CONSENT FORM

INTRODUCTION

First Philippine Realty Corporation, including its affiliates and subsidiaries (the “Company”) values the
confidentiality of personal data. This document details how the Company uses and protects your personal
data in accordance with the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR),
other issuances of National Privacy Commission (NPC) and other relevant laws of the Philippines.

Personal data refers to all types of:

1) Personal information – “any information, whether recorded in a material form or not, from which the
identity of an individual is apparent or can be reasonably and directly ascertained by the entity
holding the information, or when put together with other information would directly and certainly
identify an individual”;
2) Sensitive personal information – “personal information about an individual’s race, ethnic origin,
marital status, age, color, religious/philosophical/political affiliations, health, education genetic or
sexual life, legal proceedings, government issued identifiers and other information specifically
established by an executive order or an act of congress to be kept classified”; and
3) Privileged information – “any and all forms of information which, under the Rules of Court and other
pertinent laws, constitute privileged communication, such as, but not limited to, information which
a person authorized to practice medicine, surgery or obstetrics may have acquired in attending to
a patient in a professional capacity”.

Why we collect Personal Data?

To enable us to consider your potential applications for employment by the company and be able to
perform recruitment processes, it is important that First Philippine Realty Corporation collects, uses,
processes, stores and retains your personal data when it is reasonable and necessary.

In particular, we are retaining your information:

 To consider and evaluate your suitability for employment through screening and background
investigation;
 To communicate with you about your employment application; and
 With your permission, to inform and consider you for future job opportunities that may be of interest
to you.

What Personal Data do we collect and generate?

The following data had been collected from you during your application which contains personal and/or
sensitive personal information:

 Basic personal information such as names, addresses, telephone numbers, and other personal
contact details;
 Sensitive personal information such as marital status, age, religion, nationality, gender, dependents,
health information, education, employment history, and information issued by government agencies
peculiar to licenses, tax returns; and
 Biometric information such as full face photographs and any comparable images
Please note that you are responsible for ensuring that all such personal information you submit is accurate,
complete and up-to-date.

How do we collect, acquire or generate personal data?

We collect your data:

 when you fill-up our forms;

 when you submit to us your resume and other employment requirements;
 when you disclose your personal information through phone calls, emails, SMS or verbal
communication with First Philippine Realty Corporation personnel; and
 through third parties, such as:
o Online Job Portals / Professional Networking Sites
o Head Hunters / Executive Search Firms
o Medical Service Providers
o Universities and professional organizations
o Other affiliated companies under Lopez Group

With whom do we share personal data?

As a general rule, we are not allowed to share your data to third party except in limited circumstances as
noted below.

You authorize the company to disclose your information to accredited/affiliated third parties or
independent/non-affiliated third parties, whether local or foreign in the following circumstances:

 As necessary for the proper execution of processes related to the declared purpose;
 The use or disclosure is reasonably necessary, required or authorized by or under law

This means we might provide information to the following:

 Our partner companies, organizations, or agencies including their sub-contractors or prospective

business partners that act as our service providers and contractors, consistent to the purposes
discussed above;
 To the affiliated companies of within Lopez Group who requested specific profile suitable for their
hiring requirement;
 Law enforcement and government agencies;

However, these companies may only use such personal data for the purpose(s) disclosed in this Privacy
Policy and may not use it for any other purpose.

How do we protect personal data?

The Company strictly enforces its Privacy Policy. It has implemented technological, organizational and
physical security measures to protect personal data from loss, misuse, unauthorized modification,
unauthorized or accidental access or disclosure, alteration or destruction. The Company uses safeguards
such as the following:

 Use of secured servers and firewalls, encryption on computing devices

 Restricted access only for qualified and authorized personnel
 Strict implementation of information security policies

Where and how long do we keep personal data?

The personal data is stored in both local and off-shore facilities, such as data centers (on premise and
cloud) and document storage facilities. Personal data is retained for six (6) months from the date of last
communication, unless you request your personal data to be deleted from our systems, databases and
hard copies within reasonable requested date. Once deleted, your personal data will no longer be
searchable or included in anonymous searches and will be completely removed from all the storage
locations.

What are your rights under the Data Privacy Act?

As data subjects, you have the following rights:

 Right to be informed;
 Right to object;
 Right to Access;
 Right to Rectify or Correct erroneous data;
 Right to Erase or Block;
 Right to secure Data Portability;
 Right to be indemnified for Damages;
 Right to File a Complaint

The Company’s decisions to provide such access or consider any request for correction, erasure and
objection to process your personal data as it appears in our records are always subject to any exceptions
under applicable and relevant laws and/or the DPA, its IRR and other issuances of NPC.

Who should you contact in case of inquiry, feedback or complaints?

Should you have any inquiries, feedback on this document, and/or complaints, you may reach the Data
Protection Officer (DPO) through the following contact details:

Rhoan T. Solis
First Philippine Realty Corporation
6F Tower 3 Rockwell Business Center
Ortigas Avenue, Brgy. Ugong, Pasig City
(02) 82543068 / 82553820
dpo@fprc.com.ph

You may also lodge a complaint before the National Privacy Commission (NPC). For further details, please
refer to NPC’s website: https://privacy.gov.ph .

Consent
From time to time, it may be necessary for the Company to revise this document. Any revision made to this
document shall be communicated via posting in the Company website or via email. Any change will not be
retroactively applied and will not alter how the Company handles previously collected personal data without
obtaining your consent, unless required by law.

By signing below, you consent to the collection, processing and storage of your personal data by the
Company for the purpose(s) described in this document. Please ensure that you have completely read and
understood the terms above before signing.

____________________________ _______________________
Signature over Printed Name Date