STATEMENT OF POLICY

The DOST-National Research Council of the Philippines assures its clients that every personal data shared with NRCP in relation to (1) Application for Membership; (2) Application for grants; (3) Nomination and election for Governing Board posts; (4) Nomination for the NRCP Awards; (5) election for Regular Membership, and (6) Application for RD Leadership, shall be protected according to the Data Privacy Act of 2012 and to the agency’s best ability.

NRCP’s Privacy Notice

Personal Information

When you send your concerns and other related communications to us, the following personal information are being collected:

• Your full name
• Your e-mail address

For Membership Application, Forms for Project Proposal Submission and RD Leadership Application, the following Sensitive Personal Information as provided by Section 13 of the Data Privacy Act shall be collected and processed by NRCP:

• Age
• Sex
• Marital Status
• Education
• Expertise
• Religion

For these and other purposes mentioned above, consent from the data source shall be secured by NRCP.

Protection Measures

The information gathered/ collected will only be accessed and processed by process owners, and shall be archived in a safe physical and electronic environment by NRCP Database/System Administrators. Membership statistics would only be made accessible to the public for the agency’s intention to publicize selected statistics on NRCP website without disclosing specific identities.

Agree

The National Research Council of the Philippines (NRCP), an attached agency of the Department of Science and Technology (DOST), is a collegial body of researchers, engineers, scientists, and artists. As a collegial body, the NRCP is committed to protecting the privacy and security of the personal data of the clients we serve, particularly our NRCP members.

We strictly adhere to the principles of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR). This Data Privacy Notice outlines our procedures for collecting, processing, and protecting your personal data in accordance with the applicable provisions of the Data Privacy Act of 2012.

NRCP implements appropriate measures in accordance with its internal data governance structure, which includes the Personal Information Controller (PIC), Personal Information Processors (PIP), and the Compliance Officer for Privacy (COP) who oversee the responsible handling of personal data.

1. TYPES OF INFORMATION WE COLLECT

We collect various types of personal data based on your engagement with the NRCP and the services you wish to avail of, following your explicit expression of consent. This may include:

• Identity Data: Your full name, birthdate, sex, nationality, and civil status.
• Contact Data: Your home and office addresses, email address, and contact numbers.
• Professional Data: Your profession, research and creative works, educational attainment, employment history, and affiliations.
• Biometric Data: Your photograph and e-signature.
• Online and Communication Data: Information collected from your interactions with our website and official social media accounts.
• Technical Data: Information about your device and connection when you access our websites and online services, including your IP address, browser type and version, and operating system.

2. MODE OF COLLECTION

• Directly from you when you apply for membership, register for events, submit research proposals, or communicate with us.
• From our official agency website through online forms and registration portals.
• From our social media accounts when you interact with our content.
• Through publicly available sources you have voluntarily made public on academic or professional networks.
• Through internal and external coordination with other divisions or institutions when necessary.

3. PURPOSE OF COLLECTION

• To process your applications for membership, grants, and other NRCP services.
• To manage and coordinate our research and development programs.
• To communicate with you regarding our activities, events, and important announcements.
• To comply with our legal and regulatory obligations as a government agency.
• To maintain internal records and databases of NRCP members, grantees, and partners.
• To respond to your inquiries, requests, and concerns.
• To generate statistical data and reports for analytics, planning, and policy formulation.
• To promote our programs and the achievements of our members and researchers.
• To share your name and basic contact information with third parties requiring your services or expertise.
• To maintain, secure, and operate our systems and services; detect, prevent, and investigate fraud, abuse, and cybersecurity incidents.

4. PROTECTION OF YOUR DATA

We implement appropriate organizational, technical, and physical security measures:

• Organizational Measures: Restricting access to personal data to authorized personnel under a Non-Disclosure Agreement (NDA).
• Technical Measures: Utilizing firewalls, encryption, and password-protected systems.
• Physical Measures: Storing physical records in locked filing cabinets and secure facilities.

Personal data of active members shall be retained for the duration of their membership. Data from unsuccessful applications shall be retained for up to six (6) months only before scheduled disposition, conducted every semester and witnessed by representatives from NAP, COA, and the NRCP Membership Secretariat.

5. DATA BREACH MANAGEMENT

In the event of a data breach, NRCP shall follow an internal Data Breach Management Protocol covering identification and containment, risk evaluation, internal notification, remediation, and documentation. NRCP shall notify the DOST DPO/CERT within twelve (12) hours upon knowledge of a breach or security incident.

6. YOUR RIGHTS UNDER THE DATA PRIVACY ACT

• Right to be Informed – To be informed that your data will be, is being, or has been processed.
• Right to Object – To object to processing including for direct marketing or profiling.
• Right to Access – To request access to your personal data and how it is processed.
• Right to Rectification – To dispute inaccuracies and request correction.
• Right to Erasure or Blocking – To request blocking or destruction of your data under certain circumstances.
• Right to Data Portability – To obtain a copy in electronic or structured format.
• Right to Damages – To be indemnified for damages from unauthorized use of your data.
• Right to File a Complaint – To lodge a complaint before the National Privacy Commission.
• Transmissibility of Rights – Your lawful heirs may invoke your rights if you are deceased or incapacitated.

7. HOW TO CONTACT US

A. NRCP Data Protection Officer (DPO)
Mr. Joselito A. Carteciano
Chief Science Research Specialist, Research Information and Management Division (RIDD)
National Research Council of the Philippines (NRCP) – DOST
Email: nrcpinfo@nrcp.dost.gov.ph
Telephone: (02) 8837-6142 / (02) 8837-6143

B. DOST Central Office Data Protection Officer (DPO)
Dr. Cezar R. Pedraza, Director IV, Planning and Evaluation Service and CIO
Department of Science and Technology (DOST)
Email: crpedraza@dost.gov.ph
Telephone: (02) 8837-2932

---

Data Privacy Consent Form

I hereby acknowledge that I have read and understood the NRCP Data Privacy Notice. By continuing to provide my personal information to NRCP, I give my consent to the collection, use, processing, and storage of my personal data in accordance with the above Data Privacy Notice and the provisions of the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations.

I understand that my personal data will be processed solely for legitimate and lawful purposes, and I am aware of my rights under the Data Privacy Act, including the rights to access, correct, withdraw, and lodge a complaint regarding the processing of my personal information.