Privacy Policy

The Herma Group (the “Organization”) pledges to fully comply with the requirements of Republic Act No. 10173 or the “Data Privacy Act of 2012” and all applicable rules, regulations, and advisories of the National Privacy Commission. As part of its undertaking, Herma Group is committed to safeguarding and protecting the privacy of data subjects as well as the safety and integrity of the personal data and information that Herma Group has already processed and may subsequently process.

Herma Group respects the privacy of every individual who visits its website. Any information collected about the site user or visitor will be used to fulfil any service that might be requested from Herma Group such as information regarding a product or service. Data collected will be treated in accordance with the Data Privacy Act of 2012 and other applicable privacy laws.

Herma Group’s Website Privacy Policy (the “Policy”) outlines the type of personal data it collects and receives through or in connection with this website such as the circumstances in which the organization collects or receives personal data, the procedures that Herma Group has established outlining its collection, use, storage, destruction, sharing and overall processing of personal data in certain limited circumstances, the procedures any data subject should follow for any questions, requests or exercise of any privacy rights with respect to personal data and the person to whom such questions or requests should be directed to and the means by which communication is made to such person.

By visiting Herma Group’s official website and making inquiries or otherwise submitting personal information to Herma Group through its official website or electronic mail, you expressly agree to the terms of this Privacy Policy.

Collection of Data and Information

How Herma Group Collects Information

In connection with your visit of the website, Herma Group will collect the following
information:

Usage Data:
- Cookies
  If you choose to leave a comment on our website, you have the option to store your name, email address, and website information in cookies. These cookies are designed for your convenience, ensuring that you won’t need to re-enter your details when leaving subsequent comments. They will remain active for a duration of one year.
- Embedded content from other websites
  Articles on this site may include embedded content from “https://designrr.io/” which is a flipbook service for our newsletter “Ating Lampara”. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website. For full details of the privacy policy, you may visit: https://designrr.io/privacy-policy/
Online Form Data:
You may choose to send us comments, questions or similar feedback via online form found on this website (Contact Us). You may then provide the following personal data about you such as your email address, name and content of the feedback.
Comments
When you leave comments on any of the articles found on our website, we collect the data shown in the comments form, your IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. Full detail of the Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture shall be visible to the public in the context of your comment.
The comments you provide on the website and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included as other site users/visitors may download such uploaded image and extract any location data.

We use the abovementioned information for the following purposes:

to respond to queries, complaints or requests;
to provide with the desired information, products or services or for other purposes which you have requested;
to maintain security;
to comply with legal, regulatory and contractual requirements or obligations.

How Herma Group Discloses Your Information

We may share your personal data within our corporate group who require the information for the purposes in this notice. We may also engage the services of third parties to perform functions on our behalf that are consistent with this Policy. These third parties may be provided with access to or may process personal data needed to perform their functions but only upon our instructions. When it is necessary, we will enter into contractual undertakings to ensure that the personal data accessed by third parties is adequately protected to a standard comparable to the protection under applicable data privacy laws.

If it may be necessary to disclose personal data to third parties in a different country, we will take reasonable steps to ensure that there is a lawful basis for the disclosure and that the disclosure complies with all applicable laws.

How Herma Group May Dispose Information

Any personal data we collect and process shall not be kept longer than is necessary for the fulfilment of the purposes stated in this Privacy Policy or to comply with our legal obligations. We delete personal data that is no longer required for business or legal purposes, as soon as reasonably possible and in accordance with the applicable laws and regulations.

Data Privacy Measures

We highly value and respect the personal data collected and stored in our system and makes sure that it is protected from possible threats. We aim to maintain the availability, integrity and confidentiality of personal data and protects them against accidental loss or destruction and/or natural dangers or calamities, and human dangers, be it deliberate or by negligence, such as unlawful access, fraudulent misuse, unlawful destruction, alteration, and contamination. In furtherance of these purposes, we have put in place the necessary technical, organizational, and physical measures to make sure that your data and information are kept safe and secure.

Data Subject’s Rights

As a data subject, you have rights relating to your personal data, such as:

Right to be informed about any processing of your personal data.
Right to access any and all data that the organization has on you.
Right to object to the processing of your personal data, in general or for a particular purpose. In addition, if we use your personal data for a different purpose than what as originally communicated and collected, we will ask for your consent to process the data for this new purpose, and you have the right to object to the same.
Right to Erasure or Blocking if you no longer want us to process your data, withdraw your data from our system, or you want all your personal data in our possession destroyed, provided, that any of the circumstances enumerated under Section 34(e)(1) of the Data Privacy Act are present. Nonetheless, this does not cover data that we are obliged to keep for administrative, legal, or security purposes.
Right to rectify if any personal data that we have on you is inaccurate or wrong, you have the right to have it corrected immediately, unless your request is vexatious or otherwise unreasonable.
Right to Data Portability wherein you may request to receive an exported file of the personal data we hold about you, including any data you have provided to us.
Right to Damages if you suffer damages due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data or other violation of your rights and freedom as data subject.
Right to File a Complaint if you feel that your personal data has been misused, maliciously disclosed or improperly handled, or that any of your data privacy rights have been violated. You may file a complaint with the National Privacy Commission through their website: https://privacy.gov.ph/filing-a-complaint/

Changes to the Policy

We reserve the right to update or change this Privacy Policy at any time without prior notification to you. Continued use of the services after we post any modifications to the Privacy Policy on this page constitutes your acknowledgment of the modifications and consent to abide and be bound by the modified Privacy Policy.

How to Contact the Herma Group’s Data Protection Officer

We have designated a Data Protection Officer who can be contacted at:

Data Protection Officer
Herma Building
98 Sct. Rallos St.,
Sacred Heart, Quezon City

Any questions or concerns about Herma Group’s Privacy Policy or data processing or complaints relative to possible breach of local privacy laws may be lodged by sending an email at dpo@hermagroup.com.ph or by submitting a request through the “Contact Us” form found on this website.