Privacy Commitment

The Atlantic group of companies respects and values your personal data privacy. We aim to ensure the integrity, confidentiality, security and availability of the personal data that it collects, processes, and stores in compliance with the Data Privacy Act of 2012 (The Republic Act 10173).

Privacy Notice

Collection

Atlantic group of companies collects, processes, and stores all data needed to perform its offered services. The personal information may include the following:

• Personal Identifiers such as:
  • Complete Name
  • Date of Birth
  • Age
  • Gender
  • Customer Profile Picture (if given)
  • Loyalty card details
• Addresses associated such as:
  • Home Address
  • Delivery Address
• Contact Details such as:
  • Email Address
  • Mobile Number
  • Landline Number
  • Fax Number

Data Access

As a data subject, you have the right to request access to your own personal data or to obtain confirmation on whether data relating to you are being processed. Information of the reasons listed below may also be requested:

• Contents of personal information and categories of data that were processed
• Sources from which personal data were obtained from
• Purpose of collecting data
• Manner on how data is being processed
• Information on automated processes where data will or is likely to be made as the sole basis for any decision that significantly affects or will affect the data subject
• Names and addresses of recipients of the data subject’s personal information
• Reason of disclosure of personal information
• Date when personal data was accessed or last modified
• Period for which particular categories of information will be stored
• Designation, name or identity, and address of the DPO

Data related to any other individual is not allowed to be accessed.

Usage

Atlantic Group of companies collects personal data when you manually or electronically submit to us your orders, inquiries, requests, or concerns. Should you choose not to provide any of the above personal data, we may not be able to perform our services. Specific uses may include:

• Processing payments, delivery, shipping, and returns
• Loyalty Card details
• Determining applicable taxes and other costs
• Providing newsletters, promotions, surveys, and other communications
• Evaluating and improving our products, services, and websites
• Preventing fraudulent transactions and enhancing security

Exceptions

The Data Privacy Act has outlined exceptions for the processing of personal information under Sec5 of the DPA IRR:

• Journalistic, artistic, literary or research purposes
• Information necessary to carry out the functions of public authority
• Personal information originally collected from residents of foreign jurisdictions which is being processed in the Philippines

Protection

Personal data collected may be collected via hard copy or electronic means and are stored in different ways. We employ the following measures:

• Organizational Controls

Atlantic Group of Companies only shares your personal data with third parties only if it is necessary to perform the service. Third parties may include our business partners, contractors, subcontractors and service providers. These third parties are vetted for legitimacy and are governed by contractual agreements that help ensure your confidentiality.

Atlantic Group of companies also periodically reviews the access rights given to members of its organization.

• Physical Controls

The storage of these data may be done through hard copies. Physical data is stored in locked rooms and file cabinets and is to be kept as such unless needed to be taken out for processing. Our local servers and file cabinets are placed in secure locations with 24-hour security.

• Technical Controls

Atlantic Hardware is protected by enterprise-grade protection and backups are regularly maintained. When uploading files to third parties, we ensure that these third parties are thoroughly vetted to be legitimate and safe as well as guaranteed by contractual agreements.

Retention

We reserve the right to store and retain your personal data while you are a customer as allowed by relevant laws and regulations. If retention of which is no longer allowed by you or by the applicable laws and regulations, we shall properly dispose of your physical records while digital files shall be deleted or anonymized. Once deleted, your personal data will no longer be searchable or accessible and will be completely removed from our database. Atlantic Hardware may also delete or remove your personal data when it is no longer necessary for our services or purposes.

Your rights

The data protection act of 2012 ensures that you are entitled to:

• Be informed when your personal information are being or have been processed
• Be given reasonable access upon demand
• Object processing for direct marketing, automated processing or profiling
• Rectify any inaccuracies
• Erase or request for data to destroyed
• Indemnification for any damages
• Obtain copies when processed by electronic means
• Have lawful heirs and assigns invoke the rights of the data subject

CCTV footage

Videos and screenshots of your likeness are captured inside and around our premises. Collection, Processing and Storage of all associated CCTV footage and other data are compliant with NPC Advisory No. 2020-04 (GUIDELINES ON THE USE OF CLOSED-CIRCUIT TELEVISION (CCTV) SYSTEMS). Our CCTV footage is automatically deleted after 30 days unless saved for investigation or other legitimate purposes

Inquiries and concerns

For any concerns or inquiries, please emaildpo@atlantic.ph or approach any store customer service personnel to be forwarded to the proper individual.