In compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, the Department of Tourism (DOT) is committed to protecting and safeguarding your personal data. We value your privacy and recognize the importance of ensuring the security of any personal and sensitive personal information you provide to us.
Collection of Personal Data
The DOT collects personal information that is relevant and necessary for the performance of its official functions and lawful mandates. Such collection occurs when you, among others, submit inquiries or requests (whether manually or electronically), participate in DOT programs, activities, and trainings, or apply for DOT accreditation and other services.
The personal data collected may include, but is not limited to:
- Full name
- Contact details (e.g., address, email address, mobile number)
- Identification details (e.g., government-issued IDs)
- Photographs and audio-visual recordings
- Employment or business information
- Other information that may directly or indirectly identify you
Purpose of Data Collection
While your consent may be obtained to process your personal data, we may also process your personal data without your consent such as when processing is in accordance to our mandate or when such processing is allowed under Section 12 or 13 of the Data Privacy Act. The data collected shall be used solely for legitimate and lawful purposes, including:
- Processing of transactions and services
- Respond to inquiries, requests, and communications
- Compliance with legal and regulatory requirements
- Documentation, reporting, and archiving
- Other purposes necessary for the effective delivery of public service
Legal Basis for Processing
The Processing of personal data is carried out pursuant to DOT’s mandate under Republic Act No. 9593 or the Tourism Act of 2009, your consent when required, compliance with legal obligation, and performance of functions in the public interest or in the exercise of official authority
Storage, Retention, and Disposal of Personal Data
We store files containing personal information in our computers, servers or physical storage for records, which are kept in secure environment. We shall ensure that proper measures are adopted to protect your information.
Personal data shall be stored and retained in database for the period prescribed under the National Archive of the Philippines. Thereafter, data shall be securely disposed of or anonymized.
Physical records shall be disposed of through shredding, while digital files shall be anonymized or deleted in the database. In all instances, our manner of disposal shall ensure that the personal information shall no longer be retrieved, processed, or accessed by unauthorized persons.
Data Protection Measures
We implement appropriate organizational, technical, and physical security measures to protect personal data against unauthorized access, disclosure, alteration, destruction, and any other unlawful processing, in accordance with the Data Privacy Act and its Implementing Rules and Regulations.
Data Sharing and Disclosure
Your personal data will not be shared with third parties unless:
- Required or permitted by law
- Necessary for the fulfillment of official functions
- Authorized by the data subject
Rest assured that any data sharing will adhere to the principles of proportionality, legitimacy of purpose, and transparency.
Rights of the Data Subject
Under the Data Privacy Act of 2012, you have the following rights:
- The right to be informed
- The right to object
- The right to access
- The right to correct or rectify inaccurate data
- The right to erasure or blocking
- The right to data portability
- The right to file a complaint
- The right to damages
Contact Information
Should you have any inquiries, requests, or concerns on matter regarding your personal, you may contact our Data Protection Officer (DPO), Undersecretary Maria Rica Bueno at privacy@tourism.gov.ph.
