The Data Privacy Act 2012 of the Philippines (hereinafter referred to as the “Act”) regulates the processing of personal data by any natural and juridical person in the government or private sector and applies to RR Donnelley Philippines Inc. as a Personal Information Controller. The regulation is intended to strengthen the protection of personal data for individuals. For the purpose of this notice, terms used herein shall have the meanings ascribed to them in the Act. This Notice serves to inform you that we may process your personal data.

“Personal data” is the data that can be used to identify a natural person. Examples of personal data include your name, address, contact details, education background, employment history, references, and results of employment checks.

In accordance with Data Privacy Act of 2012, personal data are classified as follows:

• Personal Information - refers to any information, whether recorded in a material form or not, that directly ascertains the identity of an individual. This includes your address and contact information.
• Sensitive Personal Information - includes your age, date of birth, marital status, social security and other government identification numbers, policy information, health/medical and financial information.
• Privileged Information - is any and all forms of information which, under the Rules of Court and other pertinent laws, constitute privileged communication, such as, but not limited to, information which a person authorized to practice medicine, surgery or obstetrics may have acquired in attending to a patient in a professional capacity.

We collect personal data about you and, where required, also about other persons, such as your family members. The purposes for collecting such personal data are set out below.

Your provision of personal data is voluntary. However, please recognize that if you choose not to provide us the personal data we require, it may not be possible for us to process your job application and continue the recruitment process.

If you provide the personal data of anyone other than yourself (such as your family members and next-of-kin), you warrant that you have informed him/her of the purposes for which we require his/her personal data and that he/she has consented to your disclosure of his/her personal data to us for those purposes.

By providing us with personal data, you agree to the terms of this policy and you consent for yourself and on behalf of such other persons to our collection, use, and disclosure of personal data on these terms. You must ensure that all personal data that you provide is true, accurate, and complete and promptly inform us of any changes to the personal data.

We collect personal data from you, and use such personal data for recruitment and processing of job applications.

Due to the global nature of RRD, your personal data may be made accessible to RRD related entities and they may also collect, use, and disclose your personal data for these purposes.

Purpose of data collection includes the following:

From time to time, the personal data you have provided may need to be transferred to locations outside the Philippines in order to achieve any of the purposes described above. The terms of this privacy notice shall continue to apply to the personal data so transferred in order for such personal data to be protected to a standard comparable to the protection under the Data Protection Act of the Philippines. You acknowledge the transfer of your personal data outside the Philippines on these terms.

To achieve the purpose stated above, RRD may share and disclose the personal data collected from you to the following third parties:

• RRD related entities
• RRD’s service providers, for example third party vendors that provide data processing or management services
• RRD’s clients
• Regulatory and statutory authorities or public agencies for the purpose of complying with their respective requirements, policies, and directives.

Processing of your personal data exposes you to financial, legal, regulatory, or reputational risks that may result from the unauthorized processing or disclosure of personal data. Thus, RRD is committed to protecting the privacy of all personal data provided. RRD maintains physical, technical, and organizational safeguards to protect your personal data against loss, theft, unauthorized access, disclosure, copying, use, or modification. RRD limits access to those who have a business need to know. RRD is also responsible for all personal data in our possession, including information transferred to third parties performing services on our behalf. All such persons, wherever they are located, are required by us to protect the confidentiality and privacy of your personal data in a manner consistent with our privacy policies and practices.

RRD retains your personal data in accordance with the data retention policy unless withdrawn in writing, or withheld due to changes in the information provided

In accordance with 2012 Data Privacy Act of the Philippines, you, as a data subject, have the following rights, subject to the limitations under the Data Privacy Act and other applicable laws:

• Right to be informed – you have the right to be informed whether your personal data is being, or have been processed, including the existence of automated decision-making and profiling.
• Right to object - you have the right to object to the processing of your personal data, including processing for direct marketing, automated processing, or profiling.
• Right to access – you have the right to reasonable access, upon written request, the contents of your personal data that were processed and the manner by which these were processed; the sources from which these were obtained; the recipients and reasons for disclosure, if any; date when your information was last modified; and information on automated processes where your information will be made as the sole basis for any decision that may significantly affect you.
• Right to rectify erroneous data – you have the right to correct any error in the personal data and, if warranted, request immediate rectification.
• Right to erase or block – you have, based on reasonable grounds, the right to suspend, withdraw or order the blocking, removal or destruction of your personal data from RRD's filing system, without prejudice to RRD continuing to process personal data for commercial, operational, legal and regulatory purposes.
• Right to secure data portability - where personal data is processed by electronic means and in a structured and commonly used format, you have the right to obtain from RRD a copy of such data in an electronic or structured format that is commonly used and allows your further use.
• Right to be indemnified for damages – you shall be indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, taking into account any violation of your rights and freedoms as data subject
• Right to file a complaint – you may file a complaint or exercise your rights above by reaching out to us through the contact details provided below.

You may request correction and/or changes to personal data by reaching out to us through the contact details provided below. We may be prevented by law from complying with your request for access to or correction of personal data. We may also decline your request if the law permits us to do so, or if we no longer have records of your personal data.

If you wish to withdraw consent to our collection, use, and disclosure of personal data for any purpose, please contact Human Resources at the contact details found in this document. The exercise of this right is subject to the limitations under the Data Privacy Act and other applicable laws.

Please direct any queries or requests relating to your personal data to HR Operations Manila at [email protected]

For any other general queries relating to Data Privacy you may write to the Data Protection Officer - Philippines at [email protected]

In order for us to process your personal data (including personal information and sensitive personal information) in relation to your Job Application (for potential employees) with RR Donnelley Philippines Inc., we require your consent.

To comply with the Data Privacy Act of 2012 we must tell you how we use this data and ask for your permission.

We are required by law to ask for your permission to record/store your personal data. These details may contain your personal and sensitive information. The record of your personal data will be stored in RRD systems accessed by the employees of RRD. Paper copies of your data may also be stored securely with the HR Operations.

If you give consent below, you are agreeing that RRD may process (including record/store) your personal data (including personal information and sensitive personal information) for the purposes and in the manner detailed for potential employees, and, if hired, for the purposes and in the manner detailed for employees, as well, as specified in the Data Privacy Notice.

Additional Permission to share your data with Service providers, Clients and other RRD related entities

All personal data (including personal information and sensitive personal information) you share with us shall be treated confidentially. If you give consent below, you are agreeing that RRD may share your personal data (including personal information and sensitive personal information) with Service providers, Clients, and other RRD related entities so that they can perform their processes as stated in the Data Privacy Notice, for potential employees and, if hired, for employees, as well.

Additional Permission to process (including record/store) your data, if your current application is unsuccessful

If your application is unsuccessful, RRD may retain and use the information which you provided for the period below, depending on the receipt of your curriculum vitae and/or application for purposes of considering and contacting you in connection with ongoing recruitment opportunities:

If you give your consent below, you are agreeing that RRD may process (including record/store) your personal data in conjunction with the further recruitment and employment purposes within the period specified. In order to maximize your opportunities to work with RRD, you are encouraged to keep the information provided to us up-to-date at all times. You are responsible for ensuring that the personal data is correct and true.