Student Privacy Notice - Marinduque State University

Introduction

Thank you for taking time to read our privacy statement. The Marinduque State University respects your rights to privacy and the confidentiality of your personal information, and we aim to comply with all the requirements of all relevant privacy and protection laws, particularly in accordance with Republic Act 10173, otherwise known as the Data Privacy Act of 2012.

This notice explains the purpose and legal basis for the processing of personal and sensitive personal information that MarSU collects from students like you, the measures in place to protect your data privacy and the rights that you, as data subject, may exercise in relation to such information.

Under the DPA, personal information may be processed (e.g. collected, used, stored, disclosed, etc.) with the consent of the data subject, pursuant to a contract with the data subject; when it is necessary in order for MarSU to comply with a legal obligation; to protect your vitally important interests including life and health; respond to a national emergency, public order, and safety; fulfill the functions of public authority or pursuant to the legitimate interests of the University or a third party; except where such interests are overridden by your fundamental rights.

Sensitive personal information (e.g. confidential educational records, age/birthdate, civil status, health, religious affiliation etc.) may be processed with consent or when allowed by law. Processing may also occur for medical treatment, protection of life, legal claims, or when required by government authorities.

Scope

This Privacy Notice applies to personal and sensitive information collected by the Marinduque State University from students.

Purpose of Collection

Processing of your personal information is necessary for compliance with legal obligations and to uphold the University’s mandate. This includes programs under Republic Act 10931 such as Free Higher Education (FHE) and Tertiary Education Subsidy (TES).

What MarSU Collects

MarSU collects personal and sensitive information from various sources in both physical and digital forms.

1. Upon Application for Admission and Enrollment

Student Information: name, birthdate, civil status, LRN, gender, citizenship, email, address, mobile number
Family Information: parents’ details, income, occupation, guardian data, siblings
Academic Information: school history, education background, awards

2. During Stay in the University

Academic records, attendance, medical and guidance records, disciplinary records, photos, videos, and CCTV recordings.

3. After Stay

Academic records, certifications, and identity validation data.

4. Website Usage

IP address
Date and time of connection
Browser type and version
Operating system
Pages visited
Time zone settings

Use of Personal Information

Process admission and enrollment
Provide academic services and student support
Monitor academic progress
Support accreditation and reporting
Maintain post-graduation records
Ensure website security and analytics

Sharing Your Information

As required by law
To protect institutional interests
With authorized service providers
With your consent

Requests are evaluated and require proper authorization and documentation before data is shared.

Data Storage and Retention

Data is stored in physical and digital systems and retained during enrollment and several years after graduation in accordance with institutional policies.

Security of Information

The University implements appropriate physical, technical, and organizational safeguards to protect personal data against unauthorized access, alteration, or destruction.