1. Introduction

The NU SDAO Integrated System (NU SIS), operated by the Student Development and Activities Office (SDAO) at National University - MOA (NU MOA), is committed to protecting your personal information and respecting your privacy. This Data Privacy Statement explains how we collect, use, process, share, and protect your personal data when you access and use our website (https://www.nu-sis.com/) and its integrated services, in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

By accessing the NU SIS portal and availing yourself of our services, you consent to the data practices described in this statement.

2. What Personal Data We Collect

We collect information that identifies you as an NU MOA student ("Seaside Bulldog") to facilitate our digital ecosystem effectively. The types of personal data we may collect include, but are not limited to:

• Personal Identification Information: Name, Student Number, Academic Program, and Year Level.
• Contact Information: Official NU email address and alternate contact details.
• Account Credentials: Login credentials and authentication data used for the Student Portal.
• Service-Specific Data:
  • Locker Management: Locker assignment preferences and academic program details.
  • Return Service Program: Scholarship details, service hours rendered, and performance tracking.
  • Student Organizations: Affiliations, membership status, and officer positions in Recognized Student Organizations.
  • Student Elections: Encrypted voter authentication and digital voting records.
  • Student Satisfaction Surveys: Feedback, welfare reports, and optional demographic data.
• Technical Data: Log Location, browser types, log files, and timestamps generated when interacting with our platform.

3. How We Collect Your Data

We collect personal data primarily when you:

• Log in and authenticate your identity via the NU SIS Student Portal.
• Apply for, reserve, or manage campus lockers.
• Log and submit your Return Service Program hours and requirements.
• Register, join, or manage Recognized Student Organizations.
• Cast your vote during Student Elections.
• Voluntarily participate in Student Satisfaction Surveys and welfare programs.

4. Why We Collect and Process Your Data

Your personal data is processed exclusively for legitimate university and SDAO-related purposes, which include:

• Service Delivery: To provide a responsive, efficient, and accessible digital hub for student development activities.
• Administrative Management: To manage locker distributions, track scholar return service obligations, and oversee recognized student organizations.
• Electoral Integrity: To securely authenticate voters and ensure fair, real-time results during student elections.
• Quality Improvement: To analyze feedback from satisfaction surveys to enhance student welfare and university services.
• Security and Communication: To verify your identity, secure your account, and send official SDAO announcements and notifications.

5. Data Sharing and Disclosure

We maintain strict confidentiality regarding your personal data. We do not sell, trade, or rent your information to third parties. We will only share or disclose your personal data under the following circumstances:

• Internal University Units:With other authorized NU MOA departments (e.g., IT Office, Registrar, Scholarship Office) strictly on a "need-to-know" basis to facilitate your academic and extra-curricular standing.
• Legal Compliance: When required by law, a court order, or lawful requests from government authorities (e.g., CHED, NPC).
• With Your Consent: When you explicitly allow us to share specific data for external activities, competitions, or partnerships.

6. Data Retention and Disposal

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, and in accordance with the retention policies of National University and applicable laws.

• Active student records are retained throughout your stay at NU MOA.
• Data related to specific events (e.g., election votes, survey responses) may be anonymized or securely deleted after the academic year or once the regulatory retention period lapses.

When physical or digital data is no longer required, it is disposed of securely to prevent unauthorized access or disclosure.

7. Data Security

We implement robust organizational, physical, and technical security measures to protect your personal data against accidental loss, unauthorized access, alteration, and disclosure. These include:

• Secure login authentication and encryption protocols for the NU SIS portal.
• Strict access controls limiting data visibility only to authorized SDAO and IT personnel.
• Regular vulnerability assessments of the NU SIS digital infrastructure.

8. Rights of the Data Subject

Under the Data Privacy Act of 2012, you possess the following rights regarding your personal data:

• Right to be Informed: To know whether your personal data is being processed.
• Right to Object: To object to the processing of your data, including profiling and direct marketing.
• Right to Access: To request a copy of your personal data held by us.
• Right to Rectification: To dispute inaccuracies and have your data corrected.
• Right to Erasure or Blocking: To suspend, withdraw, or order the blocking, removal, or destruction of your personal data under certain conditions.
• Right to Damages: To claim compensation if you suffered damages due to a privacy violation.
• Right to Data Portability: To obtain your personal data in a standard electronic format.
• Right to File a Complaint: To file a complaint with the National Privacy Commission (NPC) if your data privacy rights have been violated.