SM Investments Corporation and its service group ("SM Investments," "SMIC," "we," "us," or "our") are committed to protecting the privacy and rights of our stakeholders (“Data Subjects”) in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission (NPC).
This Privacy Notice explains how we collect, use, store, share, and protect personal data when you access and use the Reserve-a-Court website https://reserveacourt.sminvestments.com/ (the "Site").
This Privacy Notice applies to the processing of personal data when you:
By using this Site, you acknowledge that you have read and understood this Privacy Notice and agree to the processing of your personal data in accordance with this Notice and applicable laws.
In connection with court reservations and security requirements, we may collect and process the following personal data, when you access the Site and provide the data:
We shall not knowingly collect the personal data of a person below 18 years old without any legal basis or consent of the minor’s parent/s or legal guardian. Should it come to our attention that the personal data of minors was provided without a legal basis or consent of the minor’s parent/s or legal guardian, such personal data shall be destroyed or deleted in a secure manner.
Minors are advised not to provide any personal data, such as their name, age, gender, email address, contact information, among others, and should consult their parent(s) or guardian(s)
We process personal data for legitimate and declared purposes, including to:
Personal data is processed only to the extent necessary and proportionate to these purposes.
We process personal data based on any of the following lawful bases under the Data Privacy Act:
We ensure that your personal information shall be shared only in a manner that respects your privacy and in compliance with the requirements of the DPA. We may share your personal information to the following in certain circumstances:
We may share your personal information to our affiliates and subsidiaries in relation to the Purposes declared in this Privacy Notice.
Our service providers may access and/or use your personal information. Through the execution of data privacy agreements or similar contracts, we require our service providers to keep your personal information secure and we prohibit them from using or sharing your personal information for any purpose other than the Purposes declared in this Privacy Notice.
We may also share your personal data in compliance with applicable laws or when required by a competent court, relevant government office or agency pursuant to DPA legislation and other applicable rules and regulations pertaining to data privacy.
Personal data shall be retained only for as long as necessary to fulfill the stated purposes or for the period allowed or required by applicable laws and regulations. We may also retain your personal data in order to enforce our legal rights or whenever it is required under the DPA or upon lawful order of a competent court or relevant government agency.
Electronic files shall be erased, while physical records shall be shredded for disposal. When appropriate, anonymization techniques may be performed to permanently remove identifiable information from our records. In all cases, we will make sure that the personal information is destroyed in a way that prevents unauthorized people from accessing, processing, or retrieving it.
Risk is the chance that a harmful incident may happen. In the context of personal data, risk refers to the chance that someone might collect, use, disclose, or access your personal data in an unauthorized manner or in a way that may cause you harm. In order to ensure that the risks to your personal information are minimized, we employ various measures to safeguard your personal information. However, this does not guarantee protection against all threats such as when systems are exposed to targeted cyberattacks, malware, ransomware, and computer viruses or when manual records are accessed without authority. In case a security incident occurs, we’re prepared to respond and manage such incidents in line with our policies and in accordance with regulations.
We implement industry-standard organizational, technical and physical security measures to protect the confidentiality, integrity, and availability of the personal data that we process. Only authorized personnel are granted access to the personal data that we collect from you. We have instituted policies and procedures to ensure that your personal data are safeguarded against unauthorized access, alteration, and disclosure. Access rights are reviewed regularly to ensure that the controls are in place. Our systems are protected by a variety of network security measures, including firewalls and similar network devices. Our systems and websites are scanned on a regular basis. In addition, all sensitive information you supply is sent through a secured channel and encryption methods are implemented whenever suitable.
As a Data Subject, you have the right to
If you intend to exercise any of your above-mentioned data privacy rights, you may contact our Data Protection Officer (DPO) on the details below. We encourage you to submit your request in writing for proper monitoring. Our DPO may require you to submit documents necessary to handle your request.
SMIC may update this Privacy Notice from time to time to reflect changes in law, regulation, or internal practices. Updated versions shall be posted on the Site and shall take effect upon posting.
For inquiries, concerns, or requests regarding this Privacy Notice or the processing of personal data, you may contact:
Data Protection Officer
SM Investments Corporation
Email: [email protected]
Contact: 02-8857-0100