MIDA FOOD DISTRIBUTORS, INC.
(Company & Owner of the brand Pacific Bay)
TERMS AND CONDITIONS
For Customers and Potential Customers
You are granted a non-exclusive, non-transferable, and revocable license to access the Website strictly in accordance with the following Terms and Conditions:
We may update our Terms and Conditions from time to time. Hence, you are advised to review this page periodically to verify whether or not any changes have been implemented. We will notify you of any changes by posting the new Terms and Conditions on the Website. Any changes implemented are effective immediately upon publication on the Website.
MIDA FOOD DISTRIBUTORS, INC. (Company) respects and values the privacy of its customers and employs reasonable measures to protect their Personal Data in accordance with the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and related issuances from the National Privacy Commission (NPC).
The Company is the sole provider of Pacific Bay products in the country and as such, it relies on Personal Data obtained not only from its customers, but also the parties it regularly deals with, such as its vendors or suppliers, service providers, and event participants, among others. It is only through collecting and processing the necessary Personal Data that the Company is able to provide its services and supply Pacific Bay products here in the Philippines.
The Company collects Personal Data from its customers and potential customers necessary for it to offer products and services to the public, to fulfill its obligations under the purchase contracts executed, to attend to requests to the Company in the course of transactions, and to ultimately provide the goods and services ordered. The Company collects Personal Data in the following opportunities:
When the customer or potential customer voluntarily discloses the Personal Data
When the customer or potential customer accesses any of the Company’s online services
From publicly available information or from third parties
Data subjects may inform the Company of the specific Personal Data that they do not want to be processed beyond the requested purpose. The Company will respect the request of data subjects in so far as it is feasible to fulfill the purposes for which the Personal Data was collected.
Where data subjects have provided the Company with the Personal Data of individuals other than themselves, they warrant that they have obtained the necessary consent of these individuals for the disclosure, in accordance with the DPA.
Personal Data may be processed both by way of computer media and on paper, in compliance with the rules in relation to personal information protection, including those relating to data security. The Company collects information when provided directly by the data subjects or when acquired by the Company with the authorization by the data subjects, or through trusted third parties, or through technology such as “cookies”.
Personal Data, depending on the transaction or business with the Company, shall be processed for the following purposes:
The Company will not process the Personal Data of users in ways incompatible with the above-stated purposes.
The Company is the Personal Information Controller of any Personal Data disclosed by data subjects as it determines the purposes for which the Personal Data is being collected and processed.
Personal Data may be disclosed to the Company’s partners and third parties for the following purposes:
When the processing of Personal Data is outsourced by the Company to a third party, the processing will be subject to written agreements between the Company and the third parties processing the Personal Data. These written agreements specify the rights and obligations of each party and will provide that the third party has adequate security measures in place and will only process the Personal Data on the specific written instructions of the Company.
The Company may also transfer Personal Data to third parties as required by law or legal instrument, to protect the Company’s rights or assets, to facilitate acquisition or disposition of the Company’s businesses, and in emergencies where the health or safety of a person is endangered.
The Company will not sell, rent, share, trade, or disclose any of the Personal Data it obtained to any other party without the prior written consent of the data subjects, with the exception of entities within the Company and any third-party service providers which the Company has engaged, whose services necessarily require the processing of Personal Data.
The following are the third parties to whom Personal Data may be disclosed:
Personal Data will be retained or stored for as long as the purposes for which they are being processed have not been satisfied. The Company will retain and use the Personal Data as necessary to comply with its legal obligations, resolve disputes, and enforce its agreements, after which the Personal Data shall be deleted or anonymized.
The Company has put in place physical, electronic, and managerial procedures designed to help prevent unauthorized access, to maintain data security, and to use correctly the Personal Data collected. These safeguards vary based on the sensitivity of the Personal Data collected and stored.
Subject access requests may be made by emailing the data protection officer. The Company may take reasonable steps to confirm the requester’s identity as a data subject before granting access to the Personal Data and allowing updates thereto.
Data subjects have the following rights under the DPA, which may be exercised at their discretion:
Under the DPA, it is possible for individuals to request access to any of their Personal Data held by the Company, subject to certain restrictions. A request for disclosure of such information is called a subject access request. Any such requests should be addressed to the Data Protection Officer.
The DPA requires the Company to take reasonable steps to ensure that any Personal Data it processes is accurate and up-to-date. It is the responsibility of data subjects to inform the Company of any changes to the Personal Data that they have supplied to the Company during the course of their engagement.
Data subjects have the right to suspend, withdraw or order the blocking, removal or destruction of their Personal Data from the filing system of the Company.
Data subjects have the right to be informed whether Personal Data pertaining to them shall be, is being, or have been processed, including the existence of automated decision-making and profiling.
Upon presentation of a valid decision, the Company recognizes the right of data subjects to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of Personal Data, taking into account any violation of the rights and freedoms as a data subject.
In case of complaints, concerns, or questions regarding the processing of Personal Data, or if data subjects wish to exercise their data subject rights, it may be addressed to:
Mida Food Distributors, Inc.
2219 Singalong Street
Malate, Manila 1004