The policy applies to the processing of personal data in the Philippines when the data subject is a citizen, resident, non-resident of the Philippines, or when the processing of personal data is being done in the Philippines.
Data subjects refer to all individuals, employees, regardless of rank and employment status, job candidates, customers, clients, contractors, suppliers, consultants who are citizens or residents of the Philippines, or when the processing of personal data is being done in the Philippines.
The NMP shall always uphold the rights of the data subjects and adhere to the general data privacy principles and lawful processing requirements as mandated in the Act.

The video and/or photos recorded by our CCTV system are used strictly for fraud prevention, investigation in relation to any verified complaint, and ensuring security and safety. All recordings are overwritten as indicated in the standard retention procedure. 
The NMP operates a CCTV system throughout its premises capable of recording videos and capturing photos for purposes of monitoring activities and ensuring security, safety and order. 

By using our website or providing us your Personal Data, you will be treated as having given your permission for our collection, use, and processing of your Personal Data, and you have accepted the policies and practices described in this Privacy Notice. If you do not allow the collection, use, and processing of your Personal Data, kindly refrain from using our website, and/or contacting us for any matter that is private in nature.
We may modify this Privacy Statement at any time. To apprise yourself of any changes in the processing and use of your personal data, please regularly review this Privacy Statement.

WHY DOES NMP COLLECT AND PROCESS YOUR PERSONAL DATA? 

The NMP collects only the Personal Data needed to effectively serve you and carry out its business operations. We may collect, use, and process your Personal Data for the following general purposes: 

• To respond to your queries, complaints, and requests; 

• To provide information about our services;

• To conduct research and analysis to improve customer experience;

• To maintain security; and

• To comply with legal, regulatory, and contractual requirements or obligations.

The use and processing of your Personal Data also depends on your transactions with us. 

If you inquire about, or avail yourself of our services, we may collect, use, or process your Personal Data to: 

• Update our records and keep your contact details and billing address up–to–date; and

• Communicate any advisories, changes, and other information relevant to your contract with us. 

If you are a vendor/supplier, a potential vendor/supplier, or a contractor, we may collect, use, or process your Personal Data to: 

• Conduct the appropriate due diligence checks;

• Valuate your proposal, including your technical, financial, and operational capacity;

• Assess the viability of your proposal and validate the status of your accreditation;

• Communicate any decision on such proposal; and

• Perform any other action as may be necessary to implement the terms and conditions of our contract. 

If you want to join our workforce, we may collect, use, or process your Personal Data to: 

• Evaluate your suitability for employment and, with a written or expressed consent, retain your Personal Data for a maximum of one (1) year for future job opportunities within NMP that may be of interest to you; 

• Communicate with you about your employment application;

• When hired, process your Personal Data as may be necessary for purposes such as, but not limited to, payroll, benefits application, allowances and refunds processing, tax processing, retirement benefits, and other purposes that demand or require processing of your Personal Data (e.g., to execute business transactions directly related and/or incidental to your job, business travels, socials, and so on);

• While employed, evaluate your performance and career development through attendance to trainings/seminars for the issuance of certificate of participation and completion;

• Upon separation, process your Personal Data for the exit interview and to prepare your final pay;

• Provide assistance to, and account for, employees in case of emergency; and

• Perform such other processing or disclosure that may be required in the course of NMP’s business or under law or regulations.

• Maintain and update your records with NMP; and

• Comply with legal, regulatory, and contractual requirements or obligations. 

If you are a visitor of NMP Central Office or Regional Component Museums, we may use, collect, or process your Personal Data to: 

• Grant access to our premises; and

• Maintain the security within our premises. 

WHAT PERSONAL DATA DOES NMP COLLECT? 

Personal Data collected may include any of the following, among others: 

• Your name; 

• Your e–mail; 

• Your other contact details; 

• Your address; 

• Your IP address; and/or 

• Any information relevant to the feedback you have provided or the request or transaction you have made. 

Further transactions with us may require the processing of your other Personal Data necessary in the conduct of research such as but not limited to the following: 

• Sensitive personal information, such as age, nationality, marital status, gender, health, education, and government–issued identification documents; and

• Indigenous/ethnic group/origin 

HOW DOES NMP COLLECT MY PERSONAL DATA? 

When you access our website and/or communicate/interact with us, NMP may collect your Personal Data and Non–Personal Data: 

Personal Data sent to us by your web browser 
Your web browser may automatically send us Personal Data, which may include your IP address and location, or Non–Personal Data, which may include the pages you access, the operating system you use, and the name and version of your web browser. These are collected to improve your browsing experience. You may want to check your web browser to know more about the Personal Data sent to us by your web browser, and to modify your web browser settings as you see fit. 

Personal Data collected by placing a cookie on your computer
We may also obtain information about you by placing a cookie on your computer. This is typically done to ease navigation through our website. Cookies that may be used are of two kinds – session cookie and persistent cookie. A session cookie is used to place on your computer a computer–generated, unique identifier whenever you access our website. It does not identify you personally and expires as soon as you close your web browser. A persistent cookie does not expire when you close your browser, and stays on your computer, unless you delete it. If you do not wish to receive cookies, you may modify your web browser settings to turn them off or delete them from your computer. If you reject our cookies, however, our website may not function properly. 

Personal Data you knowingly and voluntarily provide 
We may also process the Personal Data you knowingly and voluntarily provide when you contact us in person or through online channels. The Personal Data you provide will then be used to provide the service you requested. For instance, when you e–mail us a query, necessarily, we will collect your name and e–mail address in order to respond. 

WHERE DOES NMP STORE YOUR PERSONAL DATA? 

Your Personal Data is controlled by the NMP and is primarily stored at its principal office located at the Fine Arts Building, Taft Avenue corner P. Burgos Avenue, Ermita, Manila, 1000, Metro Manila. Additionally, Personal Data may also be stored at the Regional Component Museums you have visited. 

FOR HOW LONG DOES NMP RETAIN YOUR PERSONAL DATA? 

The NMP will retain your Personal Data for as long as necessary to fulfill the purposes outlined in this Privacy Notice and communicated to you unless a longer period is allowed or required by law. 

TO WHOM ARE YOUR PERSONAL DATA DISCLOSED? 

The NMP will not disclose your Personal Data to third parties without your consent. In such cases, your Personal Data will be used in a manner consistent with the purpose for which it was originally collected and to which you consented, and in accordance with the Data Privacy 
Act, its Implementing Rules and Regulations, and all relevant regulations and issuances on privacy and data protection. 
We may also share your Personal Data with third parties who perform services for us. Under such circumstances, we require our service providers to limit the use of the Personal Data we share with them in a manner consistent with the purpose for which it was originally collected and to which you consented, and the Data Privacy Act, its Implementing Rules and Regulations, and all relevant regulations and issuances on privacy and data protection. Our service providers will not process your Personal Data for any other purpose other than what we have agreed with them. 
We may also share your Personal Data to third parties, upon your request, when we are legally required to do so, or when we believe it is necessary to protect and/or defend our rights, property, or safety, and those of other individuals. Nevertheless, we will take all the necessary steps to protect your Personal Data.