PRIVACY & COOKIE POLICY

PRIVACY & COOKIE POLICY

Ocampo & Suralvo Law Offices (“OS Law” or the “Firm”) is committed to responsibly processing your personal data and protecting your privacy.

This Privacy Policy sets out the types of Personal Data (including sensitive personal information) that we collect as a personal information controller, how we collect, use, disclose or otherwise process it and for what purposes we process it.

How We Collect Your Personal Data

This Privacy Policy applies to Personal Data processed in the course of the operation of our business.

“Personal Data” as used in this Privacy Policy is any information from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual.

The circumstances in which we can collect Personal Data about you include:

    • when you request our legal advice or services;
    • when you apply for a job or internship or when you are employed or engaged by us;
    • when you visit our website at https://www.ocamposuralvo.com or our other digital sites;
    • when you participate or when we invite you to participate, in our events or other business development activities;
    • when you visit our offices;
    • when you contact or correspond with us by email, phone, other electronic means or provide other information directly to us including through conversations with our lawyers and staff;
    • when you offer to provide or provide services to us; or
    • when we obtain such data from third party sources such as government agencies, publicly available records, social media, or other organizations with whom you have/had dealings with such as former employers or learning institutions.

Personal Data We Collect

We collect and process the following Personal Data:

    • identity-related information such as name, date of birth, marital status, gender, nationality, government-issued ID (e.g. passport, taxpayer information) details;
    • contact data such as email address, phone number, home address, social media profiles;
    • education and employment information such as job title, company details, employment history, educational or professional background, salary and benefits information, employment records;
    • financial or commercial information such as bank account and payment information details, credit/debit card details, related billing information and other information provided in the course of the contractual/client relationship with the Firm;
    • information provided to us in connection with any legal advice, service or support we have been asked to provide;
    • technical, profile or usage data including information collected during your visits to our website, Internet Protocol (IP) address, login data, browser type and version, device type, browser plug-in types and versions, operating system and so on;
    • health information and/or medical testing results;
    • details of your visits to our offices;
    • information provided to us in connection with any legal advice or service we have been asked to provide;
    • other information you or other data subjects submit or provide to us.

Purposes of Processing

We use your Personal Data for the following Purposes:

    • to provide you with legal advice or services;
    • to verify your identity;
    • for recruitment and other human resources purposes;
    • to enter into, carry out or terminate your employment or engagement with us;
    • to manage our relationship with you;
    • to obtain services for our own operations or business objectives;
    • to ensure compliance with legal documentation and document retention obligations (such as record keeping obligations);
    • to exercise or defend our legal rights or to comply with court orders or governmental requests;
    • to protect and defend our rights, property or safety or that of our clients, personnel, users of our websites and other third parties;
    • to detect, investigate, and help prevent security threats, fraud, theft or other illegal activities;  
    • for statutory or regulatory compliance to any competent government authority, agency or body;
    • for purposes required by law, including maintaining records;
    • to comply with our internal policies and standards and/or to monitor and assess compliance with such policies or standards;
    • to administer our website, analyze trends, usage and activities, and improve its performance;
    • to enhance our services;
    • to update you on the latest developments, announcements and other information about our services, events or business development activities;
    • to otherwise communicate with you;
    • to enable us to use such data as required or authorized by applicable law;
    • to establish, exercise or defend legal claims;
    • for our business or commercial purposes and the fulfillment of our legitimate objectives;
    • to carry out any other purpose communicated to you at the time of the collection of the data.  

Consent to Processing

By visiting this website or otherwise providing us your Personal Data through any of the processing circumstances enumerated in the section on “How We Collect Your Personal Data” above, you expressly authorize and consent to our processing of your Personal Data for the Purposes, and in the manner described in this Privacy Policy.

We may process your Personal Data in accordance with other lawful bases provided under Republic Act No. 10173 or the Data Privacy Act of 2012.

If you fail to provide the Personal Data identified as required, we may not be able to provide the service your request, enter into the contract envisaged, respond to or communicate with you, or otherwise provide the assistance you need or request.

Disclosure of Personal Data

We may disclose your Personal Data to third parties within or outside the Philippines for various purposes.  We may disclose Personal Data to:

    • third parties in connection with the provision of our legal services including special counsel, experts, legal specialists, consultants and other entities, for the purpose of providing those services;
    • to relevant courts or tribunals, court/tribunal personnel, arbitrators, mediators, and other third parties for the establishment, exercise or defense of legal claims or as is necessary for the protection of lawful rights and interests of natural or legal persons in legal proceedings;
    • to third-party service providers, vendors, professional advisers, auditors, consultants, counselors and other service providers for our business and operational purposes or for any of the Purposes listed above;
    • to third-party courier or mailing service providers for purposes of delivering documents or other correspondence to our clients, counterparties, courts, tribunals or other entities or individuals related to any case or matter we handle;
    • to government agencies, regulatory bodies, law enforcement authorities, or other third parties in order to comply with a judicial proceeding, court order, governmental inquiry, legal process, regulatory requirement or other legal obligation;
    • to third parties in connection with any merger, reorganization, financing, acquisition, or sale of all or part of our business or assets for purposes of the consideration, offer, negotiation or completion of such transaction.  

As a law firm, we treat data under our responsibility with utmost confidentiality. We do not sell your Personal Data to third parties.

Security Measures

We have put in place reasonable and appropriate organizational, physical and technical safeguards intended for the protection of Personal Data against any accidental or unlawful destruction, alteration and disclosure, as well as against any other unlawful processing. These security measures aim to maintain the availability, integrity and confidentiality of Personal Data.

Some of the security measures we employ include without limitation: secure servers, firewalls, antivirus protection, password protection and other technical defenses; the use of encryption solutions where technically appropriate for data at rest and in-transit; access control restricting access to systems and Personal Data to employees, staff, contractors or service providers and other third -parties based on their roles and only on a need-to-know basis; and review and assessment of the effectiveness of our safeguards.

Despite such security measures, no operations, information systems or transmission of data over the internet can be guaranteed to be 100% secure, thus we cannot guarantee absolute security.

Moreover, our website or other digital sites may contain links to content maintained by third parties and that we do not control. We are not responsible for the privacy practices of these third parties or for protecting the security of such content or information, and these practices are not covered by this Privacy Policy.

Retention

We will retain your Personal Data for as long as necessary to fulfill the Purposes; for other legitimate business purposes including to satisfy legal, regulatory, professional, compliance or contractual obligations; or to establish, exercise, or defend legal claims.

We dispose of Personal Data in a secure manner. Physical files are destroyed through shredding and electronic data are electronically deleted. We may also anonymize Personal Data so that it can no longer be associated with any individual.

Your Rights

  • Right to object. You have the right to object to the processing of your Personal Data, including processing for direct marketing, automated processing, or profiling. You may also withhold consent to processing in case of changes or any amendment to the information supplied to you. When you notify us that you are withholding consent, we shall no longer process your Personal Data unless:
    • The Processing is required pursuant to a subpoena, lawful order, or as required by law; o
    • There are other lawful bases or criteria under the DPA for the collection and processing of the Personal Data.
  • Right to access. You have the right to reasonable access to, upon demand, Personal Data that the Firm processed about you.
  • Right to rectification. You have the right to dispute the inaccuracy or error in your Personal Data and have us correct it immediately and accordingly, unless the request is vexatious or otherwise unreasonable. After correction has been made, we will ensure the accessibility of both the new and retracted information and the simultaneous receipt of the new and retracted information by the intended recipients, provided that recipients or third parties who have previously received the processed Personal Data shall be informed of its inaccuracy and its rectification, upon your reasonable request.
  • Right to erasure or blocking. You have the right to suspend, withdraw or order the blocking, removal or destruction of your Personal Data from our filing system upon discovery and substantial proof of any of the following:
    • your Personal Data is incomplete, outdated, false or unlawfully obtained;
    • your Personal Data is being used for a purpose you have not authorized;
    • Your Personal Data I no longer necessary for the purposes for which they were collected;
    • You have withdrawn consent or objected the processing and there is no other legal ground or overriding legitimate interest for the processing;
    • Your Personal Data concerns private information prejudicial to you, unless justified by freedom of speech, of expression or of the press or otherwise authorized;
    • The processing is unlawful;
    • We or our personal information processors violated your data subject rights.
  • Right to damages. You have the right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of the personal data, taking into account any violation of your rights and freedoms as a data subject, as provided by law.
  • Right to lodge a complaint. You have the right to lodge a complaint with the National Privacy Commission in case your rights as a data subject have been violated.
  • Right to data portability. You are entitled to receive a copy of Personal Data that you may have provided, in such electronic or structured format for further use, subject to the guidelines of the National Privacy Commission with regard to the exercise of such right.

In case of a data subject’s death, incapacity or incapability to exercise legal rights, the lawful heirs and assigns may invoke data subject rights in his place.

Your rights as a data subject are subject to limitations provided by law.

Cookie Policy

We use cookies and other similar technologies on https://www.ocamposuralvo.com.

What are Cookies? Cookies are small text files that can be downloaded to your device when you visit a website.

How Do We Use Cookies? We use cookies and other similar technologies to enable you to navigate and move around our website.  

Which Cookies and Similar Technologies Do We Use?

We use Strictly Necessary Cookies and similar technologies that are essential for our website to function. Without these, the website or digital site or service you are requesting may not work and appropriate content may not be properly displayed.

We have not deployed and do not currently use cookies other than those that are Strictly Necessary.

How to Contact Us

In case you have questions or concerns regarding the processing of your Personal Data, you may contact:

Data Protection Officer

Ocampo and Suralvo Law Offices
6th Floor, Liberty Center
104 HV dela Costa St.
Salcedo Village
Makati City
+639178625678
dpo@ocamposuralvo.com

Changes to Privacy Policy

This Privacy Policy may be updated from time to time. Please review it periodically to be apprised of any changes. This Privacy Policy was last updated on 25 April 2022.

Please note that this Privacy Policy will regularly be updated to reflect any changes in the way we handle your Personal Data or any changes in applicable laws.