CEBU CHAMBER OF COMMERCE AND INDUSTRY, INC (CCCI)
DATA PRIVACY POLICY
(Pursuant to R.A. 10173 or the Data Privacy Act of 2012)
Version: 1.0
Effective Date: May 5, 2025

I. INTRODUCTION
The Cebu Chamber of Commerce and Industry, Inc. (CCCI), as the premier voice and advocate of the business community in Cebu, upholds the highest standards of integrity, accountability, and transparency—particularly in safeguarding the personal data of its members, partners, affiliates, and stakeholders. This Data Privacy Policy serves as a formal declaration of CCCI’s unwavering commitment to protecting privacy rights in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and all other applicable data protection laws and regulations.

Through this Policy, CCCI outlines the principles and practices governing the collection, use, processing, storage, sharing, and lawful disposal of personal information. It ensures that all data handling procedures are anchored on the principles of legitimacy, proportionality, transparency, and accountability, thereby fostering trust and promoting responsible data stewardship within the organization and the wider business ecosystem it serves.

II. SCOPE AND COVERAGE
This Policy applies to all personal data collected, used, stored, and otherwise processed by the Cebu Chamber of Commerce and Industry, Inc. (CCCI), regardless of format—whether physical documents or electronic records. It covers all data processing activities conducted by CCCI in relation to its programs, services, and operations. Specifically, this includes, but is not limited to, the personal data of the following individuals and entities:

  • Registered CCCI members, corporate entities, cooperatives, associations and individual members
  • Participants and attendees of events, forums, seminars, trainings, and other CCCI-organized activities
  • Sponsors, institutional partners, service providers, and suppliers engaged in official transactions with the Chamber
  • Applicants for employment, current employees, interns, and other personnel where applicable
  • Visitors, guests, and users who access or interact with CCCI’s official websites, mobile applications, online platforms, social media channels, or physical premises

III. TYPES OF PERSONAL DATA COLLECTED
Throughout its operations and engagements with members, partners, and stakeholders, the Cebu Chamber of Commerce and Industry (CCCI) may collect and process the following categories of Personal and/or Sensitive Personal Information, as may be necessary and appropriate for legitimate business and organizational purposes:

  • Full Name and Identifying Information – including date of birth, civil status, and other relevant personal identifiers.
  • Professional and Business Details – such as company affiliation, job title or designation, nature of business, and office or business address.
  • Contact Information – including personal and/or business email addresses, landline numbers, and mobile numbers.
  • Government-Issued Identification and Registration Details – such as Tax Identification Number (TIN), Social Security System (SSS) number, and business registration documents (e.g., SEC, DTI).
  • Media Files – including photographs, video, and audio recordings taken during official CCCI events, programs, and activities.
  • Financial and Billing Information – including bank details, payment transaction records, and official receipts as necessary for dues, sponsorships, and other financial dealings.
  • Account and Portal Credentials – login usernames and passwords used to access CCCI-managed digital platforms and member-exclusive portals, where applicable.
  • Responses to Surveys and Feedback Mechanisms – including data voluntarily provided through membership satisfaction surveys, consultation forms, and event evaluation tools.

IV. PURPOSES OF DATA PROCESSING
The Cebu Chamber of Commerce and Industry (CCCI) collects and processes personal data in accordance with applicable data privacy laws and regulations. The data is gathered for legitimate, lawful, and clearly defined purposes that are directly related to the Chamber’s organizational mandates and service delivery. These purposes include, but are not limited to, the following:

  1. Membership Registration, Verification, and Management – To process applications, verify identity, maintain accurate records, and manage ongoing member relationships and privileges.
  2. Program and Event Facilitation – To enable participation in CCCI-organized programs, events, training, forums, and similar initiatives by collecting necessary participant information.
  3. Issuance of Official Documents – To issue invoices, certificates of participation or completion, endorsements, and other pertinent documentation.
  4. Marketing, Publicity, and Promotion – To promote the Chamber’s initiatives, programs, and activities through various marketing and publicity channels, including digital, print, and broadcast media.
  5. Communication and Information Dissemination – To circulate newsletters, advisories, official announcements, event invitations, and other important updates to members and stakeholders.
  6. Surveys, Research, and Advocacy – To conduct surveys, impact assessments, sectoral studies, and research that support the Chamber’s advocacy, planning, and policy development efforts.
  7. Regulatory Compliance and Reporting – To comply with lawful requests from government agencies and fulfil statutory obligations, including reporting, documentation, and audit requirements.
  8. Internal Operations and Legal Proceedings – To support internal audits, investigations, and to manage or respond to administrative, legal, or regulatory proceedings, if necessary.

V. DATA SHARING AND THIRD-PARTY DISCLOSURE
The Cebu Chamber of Commerce and Industry (CCCI) may share or disclose your personal data to third parties only when necessary and in accordance with applicable data privacy laws and regulations. Such disclosures may occur under the following circumstances:

  • With your explicit prior consent – When you have been informed and have freely agreed to the sharing of your data.
  • With affiliated chambers, sponsors, and partner organizations – For the purpose of organizing, promoting, or facilitating events, programs, and services in which you are a participant or beneficiary.
  • With government agencies and regulatory bodies – As required for compliance with legal and regulatory obligations, including audit and reporting requirements.
  • With third-party service providers – Such as IT support, web hosting, data analytics, marketing, and payment processing services, strictly under a legally binding Data Sharing or Data Processing Agreement ensuring the protection and confidentiality of your personal data.
  • For media and publicity purposes – Including event coverage, newsletters, and marketing campaigns, granting that you are notified in advance and given the opportunity to opt-out if you do not wish your information to be included.

VI. DATA STORAGE AND RETENTION
The Cebu Chamber of Commerce and Industry, Inc. (CCCI) upholds the utmost standards of data privacy and security. All personal data collected are stored securely using appropriate physical and digital safeguards to protect against unauthorized access, alteration, disclosure, or destruction.

CCCI retains personal data only for the duration necessary to achieve the specific and declared purposes for which they were collected, or as mandated by applicable laws and regulations. The retention periods are as follows:

  • Active Members: Personal data of active members shall be retained for the entire duration of their membership with the Chamber and for an additional period of five (5) years following the cessation of membership, to allow for historical referencing, audit purposes, and re-engagement.
  • Non-Members: Personal data of non-members, such as those who have participated in CCCI-organized events or expressed interest in membership, shall be retained for a maximum of five (5) years from the date of last interaction or engagement. Non-members who no longer wish to receive emails, updates, or any form of communication from CCCI may opt out at any time by informing the Chamber or clicking the unsubscribe link provided in our emails.

VII. DATA SECURITY MEASURES
The Cebu Chamber of Commerce and Industry (CCCI) is committed to upholding the confidentiality, integrity, and availability of personal data under its custody. To ensure robust protection against data breaches, loss, unauthorized access, or unlawful disclosure, CCCI adopts a comprehensive set of organizational, physical, and technical safeguards that align with best practices and applicable data protection laws.

These measures include, but are not limited to:

  • Role-Based Access Control (RBAC): System access is restricted based on job responsibilities, ensuring that only authorized personnel can access specific categories of personal data.
  • Password-Protected: Secure authentication protocols are enforced to prevent unauthorized access.
  • Secure Physical Storage: Hard copies of documents containing sensitive information are stored in locked, access-controlled filing cabinets located in secure areas.
  • Employee Training and Awareness Programs: Regular training sessions are conducted to educate staff on data privacy principles, security policies, and response protocols in the event of a data breach.
  • Periodic Security Audits and Policy Reviews: Internal reviews and third-party assessments are conducted regularly to evaluate the effectiveness of existing security measures and to ensure continuous improvement.

VIII. RIGHTS OF DATA SUBJECTS
As a data subject, you are granted certain rights under the Data Privacy Act to ensure the protection and integrity of your personal data. These rights empower you to control how your personal information is processed and handled. You are entitled to the following rights:

  1. Right to be Informed – You have the right to be informed about the collection and use of your personal data. This includes being made aware of the purposes for which your data is processed and how it will be utilized.
  2. Right to Access – You have the right to request access to the personal data that we hold about you. This allows you to understand how your information is being processed and verify its accuracy.
  3. Right to Object – You have the right to object to the processing of your personal data, including for marketing purposes or when processing is based on legitimate interests or consent.
  4. Right to Erasure or Blocking – You have the right to request the erasure or blocking of your personal data in specific circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw consent.
  5. Right to Rectification/ Alteration – You have the right to request corrections or updates to any inaccurate or incomplete personal data held about you, ensuring that your information is accurate and up to date.
  6. Right to Data Portability – You have the right to request your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller when applicable.
  7. Right to Damages – You have the right to seek compensation for damages resulting from the unlawful processing of your personal data, whether it be material or non-material in nature.

IX. CONTACT INFORMATION
For any questions, concerns, requests, or complaints regarding your data, you may contact:

Data Protection Officer (DPO)
Cebu Chamber of Commerce and Industry, Inc.
3/F CCCI Bldg., North Reclamation Area, Cebu City, Philippines
Email: info@cebuchamber.org/rose@cebuchamber.org
Phone: 09173252224
Website: cebuchamber.org

X. POLICY UPDATES
CCCI reserves the right to update, amend, or revise this Policy as needed to ensure compliance with evolving legal requirements and to accommodate any changes in our operational processes. All data subjects will be notified of such updates via email or through our official communication channels. The most current version of this Policy will be made available on the CCCI website for public access.