This Data Privacy Notice sets out our commitment, through the Property Management Office, to collect and process information in accordance with the principles and guidelines outlined in the Data Privacy Act of 2012 (“DPA”). Your personal information is requested primarily to verify your identity, protect your interests, implement security measures in compliance with the law and, in general, to enable us to provide you, your lessee or your designated occupant with the services attendant to your acquisition, ownership, lease, or possession of a Unit/Parking Space/Storage Unit. We treat all personal information you provide as confidential, and we pledge to fully comply with the requirements of the DPA.

Scope/Applicability. The following Condominium Corporations adopt the contents hereof and implement the procedures outlined in this Data Privacy Notice:

• Shang Salcedo Condominium Corporation (SSPCC)
• The St. Francis Shangri-La Place Condominium Corporation (TSFSPCC)
• One Shangri-La Place Condominium Corporation (OSPCC)
• The Rise Condominium Corporation (TRCC)
• The Shang Grand Tower Condominium Corporation (TSGTCC)
• The Enterprise Center Condominium Corporation (TECC)

What data we collect. We collect personal data including, where applicable, sensitive personal data you directly provide us through My Shang Concierge, Resident Information Sheet, and Tenant Information Sheet, as applicable. We use manual methods and computerized systems as reasonably necessary to collect, store, and process information.

How we will use your data. We will use the information you have provided us for the following purposes:
(i) to keep in touch with you in the course of your acquisition, ownership, lease, or possession of a Unit/Parking Unit/Storage Unit in the respective developments managed by the foregoing Condominium Corporations, through the e-mail address, mobile or telephone numbers you have provided, or by delivering information, letters, notices, documents or packages at the contact details you have provided;
(ii) to process transactions which may subsequently be agreed upon between yourself and your Condominium Corporation or Property Management Office (“PMO”);
(iii) to process your requests to issue certifications, including but not limited to Management Certifications and Insurance Certifications, some of which will require disclosure of your information to third parties;
(iv) to analyze, review, or improve our services; (v) to fulfill our contractual or legal obligations, and exercise our rights under any contract or law;
(vi) to facilitate direct marketing, promotional and customer management purposes, including sending you promotional communications (including without limitation e-mails and push notifications) or special offers of your Condominium Corporation, condominium developer and its affiliated companies; and,
(vii) to comply with other lawful requirements of local or national government agencies, entities and subdivisions.

Disclosure of your data. We will not indiscriminately disclose your data, and will only disclose the same: (i) to third party providers for purposes of processing your requests for issuance of certifications including but not limited to Management Certifications and Insurance Certifications.
(ii) to our officers, employees and service contractors whose functions are related to rendering assistance in providing efficient service to you as a unit owner, lessee, or resident;
(iii) to law enforcement agencies, courts, government or regulatory bodies (in whatever jurisdiction), or otherwise in response to a request for information if we believe disclosure is in accordance with, or required by any applicable law, regulation, court order or legal process;
(iv) to our advisors, which include our accountants, auditors, lawyers, other professional consultants and business contacts for the purpose of assisting us to better manage, support or develop our services and/or business and comply with our legal and regulatory obligations; (v) to any other party upon your consent or at your direction; and,
(vi) as may be permitted or required by applicable laws and regulations.

Supply of third-party information. Where you provide the personal data of third parties for purposes for any of the purposes mentioned above, you confirm that you have their consent to provide their personal data to us. We therefore recommend you show them this Data Privacy Notice.

Securing your data. We have in place reasonable technical and organizational measures to prevent unauthorized or accidental access, processing, erasure, loss or use of your personal data and to keep your personal data confidential. These measures are subject to ongoing review and monitoring.

Retention and disposal of your data. We shall retain your data only for as long as necessary for the purposes set out above. To the extent required by law, we shall take reasonable steps to destroy, or de-identify or redact, personal data in a secure manner in the disposal of your data.

Your rights. Subject to our own contractual and legal rights, you are entitled to the following rights: right of access to the personal data we hold about you, right of rectification, right to erasure, right to restrict data processing, right to object against profiling and your personal right to data portability. Whenever reasonably possible and required, we will strive to grant these rights. You may also withdraw your consent to receiving direct marketing communications, or more generally to our processing of your personal data, at any time, and you may in certain circumstances ask us to delete your personal data. However, we may not be able to continue providing services to you or perform our contractual obligations to you if you entirely withdraw your consent or ask us to delete your personal data entirely. Please note that the law requires you to exercise your rights in a reasonable and non-arbitrary manner. You may contact us using the contact information below if you would like to make a request or update your information.

All requests or notices which you may send or submit must be in writing and will be deemed duly given (i) on the date of delivery, if personally delivered; (ii) date of actual receipt, if sent by courier or mail, or (iii) on the date of confirmation of receipt, if electronically transmitted.

Direct Marketing Information. From time to time, we will use your name, e-mail address, mobile phone number, and other relevant contact information you have provided to send you via e-mails, SMS messages, telephone calls, push notifications, post, or social media (e.g., WeChat, Facebook, Viber, WhatsApp and other similar media platforms) information which we think may be of interest to you, including about our affiliates’ developments, products and services, satisfaction surveys, events, offers and promotions.

By providing the personal information requested, you are hereby giving consent to the terms and conditions of this Data Privacy Notice, which may be amended, replaced, revised, updated and/or changed from time to time without notice, and to our processing of your personal information for the purposes stated herein. You certify that you have read and understood this Data Privacy Notice and that you freely agree and consent to the use of your data and information under these terms and conditions. You likewise declare that the information provided is true, accurate, and complete.