Data Usage Policy

Privacy Statement

The Hydro-Meteorological Data Applications Section (HMDAS) of DOST-PAGASA is committed to protecting your privacy and ensuring the security of your personal information. This Data Usage Policy explains how we collect, use, and safeguard your data when you use our Interactive Hydromet Data Requisition Management System (IHDRMS).

By using our services, you agree to the collection and use of information in accordance with this policy. We will not use or share your information with anyone except as described in this Data Usage Policy.

Personal Data Collected

When you use our portal and services, we may collect the following information:

• Contact Information: Full name, email address, phone number, and mailing address
• Organizational Information: School/University name, company/agency name, position/designation
• Academic Information: Course/program, year level, student ID number (for student requestors)
• Request Information: Purpose of request, research title, preferred data types and stations
• Payment Information: Transaction reference numbers, proof of payment records
• Account Information: Username, password (encrypted), account activity logs
• Technical Data: IP address, browser type, device information for security purposes

Use of Information

The information we collect is used for the following purposes:

• Process Data Requests: To evaluate, approve, and fulfill your hydrometeorological data requests
• Communication: To send notifications about your request status, payment confirmations, and data delivery
• Account Management: To create and maintain your user account and verify your identity
• Service Improvement: To analyze usage patterns and improve our services and user experience
• Compliance: To comply with legal obligations and government reporting requirements
• Security: To detect, prevent, and address technical issues and unauthorized access

Data Sharing

Your personal information may be shared with the following parties only when necessary:

• DOST-PAGASA Personnel: Staff directly involved in processing your data request
• Government Agencies: When required by law or for inter-agency coordination
• Payment Processors: For payment verification purposes only
• Legal Authorities: When required by court order or legal process

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Secure Socket Layer (SSL) encryption for all data transmissions
• Password encryption and secure authentication mechanisms
• Regular security audits and vulnerability assessments
• Access controls limiting data access to authorized personnel only
• Regular backup procedures to prevent data loss
• Employee training on data protection and privacy

Your Rights

Under the Data Privacy Act of 2012, you have the following rights:

• Right to be Informed: Know how your data is being collected and processed
• Right to Access: Request a copy of your personal data held by us
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data under certain conditions
• Right to Object: Object to certain types of data processing
• Right to Data Portability: Request your data in a portable format
• Right to File a Complaint: Lodge a complaint with the National Privacy Commission