privacy Act (DPA) of 2012 which requires us to collect and retain personal information only for specified and legitimate purposes, and when necessary to protect life and health.

5. Use and processing of Personal Information
Upon receiving your concerns and the accompanying Personal Data identifying you, the Hospital forwards the same to its Customer Relations Department. The Hospital may use your Personal Data to get in touch with you, in order to attend to, further inquire about, and address your concerns. The Hospital may separately contact you to confirm that the concerned department has acted on your concerns, ask you for further feedback, request your participation in surveys and/or provide information on its services.

For the data on the details of your website visit and information about your computer/device and internet connection, as well as IP address, operating system, and browser type, we use them to help us improve our Website and to deliver a better and more personalized service by enabling us to:

Estimate our audience size and usage patterns;
Store information about your preferences, allowing us to customize our Website according to your individual interests; and
Speed up your searches (See OLLH Website's Cookie Policy).
Other uses and disclosures of your Personal Data: Outside of the purposes stated above, other uses and disclosures of your Personal Data will be made only with your express authorization/consent, unless we are otherwise permitted or required by the law. This includes the disclosure of your Personal Data pursuant to an order of a court or tribunal, or when such disclosure is required under existing laws and regulations.
Third-Party Use of Cookies and Other Tracking Technologies
Some content or applications, including advertisements and social media buttons and/or plugins that allow you to connect with your social network, on our Website are served by third-parties who may use cookies to collect information about you when you use our Website. You may also be redirected to another website (eg. Jobstreet) through which we may collect your Personal Data.
The information such third parties collect may be associated with your Personal Data or they may collect information, including Personal Data, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly (See OLLH Website's Cookie Policy).
6. Who has access to your Personal Data
The following may have access to your Personal Data for the purposes stated above:

Customer Relations Officer;
The Hospital may share your personal information with third parties (which include, but not limited to the Department of Health, Philippine Health Insurance Corp., or your insurance provider) as required or permitted by law or contract, including regulatory authorities, government agencies (e.g. DSWD, PCSO) as well as parties you voluntarily transact with.
7. Your rights to your Personal Data
You are afforded certain rights under the Privacy Laws, particularly the DPA. You have the right to be informed of these specific rights, to object to the processing of your Personal Information, to access, update and correct the same, and to withdraw your consent and/or edit your consent preferences at any time. Hence, we would like to ensure that we have your consent to continue to collect, use, and disclose your Personal Data for the purposes identified in this Statement.

If you wish to have access to your Personal Data in our records, or you think that it is incomplete, not up-to-date or otherwise inaccurate, or have any queries or complaints about our Privacy Policy, you may get in touch with our Medical Records Office or with our Data Protection Officer through the contact details provided below.

Your rights to your personal information are provided in Chapter IV of the DPA which you may access on this web address: https://privacy.gov.ph/data-privacy-act/).

8. Our undertakings regarding your Personal Data
The Hospital creates and maintains a record of your Personal Data in its offices and this Statement applies to your Personal Data that we collect through this Website. Pursuant to the DPA, we undertake to protect your Personal Data.

The Hospital is required to protect your Personal Data, and to process the same only in accordance with the following data privacy principles:

Transparency: We are obligated to inform you of the nature, purpose, and extent of our processing of your Personal Data, including the risks and safeguards involved, the identity of the persons involved in the processing of your personal data, your rights as data subject, and how these rights can be exercised.
Legitimate purpose: We will only process your Personal Data for a legitimate purpose, compatible with our declared and specified purposes, and not contrary to law, morals, and public policy.
Proportionality: The processing of your Personal Data shall be adequate, relevant, suitable, and necessary, and not excessive in relation to the declared and specific purposes.
Your Personal Data is stored in a manner that reasonably protects it from misuse and loss and from unauthorized access, modification, or disclosure. We strictly enforce our Privacy Policy and put in place technical, organizational, and physical security measures that are designed to protect your Personal Information from unauthorized access, use, alteration, and disclosure.

When your Personal Data is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or de-identify the same. However, most of the Personal Data are or will be stored in files which will be kept by us for the minimum period provided under existing laws and regulations.

9. How to access your Personal Data
You may access your Personal Data and update and/or correct it, subject to certain exceptions. If you wish to access the same, please contact us in writing and we will respond within a reasonable time (Please take note that our ability to respond to your request may also depend on the collection of your Personal Information.). You may submit your request through the Medical Records Office.

We will not charge any fee for your access request, but may charge a reasonable administrative fee for providing a copy of your Personal Information.

10. Changes to this Privacy Statement
From time to time, we may change or update our Privacy Notice, Privacy Policy, and practices to comply with government and regulatory requirements, to adapt to new technologies and protocols, and to align with industry practices or for other legitimate purposes.

You will be provided Notice if these changes are significant and, if required by law, we will take steps to obtain your updated consent.

11. Inquiries
If you have any questions about this Statement, you may contact the Hospital's Data Protection Officer:
Office Address: 46 P. Sanchez St. Sta. Mesa Manila
Phone numbers: (02) 716-8001 to 20 local 2401
Email address: [email protected]
You may also contact the National Privacy Commission through the following contact details:
Office Address: 5th Floor Delegation Building, PICC Complex, Roxas Blvd, Pasay City
Phone numbers: 09451534299 (Globe)/ 09399638715 (Smart)
Web Address: privacy.gov.ph