City College of Calamba (CCC) is committed to respect your right to privacy and we aim to comply with all the requirements of Republic Act 10173, also known as the Data Privacy Act of 2012 (DPA) and its implementing rules and regulations, and the applicable issuances of the National Privacy Commission (NPC), the body mandated with implementing such law. 

 

The term personal data and personal information are used interchangeably. Personal information refers to any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together would directly and certainly identify an individual. 

 

This is CCC’s general privacy statement, which explains how your personal data will be collected, used, stored, disclosed, shared, disposed, and protected by CCC. This privacy statement also explains the legal basis for such processing, your data privacy rights and how you may exercise those rights, and the risk associated with such processing and the corresponding measures we put in place to protect your personal data.

We collect personal data from applicants, students, personnel, visitors and guests of CCC.

We collect or acquire your personal data in printed forms, documents and attachments required by its academic units and administrative offices.

We collect or acquire personal data electronically through electronic forms, via email, or inputting of information directly by the data subject or by concerned faculty or personnel.

If you are a minor (below 18 years old), we will require you to submit a consent form from your legal guardian or parent.

When you provide CCC with the personal data of third parties you certify that you obtained their consent for CCC to process their personal data and agree to hold CCC harmless from all liabilities for the processing of such personal data.

We process your personal data to perform our obligation, exercise our rights andc onduct our functions as a public higher educational institution in Laguna by virtue of City Ordinance enacted by the Sangguniang Panlungsod of the City of Calamba.

The above-mentioned personal data are required in order for us to comply with legal, regulatory, administrative, reporting, audit and transparency requirements.

We use your personal data proportionately and in accordance with the DPA, issuances of the NPC, and policies and procedures of CCC.

Risk refers to the potential of an incident to result in harm or danger to a data subject or organization which may lead to unauthorized collection, use, disclosure, or access to personal data. It includes risks involving the confidentiality, integrity, and availability of personal data or the risk that processing will violate the general data privacy principles and the rights of data subjects.

We ensure that adequate organizational, physical, and technical security measures are in place to protect personal data's confidentiality, integrity, and availability. However, we cannot guarantee absolute protection against certain risks involving the processing of personal data, such as when systems are exposed to targeted cyberattacks, malware, ransomware, and computer viruses or when manual records are accessed without authorization. But adequate policies are in place to ensure appropriate security incident management in line with existing CCC policies and regulations.

We take the security and protection of your personal data very seriously. We will take all reasonable steps to safeguard the confidentiality, integrity and availability of your personal data. We strictly enforce our privacy policies in CCC and implemented organizational, physical and technical measures to protect the personal data we hold from loss, misuse, modification, unauthorized or accidental access or disclosure, or destruction. Some of the measures we implement are:

• We restrict access of your personal data to authorized and qualified personnel only based on a “need to know” policy.
• We regularly trained our personnel to handle your personal data with strict confidentiality.
• We setup technical measures to protect our information and communications systems against accidental, unauthorized, or unlawful usage, interference, and access.

To the extent or permitted by law, we will disclose, share or transfer your personal data to other persons or organizations in order to uphold your interest and/or pursue our legitimate interests as an education institution only with your consent and/or when required or allowed by applicable laws.

Personal Data are stored securely in physical and electronic data processing systems managed by various units and offices of CCC. Physical records are generally stored in drawers or shelves that are locked. Electronic records are generally stored in information and communication systems and computers in the possession or control of CCC.

CCC retains data in accordance with the CCC Retention and Disposal of Records Policy.

Data will be securely deleted or anonymized once retention periods expire, unless otherwise required by law.

Under DPA, you have the following rights:

• The right to be informed about the collection and processing of your personal data through this and other applicable privacy notices.
• The right to access and request a copy of the personal data we process about you.
• The right to object to or withdraw consent to processing, subject to legitimate institutional interests.
• The right to request correction or deletion of inaccurate or outdated records.
• If you believe you suffered damages despite our efforts to protect your personal data, you have the right to register a complaint directly with the NPC anytime.

Inquiries, complaints and concerns on data privacy and this privacy notice may be directed to the:

Data Protection Officer
City College of Calamba
Old Municipal Site, Brgy. VII, Poblacion, Calamba City, Laguna
Email: dpo@ccc.edu.ph

We may update our general privacy statement at any time including but not limited to compliance with changes in applicable laws, government and regulatory requirements, adapt to new technologies, and align with industry’s best practices.

We will notify you of any such amendments via our website or applicable privacy notices.

This General Privacy Statement is effective 03 March 2026.