General Public

COLLECTION AND USE OF YOUR PERSONAL DATA
In the ordinary course of the Company’s business, we may collect personal information such as your full name, email address and mobile number.

Your personal data may be used, stored, processed, shared and disclosed by AEV to its stakeholders, and other third parties as may be necessary and allowed by law for any of the following purposes:

Establishing your identity in order to respond to your requests, queries, and concerns;
Complying with and responding to legal processes or lawful orders of any judicial or quasi-judicial bodies such as but not limited to National Privacy Commission (NPC); and
Reporting of incidents and violations of policies and standards of the Aboitiz Group.

SHARING OF YOUR PERSONAL DATA
We may share with or disclose your Personal Data to:

Any of our affiliate or Aboitiz Power Corporation, UnionBank of the Philippines, City Savings Bank, Aboitiz Foods, Coca-Cola Europacific Aboitiz Philippines, Aboitiz InfraCapital, Aboitiz Land, Aboitiz Foundation, Aboitiz Construction only for the purposes stated upon collection of your personal data;
Any consultant, adviser, auditor, or service provider we engaged to carry out functions or activities related to our legitimate business activities;
Any person to whom we propose to assign or transfer any of its rights and/or duties;
Any court of law or administrative agency of the government pursuant to a lawful order issued in relation to a pending case or proceeding before such court or agency;
Your lawyer, attorney-in-fact, or duly authorized agent or representative, upon presentation of a duly executed special power of attorney;
Any regulatory, quasi-judicial or judicial authority, or as otherwise considered necessary or appropriate for our legitimate business purposes.

Any access to your personal data will be limited to the person who requires your Personal Data to perform the functions for which personal information has been collected, and as required or allowed by law. We do not sell, trade, or otherwise transfer your personal data to third parties. If shared, we will, at your request, provide you with details of the companies with whom we have shared your personal data.

PROTECTING YOUR PERSONAL DATA
We are committed to ensuring that your Personal Data is kept secure. We have implemented suitable and adequate organizational, physical and technical security measures, policies and procedures intended to reduce the risks of accidental destruction or loss, or the unauthorized disclosure or access to such information which are appropriate and adequate to the nature of the Personal Data we collect. These security measures include:

Regular privacy and security awareness training and exercises are conducted across all Aboitiz employees
Confidentiality agreements with employees, vendors, stakeholders, and third parties who may have access to your personal information;
Data is stored in a secure location that is protected by strong passwords and encryption. Access to the data is limited and on a need basis only.
24/7 dedicated incident response team for managing security threats and proactively monitoring suspicious activities and newly discovered security vulnerabilities
A regular vulnerability scanning and patching is done across all systems.
Automated monitoring of third party providers
Physical files containing personal data are stored in secured location with limited access

STORING YOUR PERSONAL DATA
We may retain your Personal Data only for as long as necessary for legitimate business purposes, to comply with laws, regulations, or lawful court order, or to establish or defend a legal action and will be disposed thereafter according to the disposal policy.

COOKIES AND TRACKING TECHNOLOGY
When you visit our websites or use any of our mobile applications, other information that may also constitute personal data, such as your browser type, operating system, IP address, domain name, number of times and dates you visited the website or accessed the mobile application, and the amount of time you spent browsing through the website or mobile application, may be collected via cookies and other tracking technologies, such as transparent GIF files. Aggregate Information, or non-personally identifiable and anonymous data, such as how many times you log onto our websites or mobile applications may also be collected.

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Cookies allow websites to recognize your computer when you return, enabling it to display personalized settings and other user preferences. It also allows websites to respond to you as an individual. The websites and apps can tailor operations to your needs, likes and dislikes by gathering and remembering information about your preferences. In general, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

We use traffic log cookies to identify which pages are being visited. This helps us to analyze data about web page traffic and to improve our website in order to tailor it to your needs. We only use this information for statistical analysis purposes after which, the data is removed from the system.

You will be given the opportunity to accept or reject the use of cookies on our websites in a pop-up box when you first access our website. Once you agree, the file is added and the cookie helps analyze web traffic or lets you know when you visit a particular site. Most web browsers, however, automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. You may choose not to accept the cookies, however, this may restrict the services that you can access at our websites. Declining cookies may also prevent you from taking full advantage of our websites.

Employees

COLLECTION AND USE OF YOUR PERSONAL DATA
In the ordinary course of the Company’s business, we may collect personal data such as but not limited to:

Personal Information

Full name;
Contact details such as email address and mobile number;
Current address;
Payroll information
Dependent details such as full names and/or contact details;
Work data such as job and position information, biometric data, performance history and/or evaluation, benefits availment and history;
Financial information such as payroll details and credit history or information.

Sensitive Personal Information

Marital status;
Gender
Nationality
Educational background;
Relevant government-issued identification numbers (both for employees and dependents) including government-issued certificates and licenses;
Medical records and history;
Date of birth both for employees and dependents)

Your personal data may be used, stored, processed, shared and disclosed by AEV to its stakeholders, subsidiaries, and other third parties as may be necessary and allowed by law for any of the following purposes:

Payroll and benefits administration;
Strategic human resources planning and work assignment management;
Performance review, talent development, and employee engagement;
Company communications;
Compliance with law and regulations or legal obligation;
Monitoring compliance with Company policies and regulations;
Protection of your vital interests and other legitimate business purposes;
Complying with and responding to legal processes or lawful orders of any judicial or quasi-judicial bodies such as but not limited to National Privacy Commission (NPC);
Reporting of incidents and violations of policies and standards of the Aboitiz Group.

SHARING OF YOUR PERSONAL DATA
We may share with or disclose your Personal Data to:

Any of our affiliate or subsidiary* only for the purposes stated upon collection of your personal data;
Any agent, contractor, or sub-contractor performing services related to stockholders services;
Any consultant, adviser, auditor, or service provider we engaged to carry out functions or activities related to our legitimate business activities;
Any person to whom we propose to assign or transfer any of its rights and/or duties;
Any court of law or administrative agency of the government pursuant to a lawful order issued in relation to a pending case or proceeding before such court or agency;
Our lenders or creditors, underwriters, as well as the consultant, adviser or, auditor of the foregoing;
Your lawyer, attorney-in-fact, or duly authorized agent or representative, upon presentation of a duly executed special power of attorney;
Any regulatory, quasi-judicial or judicial authority, or as otherwise considered necessary or appropriate for our legitimate business purposes.

Regular privacy and security awareness training and exercises are conducted across all Aboitiz employees
Confidentiality agreements with employees, vendors, stakeholders, and third parties who may have access to your personal information;
Data is stored in a secure location that is protected by strong passwords and encryption. Access to the data is limited and on a need basis only.
24/7 dedicated incident response team for managing security threats and proactively monitoring suspicious activities and newly discovered security vulnerabilities
A regular vulnerability scanning and patching is done across all systems.
Automated monitoring of third party providers
Physical files containing personal data are stored in secured location with limited access

STORING YOUR PERSONAL DATA
We may retain your Personal Information only for as long as it is necessary to fulfill the purposes mentioned, and may generally continue within ten (10) years after the termination of your employment, except when as otherwise required or permitted under applicable laws, regulations or lawful orders of authorities, or for the establishment, exercise or defense of legal claims.

Vendors

COLLECTION AND USE OF YOUR PERSONAL DATA
In the ordinary course of the Company’s business, we may collect personal and sensitive personal information such as your full name, email address, current address, mobile number, company name, government-issued ID, bank details and certification, and certificate of registration from the Bureau of Internal Revenue (BIR).

Your personal data may be used, stored, processed, shared and disclosed by AEV to its stakeholders and other third parties as may be necessary and allowed by law for any of the following purposes:

Establishing your identity in order to respond to your requests, queries, and concerns;
Complying with the due diligence requirements in transactions with vendors, suppliers, and other relevant third parties;
Complying with the requirements of regulatory agencies and instrumentalities of the government including, but not limited, to the Securities and Exchange Commission (SEC) and Bureau of Internal Revenue (BIR);
Complying with and responding to legal processes or lawful orders of any judicial or quasi-judicial bodies; and
Reporting of incidents and violations of policies and standards of the Aboitiz Group.

SHARING OF YOUR PERSONAL DATA
We may share with or disclose your Personal Data to:

Any of our affiliate or subsidiary* only for the purposes stated upon collection of your personal data;
Any agent, contractor, or sub-contractor performing services related to stockholders services;
Any consultant, adviser, auditor, or service provider we engaged to carry out functions or activities related to our legitimate business activities;
Any person to whom we propose to assign or transfer any of its rights and/or duties;
Any court of law or administrative agency of the government pursuant to a lawful order issued in relation to a pending case or proceeding before such court or agency;
Our lenders or creditors, underwriters, as well as the consultant, adviser or, auditor of the foregoing;
Your lawyer, attorney-in-fact, or duly authorized agent or representative, upon presentation of a duly executed special power of attorney;
Any regulatory, quasi-judicial or judicial authority, or as otherwise considered necessary or appropriate for our legitimate business purposes.

Regular privacy and security awareness training and exercises are conducted across all Aboitiz employees
Confidentiality agreements with employees, vendors, stakeholders, and third parties who may have access to your personal information;
Data is stored in a secure location that is protected by strong passwords and encryption. Access to the data is limited and on a need basis only.
24/7 dedicated incident response team for managing security threats and proactively monitoring suspicious activities and newly discovered security vulnerabilities.
A regular vulnerability scanning and patching is done across all systems.
Automated monitoring of third party providers.
Physical files containing personal data are stored in secured location with limited access.

Shareholders

COLLECTION AND USE OF YOUR PERSONAL DATA
In the ordinary course of the Company’s business, we may collect personal information such as your full name, email address, current address, mobile number, signature.

Your personal data may be used, stored, processed, shared and disclosed by AEV to its stakeholders and other third parties as may be necessary and allowed by law for any of the following purposes:

Establishing your identity as an investor or a stockholder of record in order to provide you services and accord you the benefits of an investor or a stockholder, which includes managing, administering, approving or facilitating any transaction or action in relation to your shares of stock, the payment of your dividends, and the registration of your shares in the stock and transfer books;
Complying with the due diligence requirements in fund-raising activities and transactions with lenders, creditors or financial institutions;
Establishing your identity in order to respond to your requests, queries, and concerns;
Sending notices and other communications in relation to the exercise of your rights as an investor or a stockholder;
Arranging your access or participation as an investor or a stockholder in corporate events, including events held using digital or online platforms;
Collecting and analyzing collective investor or shareholder data or information, and conducting statistical analysis to improve the services to be provided to you including the expeditious response to your concerns and queries, and to ensure that the services to be provided to you as an investor or a stockholder of record are based on accurate and appropriate information; and
Complying with the requirements of regulatory agencies and instrumentalities of the government including, but not limited, to the Philippine Stock Exchange (PSE), Philippine Dealing and Exchange Corporation (PDEx), Securities and Exchange Commission (SEC) and Bureau of Internal Revenue (BIR).

SHARING OF YOUR PERSONAL DATA
We may share with or disclose your Personal Data to:

Any of our affiliate or subsidiary* only for the purposes stated upon collection of your personal data;
Any agent, contractor, or sub-contractor performing services related to stockholders services;
Any consultant, adviser, auditor, or service provider we engaged to carry out functions or activities related to our legitimate business activities;
Any person to whom we propose to assign or transfer any of its rights and/or duties;
Any court of law or administrative agency of the government pursuant to a lawful order issued in relation to a pending case or proceeding before such court or agency;
Our lenders or creditors, underwriters, as well as the consultant, adviser or, auditor of the foregoing;
Your lawyer, attorney-in-fact, or duly authorized agent or representative, upon presentation of a duly executed special power of attorney;
Any regulatory, quasi-judicial or judicial authority, or as otherwise considered necessary or appropriate for our legitimate business purposes.

Regular privacy and security awareness training and exercises are conducted across all Aboitiz employees
Confidentiality agreements with employees, vendors, stakeholders, and third parties who may have access to your personal information;
Data is stored in a secure location that is protected by strong passwords and encryption. Access to the data is limited and on a need basis only.
24/7 dedicated incident response team for managing security threats and proactively monitoring suspicious activities and newly discovered security vulnerabilities
A regular vulnerability scanning and patching is done across all systems.
Automated monitoring of third party providers
Physical files containing personal data are stored in secured location with limited access

Job Applicants

COLLECTION AND USE OF YOUR PERSONAL DATA
In the ordinary course of the Company’s business, we may collect personal data such as but not limited to:

Personal Information
Full name, email address, current address, mobile number, country of residence, current and expected salary

Sensitive Personal Information
Marital status, gender, nationality, educational background, work history, relevant government-issued identification numbers, professional qualifications

Your personal data may be used, stored, processed, shared and disclosed by AEV to its members, stakeholders, and other third parties as may be necessary and allowed by law for any of the following purposes:

Establishing your identity in order to respond to your career-related requests, queries, and concerns; and
Processing your application for a position within the AEV.

SHARING OF YOUR PERSONAL DATA
We may share with or disclose your Personal Data to:

Any of our affiliate or subsidiary* only for the purposes stated upon collection of your personal data;
Any person to whom we propose to assign or transfer any of its rights and/or duties;
Any court of law or administrative agency of the government pursuant to a lawful order issued in relation to a pending case or proceeding before such court or agency;
Your lawyer, attorney-in-fact, or duly authorized agent or representative, upon presentation of a duly executed special power of attorney;
Any regulatory, quasi-judicial or judicial authority, or as otherwise considered necessary or appropriate for our legitimate business purposes.

Regular privacy and security awareness training and exercises are conducted across all Aboitiz employees
Confidentiality agreements with employees, vendors, stakeholders, and third parties who may have access to your personal information;
Data is stored in a secure location that is protected by strong passwords and encryption. Access to the data is limited and on a need basis only.
24/7 dedicated incident response team for managing security threats and proactively monitoring suspicious activities and newly discovered security vulnerabilities
A regular vulnerability scanning and patching is done across all systems.
Automated monitoring of third party providers
Physical files containing personal data are stored in secured location with limited access

Aboitiz Equity Ventures Inc.’s Privacy Statement

Privacy Statement

Aboitiz Equity Ventures Inc. is fully committed to comply with the Data Privacy Act of 2012 (Republic Act 10173). We abide by its Implementing Rules and Regulations through the data privacy and protection policies that we have adopted internally.
From time to time, it may be necessary for you to provide personal data in connection with your visits to our company website and portals, our offices, with your direct or indirect dealings with our Company, our officers and employees, and in your browsing activities through any of our website or mobile applications, as an investor, a shareholder, job applicant or in any relevant capacity.

Your Rights as Data Subjects

Right to be Informed

As data subjects, you have the right to be informed whether your personal data shall be, are being, or have been processed, including whether the processing was done through an automated decision-making system or profiling activity.

You can find this information in a privacy statement. This document is a demonstration of the data privacy principle of transparency, upholds your right, and every data subject’s right to information. It serves as a statement to data subjects describing how the organization collects, uses, retains, and discloses personal information.

Keep in mind that a privacy notice is not equivalent to consent. While consent may not be required in certain instances when it is not relied on as the basis for processing personal data, a privacy notice is required at all times in order for data subjects to be informed of the processing of their personal data and their rights as data subjects.

Right to Object

You have the right to object to the processing of your personal data if the basis is consent or legitimate interest such as direct marketing, profiling, and automated processing purposes.

In case of any significant change or amendment to the information previously provided to you, you must be notified anew in a reasonable manner. You must also be given an opportunity to object and/or withdraw consent, if consent was previously given for the processing of personal data.

If you expressed your objection, the organization shall stop the processing of personal data and comply with the objection. However, despite your objection, the organization may have other valid grounds to continue processing your personal data. For example, the processing is mandated by law or required in a judicial proceeding. In such instances, the organization must inform the data subject of the lawful basis or compelling reason for the continued processing of their personal data.

Right to Access

You have the right to reasonable access and confirm whether or not data relating to you are being processed, and you may request information about any of the following:

The type and category of your personal information processed by the organization;
Sources from which your personal information were obtained, if the data was not collected directly from you;
Purposes of processing;
Manner of processing;
Information on automated processing system, especially if the decision will be left solely based on the algorithm of such processing activity;
Names and addresses of recipients of your personal information;
Reasons for the disclosure of your personal information to recipients;
Date when your personal information were last accessed and modified;
Retention period for your personal information; and
The designation, name or identity, and address of the organization’s data protection officer (DPO).

Right To Rectification

You have the right to dispute the inaccuracy or error in your personal data and have the organization correct the same within a reasonable period of time. You also have the right to have incomplete personal data completed, including the means of providing a supplementary statement for the completion.

Note however that a request may be denied when obviously it is made with no real purpose other than to harass, cause annoyance, or hamper the delivery and performance of services of the organization.

Right to Erasure or Blocking

You have the right to request for the suspension, withdrawal, blocking, removal, or destruction of your personal data from the organization’s filing systems.

This right may be exercised upon your discovery with substantial proof of any of the following:

1. The personal data is:

a) incomplete, outdated, false, or unlawfully obtained;
b) used for an unauthorized purpose;
c) no longer necessary for the purpose/s for which they were collected; or
d) concerns private information that is prejudicial to you, subject to certain exceptional circumstance allowed under privacy law;

2. You object to the processing of your personal data and no other laws allow the processing of your personal data;
3. The processing is unlawful; or
4. The organization violated any of your rights as a data subject.

AEV shall inform, in a reasonable manner, the current and previous recipients or third parties of your request and the erasure of your personal information. Where personal data that is the subject of your request for erasure is publicly available, AEV shall take reasonable and appropriate measures to communicate with other organizations responsible for making your personal information available to the public and request them to erase copies or remove search results or links to your personal data.

Right To Data Portability

AEV assures you that you remain in full control of your data. You may obtain and electronically move, copy or transfer your data in a secure manner, for further use. This right enables the free flow of your personal information across the internet and organizations, according to your preference.

Right To Damages

You may claim compensation if you suffered damages due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal data, considering any violation of your rights and freedoms as data subject.

Right To File A Complaint

When there is a perceived violation of your rights, you may file a complaint with the National Privacy Commission (NPC). Take note that you must communicate your privacy concern with the concerned organization first and try to resolve the issue prior to escalation to NPC.

In cases where you file a complaint for violation of your rights, and for any injury suffered as a result of the processing of your personal data, the NPC may award you indemnity for the damages you sustained.

Excercise Your Rights

Who may exercise these rights?

Data Subject. You as the data subject may exercise your privacy rights.
Authorized Representative. You may also authorize another person or entity to facilitate the exercise of your rights with specific and documented authorization.
Lawful Heirs. Your lawful heirs may likewise exercise any of your rights, at any time after your death, or when you are incapacitated or incapable of exercising the same.

Do I need to pay a fee to exercise my rights?

Generally, AEV will not charge any fee to fulfill the exercise of your rights, except when the request requires reasonable fees to cover administrative costs such as printing expenses, among others.

Period to Comply with the Request

Requests shall be resolved within thirty (30) business days upon receipt of the accomplished request form. An extension of fifteen (15) business days may be given depending on the nature of the request i.e., complex or numerous. You or your authorized representative will be notified in case of extension and the reason for such.

Denial of Request

AEV may deny or limit your requests if:

Information is publicly available. In such case, the organization will point you to the publicly available information;
Your request has been previously granted,unless a reasonable period of time has passed from the previous request;
Your request will entail disproportionate effort;
When your request is made with no real purpose other than to harass, cause annoyance, or hamper the delivery and performance of service;
Your request will contrast the need to fulfill the purpose/s for which the data was obtained;
Your request will violate the organization’s compliance obligation which requires the processing of your personal data;
Your request is contrary to legitimate business purposes of the organization that is consistent with the applicable industry standard for personal
Denial or limitation is provided by any existing law, rules, and regulations; and
Your request will adversely affect the rights and freedoms of other data subjects.

When your request is denied, you will be clearly and fully informed of the reason for the limitation or denial.

Downloadable Request Forms

If you want to exercise your rights, you may download the forms applicable to your request:

Access Request Form

Erasure Request Form

Rectification Request Form

You may send the accomplished request form to:
AEV Data Protection Officer
Ayala Triangle Gardens Tower 2, Paseo de Roxas, Corner Makati Avenue Bel-Air 1209, City of Makati NCR, Fourth District Philippines

‍
aevdpo@aboitiz.com

Please use the following subject format:
(NAME OF RIGHT) – FULL NAME OF DATA SUBJECT/REQUESTOR
Example: RIGHT TO ERASURE OR BLOCKING-JUAN DELA CRUZ