GSU Data Privacy and Consent Form

(For Students)

Guimaras State University (GSU) and the Clinic Online portal aims to comply with the Data Privacy Act of 2012 (DPA) and cooperate fully with the National Privacy Commission (NPC). We regard your privacy with utmost importance. GSU is committed to meeting both your personal privacy, which is important to us, and ensuring that our genuine and legitimate interests as an educational institution and our ability to fully and effectively carry out our responsibilities as such are met.

In this Form, the terms, “personal data” and “information” are used interchangeably. When we speak of “personal data”, the term includes the concepts of personal information, sensitive personal information, and privileged information. The first two are typically used to distinctively identify you. For their exact definitions, you may refer to the text of the DPA.

Processing of Personal Data

A. Collection of Information

We collect your personal data that include those you provide us during your use of the Clinic Online portal

1. Information you provide us during your use of the Clinic Online portal

We collect information found in the Medical Record Card such as – but not limited to – name, birth date, gender, civil status, address, contact information, health information, etc.

B. Access to Information

Your personal information is accessed and used by GSU, specifically the GSU Clinic, Information and Communications Technology Unit (ICTU), and any other personnel who have legitimate interest in it for the purpose of carrying out their mandated duties.

We use and share your information as permitted or required by law to pursue our legitimate interests as an educational institution, including a variety of academic, administrative, historical, and statistical purposes.

Some examples of situations when we may use your information to pursue our legitimate interests as an educational institution are as follows:

Establishing and maintaining information systems;
Generating student medical records;
Maintaining directories and contact information;
Compiling and generating reports for statistical and research purposes;
Recording, generating and maintaining records of medical history;
Providing services such as health, information technology, safety and security;

C. Sharing of Information

Some examples of when we may share or disclose your personal information to others include:

Reporting and/or disclosing information to the NPC and other government bodies or agencies (e.g., Commission on Higher Education, Department of Health, etc.);
Sharing information for accreditation and university ranking purposes;
Conducting research or surveys for purposes of institutional development;
Sharing your contact information to the schools’ faculty and staff;
Publishing academic, co-curricular and extra-curricular activities such as - but not limited to - commencement exercises, college orientation, etc.
Marketing or advertising to promote the school, including its activities and events, through photos, videos, brochures, website posting, newspaper advertisements, physical and electronic bulletin boards, social media and other media;
Publishing communications with journalistic content

Data Protection

We shall implement reasonable and appropriate organizational, physical, and technical security measures for the protection of personal data which we collected.

The security measures shall aim to maintain the availability, integrity, and confidentiality of personal data and are intended for the protection of personal data against any accidental or unlawful destruction, alteration, and disclosure, as well as against any other unlawful processing

We only permit your data to be accessed or processed by our authorized personnel who hold such information under strict confidentiality. We restrict access to information to anyone who like to know/obtain such information without justifiable ground.

Any data security incident or breach that comes to the knowledge of GSU will be recorded and reported as required by law. GSU will take all necessary and reasonable steps to address such incident or breach and mitigate any negative effect of such incident or breach. If there is strong suspicion that an incident affects your personal information, GSU will notify you of such incident in an appropriate manner.

Confidentiality

Authorized personnel shall operate and hold personal data under strict confidentiality. They are required to sign non-disclosure agreements and have received training on the institution’s privacy and security policies to ensure confidentiality and security of personal data.

Right to Privacy

As provided by the Act, you may object to the processing of your personal data, request to access your personal information, and/or have it corrected, erased, or blocked on reasonable grounds. For the details of your rights as a data subject, you can get in touch with our Data Privacy Officer at contact details below or at National Privacy Commission at https://privacy.gov.ph/. GSU will consider your request and reserves the right to deal with the matter in accordance with the law.

Contact Information

If you have further questions or concerns regarding your privacy rights, this document or any matter regarding the Data Privacy Act of 2012, you may contact our Data Protection Officer through the following details:

The GSU Data Privacy Response Team
Dr. Simeon J. Cainday III
Data Protection Officer
E-mail address: scainday@gmail.com