Privacy Policy

Stellar Vacation Club recognizes and values your privacy and is committed to protecting your personal data in accordance with Republic Act 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations. This privacy policy applies to the website and all products and services offered by Stellar Vacation Club.

HOW WE COLLECT PERSONAL DATA

• Through our company websites, Social Media Accounts and Emails
• When you visit our Properties, Exhibits, Events, and other facilities
• Take part in our web surveys, sales presentation, inquiries, and other web marketing initiatives
• Become a member of our referrals and loyalty programs
• We may also collect Personal Data with our joint marketing partners and other third parties.

PERSONAL DATA WE COLLECT

The personal data we collect are information that identify you as Data Subject and throughout your journey, we collect Personal Data in accordance with law, such as:

Personal Information – refers to any information or set of information in any form that would directly identify you. These may include your name, contact number, address, email address, among others.

Sensitive Personal Information – refers to personal information which may include your nationality, marital status, age, gender, education, passport or other government identification, business information and employment information, social media accounts, among others.

Privileged Information – refers to data which are considered as privileged communication under the law. These may include any information between you and your doctor, your lawyer or your spouse.

In more limited circumstances, we may also collect:

• Members preferences, enquiries and comments and any other personalized data such as your interests, activities, hobbies, food and beverage choices, services and amenities of which you advise us or which we learn about during your visit
• Data about family members and companions, such as names and ages of children
• Electronic data such as photos or digital images, biometrics,
• Images and video and audio data via: (a) security cameras located in public areas, such as hallways and lobbies of our properties
• Web browsing data such as cookies, IP address and Device ID, Geolocation information, Internet click activities in our website
• Google analytics to facilitate interest-based advertising associated with your Google Account and other devices you use.

THIRD PARTY LINKS/SITES

We are not responsible for the privacy policies and procedures of third-party sites that may link to our websites, or may link to as part of past or present business relationships or initiatives. Please review the privacy policies of any linked sites you visit before using or providing information to any of those sites

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

HOW WE USE YOUR INFORMATION

We may use the collected information when there is lawful basis to do so. This may be based on your consent, legal obligation, public or legitimate interest. We process your information when you participate or sign up to certain activities, respond to inquiries, reviews, complaints, avail our services, promotions, enter a contract through our membership program. Fulfil employers – employee relationship obligation. Enable the company to manage its business. Comply with legal processes under applicable laws, responding to requests from public and government authorities, and enforcing our terms and conditions.

DISCLOSURE OF COLLECTED INFORMATION

Generally, we do not share or disclose your data unless there is a legal basis to do so. In transacting with our Company and availing of our services we may disclose and share your personal information to the following:

Affiliated resort owners and operators in order to provide you with services, facilitate a booking
you requested, to facilitate owners’ exchange history and utilization, or to respond to your
inquiry.
• Service providers and vendors we retain in connection with our business.
• Business partners, co-sponsors of promotions, and other third parties to provide you with services that may interest you. If you provide additional information to any of these third parties, such information will be subject to such third parties’ privacy practices.
• Message boards, reviews, blogs, and other such user-generated content facilities available to users. Any information disclosed in these areas becomes public information and you should always be careful when deciding to disclose your Personal Information. We are not responsible for privacy practices of other users including website operators to whom you provide information.
• Any competent authority, regulator, law enforcement agency or any judicial or quasi-judicial body

CHOOSING TO PROVIDE INFORMATION

Providing personal information is required to be able to provide you with our products and services we offer. You may opt not provide any personal information; however, we cannot guarantee the limits of services offered.

HOW WE PROTECT AND STORE YOUR INFORMATION

• Restricting access to your personal data only to qualified and authorized personnel who hold your data with strict confidentiality
• Educating our employees to properly handle your personal data• Requiring third parties to protect your personal data in a manner aligned to our own security standards
• Maintaining physical, technical, and organizational standards to protect your data from loss, theft, unauthorized access, disclosure, copying, use or modification
• Storing your data in secure servers and deploying physical and digital security controls

YOUR RIGHTS AND PREFERENCES UNDER THE DATA PRIVACY ACT OF 2012

We shall safeguard the confidentiality of all types of personal data it has collected, stored, shared, or used and treat them with reasonable and appropriate degree of protection.

We are keen to protect your privacy rights.

• You have the right to be informed that your personal data will be, are being or were collected and processed.
• You have the right to reasonable access, upon written requests, to your personal data that an organization collects or holds of you and the reason for such processing.
• You have the right to object if the processing of personal data involved is based on consent or on legitimate interest unless the processing is pursuant to a subpoena, contract, or a result of a legal obligation.
• You have the right to suspend, withdraw or order the blocking, removal, or destruction of your personal data.
• You have the right to claim compensation if you suffered damages due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, considering any violation of your rights and freedoms as a data subject.
• You have the right to file a complaint to the National Privacy Commission if any of your rights as a data subject was violated.
• You have the right to request for update to correct any inaccuracy or error in the data that a personal information controller holds about you.
• You have the right to obtain and electronically move, copy, or transfer your data in a secure manner upon issuing a written request.

RETENTION

We will retain your Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Statement unless a longer retention period is required or permitted by law.

The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide the Services to you.
• Whether there is a legal obligation to which we are subject to certain laws that require us to keep records of your transactions for a certain period of time before we can delete them.
• Whether retention is advisable considering our legal position such as, for statutes of limitations, litigation or regulatory investigations

USE OF SERVICES BY MINORS

The Services are not directed to individuals under the age of sixteen (16), and we request that they not provide Personal Data through the Services.

UPDATES TO THIS PRIVACY STATEMENT

The Company reserved the right to update or change sections of this Privacy Policy, any time and without prior notice, to ensure that it is consistent with industry trends, legal and regulatory requirements applicable to how your personal data is handled.

CONTACTING US

Should you have any inquiries, feedback, and/or complaints, you may reach the Data Protection Officer through the following contact details:

Data Privacy Officer
Astoria Vacation and Leisure Club, Inc.
15 J. Escriva Drive, Ortigas Business District
Pasig City, Philippines
dpo@astoria.com.ph