Chapter Privacy Policy

ISACA Manila Chapter Privacy Policy

Effective Date: March 22, 2021

 

Privacy Notice

Who are we?

The ISACA Manila Chapter is an independent chapter and affiliate of ISACA International, engaged in the promotion of the education of its members for the improvement and development of their capabilities relating to the auditing of, management consulting in, or direct management of the fields of IT governance, IS audit, security, control and assurance.

What personal data we collect and the Legal Basis Personal data we would collect from/process on you

 

Personal data type:

 

Source:

Your registration details including ISACA membership number, certificate and dates of exam passed exams and certified, Payment Status, Certification Status

 

ISACA International

Event registration details (Member/Non Member/Affiliate of ISACA Manila Chapter)

 

ISACA Manila Chapter Event Registration (online/manual)

Event Registration Details including Name, Contact Number and Email ID

 

Partners Event Registration

Name, personal contact details, Query Information, Payment (company) details

 

Queries from Members/Non Members

 

Personal data shared by ISACA International

The personal information shared by ISACA International is used to meet ISACA Manila Chapter objectives as an affiliate of ISACA International and provide membership services to ISACA Manila Chapter members. We use your personal data to provide following services:

  • Maintain your record of registration for attending any ISACA Manila Chapter events for Continuing Professional Education (CPE), Payment and demographic purposes
  • Keep you informed of future ISACA Manila Chapter and partner educational events (including but not limited to, sponsored events, certification and public courses, etc.)
  • Send you Newsletter.
  • Contact you to participate in the relevant surveys and research initiatives supported by ISACA Manila Chapter.
  • Contact you to participate in General Meetings of the ISACA Manila Chapter (applicable to fully paid up members of ISACA International and ISACA Manila Chapter).

 

Personal Data collected through ISACA Manila events
ISACA Manila Chapter only collects the registration information that you provide when you register to attend ISACA Manila Chapter and virtual educational events.


This event registration information is used by ISACA Manila Chapter and its service providers to provide services including but not limited to:

  • Issue event ticket,
  • authenticate on arrival or joining,
  • record evidence of entry and attendance to the event for CPEs, Payments and demographics purposes.

If you are an ISACA member, your membership number and duration of the event will be passed on to ISACA International to update your central CPE records. For audit purposes, the information collected during this registration will be retained by ISACA Manila Chapter for a maximum of five (5) years.


If you are not an ISACA member, your registration data collected by ISACA Manila Chapter will be erased within six (6) months to one (1) year.

Partners holding an event that you attended

If you are a member of ISACA Manila Chapter attending our partner events, participating partner may share your registration detail including Full name, email address and contact details, which we in turn would pass on to ISACA International to update your central CPE records. For audit purposes, the information collected during this registration will be retained by ISACA Manila Chapter for a maximum of five years.

Our legal basis for processing for the personal data

Due to ISACA Manila Chapter's affiliation with ISACA International, ISACA Manila Chapter is required to process ISACA Manila Chapters members (subjects) data in order to provide membership services under its by-laws (affiliation agreement) with ISACA International. ISACA International is responsible for managing the consent directly. Please note that if you are fully paid up member of ISACA International or ISACA Manila Chapter then please contact ISACA International to withdraw your consent for processing of personal identifiable data by ISACA Manila Chapter. You can withdraw consent directly using ISACA International website (www.isaca.org)

You can choose to ‘opt out’ of ISACA Manila Chapter’s newsletters and other communications by emailing to the Secretariat to unsubscribe.


If you wish to change your contact details or preferences please contact ISACA International.

Security

ISACA Manila Chapter has implemented administrative, organizational and technical controls to protect your personal data. We will never share your data to any third party without your explicit consent and we will never sell your data to any third party.

 

Retention period

ISACA Manila Chapter will continue to process personal data of members whilst they are fully paid up members of ISACA International and ISACA Manila Chapter.


For information collected as part of event registration process data for six (6) months to one (1) year and will store the personal data for up to five (5) years. We remove most information provided to us by members as soon as memberships are ceased, and data will cycle out of long-term backups up to six months later. We store logs of outbound emails for up to twelve (12) months after the email is sent for the purposes handling abuse complaints and compliance monitoring.

We will continue to store limited information about our members (including transaction records) for Ten (10) years plus the current calendar year for accounting, audit, record keeping and administrative purposes.

If we consider there is a need to store records for longer (for example, the transaction has been the subject of a dispute or claim) then we will retain the data for as long as is necessary.

Your rights as a data subject

You have a number of rights in relation to your personal information under data protection law. In relation to certain rights, we may ask you for information to confirm your identity and, where applicable, to help us to search for your personal information. Except in rare cases, we will respond to you within 30 days after we have received this information or, where no required, after we have received your request. At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:-

  • Right of access – you have the right to request a copy of the information that we hold about you.
  • Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete. Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
  • Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
  • Right to object – you have the right to object to certain types of processing such as direct marketing.

 

All of the above requests will be forwarded on should there be a third party involved in the processing of your personal data.

Please note that since most of your personal data is shared with ISACA Manila Chapter by ISACA International, we would suggest that you raise your queries with International as well in order to exercise your subject rights with ISACA International as well.

Modifications to this Privacy Notice

We keep our privacy notice under regular review. From time to time, ISACA Manila Chapter may need to update or modify this Privacy Notice, to reflect changes in our business practices, data collection practices or organization. We reserve the right to amend this Privacy Notice at any time, for any reason, other than the posting of the amended Privacy Notice on the Sites, or, if you have provided your email address to us, sending you an email notifying you of the amended Privacy Notice.

Questions or Concerns

If you have any questions or concerns about this Privacy Notice, please contact ISACA Manila Chapter’s data protection resource at: dpo@isaca-manila.org or at +632 88942533.



Event Data Privacy Notice

We are committed to respecting your privacy and we recognize the importance of protecting the information collected about you. All of the personal information that you have submitted during the registration shall only be processed in relation to your attendance to this event (i.e., processing of payments, issuance of certificate, sending of any announcements, future events and activities). Photos and videos will be taken during the event and ISACA will use it for documentary, evidentiary and marketing purposes. The photos and videos may be posted on ISACA Manila’s website and social media sites.  All the information that you have provided in relation to this event shall be protected with reasonable and appropriate measures, and shall only be retained as long as necessary in its processing. If you wish to be opted out from the processing of your information, please do let us know by sending an email to dpo@isaca-manila.org or at  secretariat@isaca-manila.org.

__ I have read, understood, accept and agree to the Privacy Policy of ISACA Manila Chapter.

__ I agree to pay the total amount due above for my registration and I have read, accept and agree to abide by all the terms and conditions stated on this document.