ANNEX A: DATA PRIVACY RIGHTS OF DATA SUBJECTS

Under the DPA, you, as Data Subjects, have the right to be informed of your data privacy rights, including:

RIGHT TO BE INFORMED

You have the right to be informed of the reason and purpose why LRMC collects or uses your personal information.

Specifically, as Data Subjects, you are to be informed of (i) the fact that your information is being collected and will be processed; (ii) the information being collected and processed; (iii) the purpose for such collection and processing; (iv) if you have not given your consent, the basis for such collecting and processing; (v) the intended recipients of your personal information; (vi) the scope and method of processing your personal data and the methods for automated processing, if any; (vii) the identity and contact details of any person or entity who will process your personal information; (viii) the period during which the personal information will be retained; and (ix) your rights as set out in this Annex A.

RIGHT TO OBJECT

You have the right to refuse to the collection and processing of your personal information, including the processing of your personal information for direct marketing, automated processing, or profiling.

You also have the right to be informed and to object to further processing of your personal information in case of any change in the purpose, basis, scope, and method of processing of your personal information. In case you object, further processing of your personal information must cease and will no longer be allowed, except for certain instances provided under Applicable Privacy Laws.

RIGHT TO ACCESS

Upon request in writing, you have the right to reasonable access to your personal information subject of processing, the sources of such personal information, how your personal information is being processed, the identity of the recipients of your personal information, and the purposes for granting access to such recipients.

In addition, you have the right to be informed of the date when your personal data was last accessed or modified and the designation, identity, and address of the controller of such information, if other than LRMC.

RIGHT TO RECTIFICATION

You have the right to reasonably request us to correct any inaccuracy or error in your personal information. After the correction has been made, we shall inform the recipient, if any, of your personal information of any such inaccuracy and the subsequent rectification made.

RIGHT TO ERASURE OR BLOCKING

You may request LRMC to suspend, withdraw, or order the blocking, removal, or destruction of your personal information from its filing system (i) in case you withdraw your consent or object to the processing of your personal information, and there is no other legal ground or overriding legitimate interest for the processing of your personal information, or (ii) when there is substantial proof that personal data is incomplete, outdated, false, or has been unlawfully obtained.

LRMC will notify those who have previously received the processed personal information.

RIGHT TO DAMAGES

You have the right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal information.

RIGHT TO DATA PORTABILITY

In case personal information was processed through electronic means and in a structured format, you have the right to obtain a copy of your personal data in such electronic or structured format. This right is subject to the guidelines of the NPC.

TRANSMISSIBILITY OF RIGHTS

Your lawful heirs and assigns may invoke your rights as a data subject in case of your death, incapacity, or incapability.

RIGHT TO LODGE COMPLAINT

You also have the right to lodge a complaint before the NPC in accordance with its relevant rules of procedure.