Privacy Policy

1. WHO WE ARE

Personal Information Controller / Data Controller

For purposes of the Philippine Data Privacy Act of 2012, PAMS acts as the Personal Information Controller (PIC) for personal information that it collects and processes for its own purposes.

For purposes of the European Union General Data Protection Regulation (“GDPR”), where the GDPR applies, PAMS acts as the Data Controller for personal data processed for its own purposes.

For privacy-related questions, requests or complaints concerning the processing of your personal information by PAMS, you may contact us using the details above.

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal information collected:

• through the PAMS website;
• through contact or inquiry forms;
• when you communicate with PAMS by email;
• when you request information concerning our services;
• when you engage PAMS for professional services;
• when you communicate with PAMS in connection with an existing or potential business relationship; and
• through normal website operation, security monitoring and technical logs.

This Privacy Policy does not apply to third-party websites, applications or services that may be accessible through links from our website. Those third parties are responsible for their own privacy practices.

3. PERSONAL INFORMATION WE MAY COLLECT

Depending on how you interact with PAMS, we may collect the following categories of personal information.

3.1 Information You Provide Directly

This may include:

• name;
• company or organization name;
• business position or title;
• email address;
• telephone or mobile number;
• business address;
• country or location;
• information contained in your inquiry or correspondence;
• information relating to a requested survey, inspection, audit, consultancy or other professional service;
• information contained in documents that you voluntarily provide to us; and
• other information that you voluntarily submit to PAMS.

We only request information that is reasonably relevant to the purpose for which it is collected.

3.2 Technical and Security Information

When you visit our website, certain technical information may be automatically processed, including:

• IP address;
• browser type and version;
• operating system;
• device type;
• referring website;
• requested pages or resources;
• date and time of requests;
• HTTP request information;
• response status and error information;
• security and diagnostic information; and
• other information generated by normal operation of web servers, security systems and website infrastructure.

This information may be processed for website delivery, security, abuse prevention, system administration, troubleshooting and protection of the website and its users.

4. PURPOSES OF PROCESSING

PAMS may process personal information for the following purposes:

4.1 Responding to Inquiries

We may use information you provide to:

• respond to inquiries;
• communicate with you;
• provide requested information;
• prepare quotations or proposals;
• arrange meetings or professional services; and
• maintain business communications.

4.2 Providing Professional Services

Where you engage PAMS, information may be processed as necessary to:

• provide marine surveying services;
• provide technical consultancy;
• conduct inspections, audits or assessments;
• prepare reports and documentation;
• communicate with clients and relevant representatives;
• coordinate professional assignments; and
• fulfill contractual and professional obligations.

4.3 Website Operation

We may process technical information to:

• operate and maintain the website;
• monitor availability;
• diagnose technical problems;
• maintain website functionality;
• maintain website security; and
• protect the website against malicious or unauthorized activity.

4.4 Security and Abuse Prevention

Technical information, including IP addresses, request information and security logs, may be processed to:

• detect malicious activity;
• investigate suspicious requests;
• prevent unauthorized access;
• protect our systems and website;
• identify automated attacks, vulnerability scanning or abuse; and
• maintain the integrity and security of our information systems.

4.5 Legal and Regulatory Compliance

We may process and retain information where necessary to:

• comply with applicable laws and regulations;
• respond to lawful requests from public authorities;
• establish, exercise or defend legal claims;
• maintain appropriate business records; and
• protect our rights, property and legitimate interests.

5. LEGAL BASIS FOR PROCESSING

Where the GDPR or another law requiring a defined legal basis applies, PAMS may rely on one or more of the following legal bases:

Consent

Where processing is based on consent, you may withdraw your consent at any time, subject to legal limitations and the consequences of withdrawal.

Contract

Processing may be necessary to perform a contract with you or to take steps at your request before entering into a contract.

Legal Obligation

Processing may be necessary to comply with a legal or regulatory obligation.

Legitimate Interests

PAMS may process information where necessary for legitimate business interests, including:

• website security;
• prevention of fraud and abuse;
• information-security monitoring;
• business administration;
• maintaining client relationships;
• responding to business inquiries;
• maintaining and improving our website; and
• establishing or defending legal claims.

Where legitimate interests are relied upon, PAMS will consider the rights and interests of the individual concerned.

Vital Interests or Public Interest

Where applicable, processing may also be carried out where necessary to protect vital interests or where permitted or required by applicable law for a public-interest purpose.

6. PHILIPPINE DATA PRIVACY ACT

PAMS processes personal information in accordance with applicable provisions of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

PAMS follows the principles of:

• transparency;
• legitimate purpose; and
• proportionality.

We seek to collect only information that is reasonably necessary and relevant for the purposes for which it is processed.

We will not process personal information in a manner incompatible with the purposes communicated to the individual, except where otherwise permitted or required by applicable law.

7. DISCLOSURE OF PERSONAL INFORMATION

PAMS does not sell personal information as a business activity.

Personal information may nevertheless be disclosed where reasonably necessary for the purposes described in this Privacy Policy.

Recipients may include:

• website hosting and infrastructure providers;
• website security and content-delivery providers;
• information-technology service providers;
• email and communications service providers;
• professional advisers;
• auditors and consultants;
• legal advisers;
• insurers where relevant;
• government authorities where legally required; and
• other service providers acting on behalf of PAMS.

Where third parties process personal information for PAMS, we seek to require appropriate confidentiality, security and data-protection safeguards consistent with applicable law.

We do not authorize service providers to use personal information for unrelated purposes except where permitted by applicable law or otherwise authorized.

8. WEBSITE SECURITY AND CLOUD INFRASTRUCTURE

PAMS uses technical and organizational measures designed to protect its website and information systems.

These measures may include:

• access controls;
• security monitoring;
• network protection;
• web application security;
• firewall and security controls;
• logging and monitoring;
• malware and abuse detection;
• vulnerability protection; and
• appropriate administrative and technical safeguards.

Website security systems may process technical information such as IP addresses, request paths, HTTP methods, user-agent information, timestamps, response codes and security events.

Security-related information may be retained for as long as reasonably necessary to investigate incidents, protect systems, maintain security records, comply with legal requirements and improve security.

No method of transmission or electronic storage can be guaranteed to be completely secure. However, PAMS takes reasonable measures appropriate to the nature of the information and the risks involved.

9. COOKIES AND SIMILAR TECHNOLOGIES

The PAMS website may use cookies and similar technologies that are necessary for website functionality, security and reliable operation.

These technologies may be used for:

• essential website functions;
• maintaining necessary website functionality;
• security;
• fraud and abuse prevention; and
• technical operation of website infrastructure.

PAMS does not currently use Google Analytics or other third-party behavioral analytics on this website.

PAMS does not intentionally use cookies for cross-site behavioral advertising or targeted advertising on this website.

Where non-essential cookies or similar technologies are introduced in the future and consent is required by applicable law, PAMS will provide an appropriate notice and consent mechanism where required.

You may also control cookies through your browser settings. Blocking necessary cookies or technologies may affect website functionality.

10. ANALYTICS AND ADVERTISING

PAMS does not currently use Google Analytics, Google Analytics 4, or another third-party behavioral analytics platform on the main website.

PAMS does not currently use the website to create individual visitor profiles for advertising purposes.

PAMS does not intentionally collect personal information through advertising tracking technologies or sell visitor information to advertising companies or data brokers.

Technical information processed by website hosting, security and content-delivery infrastructure may still be generated as part of normal website operation and security. Such information is used for legitimate technical, operational and security purposes rather than behavioral advertising.

11. MARKETING COMMUNICATIONS

PAMS does not operate a consumer advertising business.

If PAMS sends business or professional communications, recipients may request that such communications stop.

You may contact us at:

[email protected]

PAMS will respect applicable legal requirements concerning direct marketing and objections to direct marketing.

12. RETENTION OF PERSONAL INFORMATION

PAMS retains personal information only for as long as reasonably necessary for the purpose for which it was collected, unless a longer period is required or permitted by law. Retention periods may vary according to the type and purpose of information.

As a general approach:

• Website inquiries: retained for as long as reasonably necessary to respond to and administer the inquiry and related business communications.
• Client and contractual records: retained for the duration of the business relationship and thereafter for the period necessary for legal, regulatory, accounting, professional and dispute-resolution purposes.
• Technical and security logs: retained for a limited period appropriate to security, troubleshooting, monitoring and legal requirements.
• Consent and privacy records: retained for as long as necessary to demonstrate compliance with applicable privacy requirements.
• Marketing preferences: retained as necessary to respect opt-out and suppression requests.

When information is no longer required, PAMS will take reasonable steps to securely delete, anonymize or otherwise dispose of it, subject to applicable legal or regulatory retention requirements.

13. INTERNATIONAL DATA TRANSFERS

Some service providers used by PAMS may process information in countries other than the Philippines.

Where personal information is transferred internationally, PAMS will take reasonable measures required by applicable law to protect the information and ensure that appropriate safeguards are in place.

Where the GDPR applies, international transfers will be made using an applicable lawful transfer mechanism, where required.

Your personal information will not be transferred merely because it is technically possible to do so; transfers are made in connection with legitimate business, technical, security or service-provider requirements.

14. AUTOMATED DECISION-MAKING AND PROFILING

PAMS does not currently use personal information for automated decision-making that produces legal or similarly significant effects on individuals.

PAMS also does not currently use website personal information to create profiles for decisions concerning individuals.

If this practice changes, PAMS will update this Privacy Policy and provide any additional information or rights required by applicable law.

15. SENSITIVE PERSONAL INFORMATION

PAMS does not intentionally request sensitive personal information through its public website unless such information is reasonably necessary for a specific legitimate purpose and processing is permitted by applicable law.

You should not submit sensitive personal information through ordinary website forms unless PAMS specifically requests it for a legitimate professional or legal purpose.

Where sensitive personal information is processed, PAMS will apply appropriate safeguards and processing restrictions required by applicable law.

16. YOUR RIGHTS UNDER PHILIPPINE LAW

Subject to applicable law and any lawful limitations, data subjects may have rights including:

• the right to be informed;
• the right to access personal information;
• the right to correct inaccurate or incomplete information;
• the right to object to certain processing;
• the right to request erasure or blocking where legally applicable;
• the right to data portability where applicable;
• the right to withdraw consent where processing is based on consent;
• the right to damages where provided by law; and
• the right to lodge a complaint with the National Privacy Commission.

The National Privacy Commission recognizes these rights under the Data Privacy Act framework.

To exercise a privacy right, contact:

[email protected]

PAMS may need to verify the identity of the requester before providing personal information or processing certain requests.

17. YOUR RIGHTS UNDER THE GDPR

Where the GDPR applies, you may have the following rights, subject to applicable legal conditions and limitations:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to data portability;
• right to object to processing;
• right to object to direct marketing;
• right to withdraw consent where consent is the legal basis;
• rights relating to automated decision-making where applicable; and
• right to lodge a complaint with a competent supervisory authority.

The GDPR requires organizations to provide clear information about purposes, categories of data, legal bases, recipients, retention, international transfers and data-subject rights.

Requests may be submitted to:

[email protected]

18. CHILDREN'S PRIVACY

PAMS' website and professional services are not directed to children.

PAMS does not knowingly seek to collect personal information from children through the website.

If a parent or legal guardian believes that a child has provided personal information to PAMS without appropriate authorization, please contact:

[email protected]

If PAMS determines that information was collected contrary to applicable law, reasonable steps will be taken to address the matter.

19. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites.

PAMS does not control the privacy practices, security, content or policies of third-party websites.

We recommend reviewing the privacy policy of each third-party website before providing personal information.

20. DATA SECURITY INCIDENTS

If PAMS becomes aware of a personal-data security incident, we will assess and respond to it in accordance with applicable law and our information-security procedures.

Where notification to affected individuals, regulatory authorities or other parties is required by law, PAMS will provide the required notification within the applicable timeframes.

21. DATA SHARING AND SERVICE PROVIDERS

PAMS may use specialized third-party providers for website hosting, security, content delivery, email, information technology and related technical services.

Such providers may process technical or personal information on behalf of PAMS where necessary to provide their services.

PAMS seeks to ensure that appropriate contractual, technical and organizational safeguards are applied to personal information processed by service providers.

22. NO SALE OR BEHAVIORAL ADVERTISING

PAMS does not operate by selling personal information.

We do not sell names, email addresses, telephone numbers, client inquiries or other personal information to data brokers or advertising companies.

PAMS does not currently use the main website for cross-context behavioral advertising or targeted advertising based on individual visitor activity.

Information may nevertheless be processed by website infrastructure, security and service providers where reasonably necessary to operate the website, communicate with you, provide professional services, maintain security or comply with legal requirements.

23. PROPORTIONALITY AND DATA MINIMIZATION

PAMS seeks to collect and process only information that is reasonably necessary for a specified and legitimate purpose.

We do not seek to collect personal information merely because it is technically available.

Where information is no longer necessary for the purpose for which it was collected, PAMS will consider whether it should be deleted, anonymized or securely disposed of, subject to legal and legitimate retention requirements.

24. CHANGES TO THIS PRIVACY POLICY

PAMS may update this Privacy Policy from time to time to reflect:

• changes in our services;
• changes in website technology;
• changes in third-party service providers;
• changes in applicable laws or regulatory requirements;
• changes in security practices; or
• other legitimate business or privacy considerations.

The updated version will be published on this page with a revised Last Updated date.

Where required by law, PAMS will provide additional notice concerning material changes.

25. CONTACT US

If you have questions, concerns or requests concerning this Privacy Policy or the processing of your personal information, please contact PAMS:

For Philippine privacy complaints, individuals may also contact the National Privacy Commission in accordance with applicable procedures.