Third Party Transfer

We have partners that help provide you with better services. We may share or disclose your personal data with them for essential purposes. Our partners execute agreements with us to ensure that they protect your personal data as well. Here are who we share your information with:

1. Metro Pacific Tollways Corporation (MPTC), its subsidiaries and affiliates, or other companies controlled by or is under common control with MPTC. (1) MPT Mobility Corporation (MPTM) to manage, develop and maintain our information technology systems as well as provide customer support as a contact center through it’s One Hub team;

   In case of reorganization, sale of all or any portion of assets, merger, or acquisition by another entity, your personal data may be transferred to the successor entity. In the event that AACI’s business operations cease or enter bankruptcy, your personal data shall become an asset to be transferred or acquired by a third party. You acknowledge that such transfers may occur, and that the transferee may decline to honor the commitments made in this Privacy Notice.

2. Service Providers. For example, your personal data may be shared to our third party roadside assistance providers such as but not limited to towing providers, car rental providers, ambulance providers to avail our services.

   We may share information to our trusted service providers, which may include limited access to essential personal data, for the purposes of enhancing/testing the security, further analyzing information, conceptualizing and/or showing you advertising campaigns that may be relevant or suited to your preferences and promotion activities you may participate in and may unsubscribe to at any time.

3. Government authorities. In exceptional circumstances, we may be required to disclose personal data, such as when there are grounds to believe that the disclosure is necessary to prevent a threat to life or health, to investigate or remedy potential or actual violations, to protect the rights, property, and safety of others, or for law enforcement purposes, or for fulfillment of legal and regulatory requirements and requests.

Retention and Disposal

Whatever personal data provided by you or pertaining to you shall only be retained for as long as necessary:

1. For the fulfillment of the declared, specified, and legitimate purpose, or when the processing relevant to the purpose has been terminated;
2. For the establishment, exercise, or defense of legal claims; or
3. For legitimate business purposes, which must be consistent with standards followed by the applicable industry or approved by the appropriate government agency.

We shall cease to retain your personal data or remove the means by which the data can be associated with you as soon as it is reasonable to assume that such retention no longer serves the purposes for which it was collected and is no longer necessary for any legal or business purpose.

We have a variety of obligations to retain the personal data that you provide to us, such as, but not limited to, ensuring that transactions can be appropriately processed, settled, or charged-back, where applicable, to help identify fraud and to comply with other laws and rules that apply to us and to our service providers.

Generally, your personal data is retained not longer than ten (10) years unless otherwise necessary for the specified purposes or legal obligation. When no longer necessary, it shall be disposed of or discarded in a secure manner that would prevent further processing, unauthorized access, or disclosure to any other party.

What are your rights as a data subject?

Under Section 16 of the Data Privacy Act of 2012, your rights as a data subject are as follows:

1. Right to be Informed
   You have the right to be informed whether your personal data shall be, are being, or have been processed, including the existence of automated decision-making and profiling.
2. Right to Access
   You have a right to be given access to specific kinds of information identified in the Data Privacy Act upon reasonable demand.
   
   You may request information about your personal data which we have collected or inquire about the ways in which your personal data may have been used, disclosed, stored, or processed by us within the past year. To facilitate processing of your request, it may be necessary for us to request further information relating to your request.
   
   We reserve the right to charge a reasonable administrative fee for the retrieval of your personal data records. In any case, you shall be informed of the fee before any such request is processed.
   
   We will respond to your request as soon as reasonably possible. If we are unable to provide you with any personal data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the applicable data protection laws).
3. Right to Object
   You shall have the right to object to the processing of your personal data where such processing is based on consent or legitimate interest, including processing for direct marketing, automated processing or profiling. You shall also be notified and be given an opportunity to withhold consent to the processing in case of changes or any amendment to the information supplied or declared to the data subject.
4. Right to Rectification
   You have the right to dispute the inaccuracy or error in your personal data and have us correct the same within a reasonable period of time, unless the request is vexatious or otherwise unreasonable.
   
   You may change certain personal data by sending an email to our customer support team at [email protected]. We may ask for additional identification for verification purposes when you request to correct your personal data for security purposes.
5. Right to File a Complaint
   If you feel that your personal data has been misused, maliciously disclosed, or improperly disposed, or that any of your data privacy rights have been violated, you have a right to file a complaint.
6. Right to Erasure or Blocking
   You shall have the right to suspend, withdraw or order the blocking, removal, or destruction of your personal data from our system.
7. Right to Damages
   Upon presentation of a valid decision, we recognize your right to be indemnified for actual and verifiable damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of Personal Information, taking into account any violation of your rights and freedoms as data subject.
8. Right to Data Portability
   As a data subject, you have the right to obtain from us a copy of your personal data and/or have the same transmitted from to another personal information controller (PIC), in an electronic or structured format that is commonly used.
   
   

Updates or Changes to the Privacy Notice

We reserve the right to update or revise this privacy notice at any time and as required by latest amendments to the Data Privacy Act of 2012, its Implementing Rules and Regulations, issuances of the National Privacy Commission, or when there are improvements and changes to the collection, processing, sharing or disclosure, retention, and disposal of your personal data. Previous versions of the privacy notice will be retained and provided to data subjects upon request.