Rights Of Data Subjects

Data subjects have the following rights:

1. 1. Right to be informed;
2. 2. Right to object;
3. 3. Right to access;
4. 4. Right to rectify or correct erroneous data;
5. 5. Right to erase or block;
6. 6. Right to secure data portability;
7. 7. Right to indemnified for damages; and
8. 8. Right to file a complaint.

The Company’s decisions to provide access, consider requests for correction or erasure, and address objection to process personal data as it appears in the Company’s official records, are always subject to applicable and relevant laws and/or the DPA, its IRR and other issuances of the NPC.

Data We Collect From our Sole Customer

1. 1. Information you provide to us:
   • Name
   • Address
   • Contact number (Mobile, Telephone, Fax)
   • Email Address
   • Tax Identification Number (TIN)

Purpose

The information we gather from you enable us to:

1. 1. Manage your accounts
2. 2. To meet legal and regulatory requirements. This include processing or disclosure of information that may be required under pertinent laws, rules, or regulations.

Data We Collect From Prospective, Active And Separated Employees​

1. 1. Information you submit when you apply at TPC for work, including what is contained in your resume or curriculum vitae and application form.
2. 2. Information we collect during the processing of your application, such as testing results, employment offer, results of character investigation, and pre-employment medical assessment.
3. 3. Information we collect and maintain about you during your employment such as your payroll information, including but not limited to government mandated and third party remittances like SSS, Philhealth, and Pag-ibig contributions, taxes, bank account information; wages; entitlements and benefits; health and welfare benefits; medical and dental care records; beneficiary and emergency contact information; training and certifications, performance evaluation; sanctions; employment changes/ work history.
4. 4. Information we retain about you even after your separation from service, such as beneficiaries, and contact information.
5. 5. Any other information you voluntarily provide for any legitimate purpose declared at point of collection of such information.

Purpose

The information we gather from you enable us to:

1. 1. Evaluate your eligibility for initial employment, including the verification of your qualifications and character references (background checking).
2. 2. Administer your pay, statutory deductions, entitlements, and benefits.
3. 3. Comply with applicable statutory and regulatory requirements and submissions.
4. 4. Conduct performance reviews and rewards.
5. 5. Establish appropriate training and/or developmental interventions.
6. 6. Administer disciplinary action and sanctions.
7. 7. Collect and maintain contact information.
8. 8. Maintain your employment records.
9. 9. Process employee work-related claims.
10. 10. Develop health and wellness programs.

Data We Collect From Vendors And Suppliers​

1. 1. Information you submit to TPC for processing of payments:
   • Name
   • Tax Identification Number (TIN), copy of Certificate of Registration with the Bureau of Internal Revenue
   • Address
   • Contact details
   • Banking information
2. 2. Any other information you voluntarily provide for any legitimate purpose declared at point of collection of such information.

Purpose

The information we gather from you enable us to:

1. 1. Establish and manage business relationships with you.
2. 2. Facilitate the payment of your invoices for any goods delivered or services rendered.
3. 3. Comply with statutory, legal and regulatory requirements.
4. 4. Update or maintain your vendor account information.
5. 5. Establish details of your authorized contact persons and services you deliver and receiving of payment.

Data We Collect From Contractors

1. 1. Audited Financial Statements
2. 2. Information you provide for processing of payments:
   • Name
   • Tax Identification Number (TIN), copy of Certificate of Registration with the Bureau of Internal Revenue
   • Address
   • Contact details
   • Banking information
3. 3. Any other information you voluntarily provide for any legitimate purpose declared at point of collection of such information.

Purpose

The information we gather from you enable us to:

1. 1. Facilitate the payment of your invoices for any services rendered.
2. 2. Comply with statutory, legal and regulatory requirements.
3. 3. Update or maintain your account information.
4. 4. Establish details of your authorized contact persons for the services you render and receiving of payment.

Data We Collect From Shareholders

1. 1. Information you submit to us when you become a shareholder of or in the course of being a shareholder of TPC:
   • Name
   • Address
   • Contact details
   • Marital status
   • Government issued identification
   • Details of your authorized representative if applicable
2. 2. Any other information you voluntarily provide for any legitimate purpose declared at point of collection of such information.

Purpose

The information we gather from you enable us to:

1. 1. Maintain our shareholder register.
2. 2. Manage your account.
3. 3. Comply with statutory, legal and regulatory requirements.
4. 4. Handle dividends or any other payments.
5. 5. Facilitate communications.

Data We Collect Form Guests / Visitors

1. 1. Information you provide when you enter TPC’s premises:
   • Name
   • Address
   • Vehicle type and plate number or conduction sticker number
2. 2. Any information you voluntarily provide for any legitimate purpose declared at point of collection of such information.

Purpose

The information we gather from you enable us to:

1. 1. Establish your identity.
2. 2. Record the purpose of your visit.
3. 3. Monitor your activities inside the company premises.

Updating Of Personal Data Submitted By Data Subjects​

Data subjects are primarily responsible for ensuring that all personal data submitted are accurate, complete and up-to-date. From time to time, the Company requests updated data; it is important that subjects cooperate and provide the same. The Company takes reasonable steps to make sure that the personal data it collects, generates, uses or discloses are accurate, complete, and up-to-date.

Data Disclosure And Sharing​

Access to your personal information is restricted to TPC employees and/or contractors on a need to know basis to carry out their responsibilities with regard to the conduct of our business such as meter reading, bill delivery, field inspection, energization, and restoration of your electric service. We require our contractors, through a Non-Disclosure Agreement (NDA), to secure and keep your information confidential and we do not allow them to disclose your information to others, or to use it for their own purposes.

Your information may also be disclosed to government entities pursuant to and in compliance with applicable laws and regulations, subpoena or court order.

Protective Measures Imposed On Your Personal Data​

The Company strictly enforces its privacy policy, which was crafted in accordance with the DPA. Moreover, the Company implements technological, organizational, and physical security measures to protect personal data from loss, misuse, unauthorized modification, unauthorized or accidental access or disclosure, alteration or destruction. The measures implemented by the Company to safeguard your personal data include, but are not limited to the following:

• Secured servers and firewalls, encryption on computing devices;
• Restricted access only for qualified and authorized personnel; and
• Strict implementation of information security policies

Retention And Disposal​

Customers - electronic data is retained

Employees  - physical and electronic data is retained as long as the Employee is with the Company. Physical data is disposed 10 years after separation from the company while electronic data is retained 5 years longer.

Vendors and Suppliers  - electronic data is retained as long as the Vendor and/or Supplier continuously transacts with the Company. For Vendors and/or Suppliers which have ceased or discontinued its operations, electronic data shall be retained 10 years after the Company’s last transaction with the said Vendors and/or Suppliers. Physical data is retained for 10 years after the payment for goods and/or services supplied by the Vendors and/or Suppliers.

Contractors   - electronic data is retained as long as the Contractors continuously transact with the Company. For Contractors which have ceased or discontinued its operations, electronic data shall be retained 10 years after the Company’s last transaction with the said Contractors. Physical data is retained for 10 years after the payment for services rendered by the Contractors.

Shareholders   - physical and electronic data is retained as long as the Shareholder maintained his ownership/shareholdings to the Company. Physical and electronic data shall be disposed 10 years after the Shareholder’s shares has been sold and/or redeemed by the Company.

Guests/Visitors   - data is retained in a log book and is kept for a period of 3 years after the last entry was made in the said log book. Disposal of physical data is done through shredding by the data owner. Electronic data is disposed automatically after the specified time per group.

Additional Information

TPC may amend this Data Privacy Statement to ensure that it is consistent with industry trends and/or legal and regulatory requirements. Any update will be posted on TPC’s Facebook Page @tpc.ph and at its offices.

For inquiries, clarifications, requests or complaints, you may contact TPC through our Data Protection Officer;

Address: Sinait-Sto.Niño Road, Brgy. Sto. Niño, Tarlac City, Philippines

Email: tpc@tarlacpower.com

Telephone No:  (045) 493-1511 / (045) 491-0163.