Privacy Statement

Process Synergy Inc. (PROSYNC) ("PROSYNC", "We", “us” or “our”) respect your privacy and will keep secure and confidential all personal information and sensitive personal information (“Personal Data”) that you may provide and/or those that PROSYNC may collect from you.

This privacy statement (“Statement”) provides for the Personal Data we obtain, or which you may provide and the standards we observe in using, processing, keeping, securing and disclosing said Personal Data in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA).

While your consent may be solicited to process your Personal Data, we may also process personal data without your consent, such as when processing is allowed under Section 12 or Section 13 of the DPA.

Your Personal Data is utilized for the purposes declared on each of the following:

For other Personal Data processing activities not mentioned above, We shall provide a separate privacy notice in an appropriate format to detail the purpose in which We process your personal data. In all instances, We assure you that processing your Personal Data will strictly follow the provisions of DPA, especially the general data privacy principles of Transparency, Legitimate Purpose, and Proportionality.

We may disclose and share your Personal Data, subject to compliance with applicable laws and regulations, on a need-to-know basis, and in all cases only for legitimate purposes, as follows:

You are entitled to certain rights in relation to the Personal Data collected from you, including the right to access and correct your Personal Data being processed, object to the processing if based on consent or on legitimate interest, and to lodge a complaint before the National Privacy Commission in case of violation of your rights as data subject.

Risk refers to the potential of an incident to result in harm or danger to a data subject or organization. Risks may lead to the unauthorized collection, use, disclosure, or access to personal data. It includes risks involving the confidentiality, integrity, and availability of personal data or the risk that processing will violate the general data privacy principles and the rights of data subjects.

PROSYNC ensures that adequate physical, technical, and organizational security measures are in place to protect Personal Data’s confidentiality, integrity, and availability. However, this does not guarantee absolute protection against certain risks involving the processing of personal data, such as when systems are exposed to targeted cyberattacks, malware, ransomware, and computer viruses or when manual records are accessed without authority.

However, adequate policies are in place to ensure appropriate security incident management in line with existing NPC policies, circulars, and other issuances.

We have implemented technical, organizational, and physical measures designed to protect the confidentiality, integrity, and availability of your Personal Data and secure such data from destruction, unauthorized access, alteration, disclosure, fraudulent misuse and/or any other unlawful processing, as well as other natural and human dangers.

Should you have any questions and/or concerns regarding this Statement, PROSYNC’s use of your Personal Data, your rights in relation thereto under the Data Privacy Act of 2012, please do not hesitate to contact the PROSYNC’s Data Protection Officer at the following:

prosyncdpo@prosync.sanmiguel.com.ph
(+632) 8632-2105
2F San Miguel Properties Centre,
#7 St. Francis St., Mandaluyong City

We may update this Statement from time to time to reflect change(s) in the law and/or our internal standards. When We do so, We will notify you by posting the updated Statement in this Website for your information and reference. Prior versions of the Statement shall be retained by PROSYNC and shall be provided to data subjects upon request.The provisions of this Statement – 3rd version, are effective this 1st day of March 2024, until revoked or amended by PROSYNC.

Link to go back to the main page of the Privacy Statement
PROSYNC Website visitors

Personal Data We Collect and Process

When you navigate through and interact with the Website, depending on your settings, We may use automatic data collection technologies (e.g., cookies, web beacons, small data text files or similar technologies) to obtain certain information about your equipment, browsing actions, and patterns, such as:

Details of your visits to the Website (e.g., traffic data, location data, logs, and other communication data and the resources that you access and use on the Website).
Information about your computer/device and internet connection, as well as IP address, operating system, and browser type (collectively, “Collected Data”).

Our Website also allows you to directly reach us for career openings and/or business engagement inquiries on our services in which We ask you to provide the following Personal Data to identify you, and enable PROSYNC to act on your queries:

Full Name
Email Address
Contact Details (i.e., telephone number, mobile number, e-mail address)
Organization and Designation

Any additional information that you may provide through your correspondence(s) with PROSYNC through email shall also be considered and treated as Personal Data.

What We Do with Personal Data and our Purpose for Processing

The Collected Data are mostly statistical data but may include other Personal Data, which may be used to analyze our web traffic data, help us determine our website's engagement, and improve our website services and features. This service uses cookies.

For the Collected Data, We use them to help us improve our Website and to deliver a better and more personalized service by enabling us to:

Estimate our audience size and usage patterns;
Store information about your preferences, allowing us to customize our Website according to your individual interests;
Speed up your searches; and
Recognize you when you return to our Website.

For inquiries on career openings, We will use your provided Personal Data to get in touch with you through any of the contact information submitted.

For business engagement inquiries, all information gathered will be endorsed to our Account Management Group (AMG). Contact details provided will be used to reach you for scoping discussions based on your needs.

Retention of Personal Data and Collected Data

PROSYNC and/or its duly authorized third party shall retain the Personal Data and Collected Data for a maximum period of five (5) years counted from the date you provide it to PROSYNC or when they were collected, respectively.

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications, including advertisements, on the Website are served by third-parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies (alone or in conjunction with web beacons or other tracking technologies) to collect information about you when you use our Website. The information they collect may be associated with your Personal Data or they may collect information, including Personal Data, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

Link to go back to the main page of the Privacy Statement

PROSYNC Applicants

Personal Data We Collect and Process

RECRUITMENT: When you submit your résumé, curriculum vitae or biodata to PROSYNC in respect of a job vacancy, at a minimum, Personal Data will include:

Your name and contact details, including address and telephone/mobile number(s);
Education and relevant training; and
Previous employment and relevant experience

Additional information may also be required subject to the nature of the position being applied for. We may obtain such information from third parties (e.g., information from your referrer, public records, background check agencies, recruitment agencies, etc.) regarding the qualifications, experience, eligibility and/or other information for recruitment-related purposes. All such information will be kept strictly confidential and used for assessing your application only.

The applicant is responsible for ensuring all personal data that he/she will provide is accurate and complete.

PRE-EMPLOYMENT: If your application was successful, you will be provided with a list of requirements needed based on the PRE-EMPLOYMENT REQUIREMENTS form.

To the extent that you have provided (or will provide) personal data about your family members, spouse and/or other dependents, you confirm that you have explained to them that their personal data will be provided to, and processed by us, and you represent and warrant that you have obtained their consent to the processing (including disclosure and transfer) of their Personal Data to Process Synergy Inc., its parent company, SMITS Inc., and with San Miguel Corporation, its subsidiaries and affiliates.

In respect of minors (i.e. individuals under 18 years of age) or individuals not legally competent to give consent, you confirm that they have appointed you to act for them, to consent on their behalf to the processing (including disclosure and transfer) of their personal data in accordance with this Statement.

What We Do with Personal Data and our Purpose for Processing

RECRUITMENT: We will process your personal data including your sensitive personal information in order to:

Communicate with you;
Assess your suitability for the position being applied for or other available vacant positions;
Verification of credentials and/or experience; and/or
Perform security vetting, credit, and/or integrity checking.

PRE-EMPLOYMENT: Your employment with the Company is contingent upon your submission of pre-employment and medical requirements as provided for by existing laws and regulations. Failure to comply may cause severance of your employment ties with the company.

Retention of Personal Data and Collected Data

PROSYNC shall retain the personal data of successful applicants for the duration of their employment by PROSYNC. The personal data of unsuccessful applicants shall be retained in our Candidate Information Database (CID) and e-mail account for future recruitment purposes for a period of ten (10) years, while copies of the submitted documents will be retained for one (1) year.

Disclosure and Sharing of Personal Data and Collected Data

We may disclose and share your Personal Data, subject to compliance with applicable laws and regulations, on a need-to-know basis, and in all cases only for legitimate business purposes to our parent company, SMITS Inc., with San Miguel Corporation, its subsidiaries and affiliates, as appropriate to evaluate your application for employment, including conducting reference checks and interviews.

The personal data so provided by the applicant may be shared, at the time of recruitment or after employment has commenced, to persons within PROSYNC and its clients. Personal data would be shared with the corresponding client/s since it is involved in the assessment of the applicant's suitability for the position applied for and/or other positions.

Accessing And Correcting Your Personal Data

You may send us an e-mail at Prosync.recruitment@prosync.sanmiguel.com.ph to request access to, correct and/or delete any Personal Data that you have provided to us. Please be advised, however, that We cannot delete your Personal Data without restricting or removing our ability to effectively process your employment application. We may not accommodate a request to correct and/or delete Personal Data if We believe that the same would violate any law or legal requirement or cause the Personal Data to be incorrect.

Deletion and destruction

Physical records shall be disposed of through shredding, while digital files shall be permanently deleted from the system. In all instances, our manner of disposal shall ensure that the personal information shall no longer be retrieved, processed, or accessed by unauthorized persons.

Link to go back to the main page of the Privacy Statement

PROSYNC employees

Personal Data We Collect and Process

In the course of your employment in PROSYNC, your Personal Data including your family members, as appropriate, will be collected in an ongoing basis by Human Resource & Admin Shared Services (HRASS) through any secured and efficient means. Processing will be in adherence to the principles of transparency, legitimate purpose and proportionality.

What We Do with Personal Data and our Purpose for Processing

Personal data will be processed for purposes related to your employment with us, including the following:

Personnel administration
Employee engagement activities
Employee recognition and welfare programs
Performance management
Training opportunities
Career development
Salary, compensation and company/ statutory benefits administration
Retirement benefits
Communication
Medical benefits
Insurance benefits
Issuance of personnel certifications
For compliance with legal requirements

All such information will be kept strictly confidential, and will be used only for the declared purpose.

Retention of Personal Data and Collected Data

We store files containing personal information in our computers, servers and filing cabinets, which are kept in a secure environment. We may also store your personal information with cloud-based, third-party data storage providers. We shall ensure that proper measures are adopted to protect your information.

PROSYNC retains certain Personal Data of separated employees and such will be retained for no longer than fifteen (15) years after the cessation of their employment. Such data are required for any residual employment-related activities of the former employee including, but not limited to:

The provision for job/background references;
Processing applications for re-employment;
Matters relating to retirement and/or separation benefits;
Allowing PROSYNC to fulfill contractual or statutory obligations; and
Allowing PROSYNC to exercise or defend legal claims.

Other categories of data may be kept longer when its retention period is determined by other relevant laws and regulations.

For other data processing conducted by HRASS where Personal Data was processed such as employee engagements and other similar activities, retention period will be based on the policy set specific to its declared purpose which shall not be longer than one (1) year starting from the end of the engagement.

Disclosure and Sharing of Personal Data and Collected Data

Personal data may be transferred to internal departments, inter-company, and/or to other third parties as deemed necessary by PROSYNC for the purposes of which the data are collected.

Accessing and Correcting Your Personal Data

CURRENT EMPLOYEES: The Employee Self-Service (ESS) tool is a system where you can access, copy, download and update your Personal Data with PROSYNC. For requests on other Personal Data held by us but not available in ESS, you may contact HRASS through the email address: hroperationsmnl@prosync.sanmiguel.com.ph.

SEPARATED EMPLOYEES: For access to Personal Data processed, you may contact HRASS through the email address:

hroperationsmnl@prosync.sanmiguel.com.ph

For employment verification, you may provide a consent letter to HRASS to allow third-party validation of your employment details. You may contact HRASS through the email address: hroperationsmnl@prosync.sanmiguel.com.ph

Deletion and Destruction

Link to go back to the main page of the Privacy Statement

PROSYNC CCTV monitoring

Personal Data We Collect and Process

PROSYNC has installed and operates a Closed-Circuit Television (CCTV) system at its premises located at the following locations:

2F San Miguel Properties Centre, #7 St. Francis St., Mandaluyong City, Philippines
G/F San Miguel Foods Inc. Head Office 100 E. Rodriguez Jr. Ave., Pasig City, Philippines
19F IBM Plaza Bldg., Eastwood, Quezon City, Philippines

CCTV Notices that briefly describe the CCTV system processing will be prominently placed in various spots in the premises.

The cameras operate full time (24 hours a day, 7 days a week). The placement or siting of CCTV cameras shall not unreasonably intrude on the privacy of individuals and do not infringe on restricted areas (i.e. toilets/restrooms, lactation or breastfeeding rooms, and other similar places).

What We Do with Personal Data and our Purpose for Processing

The collection, use, disclosure, storage and other processing of personal data by the CCTV system is for purposes of protecting of the security of our offices, equipment, networks, systems and providing and managing a safe environment for our customers, visitors, employees and other individuals, including without limitation:

Deterring crime and anti-social behavior;
Assisting in the detection, investigation, and prosecution of offenses;
For dispute-resolution purposes where there is a dispute as to facts and the recordings may be capable of resolving that dispute;
For the taking and defense of litigation;
The CCTV system is not used for purposes other than those described above.

The CCTV System is used as a complement to other security measures and enhances other access control and physical intrusion prevention systems within our premises.

Access, Disclosure, Retention and Sharing of Personal Data and Collected Data

Footage captured and recorded is accessible only to our Safety and Security Team. All persons with access to the CCTV System are under binding confidentiality commitments.

You may request access to CCTV footage by submitting a formal request in writing, with sufficient details to identify the section of footage directly to HRASS through the email address: hroperationsmnl@prosync.sanmiguel.com.ph

We may also require presentation and/or submission of supporting documents only to the extent necessary to confirm your identity.

Retention Period for CCTV recordings are stored for a period of not more than one (1) year, except that they may be kept for a longer duration in certain instances based on our CCTV Policy.

Deletion and destruction

CCTV footages beyond the retention period shall be permanently deleted from the system and shall ensure that personal information shall no longer be retrieved, processed, or accessed by unauthorized persons.

Data Privacy Statement