Saint Mary’s University
for Students, Admission Applicants and Alumni
We respect your right to privacy and aim to comply with the requirements of all relevant privacy and data protection laws, particularly the Data Privacy Act of 2012 (DPA). As in the case of the National Privacy Commission (NPC), we also seek to strike a balance between your personal privacy, and the free flow of information, especially when pursuing our legitimate interests and when necessary to carry out our responsibilities as an educational institution.
In this Policy, the terms, “data” and “information” are used interchangeably. When we speak of “personal data”, the term includes the concepts of personal information, sensitive personal information, and privileged information. The first two are typically used to distinctively identify you. For their exact definitions, you may refer to the text of the DPA or you can visit the website of the SMU Data Protection Office. You should also note that while we give examples here to explain this Policy in simple and clear language, they do not make up an exhaustive list of all the data that we process.
Information We Collect, Acquire, or Generate
We collect, acquire, or generate your personal data in many forms. They may consist of written records, photographic and video images, digital material, and even biometric records. Examples include:
- Information you provide us during your application for admission. When you apply with us for admission, we collect, among others: (1) directory information, like your name, email address, telephone number, and other contact details; (2) data about your personal circumstances, such as your family background, history, and other relevant circumstances, previous schools attended, academic performance, disciplinary record, employment record, and medical records; and (3) and any or all information obtained through interviews and/or during entrance tests or admission examinations.
- Information we collect or generate after enrolment and during the course of your stay with us. After you join the University, we may also collect additional information about you, including: (1) your academic or curricular undertakings, such as the classes you enroll in, scholastic performance, attendance record, etc.; (2) co-curricular matters you may engage in, such as trainings, seminars, outreach activities, internship or apprenticeship compliance; (3) your extra-curricular activities, such as membership in student organizations, leadership positions, and participation and attendance in seminars, competitions, programs, outreach activities, and study tours; (4) medical, dental, psychological & counseling data; and (4) any disciplinary incident that you may be involved in, including accompanying sanctions. There will also be times when we will acquire other forms of data like pictures or videos of activities you participate in, via official documentation of such activities, or through recordings from closed-circuit security television cameras installed within school premises.
- Unsolicited Information. There may be instances when personal information is sent to or received by us even without our prior request. In such cases, we will determine if we can legitimately keep such information. If it is not related to any of our legitimate interests, we will immediately dispose of the information in a way that will safeguard your privacy. Otherwise, it will be treated in the same manner as information you provide us.
If you supply us with personal data of other individuals (e.g., person to contact in the event of an emergency), we will request you to certify that you have obtained the consent of such individuals before providing us with their personal data.
How We Use Your Information
To the extent permitted or required by law, we use your personal data to pursue our legitimate interests as an educational institution, including a variety of academic, administrative, research, historical, and statistical purposes. For example, we may use the information we collect for purposes such as:
- evaluating applications for admission to the University;
- processing confirmation of incoming, transfer, cross-registering, or non-degree students in preparation for enrollment;
- recording, generating, and maintaining student records of academic, co-curricular, and extra-curricular progress;
- recording, storing, and evaluating student work, such as homework, seatwork, quizzes, long tests, exams, term papers, theses, dissertations, culminating or integrating projects, research papers, reflection papers, essays and presentations;
- recording, generating, and maintaining records, whether manually, electronically, or by other means, of grades, academic history, class schedules, class attendance and participation in curricular, co-curricular, and extra-curricular activities;
- establishing and maintaining student information systems;
- sharing of grades between and among faculty members, and others with legitimate official need, for academic deliberations and evaluation of student performance;
- processing scholarship applications, grants, allowances, reports to benefactors, and other forms of financial assistance;
- processing of papers for OJT, practicum, internship and other off-campus activities;
- investigating incidents that relate to student behavior and implementing disciplinary measures;
- maintaining directories and alumni records;
- compiling and generating reports for statistical and research purposes;
- providing services such as health, insurance, counseling, information technology, library, sports/recreation, transportation, parking, campus mobility, safety and security;
- managing and controlling access to campus facilities and equipment;
- communicating official school announcements;
- sharing marketing and promotional materials regarding school-related functions, events, projects, and activities;
- soliciting your participation in research and non-commercial surveys sanctioned by the University;
- soliciting your support, financial or otherwise, for University programs, projects, and events;
- sharing your information with persons or institutions as provided in the section on sharing personal information.
We consider the processing of your personal data for these purposes to be necessary for the performance of our contractual obligations to you, for our compliance with a legal obligation, to protect your vitally important interests, including your life and health, for the performance of tasks we carry out in the public interest (e.g., public order, public safety, etc.), or for the pursuit of the legitimate interests of the University or a third party. We understand that the DPA imposes stricter rules for the processing of sensitive personal information and privileged information, and we are fully committed to abiding by those rules.
How We Share, Disclose, or Transfer Your Information
To the extent permitted or required by law, we may also share, disclose, or transfer your personal data to other persons or organizations in order to uphold your interests and/or pursue our legitimate interests as an educational institution. For example, we may share, disclose, or transfer your personal data for purposes such as:
- posting of acceptance to the University, awarding of financial aid and merit scholarships, grants, discounts, class lists, class schedules, online, in school bulletin boards, or other places within the campus;
- sharing of your personal data with your parents, guardians, or next of kin, as required by law, or on a need-to-know basis, as determined by the University, in order to promote your best interests (, or to protect your health, safety, and security, or that of others;
- sharing of some information to donors, funders, or benefactors for purposes of scholarship, grants, and other forms of assistance;
- publication of scholars’ graduation brochure for distribution to donors, funders, or benefactors and potential employers;
- posting in bulletin boards of the deficiencies of candidates for graduation and distribution of the list of graduates and awardees in preparation for and during commencement exercises;
- reporting and/or disclosure of information to the NPC and other government bodies or agencies (e.g., Commission on Higher Education, Department of Education, TESDA, Bureau of Immigration, Department of Foreign Affairs, Civil Service Commission, Bureau of Internal Revenue, Professional Regulation Commission, Legal Education Board, Supreme Court, etc.), when required or allowed by law;
- sharing of information with entities or organizations (e.g. Philippine Accrediting Association of Schools, Colleges and Universities, ASEAN University Network, and QS World University Rankings, etc) for accreditation and university ranking purposes;
- sharing of information with entities or organizations (e.g., Catholic Educational Association of the Philippines and other sports bodies) for determining eligibility in sports or academic competitions, as well as other similar events.;
- complying with court orders, subpoenas and/or other legal obligations;
- conducting internal research or surveys for purposes of institutional development;
- publishing academic, co-curricular, and extra-curricular achievements and success, including honors lists and names of awardees in school bulletin boards, website, social media sites, and publications;
- sharing your academic accomplishments or honors and co-curricular or extra-curricular achievements with schools you graduated from or were previously enrolled in;
- use of photos, videos, and other information in order to promote the school, including its activities and events, through marketing or advertising materials, such as brochures, website posts, newspaper advertisements, physical and electronic bulletin boards, and other media;
- live-streaming or delayed video streaming of University events;
- publication of communications with journalistic content, such as news information in University publications, and social media sites;
providing information and photos to partner hospitals, OJT partners and other similar organizations where students render on-the-job-training, practicum, internship, student exchange programs or who process student papers for OJT, practicum, cultural exchanges and student exchange programs.
How We Store and Retain Your Information
Your personal data is stored and transmitted securely in a variety of paper and electronic formats, including databases that are shared between the University’s different units or offices. Access to your personal data is limited to University personnel who have a legitimate interest in them for the purpose of carrying out their contractual duties. Rest assured that our use of your personal data will be reasonable and shall be limited to that which is necessary to achieve the purpose of their collection, and/or only when permitted by law.
Unless otherwise provided by law or by appropriate University policies, we will retain your relevant personal data indefinitely for historical and statistical purposes. Where a retention period is provided by law and/or a University policy, all affected records will be securely disposed of after such period.
Your Rights with Respect to Your Personal Data
We recognize your rights with respect to your personal data, as provided by the DPA. If you wish to exercise any of your rights, or should you have any concern or question regarding them, this Notice, or any matter involving the University and data privacy, you may contact the SMU Data Protection Office (DPO). SMU will consider your request and reserves the right to deal with the matter in accordance with the law. For the details of your rights as a data subject, you can get in touch with our Data Privacy Officer at contact details below or at National Privacy Commission at https://privacy.gov.ph/.
SMU Data Protection Officer
Tel. No.: 078-321-2221 local 140 . Mobile # 0917-655-8950
Email Address: firstname.lastname@example.org
Changing This Policy
We may, from time to time, make changes to this Policy. On such occasions, we will let you know through our website, circulars, bulletin boards and, when permissible, other means of communication. Any modification is effective immediately upon posting on the website or in SMU bulletin boards.
Other University Policies
Other policies of the University, which are not inconsistent with this one, will continue to apply. If any provision of this Policy is found to be unenforceable or invalid by any court having competent jurisdiction, the invalidity of such provision will not affect the validity of the other provisions, which shall remain in full force and effect.
DR. JOHN G. TAYABAN, PhD
VP for Administration and
Data Protection Officer
Approved on January 7, 2020
DR. JOHN OCTAVIOUS S. PALINA, PhD