The purpose of this document (“PNB Data Privacy Statement”) is to inform you how the Philippine National Bank (“PNB”) and its domestic and overseas branches and subsidiaries (the “Related Companies”) as well as their respective representatives and / or agents (“Representatives”) [PNB, the Related Companies and Representatives collectively referred to herein as “PNB,” “us,” “we” or “our”] manage Personal Data in accordance with the Data Privacy Act of 2012 (R.A. No. 10173) and its Implementing Rules and Regulations (“the Act”) including National Privacy Commission (NPC) and other applicable regulatory bodies issuances. Please take a moment to read this PNB Data Privacy Statement so that you know and understand the purposes for which we collect, use, store, process, share and disclose your Personal Data.

By interacting with us, submitting information to us, or signing up for any product or service offered by us, you agree to PNB collecting, using, storing, processing, sharing and disclosing amongst themselves your Personal Data, and disclosing such Personal Data to PNB’s authorized service providers and relevant third parties (as may be allowed by law) in the manner set forth in this document.

This PNB Data Privacy Statement supplements but does not supersede nor replace any other consents you may have previously provided to PNB with respect to your Personal Data, and your understanding and agreement herein are additional to any rights which PNB may have at law to collect, use, store, process, share or disclose your Personal Data.

In this PNB Data Privacy Statement, “Personal Data” refers to any data, about an individual who can be identified from that data; or from that data and other information to which we have or are likely to have access, including data in our records as may be updated from time to time.

Depending on the nature of your transaction with us, we may collect from you the following personal data:

1. Your name and other particulars such as but not limited to contact number/s, address, email address, marital status, age, gender, educational background, employment details;
2. Financial information such as income, expenses, deposits, investments, loans and credit cards;
3. Identification documents, photos, specimen signatures, and biometrics;
4. Footage and images captured by our CCTV cameras or other similar equipment whenever you visit our offices/premises;
5. Voice or video recordings of your conversations during a meeting/phone call with our employees, agents, and representatives.

Personal Data Relating to a Third Party

If you provide us with any Personal Data relating to a third party (for example, information of your spouse, children, parents, or a Connected Person), by submitting such information to us, you represent to us that you have obtained the consent of the third party prior providing us with his/her Personal Data for the respective purposes. “Connected Person” may include but is not limited to any beneficial owner, authorized signatory, director, shareholder, officer of a company, partner or member of a partnership, settlor, trustee, beneficial owner, protector or grantor of trust, mandate holder, power of attorney holder, surety, third party security provider, provider of funds, founder and / or employee, payee of designated payment, representatives, agents, or nominees.

Completeness, Accuracy of Personal Data

You should ensure that all Personal Data submitted to us is complete, accurate, true, and correct. Failure on your part to do so may result in our inability to provide you with products and services you have requested. You agree to inform PNB immediately of any change of facts or circumstances which may render any information or Personal Data previously provided inaccurate, untrue, or incorrect and provide any information or documentation as PNB may reasonably require for the purposes of verifying the accuracy of the updated information or Personal Data.

We collect Personal Data in the following ways:

1. When you submit any form, including but not limited to, application forms or other forms relating to any of our products or services or any investments which you may avail from us;
2. When you enter into any agreement or provide other documentation or information with respect to your transactions with us, or when you avail of our products and services;
3. When you interact with our personnel, including relationship managers, branch managers and their assistants, in various channels, such as voice or video calls, letters, in-person meetings, and emails;
4. When your voice and/or images are captured by us via closed-circuit television cameras (“CCTVs”) or other similar equipment or devices while you are within our premises or using our facilities;
5. When you use our products and services provided online and through other technology platforms, such as websites and applications;
6. When you request that we contact you, or include you in an email or other mailing list; or when you respond to our request for additional Personal Data, promotional campaigns and other marketing activities;
7. When you are contacted by, and respond to, our marketing representatives, agents and other service providers;
8. When we seek information about you and receive your Personal Data from third parties in connection with your relationship and transactions with us, for example, from referrers, business partners, external or independent asset managers, public agencies or the relevant authorities;
9. In connection with any investigation, litigation, or inquiry which may relate to you or any Connected Person; and / or
10. When you submit your Personal Data to us for any other lawful reason.

• We use cookies, which are needed for our website or electronic platforms to operate and perform as reasonably expected. When you access or use our websites or electronic platforms, we may collect and process non-personal data or information about your use of our website (how you arrived at the website, what kind of browser is used, what operating system is used, the IP address, and your click stream information and time stamp).Cookies are small text files placed/stored in your computing or other electronic devices which allow us to remember you or other data about you. The cookies placed by our server are readable only by us, and cookies cannot access, read, or modify any other data on an electronic device. All web-browsers offer the option to refuse any cookie, and if you refuse our cookie then we do not gather any information about you.
• When you use PNB Digital App, our mobile banking facility, we collect relevant device information such as the type of device and IP address. When you enable location services, we collect the location reported by your device to provide you with location-based services, such as finding our nearby branches.
• Should you wish to disable the cookies and other permissions associated with these technologies, you may do so by changing the appropriate settings on your browser and devices. However, by doing so, you may not be able to navigate certain parts or features of our website and platforms.

Generally, PNB collects, uses, stores, processes, shares, and discloses your Personal Data for the following lawful purposes:

1. Performance of know-your-client (KYC), customer identity verification or screening and/or other customer due diligence procedures that are consistent with applicable regulatory requirements, and record-keeping;
2. Provision and facilitation of services, activities and transactions that you request, or allow relative to the products and services that you have availed of;
3. Management of the administrative and business operations of PNB in compliance with internal policies and procedures;
4. Responding to, processing and handling your complaints, queries, requests, feedback and suggestions;
5. Audit purposes;
6. Compliance to relevant and applicable laws in the Philippines and those of other jurisdictions, including the fulfillment of our reporting obligations to government authorities under applicable laws;
7. Prevention, detection, deterrence, and investigation of crimes and malfeasance such as but not limited to fraud and money-laundering or terrorist financing; to include identification of unauthorized activities, unsafe or unsound banking practices or misconduct, identification and apprehension of offenders, collection of evidence, and assist in law enforcement and investigations by relevant authorities;
8. Enforcement of contractual and legal rights and obligations in connection with any claims, actions or proceedings;
9. Provision of media announcements and responses, for example, in relation to complaints or lawsuits;
10. Request for feedback or participation in surveys, as well as in the conduct of market research, studies, and/or analysis for statistical, profiling or other purposes for us to design, review, develop, and/or improve our products, understand customer behavior, preferences and market trends;
11. Send-out of communications on products and services that you may have availed or might be interested to avail, offers, promotions, discounts, rewards, advisories and other important reminders, provided that you are given opportunity to opt-out at anytime;
12. Managing and preparing reports on incidents and accidents;
13. Aside from applicable purposes above, personal data collected/captured through CCTV recordings or other similar equipment are used for the management and improvement of physical safety and security of our premises and services for our clients, employees, visitors, and other stakeholders; promotion of productivity and efficiency; and protection of the Bank’s interest, assets, reputation, and business;
14. Other activities permitted by law or with your consent.

Subject to: (i) the provisions of any applicable law; (ii) under an obligation of confidentiality (iii) only to the extent necessary; (iv) for applicable purpose/s and through secure means, your Personal Data may be shared or provided to the following entities or parties, whether located in the Philippines or overseas:

1. PNB’s related corporations, subsidiaries, and affiliates, both domestic and overseas;
2. Relevant regulators, government offices and agencies, exchange, statutory boards, authorities or law enforcement agencies who have jurisdiction over PNB or any Company or over any transaction entered into by you, such as the Bangko Sentral ng Pilipinas, Securities and Exchange Commission, Bureau of Internal Revenue, as well as to comply with listing and other requirements or directions of the Philippine Stock Exchange and / or any other relevant securities exchange;
3. Agents, contractors, vendors, installers, or third party service providers who provide administrative or operational services to PNB;
4. Counterparties and their respective banks in relation to transactions for your account as well as financial institutions, brokerage houses, clearing houses, depository, depository agents, managers, administrators, fund houses, registrars, custodians, external banks, the Bangko Sentral ng Pilipinas, nominee banks and investment vehicles in relation to asset management and investment product settlement processing;
5. Insurers or brokers in relation to the insurance products or services that you have applied for or availed and companies providing services relating to insurance and / or reinsurance to PNB;
6. Trustees, attorneys, and asset managers appointed by you to manage your account held with PNB;
7. Referrers who have referred you to PNB;
8. Credit reporting agencies or credit bureaus and collection and repossession agencies in relation to the enforcement of repayment obligations for loans;
9. Any business partner, investor, assignee or transferee (actual or prospective) to facilitate business asset transactions (which may extend to any merger, acquisition or any debt or asset sale) involving any of the Companies;
10. Our professional advisers such as auditors and lawyers, and third parties who provide corporate advisory services or due diligence services in connection with you, any Connected Person or your account held with PNB;
11. Third parties who carry out registration of charge or pledge over the assets that you have pledged or charged to PNB;
12. Surveyors or valuers or other third parties in relation to assets which you will be charging or mortgaging to PNB;
13. Third parties who organize promotional or marketing events, seminars or trainings;
14. Any actual or proposed assignee of PNB or participant or sub-participant or transferee of PNB’s rights, liabilities or obligations in respect of you or a security provider who provides security or acts as surety for your liabilities and obligations to evaluate the transaction intended to be the subject of the assignment, participation, sub-participation or transfer;
15. Any liquidator, receiver, administrator, judicial manager, trustees-in-bankruptcy, custodian or other similar official who has been so appointed, pursuant to bankruptcy, winding-up or insolvency proceedings instituted in the Philippines or elsewhere, in respect of you or your assets;
16. Any person to whom PNB is under an obligation or otherwise required to make disclosure under the requirements of any law binding on or applying to PNB, or any disclosure under and for the purposes of any guidelines or guidance given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers with which PNB or any of the Companies are expected to comply, or any disclosure pursuant to any contractual or other commitment of PNB with local or foreign legal, regulatory, governmental, tax, law enforcement or other authorities, or industry bodies or associations of financial services providers, all of which may be within or outside the Philippines and may be existing currently and in the future; and / or
17. Any other party to whom you authorize us to disclose your Personal Data.

PNB ensures that we will only share your personal data with entities that can demonstrate sufficient organizational, technical, and physical security measures for the protection of your personal data.

PNB has put in place reasonable and appropriate organizational, physical and technical security measures and controls to protect Personal Data in our possession or control from unauthorized access, collection, use, disclosure, copying, modification, disposal or similar risks. We assure you that access to your Personal Data is restricted to authorized persons only pursuant to existing laws and regulations and will not be sold to third parties. In case of a security incident as defined under data privacy laws, we have put in place adequate policies and procedures to ensure facilitation of security incident reporting and management.

Your Personal Data will be retained by PNB throughout the duration of your deposit account, loans, investments and/or relationship with us or until expiration of the retention limit set by PNB, whichever comes later, unless there is a law or regulation, requiring retention for a longer period. We dispose all physical records and digital files containing personal data in a safe and secure manner after the expiration of the imposed retention period to prevent further processing, unauthorized access, or disclosure.

1. You have the right to be informed whether your Personal Data is being, or have been processed, including the existence of automated decision-making and profiling.
2. You have the right to object to the processing of your Personal Data, including processing for direct marketing, automated processing, or profiling, except when processing is (i) required pursuant to a lawful order or process, (ii) necessary to complete your transactions with us, or (iii) arising from a legal obligation.
3. You have the right to reasonable access, upon written request, to: (i) the contents of your Personal Data that were processed and the manner by which these were processed; (ii) purpose of processing;(iii) the sources from which these were obtained; (iv) the recipients and reasons for disclosure, if any; (v) the date when your information was last modified; and (vi) the information on automated processes where your information will be made as the sole basis for any decision that may significantly affect you.
4. You have the right to dispute any error or inaccuracy in your Personal Data, and if warranted, require PNB for immediate updating and rectification.
5. You have, based on reasonable grounds, the right to suspend, withdraw from/opt out or order the blocking, removal, or destruction of your Personal Data from PNB’s system, without prejudice to the processing of Personal Data for operational, legal and regulatory purposes.
6. Where Personal Data is processed by electronic means, you have the right to obtain from PNB a copy of such data in an electronic or structured format that is commonly used and will allow for your further use.
7. You may be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of Personal Data, taking into account any violation of your rights as data subject.
8. You may file a complaint or exercise your rights above by reaching out to us through the contact details provided below. You may also raise privacy concerns to the National Privacy Commission through in-person filing, sending via courier or via email at complaint@privacy.gov.ph.

If you have any questions or feedback relating to your Personal Data or our Data Privacy Statement; would like to withdraw your consent to the processing, use, and disclosure of your Personal Data as set out in this Data Privacy Statement; or would like to obtain access and make corrections to your Personal Data records, please email our Data Protection Officer at pnbdpo@pnb.com.ph.

Our website may contain links to other websites operated by third parties. Some of these third-party websites may also be co-branded with our logo or trademark, even though they are not operated or maintained by us. We are not responsible for the privacy practices of websites operated by these third parties. Once you have left our website, we encourage you to check the privacy statement of the third-party websites to determine how they will handle any information they collect from you.

PNB may, from time to time, revise or update this document to ensure that it is consistent with legal or regulatory requirements, future developments, and industry trends. Subject to your rights at law, you agree to be bound by the prevailing terms of the PNB Data Privacy Statement as updated from time to time on our website: www.pnb.com.ph. Please check regularly for updated information on the handling of your Personal Data.

This Data Privacy Statement and your use of this website shall be governed in all respects by the laws of the Republic of the Philippines.